<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:fa4fa493-cd46-3186-a06a-60472bf35489" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-configuration2</name>
      <version>2.14.0</version>
      <description>The Commons Configuration software library provides a generic configuration interface that enables an application to read configuration data from
    various sources and requires Java 8.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-configuration/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-configuration/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CONFIGURATION</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-configuration.git</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.20.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17, 21 and 25 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b29562ded527aa074e1d44f8646dac5</hash>
        <hash alg="SHA-1">65897b3e5731220962e659e001904af3c3cbeba9</hash>
        <hash alg="SHA-256">69e5c9fa35da7a51a5fd2099dfe56a2d8d32cf233e2f6d770e796146440263f4</hash>
        <hash alg="SHA-512">1c72db334ea44f932c35e602b78907865f5bab43e30c871c9be67c8184eaa778f32d7bc3ab525d5921cd28619d3f9babfd483f17de54f007ee07db2e074b0307</hash>
        <hash alg="SHA-384">77dd27c4d5e9372c002bd6878d2cfaaec3cf46dd57d65de63d7f2e09351344531cfa81a537b56628ac6db18adee7e484</hash>
        <hash alg="SHA3-384">3456de40eef224b3ad195d2f218dd28eacb0da07607aee7ead94bd8d54bd8311d51c28d4066db4bf8b69a2df48c415f5</hash>
        <hash alg="SHA3-256">36e3f71352fa14bc580db45a05b09b063392c6d39acf9e24ffa6a67bbc07a336</hash>
        <hash alg="SHA3-512">6ecbc05bb5cd3f7537078b0cf51b0a5f7189dfa60c22e5ec0d6b9e2fd3f7fa7566770b5da87e0c9929f48769933c3e3a473fd5cc7231672fca36ab1fee1f8670</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-lang/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.15.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for processing
    and manipulating text in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">756b7c5438d89a0c311d811c1a06d19a</hash>
        <hash alg="SHA-1">9899093aa40f0199d6c39b131b8f087cdb37e399</hash>
        <hash alg="SHA-256">58d2da30f058512a1e7f914e39241deca4dff5c27a085b4ed2faa9e7208067f6</hash>
        <hash alg="SHA-512">be41b2c3a347bfd6eea3a957fb9a8d631c32b973fbbbe3e097d544d893ab4e587c3dfc38e89b4039b815b17d268cc7940e1ffb464050c7924acb56cc422613fb</hash>
        <hash alg="SHA-384">d3df5a4656967277d738e9d981d7b065dcda91f25553f8fc5c3d26edf07079cc5526508b0951da45ef614663ee9d471d</hash>
        <hash alg="SHA3-384">bedce93fea6c4aaaf7feb52f75d4265c41b3b0d39976248b4d9d5b879d18403335364b3f845585ce5fceb80a34c592df</hash>
        <hash alg="SHA3-256">48fd7a8921eca0e1dc185a0ad5f8e89ab3399f0327bc57cd9e09988fce75d1ef</hash>
        <hash alg="SHA3-512">f996b808d5f7bff8ac7aa79a2f73b93a4edb687cace7b54089246b6b4005ebbaab00f752a79205479023c802a56e42605806113d6af36e28469fa6a63ae710d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-text/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.6</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well-known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fe0ccbe8971fed954a0ad6528fe3ef24</hash>
        <hash alg="SHA-1">63e78ca6cd446c0ad166d14f03ed99e7efb3896d</hash>
        <hash alg="SHA-256">f8ead8943401081dea0aa824b5b1ba40a0e4ed297a572a0f02258150a0b62357</hash>
        <hash alg="SHA-512">5aaa082507e2f5031df7653e5feae7bda7a5fc4913e87ca5f7a202ee2d81e7b33c9f8d4419c4abe34f6dc56a0a85833340ae832f0630c23157ea6860c4273df5</hash>
        <hash alg="SHA-384">4b1d12ca87349e1dfa72ea6781d7107c446814f796805bdf20d251b14384e281c8b325aa7c833aede577570dd1aa1cd5</hash>
        <hash alg="SHA3-384">c3397f7065b350dff865a8ac054c995237d51bfb6e46d5a05c81ebfe77c897a0826eef3c6be63b95cacbd571754c6393</hash>
        <hash alg="SHA3-256">8954c3daddea14224e55ee21ca11e8c5a3454a9e12059de6429646108416f0f1</hash>
        <hash alg="SHA3-512">f7042e83035f90c56df777d894fd15689f6aee6eeb67b024687314eb4a33c75affe6840940dda4e2c88d690ed1679303d75071462444cae3b2b80fb425ac35d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-logging/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-logging</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.11.0</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">32ed51f196dfda19e0dc1ce53eeed29e</hash>
        <hash alg="SHA-1">ac03ea606d13de04c2e4508227680faff151f491</hash>
        <hash alg="SHA-256">9e44ba68ec9a3f21286fa2a8bbb003b735c0f69101bb43144b79f4f8aaa74709</hash>
        <hash alg="SHA-512">4348670579601bc1151de2f27414635c4ea0b4b53061d116c09ba319e2c4f8e91d0cb0713a964668bd5189105ac1e2b6590881850880bf5ff23cc6409f270420</hash>
        <hash alg="SHA-384">a349c6a1e0a48cbf8d3528e4a39257db1b912c2ef060853837aa14d941154e9adc43248309ab6db7e8ac7730db7b081b</hash>
        <hash alg="SHA3-384">f3afdd778bb54bc6a9e41b5c31cf98078f005542b87cd0a3713d8e5152ff7eb6d9e2ed3206ce453a3af6f869fa714cbf</hash>
        <hash alg="SHA3-256">6dd4ec6d993b5792c51b5d6c4ea3b56f35b1c1f0ea65b182cb55c2432315aa68</hash>
        <hash alg="SHA3-512">fdcaa942f7377fdb36c7977273c1e2177d23e7b13162db1a0e5d3958d87a8c77d08cd6797a7c30cf755d492fa75d0642de5678dfe1d5a936569dccde5549e512</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-beanutils</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/BEANUTILS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-beanutils.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/collections/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/COLLECTIONS</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.21.0</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c49977029838babaf8a71485aa9aaef8</hash>
        <hash alg="SHA-1">d95f998db5f89900fe895daf6cd2cddcb2f1d64b</hash>
        <hash alg="SHA-256">4da851cb6abfb98bfe9eb77c5e5fc47f5414fa28b94e21b7fd9a646705dc167f</hash>
        <hash alg="SHA-512">3ceb4aa588d0b918e46b1ddda9ff41b5a765985bf66542d2728458fc3f83b9dedfd972ff5d919cf6f456fbaa9f8c4e5f0c0913848ec3a471c316374e683b1f2a</hash>
        <hash alg="SHA-384">05786582b0a85264688ad5b49ad6da09db1cdfe6301cf31ddea48f97f45b13ff25d9e3def1702890457fd5bbbd00f793</hash>
        <hash alg="SHA3-384">805bda170837bbedbecc5c63a5defc6a348777952906d8e6f33544866e86aa25c9d28f3b351e981d0fa49bb16e07884c</hash>
        <hash alg="SHA3-256">cbc2eafcba305c08e852133d0881d209799c4dc83d587869eed5f281d6bed4f3</hash>
        <hash alg="SHA3-512">244e6a342d4b5a6e7d077426427979f26320be305f1cb33d933672c926ea3a96fe4f284c9f592970f604928209fe0e149613b64990202d595bce01a669de418b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-codec/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jexl</name>
      <version>2.1.1</version>
      <description>The Commons Jexl library is an implementation of the JSTL Expression Language with extensions.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4ad8f5c161dd3a50e190334555675db9</hash>
        <hash alg="SHA-1">6ecc181debade00230aa1e17666c4ea0371beaaa</hash>
        <hash alg="SHA-256">03c9a9fae5da78ce52c0bf24467cc37355b7e23196dff4839e2c0ff018a01306</hash>
        <hash alg="SHA-512">dcd62490cc386516f66427f5e478c308f6937eb6d64a34a02de56255129ded20bedb85c01b5c794d95ca3c4d6a11d58fa920779c5e517b78a881c5a229e4fba2</hash>
        <hash alg="SHA-384">db60a120271ed224dbe535219de2d13603a5ec9e397ce5cb3006b10464ceb9a23a6c742fa1262352bed179032b7f4357</hash>
        <hash alg="SHA3-384">8bf28ee3c9334fd57160f0d60006d2b20099d50898f919f901e9c97dd9e3ba634b4c02ba7f861e9d4076799a778524a9</hash>
        <hash alg="SHA3-256">cc6d0fc318a59e25d3eea3cea560e9502c5248a7bad1458a9db4727d344d2f41</hash>
        <hash alg="SHA3-512">652c1d03ed332fa6a3ca178e9af600508f0e2edb2840162dd86cff0827378e24144eb2996478973a11e30512dbb6ffeee32118505ff7194d37283935fcc9a51e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/jexl/</url>
        </reference>
        <reference type="build-system">
          <url>http://vmbuild.apache.org/continuum/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/JEXL</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/commons/proper/jexl/tags/COMMONS_JEXL_2_1_1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-vfs2</name>
      <version>2.10.0</version>
      <description>Apache Commons VFS is a Virtual File System library.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">df535626616b23cdb5555c40e556155e</hash>
        <hash alg="SHA-1">a306167fdb88152403c8b00595b1502ffacd5b76</hash>
        <hash alg="SHA-256">adf9dfb77a44f7b6e2dba3779cfa7142ab8a1f618eb7a9741083822e8d14be13</hash>
        <hash alg="SHA-512">c8302e679e0d0f0d9467f263dc37e792f35802e9762f78a7fb5a59108668d3751bc63f415c61e46a4eca409f306091abb6ef8bc95c2bc72807a0f91553195c7a</hash>
        <hash alg="SHA-384">c135ca13ef64d1eaa4bae40f4d5cb44ff028b15fffc68d69d281fb2758fbff1c0731d2438beb9145641b4660b98a0b84</hash>
        <hash alg="SHA3-384">8e3d55557ac1f220bdef567f65723cb1131b34c6c585090a08f83af0f75906e1cd6420da361093bd345e3f11a12a6dd5</hash>
        <hash alg="SHA3-256">78b4553aaf3cb58558d0a6739b3f6e7bd50911509169eb35d41ed77c151592e5</hash>
        <hash alg="SHA3-512">7a53485b995eed3c3f446ba1ddbc599f83bec62a950cb9e870c999e05fa39f8fac514493cfafc910af633cc5d6ab29ec218ac301af70c51475c4bd45bd8a232b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-vfs/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VFS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-vfs.git/commons-vfs2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore-nio</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (non-blocking I/O)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">597c450f3401e98103e835824ab43e77</hash>
        <hash alg="SHA-1">cd21c80a9956be48c4c1cfd2f594ba02857d0927</hash>
        <hash alg="SHA-256">4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4</hash>
        <hash alg="SHA-512">197cb4f4343a02d39d61db1c19bf10757aeb2078f51c4ace77a72a250b6d03b31fa1fc51f989f43df8c2a0cf8162a36664a8a935f4bbeb860c35770a3abd1899</hash>
        <hash alg="SHA-384">e8827b2eca484748dd776edcac779ae67b5c4394c5c2ac1a50c614b19142bdefb4c4e01f0cf376c578007ad515add88d</hash>
        <hash alg="SHA3-384">fb55a9718c2507954ffb779520b0233acdd0135222c7d01542083b3cd5dff669a8afffaf54d8bfe724e52c5c18c1403e</hash>
        <hash alg="SHA3-256">37554263bc837817c08dcfba6b4a5ee978fa1d9f99945d27c0f3ba44195501a0</hash>
        <hash alg="SHA3-512">18692a4310956c328ddebeac514a503904b84605463063f0539673f0480f0606c002eccd6f4dbacf91d124e11e130aa122efb855ec6b0aa0cf72ee0b26ac8ef7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore-nio</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.21.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">bc7e020873f086ede85f97bd9f013215</hash>
        <hash alg="SHA-1">52a6f68fe5afe335cde95461dd5c3412f04996f7</hash>
        <hash alg="SHA-256">7d643a2afea8b058b762aa6fb90e5b256f6c729739f8b3784c3370ddc609e88d</hash>
        <hash alg="SHA-512">7ac1aa4d834cd7cdecaee223a64c63d481810c73dfdb5109f402234a05cadf754e414cead99072f5140d4f7042ee084161935fb28129a631d908d989c5bbac5d</hash>
        <hash alg="SHA-384">97c07e5c4f62484c98b6777f63ab032ee09eeb1c9ddae8332890126df9c665afb9cd554db02495171738720d23c53732</hash>
        <hash alg="SHA3-384">e3e44c9f4a5f4075fb62a438a84015fe2abf878e9793835a7816dc3c35141bb79fe96dfdc6bb5aef96b7c5bbbcf453c1</hash>
        <hash alg="SHA3-256">1f8f4ce25b7169452dabb10ce843b3246378ea55c1971acd2300e417747b3a68</hash>
        <hash alg="SHA3-512">175630adf10305aeb31d737f833021a25582ffe2ef66fda6e7f694598af9c68cebbd205ade469eca4faaf6b9d349244289e62179d9cf48d93427090e2c008cf8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.21.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-io/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-jxpath</group>
      <name>commons-jxpath</name>
      <version>1.4.0</version>
      <description>A Java-based implementation of XPath 1.0 that, in addition to XML processing, can inspect/modify Java object graphs (the library's explicit purpose) and even mixed Java/XML structures.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">0f59e33e5a2e7265155b51a1fb592fa4</hash>
        <hash alg="SHA-1">f61af30d8db727b7bb53d285fe074f89d8b68951</hash>
        <hash alg="SHA-256">226cb33a644995b084b3bdd42f2eb861509e6db71d7a343d411ee321387b0860</hash>
        <hash alg="SHA-512">1a22928d2b5f12b93a7643c4ba00e41d61194c80e71e89cf6a97411b7da14a95677dd41dca8f4eda3c1cfa6475364b161e008f526b44b1bb1ff68dbd49ad0051</hash>
        <hash alg="SHA-384">d595a93c8779f7677930d90ffb57a5daef6da02bfd32dcaaf9df1842a54db9e868378f3f0f7eaa79610998955a3fa701</hash>
        <hash alg="SHA3-384">1c95495e008d255868a0cc6c6eede85a2374eec298ea8c0c5b577ccc71907c89306b6b2fa2c6a148f663849bd569b425</hash>
        <hash alg="SHA3-256">76a6888bb46d79084bd3a027d3f5f09c607730f47fc067488434fbee7a0521f1</hash>
        <hash alg="SHA3-512">efb8a8fbb1a6a2061516bd591ea40b7c8859c7be6e81a5ed329851d5f0bf51da3a2e33490d5d3376e931fc0c08c8f56af4bacf6bf68d6312389d859219176a59</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-jxpath/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-jaxpth/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JXPATH</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-jxpath</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>xml-resolver</group>
      <name>xml-resolver</name>
      <version>1.2</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">706c533146c1f4ee46b66659ea14583a</hash>
        <hash alg="SHA-1">3d0f97750b3a03e0971831566067754ba4bfd68c</hash>
        <hash alg="SHA-256">47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1</hash>
        <hash alg="SHA-512">eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a</hash>
        <hash alg="SHA-384">3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710</hash>
        <hash alg="SHA3-384">717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a</hash>
        <hash alg="SHA3-256">bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46</hash>
        <hash alg="SHA3-512">762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xml-resolver/xml-resolver@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xml.apache.org/commons/components/resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.39</version>
      <description>Spring Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">632d2a8c30962a69273775968c052651</hash>
        <hash alg="SHA-1">d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd</hash>
        <hash alg="SHA-256">3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f</hash>
        <hash alg="SHA-512">2629ed79a0a3cfe7e467ac1a10f6d0d93f8ebdf9fe79bf67d99e5797e4efdb6bb1fd54ef882676b2175beea14079ca5ac6d8218c94134a66bd544d83fc8dc2b5</hash>
        <hash alg="SHA-384">a58090e8a07cc13429b116c1d786269f3b1a1b16a63ce4711648e8f4e5c0b076e970dae2ee1e08fd1cb01158161b1bb8</hash>
        <hash alg="SHA3-384">43f84a96b238a4492e08dd79e4450ccaad4c4f3f8adb45f16632593de313cf88905546f892e29989d8553512006e7680</hash>
        <hash alg="SHA3-256">99cb56d841b5920987b296da3af76ae51d80f4f78b56da4b127e9187793461da</hash>
        <hash alg="SHA3-512">74b21906fe06a990b8f910032c735af31c78cbf322452aa43b8a9bba22ceedaa0e6ad51e1f006b9c075b79654e3298c086adc6a9036601f01b5e4eab6ae899db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>5.3.39</version>
      <description>Spring Beans</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c2f99040fb8b0bc98515c87b968227d3</hash>
        <hash alg="SHA-1">87770ce736cbd777c07866cbc8a06b879765e3c8</hash>
        <hash alg="SHA-256">b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722</hash>
        <hash alg="SHA-512">53321d3395e51b2d0b6948adff4cce81a7a712c89af92ce27ad98a44e34bfb4efa0e617b951c0468deb0baafa258eaf61507982a6774d3d832593d129c93f3ce</hash>
        <hash alg="SHA-384">a4791a32da2ac30322814781da25680f019ef36e179461e6aee54e6f771081f1c61c673542b9e881d190988ecd98b5f6</hash>
        <hash alg="SHA3-384">3456cce03968d9d9a730b52e79c67615640e4d740d173fed9ddf98760fd2af7d28704df6ff0aa9e2935c17ca3704385c</hash>
        <hash alg="SHA3-256">c229d89e276b29a0fdda42fac26d7a0e526a994be452cdfff22bb03a504bf9cc</hash>
        <hash alg="SHA3-512">08d43059f6948f7cda0c6d344d09d8e035289e51f2ba824c19e4b3f0f0714af836e8feb163b578ccfe97a9cd744b42d8382b4ed3020ba367c032e5bc768226ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar">
      <group>javax.servlet</group>
      <name>servlet-api</name>
      <version>2.5</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">69ca51af4e9a67a1027a7f95b52c3e8f</hash>
        <hash alg="SHA-1">5959582d97d8b61f4d154ca9e495aafd16726e34</hash>
        <hash alg="SHA-256">c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc</hash>
        <hash alg="SHA-512">363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6</hash>
        <hash alg="SHA-384">1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824</hash>
        <hash alg="SHA3-384">2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20</hash>
        <hash alg="SHA3-256">319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995</hash>
        <hash alg="SHA3-512">dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952</hash>
      </hashes>
      <purl>pkg:maven/javax.servlet/servlet-api@2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>5.0.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">b950da93e08cf6d5a2d73dc7a80f9403</hash>
        <hash alg="SHA-1">2e6b8ccde55522c879434ddec3714683ccae6867</hash>
        <hash alg="SHA-256">33d3a5bda82c7d2f1b898685faa954f1fc34f7b0ae5c2f6ccc6d051e8a10973b</hash>
        <hash alg="SHA-512">667578d33b939b606bc38322e5cd8d0be4eacedf86e13f34b6c7c9d8ec6ef719ac7b4d830eba2588a4ea5c924fe3772960e94a99642a039f1781421e7eacb1e6</hash>
        <hash alg="SHA-384">329e54722e5da97d1c8d049c4dd68b0d8e22f72b299c2dd4db7f1bd3b07de4cf891402904760dca4584e30193741b11b</hash>
        <hash alg="SHA3-384">4b41bfe405d59203409fe3a5a5d11f177eabe7cd0eb7994dfe1f907c67c93a766959f703dfee1ef9925d420d0dadf9a0</hash>
        <hash alg="SHA3-256">b73926ebe8f21e0d3f440f9e7f3a229fae7975b34afeaa5c42d4334cb1d86121</hash>
        <hash alg="SHA3-512">a85b76f03626ad4d02779d812190fb4b44fddf132dda92c0c908a7eb182f202b0f02f54eea500d92b3a5667d5288e03269530b63c7f72504f424d3dbf5f8c48e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@2.6?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>2.6</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d8bd94536cee962cfff39730bffdb8da</hash>
        <hash alg="SHA-1">2bc14918a2f8d5414749ab12d0c590cd3198b8c1</hash>
        <hash alg="SHA-256">c8f7a98e7394adda02f6317249710e4d1b4c7a25aa8c7eace0c2eea52eb8bf85</hash>
        <hash alg="SHA-512">6acd69508b8287f4843048930ce0d87378d29974e13bb85a0c600424fca46b5069983679225b41a5d772feb776d1d8886e3c19165c15b4b50fbf7a9134364a5a</hash>
        <hash alg="SHA-384">2ef9d7fdd8e15a639f23f94708fa40e2cf8254a02ad9c204ac2be5e7258d6fc439c8b0440ba0dece8701a0d3ea64eabd</hash>
        <hash alg="SHA3-384">1adcf66914123e71160de433ed0dcd39c061e022ca944f66496b6109e43456dcc8c95948640125d24b51b1dfb417a7a2</hash>
        <hash alg="SHA3-256">f5158c7a4a070ab149e2b4703a579addec5a183d83f97b0a40b22b0fd297e9f0</hash>
        <hash alg="SHA3-512">3688a0fb15be372db00605d3d469881198fbb91ada469995667bbcaadc5fb8119b71290558e534bfc739babc03e1b95d927cd62814c9a65b81e5c1976ca5d1e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@2.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bitbucket.org/snakeyaml/snakeyaml</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/src</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.21.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">add2fbe739574bfd1877c2cca25f46d1</hash>
        <hash alg="SHA-1">71ab8ff75b4fd74afdee0004173fdd15de1d6a28</hash>
        <hash alg="SHA-256">8c982f01f148d805f0aaac2339011244757e0df7c6ff8951f2fa3f433b8ed849</hash>
        <hash alg="SHA-512">1a47b012447bc8c3d0bc603b95fce1640d7fe7ead08bc33c106c0de811f061a1eda871863e4e1411e9c0c9c716d47c69960f7e492f54e8610f3e40c99f5c3962</hash>
        <hash alg="SHA-384">933e7dd454a933ff1fa451ff63d870708b9ca8cdf68b849594a08d9859468cc19b15836cef741f6c9ffb8cde31cc5c76</hash>
        <hash alg="SHA3-384">f2ef8662730bd798307c483f18f1bd54fc4fd5c9cacf4eba0715222cb4a3e46ea60dde95994764604f0621a05a1ce0c1</hash>
        <hash alg="SHA3-256">0bcf55950a1f2eb63569142af0d863b2496791cf9da864ff9b8b73796250c5f0</hash>
        <hash alg="SHA3-512">58132245b550d327faf1c8a2a0bccc85188a2abbab806ea646ce3b83340a750df534ed51db3de2a2fa167e4612371ea1ab84ab8d1badab5509f44d9c73958396</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.21</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e0d0c3e7300954f73e43c67d933aaea4</hash>
        <hash alg="SHA-1">b1bc1868bf02dc0bd6c7836257a036a331005309</hash>
        <hash alg="SHA-256">53ca085f4a150f703f49e1aabd935bd03b43e1ea3d55d135438292af22cef56b</hash>
        <hash alg="SHA-512">d832a99867acc2d5afb2596da760c50e6a6b54c1bbc8e6c4186f267a16e1d55c7a916ef8b034ad6b277c41e3342b91dcdc2e3dcea8bdccfe89e7c147894591be</hash>
        <hash alg="SHA-384">30b15d68f8da6f6c26aa9f6c95d09152b6c1a8092cd976cf600d63d1751509a73865f937e0ad97d8d55bf20f6a749b44</hash>
        <hash alg="SHA3-384">5205b51f6ed689cf31b58b98a61ca9e17a439c15d669dcb408ec4d430e77ac9ac57d39d5ca1f9973e8d184f6dd57ec4f</hash>
        <hash alg="SHA3-256">d6782d188a72b2bb96e4b595343e783012b3f98c30f7b9950244c21739334509</hash>
        <hash alg="SHA3-512">b648f1e9ffe818227d53fbde409e61858ac22d3f78705eaf08065587ed512c9b33b0f5e2222356bfb33fb2973bb5a3184e31d2a7099f8fc8d2fd23eb4612a4bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.21.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">b62c1031b5f38fc58158fc0c559980cb</hash>
        <hash alg="SHA-1">7d11eac823392f28d8ee7bda77eaadfccbab83e5</hash>
        <hash alg="SHA-256">12e8655b100267b44d0f14d01b1f5082a5105e616174dc4307be1a761e92407b</hash>
        <hash alg="SHA-512">31a16a40b2e1a1a9467a66c93884c034527fb5af641a79bd6a563d4c3aaa0cfc8d8250f930d13c7fd70c18db579940ec54a49538c5a2e0fb9780c575808000ff</hash>
        <hash alg="SHA-384">cff72535be10b86fac89af4fd8eb0a7d89b0385712bff36cca6b94ad014acd9c2480bc3bc87b25b8621ccdf17cf8ae1f</hash>
        <hash alg="SHA3-384">1a7cd7206198350f0810989bc1448bb262099b14f3fc746d70651a3cf20a35948cc545326c07852dec25871605c862a3</hash>
        <hash alg="SHA3-256">7550f1f3812a13530bcb61db040d8b57415447395a62503dad6664e7dc62acc7</hash>
        <hash alg="SHA3-512">94e8097f45134c4e30e84cba9a4bd10dcec3e69ac3a9e289278be8f4005befe6efe33dec7bf4c349c3cd65928c8a1aaa0ffdfa689e60ca240393634eb384ed6e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.25.4</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4402dad7bedd8ca748212b09d64e86a2</hash>
        <hash alg="SHA-1">351888743c1d0f7c9ec97a909ff2f7901f77df63</hash>
        <hash alg="SHA-256">7b1a61507950ea67b3d6b11437ee37fad9db06f855c92c25c08aee074c757395</hash>
        <hash alg="SHA-512">bb1126e1638a1007de3068e9a0a5e200ecf44bb52a66de6792f9886b7d2cbdc2e8d5e61ffae448c10aaa09b81ddf956c3c6ae787aeb3a43f26b1813c9b5a900b</hash>
        <hash alg="SHA-384">14669eeef68415f5b5637e7ca1431915e3237d2cd93e43255b7065f1bd90069001eb6da631cc7dea976bba97db7baa2f</hash>
        <hash alg="SHA3-384">29f4591ce3865a3551517a33646fc8bc6d60abf72317985ef382531ced78d9d562663601bdb2cf50518a2ff5f1cc536d</hash>
        <hash alg="SHA3-256">0527b5a19fffab06ee970752a5a91a01de9d511b98947d1164efd68e946cf596</hash>
        <hash alg="SHA3-512">e3925296eb9f816c8f79145a92edf02d2d61514e84f4074c63656118813a538208e01631d608b8134ed1003b864d7470429a2ffd415792b8564f97dfff772e91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.25.4</version>
      <description>The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5efb17ae45b749c1fbfedb3d93375cfc</hash>
        <hash alg="SHA-1">89ff2217b193fb187b134aa6ebcbfa8a28b018a9</hash>
        <hash alg="SHA-256">c4b642a7f047275215de117e0e3847eb2c7711d84a0aa7433e7b3c096daf341d</hash>
        <hash alg="SHA-512">e6d6a8ad6542f071978b46858063a1a6fa2a3709a69460078cab3cb57907c10cd7c0746b83af04d8284120c3382ebdbd1aeabda4c370041c187b903daf71a94b</hash>
        <hash alg="SHA-384">81407c406cee0bcb5bb052fbf1ecd162487db17e7f3b84489a6e5e9da14688b3082020abb01c20d1adf36b2592999f36</hash>
        <hash alg="SHA3-384">c05228836eef3d6dc30f8210b81e2aa1a3bfb2960a34bde1e2b88f8fb3ce4cae21a1efe84e058553990fa60860916136</hash>
        <hash alg="SHA3-256">bde486cc1dee149bbdec58c97085367c299be5f06d4b2e068bd26be14c6fa4b9</hash>
        <hash alg="SHA3-512">7bb13130a717f744141f1eb1fe9c7f8653de41936d870467e54c81a9c828be6ba0e28e7f3b72696c0cdc9f93ee6c6a5e64e58c7310f78f21f0a482e483ee8082</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.25.4</version>
      <description>A versatile, industrial-grade, and reference implementation of the Log4j API.
    It bundles a rich set of components to assist various use cases:
    Appenders targeting files, network sockets, databases, SMTP servers;
    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
    Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
    It contains several extension points to introduce custom components, if needed.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">62233cc04ded515e14b5fa4e88a9c5a9</hash>
        <hash alg="SHA-1">b963c3d6bfdf05c61ad47a74e9f9295131607df2</hash>
        <hash alg="SHA-256">10fee2c0485d54fa44ee75d314f6295508f7b932281873db61a91b88073200e6</hash>
        <hash alg="SHA-512">fc61e84587c6c060f89f71faad6a547b1fbdeba706d795daa210df947b08092b039ed40b0c9a4b507fd6207d33f796870209e47ca62c1f224895d2deb7b415fe</hash>
        <hash alg="SHA-384">1c097c50acd1577f0a7ea1a249f7aeaff0473c7ab0e67778ed7ab6566662b96401d9e24792c0a17dfc23128c54fb6258</hash>
        <hash alg="SHA3-384">0b2172d1dbbc3a8631c18da988819bcf01011c1abb1396057464ab5e910afa40bccb92128c2139672f3e81da2fa72147</hash>
        <hash alg="SHA3-256">98edd5c29d25bef661121f16472567908473362d42d1f1e7e76a9ad69a45a8cb</hash>
        <hash alg="SHA3-512">48891c8663657fc204af54e15c4773c8dbebc1597b4be635084f4a1a1d8687576e1df91258cb6e5933586dd3c6b6cb9fdbb2edbff3da9fba8c501ea514a64bb0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.14.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
      <dependency ref="pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar"/>
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.15.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.11.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.21.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-vfs2@2.10.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.20.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.21.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/commons-jxpath/commons-jxpath@1.4.0?type=jar"/>
    <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@2.6?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.21.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.21?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.25.4?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.25.4?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.25.4?type=jar"/>
    </dependency>
  </dependencies>
</bom>
