{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:30663ddd-cc84-300c-8250-54a5c6039659",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2026-06-05T03:11:06Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.1.7?type=bundle",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-security",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime WS Security",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.1.7?type=bundle",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-ws-security"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-core",
      "version" : "4.1.7",
      "description" : "Apache CXF Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3853b2b79e285388335416e55f840d53"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b8a818d52dcb435381e2cf546a72f1595dca181"
        },
        {
          "alg" : "SHA-256",
          "content" : "193a13b190be23265e68f5917e8371d34fae2dc84843712b70f871ce6e555e89"
        },
        {
          "alg" : "SHA-512",
          "content" : "67beb6f91e30989c7eddbd3ad94b3d17ccc42da6e15b16077116ebd86c7e533cbe9664b57b1c129ceb861933bc093d9931c4cd5e95bbd772d37371c2c0274745"
        },
        {
          "alg" : "SHA-384",
          "content" : "82efe6da01860a268878840c1fd85610e24d4fc872b8df61687866bfc66cfdff7974acec125ae49967ab253030f38824"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73d9194c805d15a18e3d6b79eac444647a13ec62be60e6df736e5ff88417a21efa60f8b0ea5e7dc56c0cc78c7c70191b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8eb3ab2581e87d274641f427b994652d70d02a34b68ff27e0eaf532ee90be9f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbfb3adea6e420e5ce3f492231f3c35fd019a1caf0950d56f8e8ead1692d0f7449dedd87eb333a650a7b42e9718d741e8a27393ffc067c2335dd335d9f41346f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "2.1.1",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5dac2f68e8288d0add4dc92cb161711d"
        },
        {
          "alg" : "SHA-1",
          "content" : "48b9bda22b091b1f48b13af03fe36db3be6e1ae3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe"
        },
        {
          "alg" : "SHA-512",
          "content" : "eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6"
        },
        {
          "alg" : "SHA-384",
          "content" : "798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "4.0.9",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a09f7188a527773fc71f0ac8ca30652"
        },
        {
          "alg" : "SHA-1",
          "content" : "500c199572538675d2819c938fbafe34935d8d6b"
        },
        {
          "alg" : "SHA-256",
          "content" : "93e09b7316b6af68d6e2083e4c297daf28e8957f45d725077af812c0b12c39ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f423f0bf977b4648254c18ab1b48a73e37266246f04fd7a1e7e7efb9cb936662016bf3d2e6e1d9e16ae18eb575778800808845733a8fcb3239665b7f338a058"
        },
        {
          "alg" : "SHA-384",
          "content" : "75d8d1152da59f7d9ec4cec983d0aca389f7404587f32ac491c08b7c204ff4295c1eaef37f9c1340ce5aaab205986106"
        },
        {
          "alg" : "SHA3-384",
          "content" : "16eb766449c17691ae0ed0500bd578b3568bb9b42070f96d3776ada74ce56554f948ffbc6debd39b5a620332a95be576"
        },
        {
          "alg" : "SHA3-256",
          "content" : "889a0912554cb74d05de386d7275a2e90522817a0e9ee8a417982939dec3ce43"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4b1a127515d5e1f83b9ec63f37a40c37565d8e79593d5276f30544ecd1ecf14d6ab423c4feaa7fa45d4f89b6d2ad318ab346ba6a2a2e2e27e0ab7af21b88587"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.9?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-core",
      "version" : "4.0.9",
      "description" : "JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfe79c0de53d009f9b171d1320f7879a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f32ec949d109d666fa30994223d1c25a47b105f"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b014df25d22c8446cc2df0a378c5b2137747f197a731d99eb24c756b26f7e8d"
        },
        {
          "alg" : "SHA-512",
          "content" : "66b9b7229aae2c0f74213bed97a8cc6cdbaadd68b2335424718c36e2cec0a8c03b7960128dcf77082b7edb2df053262290ee76d988197ffc2c057a6b9a45a047"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a4fad8a4b0c0ce1ed18fac77d171eadfd5d20eecef45ebc580255f633f1ec523f270696e836a199e4186025dcb10445"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1f08bbac17ab5f35189c17acf46fa1d7a5d5b1e3b02cc6e1f3113291935e6ef5103d729f92f683d2d45dc4bdb5cba79"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9919fd1d9292c1ed357b4d7f27a936fdb44ff52affa223a62558414d791c616b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7890e6f8504ce73a09e5db6f5b660c9b23f05e29160dc5de017411f21bdbcfb7a3ca2f0eaef563e6a10fbf30016ab42391290f8f5a9a16abd5dfb297f5b6430c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@4.0.9?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "4.0.9",
      "description" : "TXW is a library that allows you to write XML documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "09ca7799e2d1a5b484e1290db7bb9344"
        },
        {
          "alg" : "SHA-1",
          "content" : "70325ebdebca3e7aae1dfa395fd41fc25d8a6f4e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6343e5945d87266ca4e8974a0a2a876e1bd147a00fb65ed3f2e1a3a00f3a82a"
        },
        {
          "alg" : "SHA-512",
          "content" : "84d0459954e53b6daf90fc6550a44385cb8a559005994fef1701e1528db311f5250dbefe54dd6dc1b09a6fb76e03d87f8d6fef256eece2289c5de433513cf01e"
        },
        {
          "alg" : "SHA-384",
          "content" : "71a2864684dc808a7526e6d739db22df91bc709b4c99cfb192c91d764ba30ae3e4d6114ebebae43a106e6ae06cfcfcce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e2898d9b8ac8644e3a4b3e04869e793db4cf8782d7c27c76c284c57547fd26d4b48f6b20350f78095cc994fe50d121b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c7e005e9917a481dae07019db4fcbce844fd5f94882a49f2ec1f3a52bb347659"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11f22e8e5c31d46697b6234a9c67526ce8eb88b9cf4457d1e19302ce14944694f596799cb2f45d93b84c6d0935dcb3838831ba8c75d15730ac38a57318664010"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@4.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "4.1.2",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "535154ef647af2a52478c4debec93659"
        },
        {
          "alg" : "SHA-1",
          "content" : "18ec117c85f3ba0ac65409136afa8e42bc74e739"
        },
        {
          "alg" : "SHA-256",
          "content" : "7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ws.xmlschema",
      "name" : "xmlschema-core",
      "version" : "2.3.2",
      "description" : "Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67a17743abad9de9b18ee4b491ac976e"
        },
        {
          "alg" : "SHA-1",
          "content" : "34aaf48b18ae47015001237e93b5f3f05f1ece55"
        },
        {
          "alg" : "SHA-256",
          "content" : "ef6ee27d7bd5fff4950c6737b68263ed63dd088f8ed5f04245be49a5f6a06590"
        },
        {
          "alg" : "SHA-512",
          "content" : "77b020063365eb4df1c9fd6628031d5de7261288921b016302736deffbe5f0427af8c22dfeb5e3efd3f792c1790bba1c38e61dc8be43ccaff3051f010cdb8327"
        },
        {
          "alg" : "SHA-384",
          "content" : "8cc8d00ef7cd5b76d191bfc408d0d03ce60c9346ff5a119cab605568e792cb9fc2fc8d24fec0fccd67f0b1c5377bcc07"
        },
        {
          "alg" : "SHA3-384",
          "content" : "21462cad6440441043ed928be70876ed7f42d6f8d1087acec746b31e7a8c6b9c5c5505b58e27107ce9228798feb33b21"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a25e8760f087f0e1bcd8dccaa9992174a6b98325ffed282dfa68395d2eac41d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55f0873589b3893f25f3cfdfdc61e2f83db1249ef615a62b4a1e69c2b86f18657a1f50929f39016d24293f1f1caba204d0864b1ee285e01fce4192becddf3fdb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/commons/xmlschema20/xmlschema-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLSCHEMA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.angus",
      "name" : "angus-activation",
      "version" : "2.0.3",
      "description" : "Angus Activation Registries Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad20392145690b36b4f950fe31a31a2a"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f80607ea5014fef0b1779e6c33d63a88a45a563"
        },
        {
          "alg" : "SHA-256",
          "content" : "a6bd35c538cf90fff941ad6258c40c08fca0b5c9c3f536c657114f27ce0527a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "efb987b781f665589b2a524d86826ffcf37eaf105b2f823be124fded85bd118098c0749b5d268373d00b1d3b8bf0f89f86670444f9990b91948704a7052376e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4086b356cdf168e28a09dfa2ee9cd54926491438d556e4608508ae6a895929adf63f3a259779c83624a9bb1f886efb6d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b79721ec0b28964fad4bf56ffc3be67d81b62e45a4ac703917094e281c125834b9bebcc0623176d4904c5b50c94450e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aecadbd33e92abf894ae28c8cc609f5f85e8af736621c44fb71b84ca34e91247"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ebdc07c3b3cf0817f6d9ee54bb23461657f213648b70f6c7f634a1028cdf1522d5b5a7e2168130f72afa112f36cb08858d1c94bb67b40a0f051f567b4d696d1e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/angus-activation/angus-activation"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/angus-activation/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/angus-activation/angus-activation"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "4.0.5",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "935053b2c792f34c7ea3a238ea96f3ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "161811f36cad3c65991502e80317f2f6703361df"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e489b6c874c4119e003ff1403db523ee3a8959ec499f3de29e77245efccf216"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f3e522bd716ab6842ba2eed8bd44fc7d859ca5a3798e5adf2447eabde1c5d3b74b6f58d217d6cd772cbb034e4f003d9f9e10fafa15f4e108ea802548d1e5044"
        },
        {
          "alg" : "SHA-384",
          "content" : "0030a82d345127efdf52273c7ed5939deb67163821d73ba6050f51d5b6d918539c43a8c1e04594afce16e0b47b4576aa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9161e41f583009e64c236660b561acb1c04e3f46adde5383cb0006a31a71884c6580548ba583530460d04801507447a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f5490e1ab440817067b53e3c381c7d6eb4fa86d8eeed297f89ae1b7e5f31424a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4f4d18ab8edf47e5debf05fdd52f92f2d18d4089e7d705300830be0964bba93c6ff810e308bad2f5e4875e5588cab171221027c4704315388ca4668b195d25eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-soap",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime SOAP Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f06b46fc9d09d81d1042ca7bec16b51b"
        },
        {
          "alg" : "SHA-1",
          "content" : "57de3332e3d9a141cd336e8dca69e7a538e7b61a"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a2b46bfb90e65011d4c7fe1ccbf5f456ab395e6ea95a3bc2243fff20898f742"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee47bc1802c87140188098b512f3412c33b0e384f088f3d4dbf9dc702b54abf3ef13cf11a8d08b4a50f6ba18e195e0142dca989f77f572e3072d4e0dce4bd2b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "81a2580e84453c1670c532cbd3956ac20fb8360dc0baa44baa8ce92d09eea082991b466f2a0f83ff098743ef62e1685d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bd05d117a14b6a7051b2b221baf250b36462f81ab450cef174cba84f81f4ef758f1f0e300004ee22e24f16462bca265"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a64ddb7f19670a111f807452bc3f68a0d9442361d8f49bfa1303d241a0c87277"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a15cd4c30fe8cee4681bce765233cfa1bcb3bbad1bc296ab080ba8c70bdc52783101fbfc3cab1e922e90d1fa37af8fa9895937d0d267338c3b87a1578accc2ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-bindings-soap"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.soap",
      "name" : "jakarta.xml.soap-api",
      "version" : "3.0.2",
      "description" : "Provides the API for creating and building SOAP messages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b75eb22ffc46058b28d78874902dd2d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0445830286faf84fe40a3f47ccd7537d69cd58c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "62ecd5c3b5c107779e5ffe84922594c381f7a8e397320a05c3ee3957b5b7863f"
        },
        {
          "alg" : "SHA-512",
          "content" : "fc9964a7a4334a40d4aff7dac22204d436ea784f548047b43a5607d182efbcf41d111eb8032b59442e93ddc70aad45050269acd691c9292f83baa471161f3d21"
        },
        {
          "alg" : "SHA-384",
          "content" : "dcc510788f42ba3a266d8982f7346e70360ac8c9bb0c9219f5f971d94cab44c8db0c8f17315c6d15f2b6314ba99352c3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89428c35360cbfcc9223d1d21d969e53dbf87aa41b7bd900484ba3c8eefb7698a6489bdc24dd0349c64f193fdf6244d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a656dc445db912bb0cdb2bfa20af9e30f4da632169143c01680907dc63c2c053"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fee4544657c9804945a34936d208553899c49290798ce0d05d0c1912829139427b2769e96a5df759cdacfd6c0a1a8145be7ff2ed5440e441b4428004e0455643"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/saaj-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/saaj-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxws-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/saaj-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.ws",
      "name" : "jakarta.xml.ws-api",
      "version" : "4.0.3",
      "description" : "Jakarta XML Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d77fe029b963c96f60c6c4bd2636e1ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "30b8a7abd7b3958461d8256db31816dd2ae6eb85"
        },
        {
          "alg" : "SHA-256",
          "content" : "e2244d1046363f21a1dbb9485d592f6697b219b8086de70de759c7c5d725517f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2ea4c65dc43cec704295ea1517355558323675bc21b206c9c66e06e13e8c60ee33e19164f762ae31c1e0f2af8af542b0ab80404257e5a8b86f4f3044451486e"
        },
        {
          "alg" : "SHA-384",
          "content" : "194f8b4ee26d430e18bccb82ad53a70468ca6ad11275b5a637b9ee4dc673b55cca2a7af7ef8dac15aab89983da39e9a4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ab52b3e4c0b4901fb02660b2d3d11a43c3a6a0f7c91027216e5d18efb720c6baf5679f051255a0928690aabf1592e2f1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e44dccd9e9fb30d079f21c20d25709430cc20d3f8f5e51a140a106ee156c97e9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f49d901ac7912ba4d2c81143bfd7e3f1b02bfc16e8d877f55ed872e59a79a9babb4414a3c2965af2697b58f77ceff3fafbbc52f33ae8e51ff35bc0c056fe4937"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jax-ws-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jax-ws-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jax-ws-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-wsdl",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime Core for WSDL Based Technologies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "465a729e089e70d36bceb07b53bcc77c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad519a9622b3e8d749d24f02d8329f24baf1b1d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "05c8edcf56fc824cb07da3fd8392a08e8781a70cd68a5dfe4b9bb7ab2af3800b"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c78fb6cdd4697cbf09dab5a64e12e778b21ebd3d827cf871059e97114730095c99fd5be847bbb7ce8965633b0edac07bf84356978432b98199f6df85e080d61"
        },
        {
          "alg" : "SHA-384",
          "content" : "0c6b28e0231aafcfe86e576d8d2da2a9b05efdedca6d59980ca10715465d002edbae5b235c5d9565344f39b1a85af402"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eab03b1f5261eed6db3b92446b3b76b6cb89ef6c56a4d979fc2e5b50ae06d288e648dc156085a69a7fe53b6e0e0e70e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4d94b2a347a255a7c0c2635e1a40b2b35b60ba01f64624b877dbba9c224dc44b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "369aca8fe00a40dc092ce99ad7fa9760794fefab8f0e54d5c3662884957826840c1de2b77f8d6f3aa18c432eb652bd72b6157da2377e3aa88e12113ab3a0092e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-wsdl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-databinding-jaxb",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime JAXB DataBinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "187b49cf2744289e7a465fc877e05ebe"
        },
        {
          "alg" : "SHA-1",
          "content" : "92f5897c6594abccf7eb261893f30770ac172586"
        },
        {
          "alg" : "SHA-256",
          "content" : "aac9678473414d373dcd74d119241682a5763d8c47a06aadc0a0c2780f9bce08"
        },
        {
          "alg" : "SHA-512",
          "content" : "25a8d907ec62b91a5826cdcb033216536414e4823a44e1b89f6f0fd900c645d92b4acdfb62b6cb0084e4f0c05047f4591ec23c251c8f0482dc97192894719dc3"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea2e2b228be0e5bf572e24420b8126873a70ec9000e2d1bddb383c0a9072034f6357fdf70aedefd78718220ad4959604"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6386963a7acbc9de86f171794a30ae3260d057251f91827129b6b16938473a0dd94beb79c999d91023041aec21b01be4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6582562c58bed6a82abc8ea6f90e9e631bbc4991f61801e6151e6c3bdf619f8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3ae3717d55e03bbd0310239fa3ffdcd4727f639a702a3de128b2906ef1e79b54de34c5b9a2d547bf14e471296edc886dc0daffb1a956880737bebf324ff8525"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-databinding-jaxb"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security-saml",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime SAML Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93c38aa4e1244f07b126cecef27c08e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "deedab724caa1e2a55d2b0c4f484f1bef6b301da"
        },
        {
          "alg" : "SHA-256",
          "content" : "549d780d87ce3202b5e68a0ca078622c8d907b627a2ddfa2f52e7eb68d0c1a85"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ee446a98116d51c1c2ca9d7ec3f6f69e2786b954d0ad86dc9e39c8f7a066902e04e9728c471c1804d0c6bac48b69c00e615b978c7f1a0daaa6ba65ceefd7b90"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6cd3f901323aa3970aac685884da57bd9abb8219e2273b29c1cbe6362e2af9754f5967210a903931f78f6612ecf8ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb376fb6e752d11274e84f09b758e6ed321913e8c2f931f1bd95ad4293aa4aef92140f2274ff11e84fa7e5bc37685107"
        },
        {
          "alg" : "SHA3-256",
          "content" : "838d230205a8fd3e73bffd0095718ff7901246adb93e7ad5decaf044ca97bfe7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b677c50f5935cc3eabe928b9ef67fc750efe1526b90eab8a6daac1f99934199eaa60ef50cecf341b98f5be0d487779ebef1dd1f323175a53a07d789d611b7a73"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security-saml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ac21351792d75b8d5fea245b3ee2cba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b521b7df7b4b1e2bfd9e53e58a3d1ddca45c6def"
        },
        {
          "alg" : "SHA-256",
          "content" : "983887a134e9c651961aa14c44b8f76483e4e44c41374a8ccb79124b826963fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "837d174fcead747ee22a8bb3ac722d4ebfcb5e3771222378cee87b11a628074da7b6a7df634a9148e504797e7cccf904069ee6978609736f7bd1cb98deb38b5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "33d91d340afff446cb908acb65ac44530f4391b84ce041036d5c3f9ad2c22c3eac6fbf6f459407c4e16e759ccda26af8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a728989c4d1474b6d41efe0fe59e9d9abda858f8ffa09979a99901124be693a7bd84b20eef710cbf1a60949e2916e8b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6b602766e49178c417746c3a1567825b69f3f31e0a25dfcf878fd6a365268138"
        },
        {
          "alg" : "SHA3-512",
          "content" : "10197f359d7b840133073e241e998b8db4df0a580368ddc4c510f37063e235ca0fe6947a1c682f89a6abd0839348c86cddc60f3ac942c383e0622f2c836ccfd1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-addr",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime WS Addressing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b82ea724c1d798a02d57d274edbc088"
        },
        {
          "alg" : "SHA-1",
          "content" : "82bd2836a395dfe5603fb17a474e98ca74c5959b"
        },
        {
          "alg" : "SHA-256",
          "content" : "3dcdd9fd645350da139112fa42d29d97afe86cf0a74c8e5ebae475533b1918ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a26d496b7b66c2f31ce723f39cc855936c623f4cbf1a2abeae3d0506dd202038a4c3939725630d85721a0f6e518cda29c5c35b690d46a7772caa9b04067f237"
        },
        {
          "alg" : "SHA-384",
          "content" : "1663cf738599e307e44c7ba2946594384c3f80c50e39c2cf2e379d1eb46f588905074f2937f75b94e46df639aaba1f31"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8f1fb1af47d630e07aeb46d97c540a775f12beff710974cf8072ef86ac06cd8fd7ce1c675f596a032ebde141af3f3811"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a520b08e07b47c65609c3e82f07717589d9376d79bc91a48d4410b20a5445864"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb117027b86f61cd36da1a6a8c3e1089d1093f01c42298df10681a391941b3aeb59b2d2059f3eb72f4d6d6e4c7d000a29de8698bdbd071063214db909165adf7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-ws-addr"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-policy",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime WS Policy",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cbb06e6c1b244bc57accd6aab86ce9a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "ccb688284d321f37f5f9e609f4b2e6312ae72646"
        },
        {
          "alg" : "SHA-256",
          "content" : "947d682d296230af7216a84ccc6e0ca5b2354c2d7b28f3ad8783c2ba51cf1685"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee832a43ca6a9809df388d22e358dd56a02cc31e01d1b772fe64b53305a0dd79429d3ab56d665e203d56e939bd9ea76a9d7256d0bb8905a4c750f91e2612b74c"
        },
        {
          "alg" : "SHA-384",
          "content" : "41e4fc189779e9ac39e7d1345d23c17c3be520da030479e776aa107fc47fc59def8cc5fd853419e0bc8e3e9ccf8afde7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ee0eb5580c11c11fcca5c5a857d67ff96e48344b206413dc467a180fa2c076a2592eb2f04526733f261772ae7bb1019"
        },
        {
          "alg" : "SHA3-256",
          "content" : "995f76431d1182256b2b3f6e57bca59b958023f09c6c548bf7333f8a1e9743d2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "24379d1aa1314015c5b4346831ae7249ec538134a9c869d4dda3e0533681ded843b1ee002554dcc4f5b78d7f8dba3fc44c32cd979736ab068f1266b4122e3717"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-ws-policy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "group" : "wsdl4j",
      "name" : "wsdl4j",
      "version" : "1.6.3",
      "description" : "Java stub generator for WSDL",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfc28d89625c5e88589aec7a9aee0208"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d106a6845a3d3477a1560008479312888e94f2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725"
        },
        {
          "alg" : "SHA-512",
          "content" : "3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52"
        },
        {
          "alg" : "SHA-384",
          "content" : "19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ca2e435e6d94fea0b1d025f16b7b540aeb84bb5ef286139fa42c04443d5ec87b5663863a761f125dc4a8114148c89ff4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8429876fe0bd0d4bf98130c31856f6accccd2af5986b459689f7b5b49f4bdeff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "915711a72ea5b1773e3336afcaed273d65283e5e93ddf35a12b8473951cfd3e1454bf782945c7da5399922dda46277054185b182136f2dbc356d43adb8afec8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CPL",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sf.net/projects/wsdl4j"
        },
        {
          "type" : "vcs",
          "url" : "http://wsdl4j.cvs.sourceforge.net/wsdl4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.2.2",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4180d706474f28c05e5216d4b0b8b14"
        },
        {
          "alg" : "SHA-1",
          "content" : "1051f0f8916f832d0e76623d851e6afa6cc06064"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9385bb64ea84f1f42035c4926f3ff90aff9b995463a8ae7b6a61211f9e1a8e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "f2b1e150a851bcc8c99b1428f149ff6b104edc67a117ef8439888e9ae905d0f8a0cd20d3e7fec815f0b64f3891b85076f04443c5de63053db63b10a7f5adbad4"
        },
        {
          "alg" : "SHA-384",
          "content" : "e7cc17208c3b160783c36675199e66e06321715c1b78802a84e6a28efe120ffcab56c6dfa93eca6765ff94c785b01750"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7069f409132ef125b2daf8359ac6f9e2ba829b1af73b214268a6bd1ff94309bf9e1e6b66d58c51d3b564c842ff83f1bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c695b229401dd5effb3cbeed6347b88ae4b9ee4b6f76776b7e4f4204a4ad9ef3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd2959122c00db1693186594610a44bd2a5a51ebbb737a35f143a1abe09eae31e9bb0efdee6b7aeecd44cce53384aec137cd698a4193518eb749a9dcd9745f0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-mex",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime WS MetadataExchange",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a235c664390e328e7ab41a0aabcc9081"
        },
        {
          "alg" : "SHA-1",
          "content" : "b29e3ce8936da3cf608d9455c91c1041de1638a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "d6657c6011f8ac0c52e4ba20749908ff00ce9a32aaf163a3a1f20483e65bc604"
        },
        {
          "alg" : "SHA-512",
          "content" : "fc3e0b0634e4ebd7aa070d62dd16d5efc8023f7a6afb2514c945a2833bee4766ffe20f4da97c4c1717e340e16568e66e7ff5dcefff9026db53e46b9193553312"
        },
        {
          "alg" : "SHA-384",
          "content" : "514a6955cb446a71b21e262e1755e85c25119089cb36febd0a380d972cce00b44eb507e8e31291fb5e56b2d5df9dc8dd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "525fcef22ab7ba131483bcc54a5f28fb258450d000f04ec037e4fd2be7da4e9f64c8b3af48c23dde72d678a80d3e4c30"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ce7ff2a425e301640cd8e825637c765218d68aad8ff8cb76df6f4be0fd8750f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e7f417f2aa3c5a298df569e45e61cf157101d19b83dceca098635613ef9be613fe6fce668408fc6db1680df09b482df99bd82721134408bcc409f0b05b8bc0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-ws-mex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime HTTP Transport",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82ad105e53166f9aa87a26da5a3ec2fd"
        },
        {
          "alg" : "SHA-1",
          "content" : "4be023b8973f421956950ec69477d383906fb0c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f2e5284c2e036d26742af77999ed2f4f7da17ed100591d42cd85dec7da95de7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a89e95f5c2a5341fed2e5ed14719da4eeae596d655fb7884482f938345626c7e353e268fc72ab92a702bb1c45de7fb181ddf43d84360dcafea2487562615c22"
        },
        {
          "alg" : "SHA-384",
          "content" : "ebfeb5ddab6f6cbff8c8aca4ec10292b29b1569cb837246e1992ad211de12dc2caaba6b6b5e385222601d95da0e731a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "14cd56bea4600297127e23eee68ccc0ed30c6615b85d9037a45440a6b918bb4b4edf4e32bada6d823664c908a952937c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "003878312a6b641b0e639ebd4706437e04c878531ec304a05a778cada794c20a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6fe06b2764e6c6d3966db9756b29e947f0446e977feccb7f5594907388930ea3e4bce1e1a46f270d15ad81fff6c4bf0bc62dbaaae09b90ea136c1c31beaa853a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-transports-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "7.2.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d32a36b91bfa2ba1f69e9671ce2fba6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec9c97f566f812e249a7aba6c76815369ac00864"
        },
        {
          "alg" : "SHA-256",
          "content" : "689f5be95f9bb369d6c0e8db99a99f930b0c48d6a69b46151782b5816c7ea820"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3baa0b19322e22ef0b5bb6739c1497167938901450e141b2e8769f0acf7ec2e5498349db007f6958de7eee00b2a9b36b0a1c09fa7877f074cb8b5ad2485559d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3f9eee2aa2ff88fa3efd0d52d4a0fa8cf79707d36f5a9dacc2852df80584300a32e5d54b77af3a7bf29e35b84413e18"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4862abab750ed951776c465833ecf3fc8747dd2bf4f6a3108b5d4ff1e6261a24cd4708e889154848d7bad55099c6c42"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5f57a8d1f1a9cd8920c94436f53bcbca6164a221e793e5ef5db2b8861f9b113b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "960c8d80a53fdbb0423432d018723f805fcdd674a49d2aef7a58f181bcc53d7a7adf2668ab51300e8789d9ffd4e98267cbceb34fcf03195a779b2faacbe461a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.3.0",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6eec6c1cb7f63d8a8098cc5569a47e99"
        },
        {
          "alg" : "SHA-1",
          "content" : "59251773c44122e8d1366f68884e29dd784e141b"
        },
        {
          "alg" : "SHA-256",
          "content" : "7c805f36129ea9fa42b696093b7ae1eb20bb6ccec65c8280d6f33db5609ca5e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d1bf5cb3a803423c5420050c245227b944acb4ced29e8095e470bc3a742d6a057c484fa1d531b58933ed8f81d52d5bbfc8406acc4241f6e4ec4c5116fe30d53"
        },
        {
          "alg" : "SHA-384",
          "content" : "664bf1044e8c9e80083d02d2ccdba3c3953a515594b6a262baef76d1cf3790da9d71eb853806c27c94721e65983d72a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "298f2dcfffb3fe28229452770a969b2138008a23c508599a13303f48f21d3458c61ad19df53a20d6447c0f8ef56e4216"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a3bc0bf1b00df535d572ae16c62817788bea0f7d02a8c430fadd4cf4df95f5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d4e4618b22accb1fee19d6d2702dcd0538df7f9e3b7aa8590e7554811770bb317d4bab1eecebc4b31df49a349c68e746256b3e9cca5fbea6f102df411c0e678"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache/ehcache@3.10.8?classifier=jakarta&type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache",
      "name" : "ehcache",
      "version" : "3.10.8",
      "description" : "End-user ehcache3 jar artifact",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6767673b52b5c2157bb6b41daef38963"
        },
        {
          "alg" : "SHA-1",
          "content" : "892b8caf98d188d0bac6ff16db564cae13a6874f"
        },
        {
          "alg" : "SHA-256",
          "content" : "4530ba51c1768f680bffcc5af722f7b65a0abb3874d9f17a731c7085eb2613e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc2fe9472be5534188d1d327c2c8fdb39114f83a3c9ca7e5cb2425f09517653ffeccb7e0d96f5c38fe0f0eb4d8846aecbbb2d92777b666eb803969a06a386faa"
        },
        {
          "alg" : "SHA-384",
          "content" : "0dee1a1e8090a40967c06065a25f7a27f9dadbdb5666b9a06a20e3f021376950923a20c854f2f930822be77f30408772"
        },
        {
          "alg" : "SHA3-384",
          "content" : "99339fadfef0eca6a98bf8be39cd8d892b9aeae7062de5dc6c8f2b774ef95aa87a30cacf38c2166bc139a48322de3b3a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "db83db3d39aee9794143e5c9cbec469a5d7fd6af7f53d6afe7b35fff25125867"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e409f9c77f0047e9530f7d418a9faf3619ed6841a9db7b12bd86b27947800f0fbe7227837399ff861594d53e26df2ca9226074b0803456bcfefa8b38030e9bf3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache/ehcache@3.10.8?classifier=jakarta&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "group" : "javax.cache",
      "name" : "cache-api",
      "version" : "1.1.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac907ad12e9a7ac5d41abf703855002f"
        },
        {
          "alg" : "SHA-1",
          "content" : "77bdcff7814076dfa61611b0db88487c515150b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c980ad1ae4a6dda3bdb62986c3ef5b41ccf766e12353587ee4e4307e27e155a"
        },
        {
          "alg" : "SHA-512",
          "content" : "35824a03ce90b198aafb18e7943594ed833b257bf02e5ef9690d782224e6838232298430627455bb5eb7a91bcd42144b34273cf8473719d7d7f64638164c89f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f6c6204e9653fa989340ae361cb0372dc852057383cf72d881ddf1838ab59f46297fd4a217e4b171144d48918d4998c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5258073222820223be540f5393426023e0d0cde7a432ba4338fb134a28e867b52cee569ff3c4e5032f660b85fb4caca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0190bf39824bdcab1879086ebeae5f7fff7fd1a349f832663787274f2c5934bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d24dc13d9d2aa0e01f37732bc96395962882bfa197c1cdc81fdaf8c8530bdaa7654944b2ecbf966719ffe793861e3baf44f129aa73489ede55a36ff67e155cbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jsr107/jsr107spec"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.18",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe2837bd49bfb76657419002fed20ca9"
        },
        {
          "alg" : "SHA-1",
          "content" : "78a9e7a37cd6360e0b818e86341b24123d28d4df"
        },
        {
          "alg" : "SHA-256",
          "content" : "44508fd1576500688c790b190acdd16fec4f8c79a3e0b900afd70503cf055f55"
        },
        {
          "alg" : "SHA-512",
          "content" : "539288fa0c96cea750d11293dbed4c562630587aa7cd88bbf76ad04390d1c40636506da48faa6453090c7e9baa6b690b9fbded55a7e2b4a91547eeea011f971a"
        },
        {
          "alg" : "SHA-384",
          "content" : "917885c7812289f5178f68e3c421153d55abd7fe5cc9a071ffdc5de48b7afc79c352c667a20a3ad0f3b4660952932513"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d6898eb5dd2e5caa2185c6cd2804735802b3848a3041b82ef7faa7904b3eaf5ac382d43a70a71e22b77a929e10ae2aaf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bbc9103bec05ef3280dd895d8c6267ccf8b940df03c9f5145cfaa77f6e9a41a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e2913e96e4b1c94e7cb5c46828d1afe68c5a7248293d5c16aaa9ab462ee8e0ff97dd3d1155d2a64f66ccd9bc1ac0c83476cc886b675004b2f84aaaf50e2b2af2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache.modules/ehcache-107@3.10.8?type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache.modules",
      "name" : "ehcache-107",
      "version" : "3.10.8",
      "description" : "The JSR-107 compatibility module of Ehcache 3",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdb0241918c1ae4338643d81152f97a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab0f6fc8501173e8d0d92d6482ef2139beacd555"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb317252474a6bc9f950a22232503680f5be953d89c76cbac2c00cc453c18ba3"
        },
        {
          "alg" : "SHA-512",
          "content" : "47a075a3ef8a5aca3d422f11371ae23e4d94920f38f20f117976033b6d5dffed3911e2862a24985dff9fb6de053d9321a5f0599d7900f71676c2b23c238a400c"
        },
        {
          "alg" : "SHA-384",
          "content" : "8c647ffbd71952f1238d2aeb7d78891cdbaa716fa6c8a5faa263e5409487ef2cbabf568618b797e41201a98ed355760b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "89d0ad4cfbc7bfca1f10e39ae4de982375a0a8dfa761a5f989b691df6c0cc4bd94474702729e83f73086c90a4c45c832"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18d10e3caca0b9124b5057af541b007664ed797a8bb400e021acb887f44f35ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a55355fe7a84252da17851ec8d8e87c5cba196361d1ac8d44740546b2f1cdf85a81bcf341056f0e7beb0c3dd669bfd4bbd073fb6a2aae7aa8ff6728878904575"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache.modules/ehcache-107@3.10.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache.modules/ehcache-api@3.10.8?type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache.modules",
      "name" : "ehcache-api",
      "version" : "3.10.8",
      "description" : "The API module of Ehcache 3",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6e3a70e5a7ac469b03dc130dce4588e"
        },
        {
          "alg" : "SHA-1",
          "content" : "72e1a6cf111c34649d18c3ff595db6a3832848f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb3fd82981bb73b7f431a5023821ea33612a7ee18678e5ba187955a8631e9c54"
        },
        {
          "alg" : "SHA-512",
          "content" : "264455c8783c309d64cfeee7dd9fb1483a321031476b114ae2463f8abec91dc86d9514f1ce3719b1c536ad7df35be2e77e702050f82ad5bd98fce5973e5dd76e"
        },
        {
          "alg" : "SHA-384",
          "content" : "26855fa8ab7d4f65ca8abed30a5e68f06e72f513137c057de8e4899632f875f8f3b8a90a19ba9fb67099ac5811f718fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bab7de590d43bb3e6bfe7ca1e8a5d8075143451774daab7a668041856b772e5133dc2a8452af5008bd01a6a6a5c2b2c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea82c9cc67c67de4ea69012006146e1178cb4377feaa50f68c9b7de4cb364658"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5065915da72de6552cd6c427d1338b0f3a71a81ad9f935e8130da9ea53f64a86bc08af3fd4590e4cd3774c9949a17b47bc55262e24735ee9cbfe0cc19bd0c4ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache.modules/ehcache-api@3.10.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.8?type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache.modules",
      "name" : "ehcache-impl",
      "version" : "3.10.8",
      "description" : "The implementation module of Ehcache 3",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d142a972b93dc64161eb383649e3dfe0"
        },
        {
          "alg" : "SHA-1",
          "content" : "89d0901e2b6669034f5adeda66c419a620475905"
        },
        {
          "alg" : "SHA-256",
          "content" : "1b190b35f5c775d6bdf42aa7c9a14439b99105aedea6bbd1dda9dd7c4048f5ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "88f1469bfd4f617d1c2b3388fe9ae5a9945f366b3b6eb947433262ad02b03c5259266432634ee74a7e793b518fab99687240acf887c440d611ad0fb78bf57209"
        },
        {
          "alg" : "SHA-384",
          "content" : "17de060770f97242bdf4c675315c7c4d8378d9b7d3bac864bc827e70dce07709d11e901a49e6b85871b8b4c365c99048"
        },
        {
          "alg" : "SHA3-384",
          "content" : "62c6858278a0b0099df42fb41a4d6696afc90c043017e05cd14e4ca783243c3495ba075d7a85a15c9b7263319682d8d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b42d39db1683cc3513abaf7f0bbbcc48babd97b796055c7bcca83e40b7c0053"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6eaaa52d2ae51709698fa4682f945cdc9f0a8c640c12d1af2e1d8282735df6986a9405dce47d91d13bded76aaadfcfc57954f8facac6c9436c1418f290d43304"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache.modules/ehcache-core@3.10.8?type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache.modules",
      "name" : "ehcache-core",
      "version" : "3.10.8",
      "description" : "The Core module of Ehcache 3",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "63cfba688727b37af507fd0dd29a6410"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ba0419c935116d3684889656b82e98accfb731a"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbae0cd3ae61021971aeb52898d1e46cbef56abb4904e0fb443a9abed4e074c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c9e6ceac177479724fcab365932a727a560e54060d78094eb2b0cda9cdebc455aa0a956fc6a42c214d8ad8059ba6fea59e8548ec6e8b92bbc00d6db5364eb55"
        },
        {
          "alg" : "SHA-384",
          "content" : "895819b7937275caf27aa71bfc7f5361d75cd8de706ee33317f8a4177b365cc7079f1b35da24fc18fe07092efcc84958"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46369f83ec4e7cc705df1d8387b6b83b74e7f015d86ae1009deb80f43668611c7ed0f14ba8a4c64209c28b6298caafdb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f2c594b87a4d8bb1b1efeb9e1cb85f2295b0fdab807a47b45f9c0284fd234e8d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "931f5c11142978a3e24961cf1244c32169deb4cb99055c1bf36edba121791eecb62d17b8a12860183c27a08b09a79a52d37fd4152c8d3862eb93ea710eed4ddd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache.modules/ehcache-core@3.10.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.terracotta/offheap-store@2.5.3?type=jar",
      "group" : "org.terracotta",
      "name" : "offheap-store",
      "version" : "2.5.3",
      "description" : "A library that offers data structures allocated off the java heap.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af73ab9f3053638df6b68c4751de01bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f5cce9acf4b68693b7a3c142e033ae4f7f66102"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f3dc5d5b495c90395741b9ebeec69146e1208a42868b98a460b37646ab26e7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e053822f388a2569763c6779fed8d6eeccb30e2d12718374ebfa7a4a4d5d65dcd2cddd73fea12ee1b6198a13669e545ed0c77cc522b67201524065e4d1ab1b4"
        },
        {
          "alg" : "SHA-384",
          "content" : "0199e8a5253b6d332602542f1e5c9976d0e70bb6b3457eb04e42e5963fc6c49ce47d6c075ed28f19a7532180954adabf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3fbdf2f2918867a5817aa1614a0e6163b5dad847c2f7e0245d7477591bf6182a90f3723cfa14d5ff9cb7b299d25b03f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "77b031b90a48438d2315fc99a6b5c4bb7ff96f16796c28b896fe6c886aa36342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b05cabe7456f077d50f3b698a79705fd59d16adf1411fd57f05f80d8b25d34d93392a7cf0917e0d7af60b96abefc8d5e1308bf51d28bf391227518ebc1447f3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.terracotta/offheap-store@2.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/Terracotta-OSS/offheap-store/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://nexus.terracotta.eur.ad.sag/content/repositories/terracotta-os-releases"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/terracotta-oss/offheap-store"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache/sizeof@0.4.3?type=jar",
      "publisher" : "Terracotta",
      "group" : "org.ehcache",
      "name" : "sizeof",
      "version" : "0.4.3",
      "description" : "SizeOf engine, extracted from Ehcache",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b27b570bca9f20fbcf4eeccc865e6e76"
        },
        {
          "alg" : "SHA-1",
          "content" : "8db82effdff66b1091555d384b5ef22012d576af"
        },
        {
          "alg" : "SHA-256",
          "content" : "8cd2aaf80a6bbf14d58fa9fca7ca6c1925c29636d63f6475a6ec0be826ebcbd9"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f7e4617edbaebce3e10610715e1d289bf7aef39552fb81ad0cbf5a0581fec2d635356175bcc6815352600e3969baa121e09b07b19b11f63db58060e3071676b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b45659275f199083d80932b851a63628d80c4f506df787967762faa7b019d160b8d1d063402708389a1df9af6c765be1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "62258904ef3f71afd0ab8590909dc4642af273cac486cf967541bc49c7abd91256e287dd2fa0093927da62c37abf658e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b72ec1779ef9cfeaecde0c795d96c140923e5866ef64de2fbab4c8639c5a6dc8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c5b31aa689e32bb5558deb05c4964e21b2301fa4caae2c1bc13e4b2719f8a08a7d1a16dd422f390374eb2d31942763642cf50a04ef08655f079e65e7eb2d03dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache/sizeof@0.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ehcache/sizeof"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/sizeof"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.15?type=jar",
      "group" : "org.terracotta",
      "name" : "terracotta-utilities-tools",
      "version" : "0.0.15",
      "description" : "Utility classes/methods for common Java tasks",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6f6e6fafefd1d33af778cf9e6fe391d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f635d8b022e04c69dfbac344fa009fdff2f0d22f"
        },
        {
          "alg" : "SHA-256",
          "content" : "876b10454f23a4475ad14a67e901a23f8828ea737de27d23ca65c84b285a7af0"
        },
        {
          "alg" : "SHA-512",
          "content" : "0761d23b079841072bc770e4c264d97c04239159496e8bfe4057dea30b6019c233fe0d2c4c366a0539db044efe198d5dde28fe7ea131c5e30f0e35d409fd5022"
        },
        {
          "alg" : "SHA-384",
          "content" : "819b64a6b90f7489b14b1630dd12df61ab1cda48629ca5c16065497093a2ba22400bf0c99a3580da9ecf4c4a1a7bd3e6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f1c62022c11543abe0568ee204529f89108c7bf5d37362a4da077abfc8c39095cae4860e2fb05c04040ce1f4401204af"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b865476d2e77af6c673ad7f72e2a627747b75751564d84f44c11d8d905bf93f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "25ea6efdc83838f1c0fcdb354137bb09a4040724158462ba0d140642bcbf4e210f1d465dff22292261b0b687e3493840229fba19d9793cf51b3a34b8ae08d10f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/Terracotta-OSS/terracotta-utilities/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/terracotta-oss/terracotta-utilities"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.terracotta/statistics@2.1.2?type=jar",
      "group" : "org.terracotta",
      "name" : "statistics",
      "version" : "2.1.2",
      "description" : "A statistics framework used inside Ehcache and the Terracotta products",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15aa18e8dafdb5d51efc11a04c604190"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa191023ce0b5af60960873ff8c1f6a1af1349ec"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3d37b307e272ca33eceec64e26bffaba6915870425db9fed96369716cfe781e"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ad67b31755956bc5c34e4b9d4256e5377d20837cbfa2ad2af8e391501c756f8f9dd1d9b7655b3dad0638c5062be36b2f93e95b06b4638a2abe8cf7e10faef7e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba4771358e65f9134294413a5873746a4ebddb5e6741af45e24a4baea75587ba870ec81c055ed646b43c8e114c6d39f8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8cd87f5760710b6e0312069a38c6055ed951b17439c3474b43b3f28f6c642099578181dcd2a65c1474eb75a70f62ee98"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b758ac9d171ef538d97c08cd8e43121b7af7cffb92a85883fe4fc8a9fc62be78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12464e192332ceb2792eae85e9cb85a32ac800c86941d8c67cbc30dd09b298913f04c42eb186579178a8e5da70eb6104e10f3afa891425202608f91bb111b78a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.terracotta/statistics@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/Terracotta-OSS/statistics"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/Terracotta-OSS/statistics"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-dom",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90759259635ff2f1ce51332fc5d3a289"
        },
        {
          "alg" : "SHA-1",
          "content" : "dfab70d728c4f59c477d7676260f0adf6519977d"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8066af8c71060a1a2d42c91f993ce564ddbf57d18ccdbba7be2c0c9130fef54"
        },
        {
          "alg" : "SHA-512",
          "content" : "35c87114bcc49d5d5f9a2855e7a5cc989c2ed6e22c16f5a6b176b8bfd2b06b2ef885019c83bbf4719b0ac041f4ab1507154fd65e5e7a5271ffd81f176f9fb8cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "d112ba9429f42d7ce469b7aeb173815b77cf61f7e48c643775166311eeb213c3d93db3db0577308f73769fe0205e8847"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06877a1d16c970b84064445869dbd97494a963e3bf3210007c4e5590aa7523bb479ce348b0c09b270dcbd028ec28b653"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de5df3b0287f395824e03192716767edaf0b2bbf787a78ea3e5bcb80f064804a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab852b93a9f840d4ae23406ad6b2ad9f8d12610d7868bfbe36b77d129987a33f77890ac92dd4147371ece7d4e381d5db1269e3c5f231fea90927480017bab21a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-dom/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1d57d1281596ca48da7d9190483d0906"
        },
        {
          "alg" : "SHA-1",
          "content" : "2cd779ad415676280376df70684539484f1307d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "613c69f1f9a72c8101cd4104b8e1eb9ab7968c7ac0b7e25011d2a9b9dabdeb17"
        },
        {
          "alg" : "SHA-512",
          "content" : "a10d4a4dcf30627b8ed8fd09581f0043ede9f8a1a3967b8c15b68d68bb59339e42a10355c048da661fef60098b24ae4bcbfbcfef0ea761f4f796935efb4e4cb2"
        },
        {
          "alg" : "SHA-384",
          "content" : "33973a4a0485483134eb8496bd00179a708a1f544a87a17f543112372b05bf9fe84ceb6a28f7e1227cffa2ee7b69ddc2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bda1d79b741d604cd6f98d943574ff494844993c5f760216baa07752e29cef219db53c993d3d22e9c2848eb3c7ce3e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "98cc2534445fe857fbbacdfc72745cb45c3d0a132848bbdf64b5521c9b6c3a8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8906cc2d4774f85b90abde0d2f924bc2018da044b37ff06f56c74c7af85282777d6076f4e4e04e78ed5afb4b7ee86ce0e8a024b7ee164295234addadc7ddb405"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-stax",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6665f7a240e8ff6e6a144fb72cd4058f"
        },
        {
          "alg" : "SHA-1",
          "content" : "b11ba1924ef9382e3fac2c92a4d439a20d442faf"
        },
        {
          "alg" : "SHA-256",
          "content" : "b31fc427964fc2bd52ecf6b6b4da9fdb251abae90de4a7bcfea71b2cf283cdb3"
        },
        {
          "alg" : "SHA-512",
          "content" : "052cc9c7d2755bd57f08f3cf5723c5e634fab167fc013de5f85acef6c7afecb27b26282becce95e31818b3d957ecb707d1d760205520e584cd09eff87f7f6e95"
        },
        {
          "alg" : "SHA-384",
          "content" : "e019f573cd3940ccee690eed5acdc23a23753eb9b45a5bc10b862337369fcf8ccfdc18af78d02f33d3934d90ed967a27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0051590cb5f544d66802d9b475246c2b9dbf56e8005aae509a8b63c3123930b2c9a192ec16d30a3570ad9378c5584977"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ee164cb7e91fc4410233d069e5fffbbf8cf1146900285fc234e21a2c3fb172f9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e4eed8f1b18d982df9d155e63d74cf432e383b92d72a4ac9494b9159c2621f2cb06b16bfd20a16ac54de954fa85b17145bad920648d910ea3246219c62ab779b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-stax/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-bindings",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1566776c14a38424e7f32be6a31980d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "96954397c726cb6dccb1fbd70be7eadc518b82b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc51ee653901bc92335aa7ec24dab0a9bd3d63572225b4fab9d88f6e2a0e50bf"
        },
        {
          "alg" : "SHA-512",
          "content" : "6273de96bbc7744277e87b1e3b88d92b8d4b450115a438956d78a86a8681aba3b66028cac998c92c4d60629aef7c0b50c3b80856d6a8a7d9d66d7c7529e23bf5"
        },
        {
          "alg" : "SHA-384",
          "content" : "c0e9c843683a8babdb4306104af9bfc47d0eea9392cb4c8b073aad251f6b7bbea694b17275e5320caae2945b92c04615"
        },
        {
          "alg" : "SHA3-384",
          "content" : "734242d701cc0194751daacf7d487326f9ccd30110a16afe4329e99a08db10cbcea374794266db69c5cbb34fc23fb4be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26602c10b68e2d3e533eb4697c1c33cbbf5dad96b34484e51151963fef347998"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4c40d1af51eed7e62cd04bde950ad834c8bdc297bd2f24b2fd91bd80b4fd86df18c94da90a159ab71b8ea246e7f4b4783671a7bdee3aa63e941008513d65f99"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-bindings@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-bindings/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.xml.messaging.saaj",
      "name" : "saaj-impl",
      "version" : "3.0.5",
      "description" : "Implementation of Jakarta SOAP with Attachments Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "becc53f7f08650cc4ca500db35ecd1d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "a495bf13d057e23424b086d1e386029748496bd1"
        },
        {
          "alg" : "SHA-256",
          "content" : "0dd2dc2a881e761fb06225b2dd083811d100567bb7082c4aa1ae84d7ceb9449b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f086c53a08e3a4f311cd0590f5b39ec0237865054c266be5d4759064f83f5a505dd2d0c2cbfe47b1ae6645218abf7e9fff4d0ce7024027dcfa54c3cf77442d69"
        },
        {
          "alg" : "SHA-384",
          "content" : "d016e7eb8100dc36f951c128d6d8a2a1633f54138e8aaf359156b282cf130937d9d04715cfc28bf80d12cd94da7d7b83"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02331c7e8115e37486daadb6bb7df00f4945795745de52cfddeeec619c8b47416cd1d17eca94f4886e0daa5270b29f0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "176e4d1a8cc9e3f590827e2b34ac62700f1892babc63031a891178a78c311773"
        },
        {
          "alg" : "SHA3-512",
          "content" : "867c95b2edc844ae54ef594f2f0b45d7c775c1745ef95b7954c343c0cc45b4ea4e152b1a811177d2f40c5195f482b52e6a2bbaff675e5898f3c50a2cd30fd17a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/metro-saaj"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/metro-saaj/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/metro-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/metro-saaj"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.jvnet.staxex",
      "name" : "stax-ex",
      "version" : "2.1.0",
      "description" : "Extensions to JSR-173 StAX API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "700a50c797db31429bf0c57b5adb8b55"
        },
        {
          "alg" : "SHA-1",
          "content" : "33160568d70c01da407f8ba982bacf283d00ad4a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f786ab52392106a53491bd1ddd8bd9028c95bb280e30387b70d498a8647cf35"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e86d83c63f746c8407c1aed7a1ad4f3b424094e1c7f858c8f19ca2903cf382310bf5f0645d3302c4b32bdde15ae4406305a2618697f37342a1801a6a0f159bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b35b5614c4af1ffd60f863f707b9a3d539a65cdf0cf6733c21994108f5d333417c05cc5e535fb8d7915a5d33d485381"
        },
        {
          "alg" : "SHA3-384",
          "content" : "739a16a8035cbb5f08c6403ae2005b2b3afb423de2ffbf2161008ed3b1ab30ead8d13edd2a9388b4939ef214e78fa03c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a20fff58b842e3dd46588576564da9356591695608b8edd50a402e9e33d35094"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08e87038a55b575147e2b8622090535354f14e7c5a9e3c31f2c2f436780e54c843ea89777e4b6bc357047c9c501d0863703470fde81be8e70bf5be97f3b0c706"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/stax-ex"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-stax-ex/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-stax-ex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "2.1.4",
      "description" : "Jakarta Activation API 2.1 Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bc1602eee7bc61a0b86f14bbbb0cc794"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e5c2a0d75dde71a0bedc4dbdbe47b78a5dc50f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9db52100ce6c8aac95cc39075f95720d2e561b11f8051b81c121ad4effd7004"
        },
        {
          "alg" : "SHA-512",
          "content" : "cd078772acb5ebf1f90f7c737f372b7e86a5ce31b995ed759526a9eee73fd89f97e506f9a208ba3b73e757cb78830b829733411cf7989680aea2272abba7323b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b9a413939a024f562c15e60b11f85c336620987441fb053645499704960464d01ae83e9989b43ae6cd4f2164eb0cebe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d2fa51a3e18ced20f097ae019982cbd945942103df59327f319c64eeef1c109d6262d1de332fa2b6dfde41c98a9e7b2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b259d17f48ae1f357a28b9c33b66fbcae50eaa86d61ac3c8cbc5184e7914d2d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aae6a55fe1fa397b13b1bcb5a05ccc3e4e87049865233482dc09a8ab2af3eb128646394e3ef529609031e7c6c2215c91ffd27de06cd97ca9ae7e07bd4b9595bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaf-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaf-api/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaf-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-policy-stax",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd007a2ad4ba95b3f102bcaf33c89558"
        },
        {
          "alg" : "SHA-1",
          "content" : "eff5600fd1904631b548baee2317cf3d071d5ec6"
        },
        {
          "alg" : "SHA-256",
          "content" : "49f8c7c5ef7eba4e60ab29727e8c527f4ef4adfb196308ee4b5bfbdfa5f8b8a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "8239230e8edb3cc10acbdd6c09f4c9abfa152710650a8d756f3b682f89b9d99c7788b0b17db30797524f094cf54458d95e5d27c0e67bccf9acc732cf531d4e68"
        },
        {
          "alg" : "SHA-384",
          "content" : "26f3993c5e4ca45bf924d684cbae53ce6a6ca866c40e52ecad34fb6dbc2fc7ee063938abcc22df037cbf787d7483be63"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a20efb5dffb6d505abbd684e22fd17d6be94e88cfd164cb35d1b97f9c2e94872e0455f82374b087fb3aca6b1a26b512e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dc32eaf72d03d614164acf16d9d1c894c15237d9f339d953451880cd958bbbdf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a37ef3cc68770361f933161930bf9009ee4bc80cdd699448fabc3d65c92dd8695a400063b2ced8cc5b8b9f0e9c6e731ebad5396cb28cf929e05458f1f0180a23"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-common",
      "version" : "4.0.1",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "307961d93fbb8c3a98cfe68980f5a3b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4023f22b9aa679fc5bfe54efc257e8bb93acc48a"
        },
        {
          "alg" : "SHA-256",
          "content" : "010e3d7f0318bcd320c78d57f37bfdcdc5b0123d480c2aaf46f952b2e2bb3a7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "438d11a71ca55e796c48f4da63a19d05c2945a9e4d2d55e60c76ff7d39a9b31500c43b4c7a368d97be2213fcca10ae0604921dcfe591d35f1b8ca82b9af773cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "33d0b332cd9c23c389b9e9b93c13d6870020d0bd595b92281a24a6cf01fb9180f8ec49034a1bd558bad3686e7efa5042"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b4d74ccc6df4a6a3eb82e19f31fc4e8a12ae0126afa3856c0d30ecb22536789f832ad5eb587c655fc9df798453458789"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6daa43d32ee76c8f949c98c104a110b7c0b5e3fef622a94f96c10a8ddac55461"
        },
        {
          "alg" : "SHA3-512",
          "content" : "361b5311ba98b0552f2457b8cf872084ec03347beee55d85cd2b7eee872a08c26f3dbc933786dafbe9c9d8b5572985372c131e8a8b281c05644151d3f7bd2da5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.mail",
      "name" : "jakarta.mail-api",
      "version" : "2.1.5",
      "description" : "Jakarta Mail API 2.1 Specification API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a1872951f46b87594806bb01e342a468"
        },
        {
          "alg" : "SHA-1",
          "content" : "be9b3b677ed6083f575c437ebc442a6a4bd2b931"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa493753acb7a8c45ba8f4c9cf1230a74e20237056dd5b5c8bc86c583e8cfa0e"
        },
        {
          "alg" : "SHA-512",
          "content" : "f537477c3dbf81cf7112fb348221b91c0223b5dcbbac816454e88cb8f293f8c5d566b2a827f78dfdfebec1fbe5a93c909e78fb13789ed41ecbb96a86d171b267"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ae200a91c5879f7b50b9a07c3df864d7b7af31cb771ff2a636cf8ee76d019456e7fb541efb69ca96f90f497c597d608"
        },
        {
          "alg" : "SHA3-384",
          "content" : "862bceaf42659250d354809cb2259bfd11b9d4a87cf1bcafc9c2346f134bad45e27f8f7227722905eb1c870e9314ee77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9dc094cd2476872a9da6b8065878b5e5a9895dad13762caa025ac5c2656c65e7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e01072fafeb8a06ca6e32bdac205189fc9dde12fa039c453cfcc9a0cbddadc466d400d117cea64066cb1d04b34b0bc7a809ef8a832b11e7adb3015abf33e34d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/jakarta.mail-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/mail-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/mail-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.santuario",
      "name" : "xmlsec",
      "version" : "4.0.4",
      "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. Since version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7344e57494b9fff766012489fa1bda07"
        },
        {
          "alg" : "SHA-1",
          "content" : "b07e7b1a2fa3cb828b0d0112d3ea37829373bce3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8b2f8483b662ba5462126074dadf4d4f33966d8e8244889c6a81d53789da5402"
        },
        {
          "alg" : "SHA-512",
          "content" : "47ca9e5dc3918555202d70c1d6c13501638ba768456b6020fedab66f9f187db90389780dafc89de4b3efa6ae088eb74618136aa0fe9615dccbde79761186b87c"
        },
        {
          "alg" : "SHA-384",
          "content" : "045255b00f89be8eccf2866c50a132ca881256daf29cec34888aed34e9f684e3c349ee3869e2e85020dd36dc7ef1af7d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a45002651085eb7ad25431cd52172f7e8072cdb9c6b262b17763d240ebe1261613876cd4def6ab6db5cf59e6f4c2925"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b8223be639f86d7cf047127836ab7e6ee4b1dc039a636b87df0caebe4fc847b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "60e7c5b6480138cadc06e473cee686a6b7cee79a603c824448be55768ef1759562d203af057c366892e3fb681ad967856b53833a0c043313ab5abb6f45b068b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://santuario.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SANTUARIO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://news.gmane.org/gmane.text.xml.security.devel"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.1",
      "description" : "The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b3438ab4c6d91e0066d410947e43f3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "973638b7149d333563584137ebf13a691bb60579"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-impl",
      "version" : "5.1.6",
      "description" : "SAML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b31c2896b16137640456e7029d00661"
        },
        {
          "alg" : "SHA-1",
          "content" : "f7c7b467da101f83a8a8598b58b85b5142f3e8b3"
        },
        {
          "alg" : "SHA-256",
          "content" : "cf572ac4261bf7b2609e36fcec8002dc25137aefb36b7e4509c1ee2272f3737d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3883ae2ac53280a26fd1baae49987a05bfdf7608a0e7b60d6dc63905b3a80014f21b2daf8c096980a14dacda2c069587bb0b6f06bc603b95f47d9e5edbbf0ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ed599819741535a12be7d25b2367e4769aabd52fafcc39e7050566999ba4c36b8fb7ba7e846d16380dea9f83b2bc460"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0c7175f063f4f34a9e0152bb3e64d06dc24d9d5b50d5f109401a2cb99ed9f0a92438c466cd2adc9379299f8470f4850"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5bec86611dccaa03f637dd9e070e8bf4d392a645a935b50932d348116fc3ab4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "596ec666f67d58f17be036ecfd84e195a7e3361418a56c8ac7125fe4c02b1293c739ba20e189e239f5e842067df7615349b548a539c31117489bf7f2047fcf84"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-saml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-saml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-core-api",
      "version" : "5.1.6",
      "description" : "Core API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1c6feaf459062a96926a883c8bf14ca6"
        },
        {
          "alg" : "SHA-1",
          "content" : "9bcb391af20349d019b947956d73ba44a93d59b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "358d99f2b9204a3f44a6542a2a11b3ce809328bab7c6f78a8d09e993b5b61232"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd679dca368d04af61de9485e3489d5dca66e39609fcf6519cf5c408d00cc6d35bd26fd435dc0a8e6e729607fd6ca6c38e01f1dba850737294950d27726d7168"
        },
        {
          "alg" : "SHA-384",
          "content" : "f1ad358472a1a2302d2c6448e7052230cebf64990e934c4cd0a10ff0c47abbb158dcd8cfbabe98618be8f62f08f10e20"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1b57783a5bf07c8f01353fa11497ab30b79aac12c53206eda4eb423656535dcd06fbea6af2efe61fa30baad441da0cc2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1538bbee01db3b3adb2fe9bb21aa8cc7c918830722d8b4cfff5226adc8c6e148"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f7022335ac00b24c53118af32127da1cfc97617425e7f8571c733e3d4bf692735d031982896e2bdfd22aeed0c58617c781c3b301eb9bac77827a7bb2392d421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-core-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-core-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-core-impl",
      "version" : "5.1.6",
      "description" : "Core Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "158003fde004589304033b0d674e8731"
        },
        {
          "alg" : "SHA-1",
          "content" : "43f8990e6e7b66e20db81efdaad7f8a101745739"
        },
        {
          "alg" : "SHA-256",
          "content" : "a7d3f2f4f7834faaa86dbf232bdb8b5f7fdb7633b06aa89622799689c97eacfc"
        },
        {
          "alg" : "SHA-512",
          "content" : "5eacbc885bbbb9988f1ae5a6ec5ab965b30f522da2b828d7788fb5b8e5c78ccc2baac947931a66f99716e577ed5b163c6b6fd621aaad62aa58ad5f49d8f61c3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "4313428e7d7cf87eeb0f01fd3f8c50b268e1ae4db7ec2501a9b961dcfa6d743a75a9b2c1afaeb364848eab48fc2e1fe8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6a3d99a6a4f215e427b0893a126986691ef82b74f195b88897ea1d0f1a5bcd9f2cf880d36bc82dd6bbd7d3ba77fff203"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cdf5bf42f02e05670d9dd3efeb4dfe05d5f726e186a1d1d6d5fb4dd6a714e613"
        },
        {
          "alg" : "SHA3-512",
          "content" : "27979f6681508d6a345911b631efc74a46416aa1302176140e976fd639efb722f7099ef68b5df2bcfc0519d238dba07cb62ff86fc52fdcd5343d0be114a1a9f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-core-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-core-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-profile-api",
      "version" : "5.1.6",
      "description" : "Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a426e71c5eb6c774b673f95b51fd0bc6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a884c24980a667cc40ad3a8fd975fd825813f9f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "76eaf713c8542c1649658cf00e45ecd3c19812f266cbdb306daae11bf6f6a3e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "0109f15c8de791d254fb149c22059e67fd6b812b895ecf0a518a8498d4ac82c6ba2714397042b0f19850c7a9d9120f4866d34acec0281ddf66d4a1ac32b3eb1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb76c8dc8ad4a5f3ef950fc89f7356080372e6a18da78174082d7cba76c545a68bb1535b2e3aaf94e039fb1cd54592ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cdddd129980fd3137dbca0d23324f36a73d247d91e30bfa7183f8a35a8d20e2d5b7a24f64719caddb8f8ab97c75d1cd3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c55c0caa3dc98cc4ee098f8958cad0089c8108c64d7b4ddf03ce56599197481"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65ac5247eea1f253a6b6cf1eabff0eae897ba1a7ab186abd32c0cffc3e6e13be919aa98da0cb9aebcb96bbb6b72a62ce9f4e0dfff82b0e343dca18da9eb2b325"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-profile-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-profile-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-api",
      "version" : "5.1.6",
      "description" : "SAML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e36d3ecf540fb40e68b35c88ab0d92e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ce5f7ee9ad5591ce694c23e3b79fe52c9a3071ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "94f059f286a09e6763db0a4638b113387f1dc41047ca7ad1fa37402d9856b4ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ee418b96d3bd4402a97753599f255810b98c5a0d378d5e75851275f8fdc7825d989e1a48b9c3a98eee3149cee0036bcc1198a16d87d817a72ed5a4090442619"
        },
        {
          "alg" : "SHA-384",
          "content" : "b6bbbb9ef6154f172b9285c44d4c4e8dd86368069984ed6944650616bfdf4d5f22821d2e67ee8c331b5aa3dc2f45e859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5c647a082d2c5c39d0ed8502abec66b869cd2893a6dba19e67d2346b05814e356753ac17d3c09b8a9005047506405946"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3089e75c6c9df3d7ff4417affb73b3eebf53d579abf86b4b6d607c1e3e19ad09"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08f17c6e7ac8f5d918a751cc8f7a01d586f58f8f3dcc92e3d96126a4964eb9332e6ed65eb79f836d04d8f6cc6832a71ebb5c128504e9bab7563ad0438dc0d8d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-saml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-saml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-api",
      "version" : "5.1.6",
      "description" : "Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "32aedbb1fff833ad4d3ae9bedbe25d97"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbfabbd2b144f5f28adb0035ce220158f8cd072d"
        },
        {
          "alg" : "SHA-256",
          "content" : "591a7fd00d8e6fc3b04586109121ad5a2aa5a370de41bfcbe2170c20a4f17f36"
        },
        {
          "alg" : "SHA-512",
          "content" : "2fa07a990fa599ea4b03af43e77ff2431e7f28e229e6229004a9bef12f142062ba2dd9217430d6fa9a47274acecccd660e5e63990eb399ce510fdfa17033e82e"
        },
        {
          "alg" : "SHA-384",
          "content" : "072c310f078b6a432e00373f5d15fc9ac2ec87b0a5c3c65ac4bc9450910c815e900f52b78b14a19c32eb4721c70baec6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "beaceb26a658e0861e0009c2f53e63583b89dd7a7c7c49990b3c2cc2471f7872ce858d855bb8c5c858a47c3b5b1d9cd7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "86348a4ceb89ceaaaca9dd7b9b47e5934cf5c21f39fef3d1e39291c54f75d95e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "993ae5d3e84b585ff1b9e9c0cc4dbba215eb5bbf29c3b36bce418ba7dfe91b429cf5a70e6aaa7d9d86efa7f73bc342b5f1604068e96f66eb19b5fc698e0679ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-security-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-security-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-impl",
      "version" : "5.1.6",
      "description" : "Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "beae916a12c1aed935dbf39128ed7f82"
        },
        {
          "alg" : "SHA-1",
          "content" : "4654624a8cd6e4c95d43d96213e405c54c4e9786"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d323b7ceabcf8cbc03e0551d0c077fbb4b9afa6874dfe998898e8b7561ff92a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2421e41e8399c770a5ece23d2d5576b6937070c20cd0139c16b51fd422ed984e9eeed48f7adc466a3419a0c9ba8276a62b76e4308a929181dec0e424b9cab24"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b6f637eccee3a24c430e2bb6eb5b1e60476fa227aba2ed087af03ad027fe2855c11ac26214ca57107a2cea245f80aaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02955cd2700c28dfd2caf514c59ab4da35e183b495c048c5e7a073918b6aa97aa431583e2d50a6c56826384d29bd7a0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b7456ea5863af9f386bc7ef8f5d72a4a44e02deaa9289ad8eb2163a2e9401ae5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cac2309a7bd8a1488c81ebdf72fae87ef623c34554e9521987f32cf232065dd428bab8e794fb489b56850d9607214739522eef0d7d7b794adfc840ad862fac0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-security-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-security-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-soap-api",
      "version" : "5.1.6",
      "description" : "SOAP Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd3b1cba31ea4c5e9bfd5f759c1aebd4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c15ffaf06000150a8719b1a7703cc7c898064e9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "8936502b829ebe3aee4e5863c58ec3a1abd328eedba11262d1b53c969b127ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c3cf577d6a5288577982c505f0a55a10cc4504803710c0ce88eaa773e7e6c623c0be2e23e3fb300e19d75ec9a8fbb647c067909a19b2532f88a8e2d1e8d705bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d94c5c2df4020afc811bb3198f180a7d425800bc6b33c62711a66ddb62569d9f7376d4c2512152f0ea044a7ee3b95d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c7e50c1407d113a93aca320bbcc4436fb012652da6aad2ea8b6a1de6cfd06d6d1c20708dadd47b9fef09652c1518b1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6eee2ccfe64eee246ab917d4b10efa856780566ba99b97418f30caa59c96248"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a7b2534f1d8c5f9903d08887d5cc5818f0019382610a37cba4ed38d4d531c17ce266c28abceb39dec0c4a9212e654bafc96dca59f6e960862b49843a848e819"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-soap-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-soap-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-api",
      "version" : "5.1.6",
      "description" : "XML Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "804c5f87c24ef417f4e78422f2ef8ed1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6ee6c1f600bc86e893fb50ad3f34c311126c742"
        },
        {
          "alg" : "SHA-256",
          "content" : "e59eb655bd3f6bff8c150a781800766245349aa0fab32cb0465e7d2203faf861"
        },
        {
          "alg" : "SHA-512",
          "content" : "a0dfdad69edd60c7bbcba7e012a5f568e0fdb78049b788549f6e8aad3756f5aeda855fa38c554c2a8e71e8de5b5056e59298de92a3b8be02d0dff68678ce5605"
        },
        {
          "alg" : "SHA-384",
          "content" : "91973f7926f25b8e721cfd49813d0204faee9a8585327b9dea8cadb2a1690903d526314e7296fb25cb80444432de4ca3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d10d3d284d8fda5b1f2013b2a96bf271a618743b5089fa428fbf7a8475fa63344b2f1b0b3994cbc8e8b1a067cee202cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8613b6043edefbb7d243e4d4d52becff6f95e29eb6dab22383262bfc2d81313f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "34051f8a5bca344cf5f21f26e12dfedfd3157b7ef5dfb2cdc040671a5c87ce01b4b22df618ce7568551cc515de51b3b5c5402f52dc179c5f23443984601740f4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xmlsec-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xmlsec-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-impl",
      "version" : "5.1.6",
      "description" : "XML Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "09719a0983e2e165d3b8ab0ff7d6fa7f"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc2fbb43bb19fecc904e9f025cfc760d44cf7158"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a674633c8581b59c6ce9e14ed8d96eb2d70c56d37ad4da1492579bf57652b80"
        },
        {
          "alg" : "SHA-512",
          "content" : "e60cf1e1e7a24c36388c589b06d13efae8ecc73b84f7e4edbfb562d5e9528476138e3e4a1bd661c4856aa6a980a1baadf43817f9f2353880704d46d851cd4521"
        },
        {
          "alg" : "SHA-384",
          "content" : "18145a5a2a2bc6d3ae68e46fdb39243d58bd52e1c2499de23947d18006fdd3fa91a9f70d36e9d45bd1cee195b634bb1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "022c05d1f2ea320d8346ec79747c868cc1c1d6bb53749f1287696b858e651c0675791183de40e6789669e7b5b339641c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2233adc5c27fce1c87b9db402957e83a2baa1f9a1a36ca02f57ea061db347ed0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c0dc016dff4def615d52682adb19371401c63b1d408f13416b3ed9b156208d47ca90ac4b074c92cbde03c0dee39df92e8e81f83ac7bb96c7133fef594e7c1b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xmlsec-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xmlsec-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth",
      "name" : "shib-security",
      "version" : "9.1.6",
      "description" : "A multi-module project aggregating a number of shared Shibboleth components. These were previously known as java-support and spring-extensions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43189c546edbf62271f092c39b96f559"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f191e79c8e2a0b211f4d97ab61c31dd5bd463ee"
        },
        {
          "alg" : "SHA-256",
          "content" : "90eb9b9df1fee85141c89fb662c4faa0fe21dd86294f7e8e166ab898f6ac67d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d66bda521b61354f61ba913ea735357539b62683ec4e3617bb4ea4b5f039793d08e86d580aa68176e652686bbd9ed6febd4614c44ce1d9d49945eea926547af"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d9d2626639e8f94c1afa8020783a71302d592c99e3dbcba1730b50fb9576643e65148d01a3d1638883a5067a1761e03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef93faa925ffa5435dc68dea7a3cc45997746506cd5bda4cf68a9c3d8769e15729a23d91e88e7fd29fd678699d7e0035"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc749402905bfce2d33e45b86c665d482c8638e991f7d4d6d06df36764882e40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e55ed0c0229b9dff5217fec035ddb400e1c8ac6804194fb64455e63de7e39790a149d1e787cb205dd5d099473b0dc5585b24e3f6dac7548151d8a2f0a330e4fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/shib-shared-parent/shib-security/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth",
      "name" : "shib-networking",
      "version" : "9.1.6",
      "description" : "A multi-module project aggregating a number of shared Shibboleth components. These were previously known as java-support and spring-extensions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e0e7c170126a5e3973d0dee33a8e3d97"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4059308ebca9f33159df7218dee99f9f0af8871"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b0e462da3e0be62c119047848b4e8e5af0e25f5e309bcb4e506938a86338fbe"
        },
        {
          "alg" : "SHA-512",
          "content" : "8608f04ae3d013d580299faa34d4777091761c9af0525cf3f4e457f3683bee15865a2b934672536aa5e247ee055def0f13ea499727a1746868e3f9208204913a"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b4aec0b132b9952b360d92a7c1418d02bd4082db64f931518698c6b30eacf6787957b50e47277e38e3fa4d30986b937"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a8e81fbc1d6b6b17036d412e7498bc4c65d153dc38fd4b35559ed0af32b8bdaa869df3562a3c8a4998e83f9dac95d81d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d03fa5e513d85180f7f0d5b47060526342452f840c5f6164c442e59345029f14"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8d8d5bb15f770ae31fde2877cfd07d4c13ba3d3546058fefd44ea487583eb7d127c1d1b14e82771186d9623553295eccba8082d3d2e121419411d9b2e52c323"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/shib-shared-parent/shib-networking/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-networking"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5-cache",
      "version" : "5.3.1",
      "description" : "Apache HttpComponents HttpClient Cache",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef035c64709044723191e430b7919890"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d3bea8e0b3dd4964225ad8abe4eed5b6ccd6db9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb1852942dcb40566f53bb99f11b5175fd913229ab35b9fa54a33d4644924b10"
        },
        {
          "alg" : "SHA-512",
          "content" : "2a773f9c4fd1ddbc6fc7bf545aa8060ab4ef3b65b0e0cc15797c02a20e7154dbcca8063734837b5e7ceb96765fe61ba68c202daae46079f807526351bfe57b93"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec54579c0cd957c0785c1a88c52a0d69a651942562c63fc8009001e3459fcb17504d728404d82f351b2f572b784f831b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c463824ca033621e36554eb0009e2bd85004500eb19ddb4fcb1fb81fcaec2f939c9548673ba8b730624bfb4ff60fa2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6dba2eaffccc21855d07392ae60792c04ce0261b26f6a8579ed25c2bfd3d5741"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ba72d4e8aeab688e2f9171619669d29db652f4ed5fdbffd9e76499bddb37d8844dd7138cd95db3da1196c0daf56e778a9282c47a83e0ad949e0daf53e8e151fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.3.1/httpclient5-cache/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.3.1/httpclient5-cache"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth",
      "name" : "shib-velocity",
      "version" : "9.1.6",
      "description" : "A multi-module project aggregating a number of shared Shibboleth components. These were previously known as java-support and spring-extensions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef3c28da4b27f5974e5a2592e757222e"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d4e83237964e272bc0f0db491eb4421cdf2e1cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "99553ad68207c955219128a5521dcec62d476da56509aa3a548a6623402d7615"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef48fe5151a3fbbdb2fb9de12a0ebf4bd2ea97e165f6b04e9b67d4ecf783cf625a533a97196e77fb125fcfbcc1cd0e25f5d26535ea98d0e6bad3f5da6a9ebcf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2275370614d9040bc8cdc666902deadb87e8114d4a0f83e507f08555c3322ce47bc09174bc0297558d81a1a123a8515b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4353d130f3fa760aa734a6e63593b7d5b759b86822445524cfb8d2024078c33b80b0062d22e778cea59d1989926499ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f88e1a92bd598ea5e784cb1225d55779b85632fc57b005c5b1818f7495a23d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b3a6f0b0339e667886f32fc86851b46c73b576e63f922e8c9b0f5ebd2ab9cff0be033b108cb5e98c6510bc96e238c37bce80e2e70afbc7a9e7d5be92e04f621"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/shib-shared-parent/shib-velocity/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-velocity"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5",
      "version" : "5.4.4",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7863bfffc7b3dc5f9d37e9734590aa15"
        },
        {
          "alg" : "SHA-1",
          "content" : "29aafa2d5ced55ed75dab37cce5e125fb06e54d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f8657eab91b7533e5cf232d4e268253c4ff9f99f1e4bcd67841618bed67f2de"
        },
        {
          "alg" : "SHA-512",
          "content" : "728e75be111e8c557c664b4ed24e6acdedcf700bca0fefa69158f410b5ab7b810e94370daad946703efc601adfa8cb4b20916dd0b157cdbacdf6dc105d0d1654"
        },
        {
          "alg" : "SHA-384",
          "content" : "641df857e1a955dacf8268389b76a5b0cc35ab945c5d46a6afc2c453e3046e6916bd26ef6ff44d71cdff06bc2ef682fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "584b6f3588796d5054070f7916d09d3fe7c6dea5a843bc727b07af8ce6c4aaec9d52793bb5ccc04990f9af56b6038c5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "653cf9505139d2d1524e2f9faef52f639f2ebf8581ea2920a3c286439a562ee7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a1b217d56d1272074aa7337a0086bc9bd7929603cdc7e2471d698d1228ad2963b64d5ce2bdc583eccdf8f45919f7b08e2042f936acd2a508ac0d3f84cbb0140"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.4.x/5.4.4/httpclient5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.4.4/httpclient5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5-h2",
      "version" : "5.3.4",
      "description" : "Apache HttpComponents HTTP/2 Core Components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "45cddb0e4be800806019ef8d9bfa7931"
        },
        {
          "alg" : "SHA-1",
          "content" : "3742a9a9ba3a5a0d45be230093b52a1302a561e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fb4f34e4b612e7c127ad693335583587850b17ce9b1c366f9de1ca49fe2c781"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff6a6ffa1f6e4974011778ea8ffb6771c52c8b1ec161f7f411f7d6e0ec2988a36cf3c9636da956222a91a81f2718a215bc176b678cb6ef98ff44bc6cfe4b80e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "0e5a679b26abd8b170f7f5afded5a3923908dfd0fc92e90ab4757e561fa92a0e36cf2129313c355245810db9061fb309"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a203c70cd9e2d7f378b4745886ac8a25c2bcee599dc9f66f4be295deed81a70d68ba7b69d8a658a3a6fe9f14fda9dada"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cd90c09e8b92780fc77a197bea9f7a056ca79e80359d5f356727e1a132ac57fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e792b5a49e3b5dfd71de0130122cf5b52dac056bbc27aa67863d3b4877e721a0774a0483f41bae89016ddb1f8444e3a4cc2fda25213f38d008788ced76f14c18"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.4/httpcore5-h2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.4/httpcore5-h2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5",
      "version" : "5.3.6",
      "description" : "Apache HttpComponents HTTP/1.1 core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ddf45aa72b3c500fcd277cf75fcc1732"
        },
        {
          "alg" : "SHA-1",
          "content" : "2c7f0d11747f9485a02c9f622c0f0477d7ce8677"
        },
        {
          "alg" : "SHA-256",
          "content" : "8fb4528d3e970aca440523a1bd698a389fa710ecfea4c5c6096698b86d1669ce"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1f1f25498521bbe9df9fef8e43b86b9b709c40db2037bd9ff7a4a34b58cfdf8fd1e2595d3652eb5692c150ac638087c66535c1f4aa4a23d6f2273d4186372ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "975154449c95efaa8e3a0ff2d29a4aebbf46d55af571975b23fecc0901354aa7572cf91849f3937a390d3e0bbcadb4b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "47f654cacce5ffbce2f46793295357862894aefcc404960f805854dbb503dabf665f7dbc8d8baad2a042d009c8b37cac"
        },
        {
          "alg" : "SHA3-256",
          "content" : "75c8d503ab4878b182aa1a1a04a78e2fd2cbc3cf5008f8aff8560e5331eb21c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f6bfc94d08af1a555ed2fd8c4d86055e6a04c44334f980ec38fffe15dbffe3a593d793288b39719a46abd8226092577f990a47ae7cc7a77b20273bc35f23a49"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.3.x/5.3.6/httpcore5/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.3.6/httpcore5"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth",
      "name" : "shib-support",
      "version" : "9.1.6",
      "description" : "A multi-module project aggregating a number of shared Shibboleth components. These were previously known as java-support and spring-extensions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab132a449837bbc112bcd5248a808a65"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1efb8b1b293b1c01e6fa48d7feeb3b6917ea68d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c65489418c32289c5fa7a7feb1ad8d5075e4e0ad14fd170b959eb592b53f055a"
        },
        {
          "alg" : "SHA-512",
          "content" : "087ded4e8079def635fb702ef4ed2de53bb3604d0572e70f65db7bede6cc957559e17d67a7a717c2939be0ae680036555e1c73045686e87ecf319da1ceaa06a9"
        },
        {
          "alg" : "SHA-384",
          "content" : "e9d5d35a366e18b5c2acd7f491f44088b5585127025e411f10ab2be28fd8578e1917c8ad4d40c12d6ad16b15c546301a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "361bf0ff99fc21a641ef5746db0714526777c6bf079e5938c9a5f0c075c741b2a4394cb0aac09a369745c05f3a2e499f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "200fc26df1d444ac404ad3f57d8ab6bf6c513ff400de62b6d745f3c9a8e14fa1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ddbfdc6ef43347379bb4c0d5eef0dca5f553b40ad56907a8b19dbb88d9528a293d94e8946fbfa3207f5fd5d0d6fea81ae6fa17857abe62ee851f299bcf347331"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/shib-shared-parent/shib-support/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/shib-shared-parent/shib-support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar",
      "group" : "org.cryptacular",
      "name" : "cryptacular",
      "version" : "1.2.7",
      "description" : "The spectacular complement to the Bouncy Castle crypto API for Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9171ea0e9f71e98984def0861f5a9a7b"
        },
        {
          "alg" : "SHA-1",
          "content" : "08e2849cd0cc8856899c1190ec8bc9f261fb215e"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd5e655cc48c2c4568d8a40770dc07442316d61bcc1c24f199b84deee7e4f727"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3dd683b357e07522bb3e3837dc264dde48638c1b96abc8f2bf9eff351617ceb246ff38a0ce0f85a81707e811a0d5fd292c09fa8487d89a8307043aff4796909"
        },
        {
          "alg" : "SHA-384",
          "content" : "21e7a4479b09078d6456b66252ed9dab21c7c4ce23a153a704e0171283bfebcfa46f882eda4b73e2df3371f5c813ca91"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87f48290302e8afd66c662e7b9ce62366539e670d2e19741cae9ae66706444715558d45284540dd6c65c69c5f985f80d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b259cc94ca6507484b0fc69ccfeadecdaf09ceebef63024c686f4d5fab5a480"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e9a36d437319c4769b90b887579ebcb699a1289fa62fa1bf2a42cb428b53699d5fcaf56f4b0f68d1413caef674f785aaa8bbf2605ab7c95c2dd410ab891705aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.cryptacular.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/vt-middleware/cryptacular/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:vt-middleware/cryptacular.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.5.0-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9fbf39a41a5bab891348f07668e18c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8699de25f2f979108d6c1b804a7ba38cda1116bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e301f0c52ac248b0b14fdc3d12283c77252d4d6f48521d572e7d8c4c2cc4ac7"
        },
        {
          "alg" : "SHA-512",
          "content" : "994a4dbcbd8e528ad3b4a7acf49b631a40dcebb03d9a8f5e1d3b74351f805f77774e9a19f7233e42036cb415b7838710f207ac1e18335e4a219b7f99ea22a44f"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dabff6e543ead881b20d38a533e9151aaa83999239cf0ace3e712cf678e7976c3a50d79e3f3c57afc05a3b9ff14ad90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f65d4d942113facb2eb25229c1530b79dd3b8994574034b8d4a1c2b39ed8ee5bb4d415ec690d3d87cee0d8cb2283564"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fedafab2279bdf6eff66314fc61b056e92312695678e66dc1e25fe1d18af5a36"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e64f3c49f9030358554bb0b8abdff729394988f1e3247b05a86302014eeff4a2855acf46d9bf1c683cbecc33a24173a20a103d3c82c94f8cabd6676a01b40fb6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.3",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29a782e90f6b37218b18bb880d2a8f4a"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeaffd00d57023a2c947393ed251f0354f0985fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cbfc3906b19b8f55dd7cfd6dfe0aa4532e834250d7f080bd8d211a3e246b59cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "72be228e7805da5623e42bf024ded7d9147023c66b22f4dbd04ac6898201af46ee82e1f92ea51eb0595f1b49151c4b8ecb862653d4906c17609c42544ee97abf"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dd1a2a08efda311604992d3e7cee64873bc8c64de3b423b1b3a3dcc1f7f0810bb03901fbfe39a5f835accb0646f4ad8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ffd67766c165ee77e96824e06de2c19864a6e61f785b2085eb825f308f173d71f2555559d90d910f33f3367378ace0e3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "08a77b528a72ca412b36e4004692705ebfd75cfb4897c88632d367d08a34b09f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cba6c266babbe8272f029eea6e2cbddadee96eb1a16916a6eb2441a55837867ce717385d4388735fd83f2f6555931077c0ebda011a1ee9a37ac38c8c0c43a65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-impl",
      "version" : "5.1.6",
      "description" : "XACML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "99baab48a28e6dc330c3acc9952ea528"
        },
        {
          "alg" : "SHA-1",
          "content" : "d06f74da16d353ed0a4829164807ee4ee127f7ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe5f2b3915f65de21bdf15dc75492a542ce96e470d6f6b4ae4a9fa993d40b222"
        },
        {
          "alg" : "SHA-512",
          "content" : "1162c74551386f8382f6ff212e85d6316f1dfc2cb2dd4dacca9297fba837f060601f784b90a9a4258d613f1ded8af22b162ab2b0f9623c55f413bf30c492ca7d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b68ecbf2e07d57206c5ccfdf7da0088b4aba29a4b3aebb5f78dfe88ff1dc97b9e01a8af492d4d4eb9482a41b23d17d0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0cae43c1b78a5ce520028c88e1cbf65b9442b5af2a41d28414cc937f82f6479be68b13af3a158b2bdbb84e3aa7aec74c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9346ba80517bb15974ebe6925442917749bdde44d6e8429df2a08cb8ef458c00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b226f3ab49088d48448a32be13e327eb1da414612ad41ce53c733c8a3163ecbc4eb2fd9896d211f08bace0fbec011f4712dce55f8147c561876333dc6f949809"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xacml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-api",
      "version" : "5.1.6",
      "description" : "XACML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3714f82a0760d68683dd2eac5a5272a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed99a6840b6d886a63cbed69e3b705d262469432"
        },
        {
          "alg" : "SHA-256",
          "content" : "c044a406d434b3c01492a77d676de32e242b456611a3c42e30b66bed74c81dde"
        },
        {
          "alg" : "SHA-512",
          "content" : "b74e7ec4c2938a5a3386ea3480317532df83cd3a49d89b6f639f55ed05efefc00c8998fc950fd4a7f0184921a939368f0cb60c8cc9747e1f5bac817d336963e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b3ed9bc3bf98dcb6e753657e705cb7dd431cd6f330c26c12ce6eea0c4d5a31a83814e3e66a8964d6179113122e5d629"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bead6b1d3f73a0d11aeb541fac53ff7cf9baaab427a4dd2ff1955edf62207cde70e4bfe4e2348ade7f77e4a552c36cf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "88557de71a4702b9cf163c6d66a3cb499fb19d6e76eda70c9f82795b770f178d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1acb08b681f0add4622d2060a370503db123bbf6a90b34e83dbc02c718d36e80bf02fe22f5bd91016838fe8cb9d3c416e07d6a89f386068bbef24b28a557421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xacml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-impl",
      "version" : "5.1.6",
      "description" : "SAML XACML Profile Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b761da70f7ddbd9f75691e85efbd809d"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd2191a02ec63cc59fbf127083d000c0e621f8d7"
        },
        {
          "alg" : "SHA-256",
          "content" : "c024e6dbfa138b33b73e3fd7e0397a4d585219298d7a8f6e531f1bc09a56187e"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c9e4fababcfc3f7f5599f49df6128d1afeda53bb209871b4985784a263e2c0fa8bcb4c4940125f43ca69bbadeaf238ee47b5523c717f1a965e2be633d58b860"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4ed5ef4172c86f88b296fdca0b6d89c3062671a3fa7e4d47add47f6dc101974d7b077eb1c532bb74eef86a7c52a2688"
        },
        {
          "alg" : "SHA3-384",
          "content" : "05ff65a3301360c077f46001a14119fe731b08aadceb1b7b7cfce7e249c70b40b373760626124c6f93173e0b14f6544d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bcb62137dcdf2b713e1b3b4d55940242bf597d76329c35ad8b34b6063e4b7a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "77cd9f93e9e13f841416536872a0f5d0c3b4147d132bff81517f7742693039812912ab728a16fe1191da56aafba203a35a8cc34ce1bf9a4666feec686388087b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xacml-saml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-saml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-api",
      "version" : "5.1.6",
      "description" : "SAML XACML Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e5f3763ba9aeb7d26b7de494ca4fdbe"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b07ecb5a70e525e5a9295371722bb4e16c7d62c"
        },
        {
          "alg" : "SHA-256",
          "content" : "3401c8d65dcc32a63209ff4ef2d4c4b8a80e4636940dda7cc41149f4193d38f1"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb6e3af91857d88cc68e1feefe299f975fdc8212b4fb043b2d7449efad561e8eec310f135b06d69bc5c95c8599f70ca8c939a3569102668e0e07a101e67bab1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "50253dee4c7688c088c0d93f409dace5af5add2904e1dbc454a452b89f39ffec6d85ede2e2e4781029185efbfe509b9b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4787a9bb0efa0418477296f1c0b5486860d3f10129cb1e951b87231d966a62e4264570a86641fb7059e9170977014bfb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b9def6dc28ad82f211256fd590a1cc51e5e8f9654e033430cbfbaa220a1406d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "510b310b2614f1849368227d7c77121355e0fe2a6333eaa5ec10867a2e9b6228c73614d197fba31aa193ce0d4fbba9c242e50af2ea441f18036c0e7041677fb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shibboleth.net/opensaml-parent/opensaml-xacml-saml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-parent-project.git/opensaml-parent/opensaml-xacml-saml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "publisher" : "The JASYPT team",
      "group" : "org.jasypt",
      "name" : "jasypt",
      "version" : "1.9.3",
      "description" : "Java library which enables encryption in java apps with minimum effort.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39327c7e38782102ecdb3c9dc4e8dcd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d99ef9540f51c617f2a293b460f025d2ee563dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821"
        },
        {
          "alg" : "SHA-384",
          "content" : "12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jasypt.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jasypt/jasypt.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-jaxws",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime JAX-WS Frontend",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7996cbe7855b10c3765dfe8ac39932e2"
        },
        {
          "alg" : "SHA-1",
          "content" : "46230acacf8010b1a9f410c613228d9a7fa13d13"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b7a7446a0fe18e7398fda472e5c57a958ee2346fd4790cf9b4e4f856f5b71ca"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca2e2812eaaea1f02dc78c5ce9550b03d6ebe8d5b00c5eb05deff4b988f177605aad339a7f09c1f25e9a29c766a270b5796b6170ccc7815d9ffbf24dade84548"
        },
        {
          "alg" : "SHA-384",
          "content" : "349aa117632498654f5e521e063678f5762c31ba219c0e3e3881e578368f9a134cdbdbb431c264bdaa97c2297ffca105"
        },
        {
          "alg" : "SHA3-384",
          "content" : "39ec9ad4d5c6533bb8ac25c6ecf425d84315ea8e888a5f90e14331bb4f17228b205660dcd536cbb9478d33b690b67fa6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7d710436c3c00d80ad422eaae772cc912507e28466c5c8e6c7b4e4ce5c7bfaa8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08f51d2d08e39c1463896d462e953c1044a180a25243bc8e2767ca173439cf3f95f37c1effdbcb3e77d50c663ed026f281612d98c1105f6e22e9fb53b4a134d1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-jaxws"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "xml-resolver",
      "name" : "xml-resolver",
      "version" : "1.2",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706c533146c1f4ee46b66659ea14583a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d0f97750b3a03e0971831566067754ba4bfd68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710"
        },
        {
          "alg" : "SHA3-384",
          "content" : "717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46"
        },
        {
          "alg" : "SHA3-512",
          "content" : "762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.10.1",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9cb72080438acf27f2607002e1444a7b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236"
        },
        {
          "alg" : "SHA-256",
          "content" : "ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928"
        },
        {
          "alg" : "SHA-384",
          "content" : "451863dca686c04151bef6e632df2ee3c8c67ca97d191cdee3d7c4f9350f8a096011cadc1c79b4ba012b3f2179ef2bbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "faa7b5fa7a5fefaae6d320ad43c09d588d6deecd41b2a3ebec36a4143a2b90373b2d01936c0733413a01f451c9740bc8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e37aa694329cbbfcd0a81a735270166386aceff3797af2c391fd8484baa5a576"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d660ebc24411c38b0928b543f402e7cb09747b7c522047f36b57865acfb83d25c9348c1d70af78e3d26e1ad220f10055d63eeb2965f7b6966cb2fbd29b47671"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-xml",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime XML Binding",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd94e289d2fe9e5c2634271a1c3a4cd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6019f93d8d7a9e4a661a5d54a847deb19bdb4ea6"
        },
        {
          "alg" : "SHA-256",
          "content" : "34be68e6054746cf30752769043ce6f2ba63c8bba58cf3cb7b43f3f96d131ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b8bdbc5e3b5a7a6d081c1545a81ebcde43b6c76c93f94851996baddf6608514d68dc59dec87205aedf857f558246402bafdc6a239ae3670854f5b68bef689e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "44372475e344efc3057de839c1eef3b61788a681dc87c1e9b55d31d7c026c529b4e11856ea24012c514a611698449782"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2ddebae060867eee31c8d3ff2668035b3c229ca5e6a164cef934be6bffcae652aef9dc63adc2aeabd11eba16c414f66a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f09b527f45fbbc3137667dabf9bc3b52f04b52a957120128976bbee25bbc1961"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2cab7553e9b39961eb9d4bf353adbc2cbddc8d0f086251a7fbf217f262530e7d35716f84657e026a90729e88b53903952678495de49d46454a474644edea798"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-bindings-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.1.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-simple",
      "version" : "4.1.7",
      "description" : "Apache CXF Runtime Simple Frontend",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f7a4986ff14e862233d08d4ccbcdf131"
        },
        {
          "alg" : "SHA-1",
          "content" : "72715633bb30975e02c79c05912e89f85d9ab516"
        },
        {
          "alg" : "SHA-256",
          "content" : "672205eed511c7ea23a0ff02d2442ec576a6a3584246bedec631625a747dfbc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e3bce21a182a87a7e4c0c960351616557faa43bc1673503909ef3ca62778c2fbafbfe4ac8cd26c47f385e27375efdb0751f9dba5dc8157e675cfd464327771f"
        },
        {
          "alg" : "SHA-384",
          "content" : "a20b0fed65bc4ef5a28cab60a4a7efdc0576ce19a9517ab22a61127f93fc0ebc0ba1a3c620ad5c80edb6abc236b39553"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef12f1e9787486e47df00f622b6c1294fdddc9bd7d8948776398d05ac50d1ebd21342091d9c1662c70fd29dcc5c9c85f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de46ceb48d9e38b60c53fb4962bc2ae77d9ca0b1da184b4855626e16ad451f76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7af79225077c677fc1e6dcea571c24d4a7cb984e097400b709c54e844658f619a48c495283db766aa6933cf48604513451f66916f8719436fd0b3c4c3905613d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-simple"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.eclipse.angus",
      "name" : "angus-mail",
      "version" : "2.0.5",
      "description" : "Angus Mail Provider",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e965a2653568c0138457b4c6fc9e5d77"
        },
        {
          "alg" : "SHA-1",
          "content" : "427f6d52ec0782f7efaca0c0732042e347a6cb4f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4d8c30d35f455def6c7a05fe595a1e62ea2b80cac3efec1e9ccf4118b23168a"
        },
        {
          "alg" : "SHA-512",
          "content" : "500985e3045a7640049aa1ebb008d675983f537150605f192d2746ca2aa8c7a1b5231f782f950dfd968cc8ca26c32c6e93008cc7de309c5da4b17af0139baff7"
        },
        {
          "alg" : "SHA-384",
          "content" : "35c797fdc52800ccfbd36d7574c0919fbba1f820eafb1d236271eefb07266360c1b87c07c089f97c07d12a634e54037c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a10dd9cf09af51c29d178d2dd87c6a796121753c91ca13b8c51843b8ed737803090fa93f41ec8689469550941e12473"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7ac45dd92d65996c4de11701bf1a1130e393a3e33b4bc02af69bf627e54b122e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b45eb356f855b9777cfdf6be94c6797c33e86fe28e8e2e7fe7311e661f07d162e8c4e46a2f3dd67b7c0f8261ab5610c85f4f62cc874e64ee2a76eca3501e2e2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://eclipse-ee4j.github.io/angus-mail/angus-mail"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/angus-mail/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/angus-mail/angus-mail"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@4.1.7?type=bundle",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.7?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.10.8?classifier=jakarta&type=jar",
        "pkg:maven/org.ehcache.modules/ehcache-107@3.10.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@4.0.1?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@4.0.1?type=jar",
        "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.5?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@4.0.1?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.9?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@4.0.9?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@4.0.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.1.7?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar",
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-security@4.1.7?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar",
        "pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar",
        "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@7.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5-cache@5.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-profile-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-soap-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.4.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.3.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-security@9.1.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-networking@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@5.1.6?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@5.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth/shib-velocity@9.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-core-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
        "pkg:maven/com.google.guava/guava@33.5.0-jre?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@5.1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@5.1.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-api@5.1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/net.shibboleth/shib-support@9.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.neethi/neethi@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.10.1?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@4.1.7?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@4.1.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@4.1.7?type=jar",
        "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.angus/angus-mail@2.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
        "pkg:maven/jakarta.mail/jakarta.mail-api@2.1.5?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@4.1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ehcache/ehcache@3.10.8?classifier=jakarta&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ehcache.modules/ehcache-107@3.10.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ehcache.modules/ehcache-api@3.10.8?type=jar",
        "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.8?type=jar",
        "pkg:maven/org.terracotta/statistics@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ehcache.modules/ehcache-api@3.10.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ehcache.modules/ehcache-impl@3.10.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ehcache.modules/ehcache-core@3.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.terracotta/offheap-store@2.5.3?type=jar",
        "pkg:maven/org.ehcache/sizeof@0.4.3?type=jar",
        "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ehcache.modules/ehcache-core@3.10.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ehcache.modules/ehcache-api@3.10.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar",
        "pkg:maven/org.terracotta/statistics@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.terracotta/statistics@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.terracotta/offheap-store@2.5.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ehcache/sizeof@0.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.terracotta/terracotta-utilities-tools@0.0.15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.18?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-bindings@4.0.1?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@4.0.1?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.10.8?classifier=jakarta&type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.santuario/xmlsec@4.0.4?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@3.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar",
        "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar",
        "pkg:maven/org.eclipse.angus/angus-activation@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jvnet.staxex/stax-ex@2.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@4.0.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@4.0.1?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@4.0.1?type=jar"
      ]
    }
  ]
}