{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:7ace7b22-1470-3c1e-b0ed-f26d1a739549",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-scm-plugin@2.2.1?type=maven-plugin",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-scm-plugin",
      "version" : "2.2.1",
      "description" : "Maven Plugin that allows accessing different SCMs.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-scm-plugin@2.2.1?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-plugin"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.6.3",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6819bbe98ec09c2e65a497195f1d3344"
        },
        {
          "alg" : "SHA-1",
          "content" : "063fe5967b9c4c1b6fa6004be76e1c939e8bd1d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "61a48effa6d0c68b07ba50df17b270a7f5527212022f250f6d11dbc11efc0e5b"
        },
        {
          "alg" : "SHA-512",
          "content" : "07090ed707bb3364219da130bc7b38a2a2b9fd31bae51144202b52e5e9f8d9690e8b3fe360bb3327fbeaed3b555c42b52144fb87a5854c8ca2226c07d62e0ed6"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c328407527e490bb7bc735150747b8d5fb4baaa4a9e1b947baa005fcbfebc672a14523046c4e4c9a07cdd509c699ebd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f5ab5b2a18350b084d7c1c267553b69094872ba05a556ae055aefb7e176d4f6edeb562c11371f42d105b6de708d2f11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef617c858bca5d4465868cd572c9e66bb20815a870aec53acf111e53d2eb3432"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cda7e62e3a24dbe42541c72cdc4e515155c6f1826f6c7ef81c86fc16d16901b6526be55549c1da3cb25e1f342bb7b6d34f2342c4db19b891233758ebdfe258fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-plugin-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.6.3",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ebf3c5e5556a22271bf315d0cd5b2b56"
        },
        {
          "alg" : "SHA-1",
          "content" : "61c7848dce2fbf7f7ab0fdc8e8a7cc9da5dd7827"
        },
        {
          "alg" : "SHA-256",
          "content" : "17cef1f58e146ef0d7d9e96b3b92d98a1d6fd7d2b3288ba538e8ff1e0d9160cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df3d781dd0c3a5947c76a02bb811d2bff0eb9bd0ba1efc3a55001576c58612bb1fd221ceb9cedd7ed84dfdb64c973b61af22c56636e1cfb03a55cfbe83655f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "dc128cf5bca0d6c14716170efb7d2e37048f73c9b76393b766490580323a58297578c7aa5d49f63b8f48518fabb7320e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d17e2e75aaf45e995455913082cafe57c147f17af9d265ce2d55f15b3b0044254c24dc3c55cdf5a0bc6ee4ecdefadf7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7884033d63e0ed6001f98b8c7811542a3f7ff4baad8aadd7cb56eafad16b9aa7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3dd7820626f65b4d44cd9efc024d88ac0b4339efedf8848e6106e7b377be1768b79852cc28c7c2f454071d80e132f389f9146bc5e7c779569df94897682a5e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.6.3",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b83c1943a0783f3f81d4cd4c83c363e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f8ff8032903882376e8d000c51e3e16d20fc7df7"
        },
        {
          "alg" : "SHA-256",
          "content" : "61b20da4e1e3db837630d0810a6a7a5ac9fb7ea31b0a55638062aad6e479c09c"
        },
        {
          "alg" : "SHA-512",
          "content" : "53726aee76ea01de2253c623292f64b5bf7784c6e223ebcc7548a2136922cbdf69d3bc42c44d00e6fe2015d2304b67d02d7a988d400da2ed036d489c6ed8fbe6"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5905d7b94a605e7b7bbc72d2806ee0c475210436c2b2220b8a61b73a58b4cec0fce3bc7d24158d994bb8a73d954b868"
        },
        {
          "alg" : "SHA3-384",
          "content" : "68e5c7eec8ea3a8cdc0259b9baa64cc3014760d2b073d00c552937629f06ae0104f178bc40ca59f17d7742d3d8f99cfb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9f984256f0043acef50ba9953ae796338d495b31246771aea7c8b14c6925d3cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "723f0abf401dd62a99c6c03c3d363b7695dbe10912d1c46f0c26dbfbc697b09ca5b52c8567159c58f8adeece9caf9cf9ce560be110283fe315473d48a091d16a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-artifact"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M4",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "51eea54bbc85323fc68f6a79f9b8f179"
        },
        {
          "alg" : "SHA-1",
          "content" : "478f7935e88cd9da7ef01f509e4853e80ede9034"
        },
        {
          "alg" : "SHA-256",
          "content" : "b90579bc652eac7331436e0a25533fce14130b9c6e015f2dd3a3d4bb07e942b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a62c9d4485d4a30ec740e70b42aa310463dec0f53cd8ab7100be65ab984a8f946639b0f24650d0fb978aef6a73659a9e6e0b521b241de1dec2a58b342e0dbd2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7d8f5540885cb195ae3227bdb4854372586a90c6694a88da1711a16dd80a780ecfa2511edce7d0601f91a5875640bbae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b394b0cce809763de8ac26ca97a2810a4116798ef36e3fdca13109069f31daa41dd90326542e77f45d72d5cbeb62598"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90367dc33a3cbb1db9081014adaf0424c112d94c523651d9297e3132dde03c97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d977a67598f47ea5e1276693382b895ba79f4f1f623b0aff5eaa7ddcbfa7722932524b7992f850441f28062719b1b7f83206f2dbe5634f9e5f61f060ee881438"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.plexus"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.9.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64e4ee5a1298f866d00f705e02058200"
        },
        {
          "alg" : "SHA-1",
          "content" : "ace0820f34de49f69511f5263bcebb09fac9731a"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ad3292cd563381e3fd632f3fded1988f9e9b2be7a9f3db63ff4c4cedba13fa5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a99e92782658ed20e1d01b0ae426882d481a4ba91de3f6c058a24aa54ebded654f4b16dc26adccafd61f27ce22329a1ae1db935c4b49ee31734bcb775e6c7fd7"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f790e5bd8bbb3efcd45507c827f14a552e729a3f04eff1208642a91e36e4c9b62b34d6b1efc1102f2f063b0e31f9b74"
        },
        {
          "alg" : "SHA3-384",
          "content" : "58f1e4bb64c7200cc4fde92bd48e499931dc561e07980fdf770fbf0913c2c070d778dc7dac0f947198038247c0d70128"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ba1a6cb4b44510a193e765e1130edf3e5e0b09405b99aaee4ed0970d46bca70"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2723468e861e0d3201bdd63c250a06d852092be67817cd117cf7ddab599e6bc806d8e303b9291a070e87d748676ce113682718b83dfd86767f896422bb1734c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.9.0/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.6.3",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8acb450254136ba84d6fa40294e2795"
        },
        {
          "alg" : "SHA-1",
          "content" : "eca800aa73e750ec9a880eb224f0bb68f5b7873b"
        },
        {
          "alg" : "SHA-256",
          "content" : "f572ed9e2a6ea3e30522d13448c5d9b3b80ce62a23dac652111952d4941e2a3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "fe0e2bd7c34267f7c8139d996bee99f41d29bcb6d1bbedbceb055eda31355ef179ed5e319fa97496eb85499bfc5f8738f7ac7f2c17a7118cb87cfacd984708de"
        },
        {
          "alg" : "SHA-384",
          "content" : "6d8776a9dec094f9c58c9b649a024a5a67c04268b260d7fb583de7dd7287b799abadda99755be9d45e55c03910cf1ca1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "66204bce2f9b0b0388454a7c93775e3ecbc2321e6e7a1394e2da13e2e7666f7670b5a2db4e5039a95b2260dcbd0c8c3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b1a979a9519c5eeb78b468ce0adbc6b5382cdbc288c8de1107f01125c94bab7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b44e7fe5f03085fea942a5c627919209078c07c0f91cfa6c3214725b46acec74728dfe4dfed32bd53e479c460331e2485f0e9b5081ea78d4b853efbd834b203a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.6.3",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f43b5ea301aaff0c77aa3b743965da0a"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9a37af390009a525d8faa6b18bd682123f85f9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "3285308ea243a9967785417af5e21ae0c094099b20dfb0b7e1c3d211a87a5e59"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f72981bf568facf16865dbfb1d5955ecbf82d90b5ed3da2bc096fb7e0f67056202d16078d9ad46945de9b59846aadc8ac010d23ab374dffbef5e7534bdbf1fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "03caa416ef387c999dcec4a7f3cbc66f84e5f1b61c22f2d4730dbcc7ee48118ed4cc1170a605c83b2d0956346b205c9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e40df7f3bbdd8963bdb3eed956d157a740efb0b1e51ec0ec5f2440168c0b9a2ad5a382d1b0cfcffafbd35aebcc346093"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f72063e2ad824454224213507a2e0b88f9b40f5fc1fd455de5c24ded7cdbbe6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5ddd69fb6deeac6ba03f30ef72655bebc5bd0bb636d3b61c03bbd2d0943937be523db7e3bd9d34bae54d1d1785be181695fe64de9ac69f98af21da1bce92931"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-builder-support"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.6.3",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c49cd8e557ab6584ab9e4d2cd55f6a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "14d28071c85e76b656c46c465db91d394d6f48f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e7f850b20664a151e6ca73dd3af34e639901435c2fe717717e3cbc7ddead3d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fbaffa07e4bfc091d4d8818330481bdc9d1d96448087321bb2914aac10ccb1c7b5cc6be0f6c76b8c0232b9cb69e4cdeec4fe40df5e9f2d472a4a027e5a3b3f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "510834044a480d914eeb1a78f51cc0e47ee837a9399f843a0a44bbf75bba71109d8b5d4eeb8c789367d01e5ed881a760"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dcc6a87ed5dd28de73a849b6fba54754c93d8c29874705fbef8fb3c135088a791cf72af8690aae2ab4800721f31325ce"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0f1c5bec6e9d257dcabade9a3fdfcc9f18fe4496fb04a74c1480c36deec65b51"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3366430b6e7f864e47551d99ce5c2dcc8f830b3d2b01243d81cd50465d55c71cb80977aa2d7417f8fc95b37168c2c622993881b1b6c710359744c086f38c2c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-repository-metadata"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.6.3",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "afa042b1716f60625df9d9a4ed70c6f8"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ef1d56f53d3e0a9003b7cc82c89af9878321e82"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d9a508edae881054fdb6ad530a5e053a0689ab1318bf7a099016e758b8323ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "d65f71a4c755be518061fc2d33582c3da422cb3d52a01cd68bdf906c0fc4bfc1977da7714f9622452a02d34e00b7d4b1b1e4986bb59cbfdc5333bf12c9c7e699"
        },
        {
          "alg" : "SHA-384",
          "content" : "2745612bde0c1484f01db481819e5277940b22d7d7f07710130c87c73f91d5ca10e1fc94559d639cace3a831c1679635"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8f3e1fceb78caf3c37a33bd6d5c79afa685c6e1e427555d319447863bb48c8bc53824fb67cca9f5c99500c1265a7f78f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d265afae3c868a2f1fc6778f62538150bd5de2157131016c26d2dc0081e1e6c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "39bd4872d744b46bb141a01e140e94e2604c9cd949c00f2c5aabaa9eef33499a25edc7c739c038bfe3445102bc6e31db2338a1a00aea889ccb7b623860fa561c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-model-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.6.3",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e5608a1e59e1045934bdef2d2fa0850"
        },
        {
          "alg" : "SHA-1",
          "content" : "115240b65c1d0e9745cb2012b977afc3d1795f94"
        },
        {
          "alg" : "SHA-256",
          "content" : "2379a5cf0b13ae9e11535c2c34a31b57c3866d9cbb7e116b81f9e288d1823702"
        },
        {
          "alg" : "SHA-512",
          "content" : "9febca461a031acd195b96b05fea2f28333a2cb587119a5493a3e9061af87bed4e7e1619acce9a505ad579a71f0a5e740cf78a3642095c2bc45a3d73c358e226"
        },
        {
          "alg" : "SHA-384",
          "content" : "72ff99262231234d1d44facece3aa045baf28d3ec52c32712b1df980642a5c35eae5770b975493115810d64434c703c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "960b35f757cb033aaa6c76a90094aa72aa9089413cc9edb06943ae7e0c57039d31a1b6b48eef6a6657265a9b76289796"
        },
        {
          "alg" : "SHA3-256",
          "content" : "15cfa486698ec3a61b84de3d27d764e5846c29c9f732d89be869443f31e5115e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8ed60bb78db20a88fdf63ead0feff1f7d58ff2f4d95b0104b29bf6e4f2c203ba39aece579853d66b0a0714875b602b9eabfbe104f1ca6d7b00a7f2c1271f3b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-resolver-provider"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.4.1",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc950efda251e95bd270e82ddc902ba5"
        },
        {
          "alg" : "SHA-1",
          "content" : "1658cfa27978c5949c3a92086514a22ca85394e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "345507f0c8f54a0d0fc6634b70327ab1ebd027ff85c41f593c111ff4cb65a80e"
        },
        {
          "alg" : "SHA-512",
          "content" : "d3132d89be995b13c81ddcca34f4cb22128a774ab133d685369b685e945cdb5c6a4a539cc67043bcf1d11a15f7fc417c464f7c1b34774c2abe7e430cc30c4347"
        },
        {
          "alg" : "SHA-384",
          "content" : "da965507c985b3ec25f11e700b34b3baa3b35d97d42b21d90e09a795c582503564458170672191dcd4a032cdbd498bc8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ed4910c6a4616b2a484616328c67c47254037b84d1b310beb9df9bcefa273bfaa4d54b406a95dd34296f08ca73b9ff6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "810a3a122e18e0562aaa4d10f1025c091ea810f2206a4394ccb30c06a8e14992"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d96bbf5022851bd37c2e0bec4d65fd2354d3bcaefd0078e1bd35e044e62acc5e4b44fe05cfc7b7009694e5401f96bbe506224b4e66cbc76ba15ea808abcd3455"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.4.1",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4566dcb75f3d95fcc4c2fc83ae562f71"
        },
        {
          "alg" : "SHA-1",
          "content" : "ceee6b7ea1bc252afa585fa32f76c2cda206bdcd"
        },
        {
          "alg" : "SHA-256",
          "content" : "33dc67306cc95da14e5444e8b494d967924abf1d01bae1894676164cbd3f6112"
        },
        {
          "alg" : "SHA-512",
          "content" : "da56ddeecfbb6d285d08fa60f88fe125d1f08f48ea24013b83b6aadf24835c034c9b45cdb815d99505b35e0605c48b6d7e5949f1735a874049b0790e8a8461dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "5756381d718729e842637a3865b1b597757575ff087d4a248b04eaec300f990ff505c174055f00918ab26d14e9ecff88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a42f1e01f6a6350d37d7db4e0a1829d399241e809cbfa713bd047105ee155d6fbdf9334ee3d7a1ddb5f9b6e959b0ba61"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1742e3d180c14936f9e0d003c1492e94095ba230b866038250a6a66aea6a5cb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bda39f42b160f16bbf9bed080a6d896a0022787d3593b8434aa3bb730825a21f19699d0c4fe676f09d0db86dae08233c6b1153572aed09b839b99ed00bef69ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.4.1",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b9930bb63937ff878d2edf783a654b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "905a024ff050e804a8a4df53eeee63cc7d153438"
        },
        {
          "alg" : "SHA-256",
          "content" : "878a03db532fc9e3e80a78ad68bba2c6a1f435b449ebd0ef9dcbf6ef39bba536"
        },
        {
          "alg" : "SHA-512",
          "content" : "250bccfb03d380b0fa64996e7911fa1c58253f28d933746487b8c0b04474bb2d72afb0360656f651a487fac065ce78c966b059d8aab358e8ba3593aca1eeae0e"
        },
        {
          "alg" : "SHA-384",
          "content" : "cdf69253f6f8e60d536d2550b947ceb59df486d40a7124ca33d769176144d1011f577303594a544f48ada54c46c8d9d0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "755c45b124fc81a1659b321e43b68e2485e02f72f9581ba89c21780c0eea055f286bacdfc3c2a5e5354107462de6d702"
        },
        {
          "alg" : "SHA3-256",
          "content" : "df4d7a0f0f198dea216884c49b592691ba7a6ab40672f05d32282774a568bfea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "55b758feedfb29e9e78ce21c05a63ab1b33943c806b0bd4d257eca95ce2f76687eb84bdece4ef2f272cccbbbf62f688fb94bd8bd9f6a420ad8b3943820c3d213"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-spi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.4.1",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96e142730857ccda441a5b9baefeed73"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f6d4f4bc3e24b46a776b47ccfeaed9d2ed01549"
        },
        {
          "alg" : "SHA-256",
          "content" : "6b2184872fa7cc2ef5a90481b56af9711c15b371e69ab52f0f31bf24e910dd82"
        },
        {
          "alg" : "SHA-512",
          "content" : "35a0b284fefad99b77c60f15d091c1bad3417baad1fc86fb6850a347a8a75a9cea26fa227ec601577f4096184b82ce198b4472441e95fce556f7d332c6a155cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "29608703ce5c5130762d9c117602bcb5c842b27bd4576291cae8342f835628781589ed5da02ae54bb0cf444f2ca3dc11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3889ea3c5dc697f39f99bd9f4c2a23c51daabdd4454ad33c1e3621a6506bec45b09002eb1230003cb026997993144b26"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9e0df8db7beb418484bd4db007c586272df4ca2b0b22e0d08e00aceeb40de911"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29318d9c1c068d6b47f162a31303d8c1aaf156713c3af9492b888fa2d41b84f635711c6fea2bb1112b4e471fb31f2d433449bbd25a44a6c6537af050521409e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.4.1/maven-resolver-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.2.1",
      "description" : "Shared utils without any further dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c8c48e58b12b4584278c355f6c98bd5"
        },
        {
          "alg" : "SHA-1",
          "content" : "08dd4dfb1d2d8b6969f6462790f82670bcd35ce2"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ba9c619893c767db0f9c3e826d5118b57c35229301bcd16d865a89cec16a7e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cab9de8654b3744ceb1a62b51853e076c191cae8193e8393a979cd428833b994ceed591806960e100942dde3eeb65538169d42666004e3623b6129475fe2cab"
        },
        {
          "alg" : "SHA-384",
          "content" : "1bc09d2aee6158c845b91788f45e300f9134fe0b0d965324ae1f56575dacd5a0eae2927ce4e09529e966ed5fd6434c35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c144c0c153f9f000d3fdd4daaee3bb4df4926902fef98da901370ac131ca298f86956c23c2c02c83a50e43fad6dbca62"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50280461e8e2e0cbcfd2c22822f3e1d3276e5034287040ce0db0e83a6c56d565"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b04341054157cc206fe7a5b7b0f14552ad311ae2812e2fff40f85866df690739384dfa2a64bc4bf590125c39803aaaf013e003661099cede00a9ad9292369d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MSHARED/component/12326452"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.2.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M4",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee95c1a11ba4ca38368d71ef05676cfc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a062d8e12dc62e698c9f943a3fce94e366b4e220"
        },
        {
          "alg" : "SHA-256",
          "content" : "1cbd7a965a5e2a9ea823bab311962a4e5aa5c240705bdbad5a52b40ffdfa1004"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0ff555c09ec22c637320e1d4ed654d8eae39bf051ce544987253eeb608f9913e332c9a8bf56d189845424a30301ce92cf1c363d8b6b5ccfc7eedaf8ab0474bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "695c7c852c924334c1d857ddfb28277fb5108a54effaa30702fad0c6afe9070387b038f3bac941d7837fd6f48958d265"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b70ad32b2530a88af5d051cd46657e91550999243d40baa60a388c583dea08bc05f5d52506b2fac917b37ca714084ac5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45098e8e22b3d76bc0d7c4ddc4f49553023cc472be9285be29455863d0ddd23f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3da31b3f27553350cf3acf3c55b95a94f9c1b9d88ef99004435caf5f21f1848496411f7b32713f7b9afd26eee9c8e551032e35c98b84d0274095ae4820208029"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.dev/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/eclipse-sisu/sisu-project/actions/workflows/build.yml?query=branch%3Amain"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.maven.apache.org/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-sisu/sisu-project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/sisu-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-sisu/sisu-project/tree/main/org.eclipse.sisu.inject"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.8",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5adf3bfc54fb3d2cd8e3a1f275084bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc19ecb3f7889b7860697215cae99c0f9b6f6b4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@4.2.3?classifier=no_aop&type=jar",
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "4.2.3",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c78a92ffee82adc2ed698ba0b8b29ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "e07180332a35a6c52762302fc415f27d258debd6"
        },
        {
          "alg" : "SHA-256",
          "content" : "5168f5e7383f978c1b4154ac777b78edd8ac214bb9f9afdb92921c8d156483d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "e819e09cc869f2641541ee47cb82e01565b89794bc4b2328853e6fb138d9da484ad423054c998723f1c475a2d7d0d9325f1f09c69ecdb4fcb8f8b2ea666d70f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b3a3950de637a14ab774605b5890b5169fb3b91f4823fa6fc08ce9fc31d7492bf959bd65b768164285e61e46f8de1da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c87f3800fa31e13c48f9c928a4cb082b13a2f1a77159a30f03bdfec7303af3aca4408d6801c0fc75c5dd6ec0b2c6c790"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3489e145db1eb15cfa0f101253dc9867301829c3cf20b689ab713a527ad0079c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "940989abf4b3b021cff24ea95d862f1acbce461441a6e5894fcb9a5b9d27746fb632b8ba4f2a0f3235db9def6da6287f3482ba02417635e5b1ce064e29a18d91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@4.2.3?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "27.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1a986c6fa05685f173ad9340b6ab6454"
        },
        {
          "alg" : "SHA-1",
          "content" : "e47b59c893079b87743cdcfb6f17ca95c08c592c"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a5aa70cc968a4d137e599ad37553e5cfeed2265e8c193476d7119036c536fe7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c32a58148c3b91577cd6d335d61a1994041a2a5c77a240303ba6e786c895336400f6fd449eab0802594bf47c17985c5587ab87c3c4b628bfc1d7090ddc0b006"
        },
        {
          "alg" : "SHA-384",
          "content" : "6502453d9c1a46ffd35d7ffd848f665cedd19a9a169c2835ac38482ca7d19826b4021ad3c10dee06512099fec04d7153"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e1c1d024464ba3797569ba45375b6f84f5d81a5d5970b7cb43529e565d2668d283ace61ad86e839703e0726dea5ccb74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3a4c9886f312974a9274575c7c8315bc9215736b437513297d06a85143ec2f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c90c478a94dbbaa16fcb11815c2c727feb33221773fe94914aab25f07744d24e060be6f90e52955c51b40d5f4bd09fed0ca531555d581c8acb2dd95c9a052c5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "2.5.2",
      "description" : "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04acc78b24bbd365423da357da003cf0"
        },
        {
          "alg" : "SHA-1",
          "content" : "cea74543d5904a30861a61b4643a5f2bb372efc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "64b02691c8b9d4e7700f8ee2e742dce7ea2c6e81e662b7522c9ee3bf568c040a"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb32e3893f9ebc956ef99066b219a8fc8049b47b80a7253cd89b7faadf0a2fa14d60b52dd5c2f4aaeb1db0359f49fec9e29d3616bd314ec8c82db1c657be8cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "62f90d15efb90c3691a577ca58c4b48209e294fda2cb9cf0873af5beb4f79dc4b33958474189d824853b768d2a19add9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "506dd2e0c27cd480f0cb8775a3d9ba486d299ab6385c3c8354b94552531a47ccd379c2e68a63889d80474c287df657ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "381f414c86b36e9e843565b70cff4aa5ed4aea5f265bacb330343e46015b5135"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b9bdbc3632eb85185408682e1107b886a374b21c77117d75cbecfb812b1c486daad89bd9461512c2b7bf853c82a4bd225d45846909934291dc75349ceb369e22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.2.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "416757b9e6ba0563368ab59e668b3225"
        },
        {
          "alg" : "SHA-1",
          "content" : "88e3c593e9b3586e1c6177f89267da6fc6986f0c"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ebd22ca1b9d8ec06d41de8d64e0596981d9607b42035f9ed374f9de271a481a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f5f13fac4c40d680a1f062c609aa598e7585684af37d695357738935fc0683ddcb94c880dddd03e78b1db071c2e5cebd054a061f8f24322c5ffa43aca34a859"
        },
        {
          "alg" : "SHA-384",
          "content" : "df58adbafe449fa2e5ed4dbd498ab7a80456f100430bcba2083e2362c0818449ccd63a64c6ee3703373eeeb4c6fa8da7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a65aa130a3dbe1d7042cd1d2352a443a14b87ed99392700bb3f59e7cb3083d7824afdbb3cf9ee1c9f2995231b371c17a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06741fae4020e4cb57c8f3277eb5c8e7d0b9caeefe337df2c1e3ca20c6fd9487"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52285027d66e6ae3189d3d308d4dde0dcdf203b9073873411dd284d9fcf1f2abe7ffe3168ff0814db4a672d4dacdd27150009b0f8e5bc2f48e0f663e4ecb5953"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.1",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49ae3204bb0bb9b2ac77062641f4a6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ed28ded51a8b1c6b112568def5f4b455e6809019"
        },
        {
          "alg" : "SHA-256",
          "content" : "2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar",
      "publisher" : "MojoHaus",
      "group" : "org.codehaus.mojo",
      "name" : "animal-sniffer-annotations",
      "version" : "1.17",
      "description" : "Animal Sniffer Parent POM.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ca108b790cf6ab5dbf5422cc79f0d89"
        },
        {
          "alg" : "SHA-1",
          "content" : "f97ce6decaea32b36101e37979f8b647f00681fb"
        },
        {
          "alg" : "SHA-256",
          "content" : "92654f493ecfec52082e76354f0ebf87648dc3d5cec2e3c3cdb947c016747a53"
        },
        {
          "alg" : "SHA-512",
          "content" : "94d0335cdf94aa547ad6c0c7e44b8e3bda736ce19d941dd0faa3a45390e5ab2d122022ff4e07bb9aaedd41ffbd9500f324e0a9e42f4c5441bce0774f44872f45"
        },
        {
          "alg" : "SHA-384",
          "content" : "58c3caa2ed13416384c519aa52b26c8b93cb43ca6921027c8ac9f321d77979a01634e42de4dd645edc687c266ac58748"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6dc341f4b80b80da2751d9284ca61852333863a36373aed33a59b80c3771d3113fe4ac550923a282b1c4d3bd616ad8e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022761cb42cb64b957756b985165ed9f7d3978c4670f770599aed938b100a46e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "730314b9682777eb64897e6033db857d9924bb749c473fe2111e03b9c1ed2788359c983a07b0e262552b3390104239ac1df42cffc3d0053b14955d1a36ee3244"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/mojohaus/animal-sniffer"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/mojohaus/animal-sniffer/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/mojohaus/animal-sniffer/animal-sniffer-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.6.3",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c7da2b5dfdb0b0ba67e1279a32f40054"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbf4e06dcdb0bb33d1546c080df5c8d92b535d30"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3904bcac30f11fb49e44f5cecaaebb2e9a7a5e4a9a55f20484fbb9fcc1bb66c"
        },
        {
          "alg" : "SHA-512",
          "content" : "dae78e5bedde2009c8a7fdf0b77c91b87b8c4c4cb5bc73f799107edd75597a3c90dc497abdfa43254e7dc31eb7707384254d91fb656c74bb5d86cd868e36209b"
        },
        {
          "alg" : "SHA-384",
          "content" : "a920fa55fd2df6cb39e61a341074feaf38ed5746d516d0281a7ec5dd53bfb34bb935d4ae2e7097fe557ddfff4e9d74ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "853c446d877ac42d49e4f8fc8e84d9d1e2df48afc49af067cc6f157517be929634b52e358d6fa1ff17e584ebc03f7f5f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d18bf0c53eac0bd969936fe50264f2e0bd066c01cac7a7930f47f150be119d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33715333b6957a22bac890951305b97b6572041a9c902b0d0a442112ddafc398b6d58b71eecd694212d1f5fe5a3ff7ce7fb56faf106812cfcc6ec6ecf4c7d9c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-settings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.6.3",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed6418ee483bd6215770362f68c133d5"
        },
        {
          "alg" : "SHA-1",
          "content" : "756d46810b8cc7b2b98585ccc787854cdfde7fd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba611bdc73b691a73b704443bcd7606f625f06cb79588968e101271acbfa0b15"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9f9f538a409d7cf2bd2517854f2d6aa45e0476865f217a11832f042ec361c67998241065540c3269d3db3915c903b15b6e4fb57af9623b192f9d8089110ecbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "17de0c4b32cb3a748e37e687e06003157f474c9f6ffff2d23b1e7a0844aed47202a4b39d305d3f484dd8d4efbcddea3a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b717ba2300f62de48be92ef8db5381861c7fc4f1d33c3d02cc144e0628eae01ed7c0f851277ace6d4e3d98a6431c75cf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "75dc9283cd3e53b7d3e3486e4c310cc08efe62083c011e6409b023156d1fde59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0b194fd91864af46cd2ba71eb020401fe2b253ac74337e8a0211fa83b53317ba9ef565d4d04e4b5a09bc8983614a43c6f00aa92ec6e7d32a696fe524b3e87c02"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.6.3/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.6.3/maven-settings-builder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.25",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "86cc99a26f3b3caa0fc2c8c77f4c03b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b37b3335e6a97e11e690bbdc22ade1a5deb74d6"
        },
        {
          "alg" : "SHA-256",
          "content" : "e003802501574637f7abdc4e83e6d509a31e9ff825d12da6d1e419acf9688705"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb647c1f159d17e16ae925bb407585e4a4b30c468518e60d3069ea4a75fa0f7122e789923534632125b22b7cef1cb44caf00700bba90282360f7c76e086b6699"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd22e786470775e38c3d2a3fee6fe9d7115199e66052ba0eb8c83d5abe04b74ea108ea413c749329a33ff01013205ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7678d59689e8f479b259c06a52262a1deec374549e556dd3a4639ebb43d7a9ebb08505c357a7b9fdfdb8b31883c8a72c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "815c0f95994eb8c9e7552ee389a3928da5661d472bbc2d567a85ae951ded2c32"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e98ae04f2d4bf87eb5576af3582084e5cb4236ac91537c6ad22d174a9018dfc3e85f56c371352ded371201458f0a3cda26431b8aecae8b8bddcbcb26179c0d43"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.25/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a46e5bc9bc2fbd3b68091066aff2737"
        },
        {
          "alg" : "SHA-1",
          "content" : "43fde524e9b94c883727a9fddb8669181b890ea7"
        },
        {
          "alg" : "SHA-256",
          "content" : "da73e32b58132e64daf12269fd9d011c0b303f234840f179908725a632b6b57c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b947edcb05a1c17648ec9fe53dd2c66b4a86dd2b950d989255f6edd636fd5d50d18b8f31b3a1736dadd9cff6790a3d0355f2ed896c3eb7f72e009199fe9957d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d6e72c364a12016aaa2ad1ae7dda8a83af32f47576696eff4fe1d3d7a8142f182beb71d65f9ca668ff38b470d40dd3f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "76b890cebb7ddc14dae8854178b79b064d984df35cc65354ecbf97fa869d83c4d6e9093cbf317d1575855a638fc3ba56"
        },
        {
          "alg" : "SHA3-256",
          "content" : "64a7cf888dbe8bb7d89cfed8089b1db4f63f88526f39d2463b23caa93a609158"
        },
        {
          "alg" : "SHA3-512",
          "content" : "194de7b0bdd4954ebae7982b8d91365864abfb86f16188880393089fa26122e9bc872c3181c4324b933b9faee90b7149140b97e72c552577e6c3447b06601f06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f27b64dcb2dcc7b16eb24487c67363a2977d4d695b97ebea829b7301c444e07cbf8a8b0471332c81b3d3ee393388834"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef83ecf09c7bda0c412b6acdf558171f4f5f1065a68359916ecffcbea8e3475d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a8b406ab9d63cb3af63e56a09bbde88e404041a1b70c68487c1c0009c24d042cea9ee2325ad99c0aee845ec61ff17a69ae14843f08de2f5af90cd5bb617e34c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-api",
      "version" : "2.2.1",
      "description" : "The SCM API provides mechanisms to manage all SCM tools.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1ef6b239f79a41c52e4eb871ddaa3c13"
        },
        {
          "alg" : "SHA-1",
          "content" : "451345bd695fa717ec2ceb177d3543153cd3d77d"
        },
        {
          "alg" : "SHA-256",
          "content" : "d843c0611a21191e4a34804152c8bd9ec364f41e076713df8db99f6df7f386d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "108ad02e13b7570320cc51253bde65dd59149c97b47b91a0184098e06ee9ecb666dcb109c96cd82331c4cbeb41bbfb56742f9aeedb4f461238dd7a528fa4fc38"
        },
        {
          "alg" : "SHA-384",
          "content" : "151a0d2e2d4a7b227be830e3b363e0707cc8f7168b4030619b0f7c47f0e28c0e0ac6c0ae6073b93caef6a1821436bbfe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "11128722564f47949f6a5bb2c865cda739eb0d011647cf0517c2a1dc58ae6cdea59725828c8a6bbaa8416c19ea7a0239"
        },
        {
          "alg" : "SHA3-256",
          "content" : "565c000a5886356fa98e7d640c72a63879ef77627d59b020e4935c4cb6b106e7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "032991413ec048823a319a341d656d82ac1ee4fbef032ed3c88d3149eb9c1650f681e731b8f307a63782dc1ae40a33d2d1ffeb3ac22a729567784559eadc7a33"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-manager-plexus",
      "version" : "2.2.1",
      "description" : "SCM Plexus component.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5d24b61aa2a5560f49af8b5770418b55"
        },
        {
          "alg" : "SHA-1",
          "content" : "ada4c73749482351ffac8f175ce20aeadda8397a"
        },
        {
          "alg" : "SHA-256",
          "content" : "88bce530f81b43a8b4c430214db54b045ad460965a80fcbd4ab11501836ecde0"
        },
        {
          "alg" : "SHA-512",
          "content" : "08b440a3348a03a818fc1b3ccd154ea7c3b10112b863dc9098cac24a58a388f63dbd5e6069672ecddff774c714b3d934e6047030ff7b088620e8a8cc976773dd"
        },
        {
          "alg" : "SHA-384",
          "content" : "713223ded513defd8fdad0b82f1ef142998c18e47e33153d17aacd1e3178a1e595b8f2a840866f67b1161d9f87cc0b11"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2ef84cc77bf5d5b2e333edc0b14a69e7b050ae5006b3bde228f9763c280b66a11b73bf88aaf2f68151634397694887ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1806c31c91ca9a35c8c0269ffe689dc0d7a6036dae8c396d61e175de058bdecc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "05af617825fda0ee81a1812c032d1d003082b5685b1cac820887f392637df3adae3cb45cd1016a8dd3605dcb3b20b8d2b5cded5dd31557524d3e1cddc7b4706d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-managers/maven-scm-manager-plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-managers/maven-scm-manager-plexus"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-providers-standard",
      "version" : "2.2.1",
      "description" : "Parent for all SCM providers supported.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "240a9a618a1de1f9ae8da4a8c3b3d3bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "a08ce7480ea74dbdd26a5207889ef2cc51e549aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "13d23e1a0d59e8504efd69477f4623ed1581f8cae70e222e04693f2f5827952d"
        },
        {
          "alg" : "SHA-512",
          "content" : "933d56803e3bb427f7fdf1438f308dbee50d1e0e4cc86b286b0a4f31ee94b3a341d41cd21c1210fb52f484dbf7d02f75d11802c87d087ff3523f46a6fb407ca8"
        },
        {
          "alg" : "SHA-384",
          "content" : "82bbefd1f433251267beabda714f2f2aeee05709400f8587c43dc243733a2914349f7b60b3c60143da4848e9bfcb8f76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b19f7971a67ad4de8b0426e68c429d380ae3b93cbef7fbc74dd759e080ac101d97237847e11bf06a412c85d3f49af7fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b1c06de1835126f74568ccd602cb72c2509859f15d063ae7164bc34fe96bf3a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2ed96c75b14412ddcfb8977718dade8b35cf40b9e02b693f7276825a0a6ec171dc1a255dc5de83f57163527a682c0531754607d8a545b2185eedddb6f52763b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-standard/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-standard"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-gitexe",
      "version" : "2.2.1",
      "description" : "SCM Git Provider relying on the Git CLI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2d9bd2231cb02449f93274809d98754"
        },
        {
          "alg" : "SHA-1",
          "content" : "fcf03560d007dc1c4c9da27ee481933bae7ed274"
        },
        {
          "alg" : "SHA-256",
          "content" : "e39b2dbc6e7c2c678648aeee3e7698c0f67678b938d05bf9b14c7826a5458adb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b71da2528c634b32b469bd7e1d9d309dae7cb327f7f3eb45961580ccc87d7649bcd49c14120f30dcbcecab9c38e4fccc21054b3ea344d90a858a9e3872e5442c"
        },
        {
          "alg" : "SHA-384",
          "content" : "439153ba7fe95107601a7506fc0e51bfad4ec0a2c285c8efdc33ad113a426aa46bec9260cbdae876a601eb9b96eaac4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ceecff401dd771577ad11a2fdbc4014bdb135188b86feb5dfb9d8ceb0223ee8fb42c5bc7fc7a9ced21be6b2a482a28e7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "718b81e595554fb0d801fad89dcc70da8152dd800cf6b3186fce9462c5e3330c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "461ab5ad2f35570484265fa1d197b7f5226b78700cfa5ea0d93fa2b38470ae9b2d57e6afb59f4b190809c69e546a6ca3a84666709a086687c92f94cd1d016dbd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-gitexe"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.14.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for processing and manipulating text in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "54960a12a82d52df3d5548d6934d87b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "adcb0d4c67eabc79682604b47eb852aaff21138a"
        },
        {
          "alg" : "SHA-256",
          "content" : "121fce2282910c8f0c3ba793a5436b31beb710423cbe2d574a3fb7a73c508e92"
        },
        {
          "alg" : "SHA-512",
          "content" : "4975879372241025bd0a47fe540ed7d0cd3e5eba474b12af67a8c6016be0fbb4f4a3a4a0064f4d2b6aebce67d88ee814da345a5ba3a6ee4f6293b3b4e7bbd065"
        },
        {
          "alg" : "SHA-384",
          "content" : "a038f1a8b58bb7ec17ba55238d3e40f5d9386dfb17870630a728b22741a9592819374e9abbbc6402a439eea4db5b739a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5325922bb72aa73d2d51cb3fb5592fc77097614fd3ab3ac77e3acdc0fe1dc8c18893cdd9a05768bb725fa40dd8c14527"
        },
        {
          "alg" : "SHA3-256",
          "content" : "31008266592ec8503bcc7f6b4e7125b0e377f57f3a697cdcb02ee7f20f84ddf1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "385249425d8c6ab181039195a03c6337f393a1e1419527e9f072d695367bc0bd6546e752d1912df557bd8788329f7609aa1c63ce42eb135e2d27b6141ce9280f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-text/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-jgit",
      "version" : "2.2.1",
      "description" : "JGIT implementation for SCM Git Provider. see http://eclipse.org/jgit/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e97c61467207996d7f472cca4600d223"
        },
        {
          "alg" : "SHA-1",
          "content" : "7bcf1817d07349affbfbc3434fb17dfd336a229c"
        },
        {
          "alg" : "SHA-256",
          "content" : "390d3d0a0ec09cd5d9ce4260351bd23b54e36b24770332ab67621fb51ee30172"
        },
        {
          "alg" : "SHA-512",
          "content" : "101849d1e83038a936aa16bbc95f12ab49ef773cfa6a9b3ae265c03200c3d22599d5bbc2b39d9f8da9bd5777661f4fd60719255d6cbe0ac49ae8e9134731f48d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d81ee949231c397aa81666d94cd081c599b5470849fd40ca1814d4e18f59868264a3e3e544c63d167dc104aea2c07df3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7dec765c9166fd9844175b977ebb210f46adf8d9160e882037ebe7bf5f1ae57f63cf6261c984574d9cadb3a3ff98a01"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6aed05bbc3265e57e5d20f04e1fb8cf58d59d4ae621abef24aa203b1970d3a7b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4930cf2b2095c0ac5ef9dd5b2bfc251465ed00c56c2d1bbeb274bb78c509271cb78985797ca017f492f78a85210be972e3901d74d461e0456acc77214193df6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-jgit/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-jgit"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interactivity-api",
      "version" : "1.4",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "786445feb10c620690d33af22773e556"
        },
        {
          "alg" : "SHA-1",
          "content" : "089039c8d54a2dc00524274d98fb5183818099f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d82c3b8afb0ac42d0087adbb6d9aa77e7253beb6e8b31f9159a3fcd74d5ee3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "fad1a170fcb18b64f97d440c8345d2742bf6ab701569b7ebf6e458881ec0394dc4184a0b0b0a91c7e9a1d1411e3930f05c752cad4c8e360c3bdc5ab3cb3999b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e82330ea4274db5c4fcf05061125a6607ae4f64ec4f337fd375a125f858f8d8d825dc0071e7119c59ec4fb5be792282"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3480fdfbe7d5be1b41a650b0937497ec81fdd761977bae8fcaf599366bf8420332c8c007d3892063fc41256399a078c7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "277a828919fb4bcc599dc036291c44e8b9a9c046b5d13935d605a62634a4a323"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5042b72f37eeadf8e2da49ebafdf9d4c0dbe7a3f7fe50a71b352f0b57afef895b97e630db6de13b536351922469ba8b81672777b7e79a68bbe11e91e76d7bab1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interactivity/plexus-interactivity-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interactivity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-interactivity/plexus-interactivity-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar",
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "5.13.3.202401111512-r",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37a213f59c76b11db423c37a1bfe084f"
        },
        {
          "alg" : "SHA-1",
          "content" : "7949cce60ba913f99259a0f421ab5ebf6c2524b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "dacb74c28b089bc378f8c2a1dcda5110c20f52124f5a020aef2684d70ef7f1bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "d027115ae98f41ba48f7c50af80e8f993642284aed61a8d66367203b0360a24b9622211eb974eca6b8ef30282bc09704380bfe6155ab38556dea7b9006bd32b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "16881231a96dc4267049d22173e096fe0eda459f2db9693509cf15617f1013c8ab13ac0749f7e2a6813af92ff64781eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ab12d1cef1eb89bf7a3d38d4c6743f65a522c3dc0c4b05104b3fcfad096b5672f70df60bf2f2c5a36726afff05a9b216"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f5e539444eba6a6e5c56b927cb6631963b437019935c1a87f6fdcc566c5f7fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "353355d7a6c4922a4ccc2023826334318e9b696b63641d189e9fbc03eb25c11632be44ea1cc7fc81eb7c3ec8a464a3debbf91dfff1c9a91db6b71e34edd8b205"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar",
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.1.13",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a1eb305e5cc5bba238d4360e3139abb4"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cd724a42dc73f99ca08453d11a4bb83e0034c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c0fda2b1d317750d7ea324e36c70b2bc48310c0aaae67b98df0915d696d7111"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a3821a07eebc9b56f87054c71b9bafa0d9d0b556aa16191f8676d748cec755a741cd5500e8676493ffca69e6c9608caf86d80b60b5934ee108d77030c490194"
        },
        {
          "alg" : "SHA-384",
          "content" : "5eae5ef0a6fbc29244cfd4c758834371266b2c1a767de6d65e6e5a7f458e8ae41dd92f74232b267591eba367d05a1cda"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5c9ef6d1620a72506f5adc77cea0c6a4dc8e03fb7753cea90bfe5d6c9e12396c1bfa394721e45a398ce578ae2f7f67bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66d5629a6ab04f994475137e9677dae9fbb77f9249ca781204987357e15d6c34"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb6b876b3cb354679d1a6cc1af912388a56ef99834bc1381c32c92f330d36a4a429882b323a29f31945101ad45bfd7a4d28c0a3574a79e1396238ecb29a71a04"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar",
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit.ssh.apache",
      "version" : "5.13.3.202401111512-r",
      "description" : "SSH support for JGit based on Apache MINA sshd",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ef2fb9de8764177dbd5169682b765fc"
        },
        {
          "alg" : "SHA-1",
          "content" : "c7603dae536aa086cccbac433d953b83154b7427"
        },
        {
          "alg" : "SHA-256",
          "content" : "b89de5f791712efb07cf22be871de65b22645be5296233b6cadbcc6f2cd8eb4d"
        },
        {
          "alg" : "SHA-512",
          "content" : "610e7159eb1d1b005d0075cdce0946e95a2ea28b43b8ec372cbb15385378ae2199b0cae4baa34cd42555b8c34e6148f1f4d1823a32699bd203d22e3ce2d4359a"
        },
        {
          "alg" : "SHA-384",
          "content" : "a5aeed2563be457a3eb0223f9eaa51e345386ae0de407f131727a2c4d392e5b93fdc4c46d658fddd998dd49f5723e4d4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75563281e55ec16e824ed81a9029370d2e93ed91a0ed509ac4d76dfbe33b0428c30c878890e67bd7bcf5c5b2aafa3dd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "019fd874108faf4074a12ccf314824263dd044409312ed53b2676abe84abcafc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8379baa0060fababfc9ceb02a9a847c7f795086c1598c17ca37014795a6be202e4b94d63b1708f21bb37d8ff1c897de9eb942809cfe551fea4e8a06d46c3f7b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit.ssh.apache"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit.ssh.apache"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-osgi",
      "version" : "2.7.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19b45a04d902be3e1a8ab0692ad0d7ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "a101aad0f79ad424498098f7e91c39d3d92177c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "17195d9df825d8c04286df1e2184f1e830bd8e9b5b7f788cb567eb3de65275d5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c94bf65a74fc7f44735b3c7dad9a9cd5cc906174b19615bb16b6d325cea6e3584502ea9a4813f7153dcda4a9ddf0822700c9ac73e056ca2b5dc65db4c0610ad0"
        },
        {
          "alg" : "SHA-384",
          "content" : "41c7da9620807e0d40ce769110164631c53ae0485652b1c26d457e9a52f224bc7eb52a67598f720f20a250c093381d12"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72be4d6e2b44eb153788c100297cddf4b1cace4ce65956f3fa1eb83a2788b0825ea23fa6f13bd59cb7002646d78b7078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a2f6fa7178f2d9f2b981c73bae382c9df32c3963fdea30b29ba081568e238f05"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e37434910175c1127593897e96b77eddbd55168c18370b2637c61110b7cad2b5c767743936b1e59b6361aafbff3bcf072c705e1da2ebabbfb81aeb3ef6e64b57"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-osgi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-osgi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-sftp",
      "version" : "2.7.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c941a20eeb43c2ae7dda61de46e75bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c9eff7145e20b338c1dd6aca36ba93ed7c0147c"
        },
        {
          "alg" : "SHA-256",
          "content" : "90692aaedbc6a1d7f5e61a03d811dd0cc6058b424a86e82d96843e2f5287b70c"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b4a459f924c74a317e35551922e65b176b79eea200eadd2e6ad7b03177389b7520d58b6ab047f6a46534aefa3245548e4934781f2a2eeecd2b6b8a00cc2f487"
        },
        {
          "alg" : "SHA-384",
          "content" : "973cc73f8ad9e68a3bf03d27a27939cb9cd3a537397234c78b496a0ccfa463cbae71c51255b1f295273be785ca6f1df7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc61b1ad6fcc822c8e22f961c838f858b9d21ea748d2c870bc6f7b0d229bf17148ca1063567eb1d586a98f7b80b6ac3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2bdf8f342480beda72a14122f2961800eea7783ed8c6efb98a07dfd17b8c8c4d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bef076eb0adf64dedd7ceefd25966f2d15fe38a5b318c3a0bb27491e4b53eae9639a2689784d4817a59bb22bf71ccfe340d7028e6f2eeff7cebd2c2275e14393"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-sftp/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SSHD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.7.0/sshd-sftp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "group" : "net.i2p.crypto",
      "name" : "eddsa",
      "version" : "0.3.0",
      "description" : "Implementation of EdDSA in Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ee7de3b6f19de76a06e465efc978f669"
        },
        {
          "alg" : "SHA-1",
          "content" : "1901c8d4d8bffb7d79027686cfb91e704217c3e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4dda1120db856640dbec04140ed23242215a075fe127bdefa0dcfa29fb31267d"
        },
        {
          "alg" : "SHA-512",
          "content" : "637e75ef4b58b280af057546afc176dbf3becf2b69f7dd31a716a90e01c01d7b1bcd400b29efeeea6b34df9ade7922c0665a000a3a2db5a446df293f8d1429cc"
        },
        {
          "alg" : "SHA-384",
          "content" : "e13f22b10a675c9a4180ac051c7e07b839e2131188837071e8760162377c649d7c56e64e279f5ff990547495535b4632"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fa7f056ced9efd6cd90b124ef97a63007d9fe68ffd954c9bbdc15229af958807122460a79aa46f1bcbfff0036afc71d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "852e263100c291206a8a2afa9a2d9e6f486d3ef40a7fe3b1c3d58e5a8a2c8b60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a8c062bec2abdbf97028611b5001b392a433183c1467383e61deab3bf4481f3766c3c7290cdca8bd02a007d7dcd8f2ace99a6c07eb3f74aac48ecd139ba3884"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/str4d/ed25519-java"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/str4d/ed25519-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.36",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8065610cde33ed9fd5d34367912c1938"
        },
        {
          "alg" : "SHA-1",
          "content" : "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148"
        },
        {
          "alg" : "SHA-384",
          "content" : "618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-hg",
      "version" : "2.2.1",
      "description" : "SCM Provider implementation for Mercurial Hg (https://www.mercurial-scm.org/) relying on the HG CLI.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae4787ac558b25630d5b57e2cfd092af"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf642740e9c2aaf86a7b035af291720840316c84"
        },
        {
          "alg" : "SHA-256",
          "content" : "24662a4829426557b361b4582d268e13a791cefb637c7d18b62a4cda64e8cad1"
        },
        {
          "alg" : "SHA-512",
          "content" : "6384c395f36505864ea2f00317491f33871bf0648c36e6006c3618b8debd19525727d06eecd14908c48bb124f21066190c7f57b47b95111a65431a52266b95f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "319b9c918fa16bebdd5cf4e13bcb88f922cc39d570df732c329980d2428983f247f4161efeaf0bf6e6d48cc1bef5bd80"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87db4843bea3fc65ddc60a863deb55a15dc5109307cebea33bc5ebb6b3fb370331830f1ef693d3a4d023386ff3de9e96"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf2cec8bd02a86a046586c32f918a28c60d2e56a8db89936abd5fed65e7331f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1500c150356070b326806b6923976e49616ebade4d4a68131b6e09b94075fac31ef36b578814a5d7b71236171097a7e1d28c1e51e727c787a6900298b7288a52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-provider-hg/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-provider-hg"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-svnexe",
      "version" : "2.2.1",
      "description" : "SCM SVN Provider relying on the SVN CLI",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e7eeff1bea19182a5b178a554658f63"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1ab17116835a54e90cd47aa49d883ff64ffcd60"
        },
        {
          "alg" : "SHA-256",
          "content" : "f114c01dc69290698dd5df00202436e266b465ac183381c98ac8984d8c95e36e"
        },
        {
          "alg" : "SHA-512",
          "content" : "8238dcb0a1c5723321ab24f88b4b2b5794fe1d3e2c3f00d5ca7367bf9c3a593ed63d8a97cb9ce43dcee645bd6450b925d944cd5cb9120ef53222b53e1827435a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c96d6943a50911c174fe37e2f47f0e18bd1bad170807490be8db5eb6a227c23e378f9092fa96878510408130b54d33d4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "157d831b447c60f35169b881b29c34085a1fb8992eedcf3bcb1bde56fa1691b743a47f75cf971b11a9099f21c5537c9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d24169c670e9789420a6feeeb532f0d5af92947626b57cc9f4cb172efd3ac124"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1878fa85b7710b8a051b8d72fc05ba59d8a947959a4178c5fc9e9bdc935de81e24fc6ec2170fc57c49ed755456d1722d7f5ce4714bd51b1cf32207c84c445f65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svnexe"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-local",
      "version" : "2.2.1",
      "description" : "SCM Provider implementation for Local.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "322c50df8c01b4ab885bfa13f877e710"
        },
        {
          "alg" : "SHA-1",
          "content" : "e031570549cc2da128c27979e4439aa2ca03353c"
        },
        {
          "alg" : "SHA-256",
          "content" : "c227a538bb4468a39926c018c5977d7b7f315ceb52e77cc134b6a3a361434026"
        },
        {
          "alg" : "SHA-512",
          "content" : "46414fc437b950a729708b7b9ad138309bec30db3a1d4574825bec699903b91d4e1d5e7e1721703dc6864ddb3ac0952c8170e45c1683118e128cdeff7f155574"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef036f085adcc8b71c3b55791119097e3fa65ec7b39c59225bd3e204e0d43786b64cc7be4cbdd3a78642978af3f992c9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "19979672e84cb932a72987dbe5c3ed44a8a741b665e31ab8146facea268dde01c796884bdaad193786354675632e8e43"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d99edab4474c09a9c66bd31b32595caf10f43064c69c9e958979ca70d4733f97"
        },
        {
          "alg" : "SHA3-512",
          "content" : "587b2d941d93b92e3793afcf8391c9d152be87ac48562373fb5df0d51ce63387239eff208b630a221e4bf0313631cf82c1f96f33c36a6b2fa383ac5125f72bd2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-provider-local/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-provider-local"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-svn-commons",
      "version" : "2.2.1",
      "description" : "Common library for SCM SVN Provider. Includes the svn-settings.xml configuration model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94cc83c00ae367dcccafde0f3b287d1e"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6275a6684708b6dab6ad30e43bba19ef7eaad6a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bd9f983b8e5a0ee0e14ce21e256b379c0f470da48efd1339c64aa914264be5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa1ebfec2bab2219f960c78cb3d0625c453983271aac6da7b6b28405e622d28142f9df1f240fa134d7822421ecbec7e7da0d121904c0440e222adfd1d4ddcea5"
        },
        {
          "alg" : "SHA-384",
          "content" : "53fa218cdefea53601c3f4563c2fdc6ac67c236a910c61b5ab0bd0e552429c74588b1010880c99e0757f612f0c23faea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d580c4a8fbe559b21177446c7e35d714087e2e7336c6cec031f145f0ee9f5119457ca9b4b49e1930862b595bd912ef12"
        },
        {
          "alg" : "SHA3-256",
          "content" : "488dc8d4bb2075c68591cb875d9144b735d8fb0677403d81b448e020d05c22a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "69ec49364f7af0bfbef09927344e5a51b5dfa747bd81e8e98e99a1079f99727101b7964519dfba7fbce36ce5baa6cb66ca5064b3e5aa345f288cdacff6b41aab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-svn/maven-scm-provider-svn-commons"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.2",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cfdd73e436702d319d551a44fcea500"
        },
        {
          "alg" : "SHA-1",
          "content" : "9526a9548b302572f23337fcc217fb4cc713b9c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8957274e75fe2c278b1428dd16a0daeee1dd38152cb6eff816177ac28fccb697"
        },
        {
          "alg" : "SHA-512",
          "content" : "a99751d7990df50fd1adc10634c4e14f5deddff8fc1b7c6d26a5c7fc517d3f0e3a8d39435c512c507a0737fc9c3ee67a8f121f9e2aa8b9bfe14d9f01a99a3aa6"
        },
        {
          "alg" : "SHA-384",
          "content" : "52a12d800c5aa70fa149d4628fd6a485e3324dbfbbd6a2f24e120176ee8c48e13a4d321f76d64ff86684c2523409a62a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "beaf7889c9facf6649bcce19dcc4356db98de628f5d597cb101793ca454ab81d5a436f9652a957c9d1573e9149a0fe49"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26369ecaf957f19dc5992708c56ed3816129c40531505eb4bc702755a2fd4b49"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f51af4b8d2e097716129f84b69e95947b08cf3c8617b0c6997f55ea3d02f0481284943e474d2935d590ec57975b1edce2774d5006734acc1ca1af567372bdf25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/file-management@3.2.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "file-management",
      "version" : "3.2.0",
      "description" : "API to collect files from a given directory using several include/exclude rules.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a8a607661cc2116ff7c873693423b254"
        },
        {
          "alg" : "SHA-1",
          "content" : "73e1c849daa0502e59a107ed4c22e35f139f254f"
        },
        {
          "alg" : "SHA-256",
          "content" : "32ac469785dd1547ac71437e4c3916c4a56a3d69303cb08d789ecdd0bfd1d6de"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d4e454a1259b9a8a2cc16da00b1559929a21429b46748f48d51ba7026cdcc68d974ba9d1b64ed277914ed0a13b4121e27a582856aceef81874876cdeb065c82"
        },
        {
          "alg" : "SHA-384",
          "content" : "160fc2de45dd1aaefa1fcacf97f16d0bc998e5b8a0ad89c401a17bc00e7be694c425ec031a4b8a87e628b89ce19bc426"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07d73fc0bffface3bfffecdc9059eb428002713541826ae405b417af7f41a80986ad3303a74a9a02f36db0bf193c9b0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "09ef742365eb5f63366e603d48dae7d6f7a12719a367a85b405980ea7fae72a9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de350937eee42601c820015c9722d4fb391a67fdc5fcc06f6dd20c6fe0331cbbbaac7d134471fc848bf25ca9d83502317190a0afec565e6351c7d978a748cdb5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/file-management@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/file-management/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-file-management/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-file-management/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-file-management/tree/v3.2.0"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.20.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94e7e6b9b5fe82388687b584d3571081"
        },
        {
          "alg" : "SHA-1",
          "content" : "36f3474daec2849c149e877614e7f979b2082cd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "df90bba0fe3cb586b7f164e78fe8f8f4da3f2dd5c27fa645f888100ccc25dd72"
        },
        {
          "alg" : "SHA-512",
          "content" : "fea08e150473673b0608eaee3ae1cb4e73834039db80d3b758710d6baf3a5840a0878a4eb64739ae9bb21ccc7148c8520fe873616a3f6d5cdb4305deabdd015c"
        },
        {
          "alg" : "SHA-384",
          "content" : "22db5e18e3512ed44474e75a124a052d5a1a6f35ce458f6a201a5ccc9510c57c10c117dba80ac6ce91745cf2b51e63f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a70700d24df3c276ff387c359e0e940b834e413b72a49917de9a82615836eca8cca1bee1ed71790606c795da795e9151"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8d044d3a4a069d0f20d24112b6427a3a6f02a925b31b932721d1f545ff32cec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3417bf811d7e5fc1e71b8540f3379751434ea8540c421ff2c8bb5f5ce34401cd0ad8a829b65aa55e055c57141181762c4827099352c2bba453e48ad2df67526a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-io/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.15.1",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0723da1364961f527fbfce10c8b9c7dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca287d08819d5d87f3a06b8f065a79eb33c3ecc3"
        },
        {
          "alg" : "SHA-256",
          "content" : "b58bcb3a1f362f6e1efa2772064026bb3d4ad92e6f43a1812d8d2886489912f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c02b9fc1d3892a83bae6aa12d929b2dd49b401f3b39784e0a6ce4b9eef14e5a8b3bf7a9112a8589863c780662c18b8da9efdd01862a12d1c5e02a7b25e9a7242"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca1bbef5ee6d2b0a7d75b2fcd4432cf633daf9e347962da5373e67324faad36130bea043e6138f699ef2d1fe226dec35"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3627450180431dc53d77d9a33254e911681332fc60f6c37f9947010a80722c4fdc6c4e64a187a100a71233cc7478db9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "425c68faacc75830233a9f74190fed3975ecb390d23dd3eb39c7654dd75a5aa7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "742d7cb5f2eb07e638491fdd3ccd4aeb40d1208693e411196c54b5ebd9566e4b24a6156e34ce669c59f846ca2eca87ac9565062380e469d0f0dc6229e85d8bed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.15.1/maven-plugin-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.scm",
      "name" : "maven-scm-provider-git-commons",
      "version" : "2.2.1",
      "description" : "Common library for SCM Git Provider.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27481c012ba069b900c3c8e7f2b4a79c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ecffb44a1ef2fedea19ea361a676364046679a69"
        },
        {
          "alg" : "SHA-256",
          "content" : "2002d91bf483d6ec6686c12f12a1cdcc21330d3547aa8cc15ed7e9eee543ae10"
        },
        {
          "alg" : "SHA-512",
          "content" : "6ebcc8332f9bd69247efd090b9be788af38b7575747497c203aafbeb011d5479cf5c2e8d2601f62a2f21a237adb9b245c8dbf7b555a21c0367ca3b0b7e3fb9e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "91dc9bf1e4f3e833b28a64215f31205dfe8f062f329b361146ae2e168e4d21de008f686f1206ee9a6096bcbb0391bb1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38196d31636b38703b30de0447252df9478f6432f2020186060f6b25c64c0d6f1a4d2e6588d739750fc9a66f15800449"
        },
        {
          "alg" : "SHA3-256",
          "content" : "935db93fd8f57dd706eff835847d2f4daeb8c9b60a5bc26b8d7446c46c59a130"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1e7a824b299124844d9dc4b8ccc609d932de60c51cf8f4e20f91a1549ff4d22ad79ab42bb75898468a3218fc295cf618668908c739f748cc73f5fd9e44a7744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/scm/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-scm/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/maven-scm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-scm/tree/maven-scm-2.2.1/maven-scm-providers/maven-scm-providers-git/maven-scm-provider-git-commons"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-core@2.16.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-core",
      "version" : "2.16.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5eea0f04dae19f5a4b52cf5a71e0a42"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ad37ec93f2296821a60279a3acdb918129329ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9b212696f2169dbc315a96fa2ab244b0cc49f2b7347d9c82c96b362db6a83af"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a639a4fe5ddfb282b952c1b3bc2f09738cb3e3fcfab5bb483c073f3fd9d176356c2d02e3ab558d178c77103b32d199b110e274215fe3166566e17e056600a3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b800189de779c3559d8867efe9995f6b82ad44ef41ea2b3f74f8b425ca051f0c967b41b9dfbac91527af4630178a1b4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75778d231ec2f9335ecd3b00607a7d33489b37ecfd7aeef7a3c2ff4489d70012e3b1622729c207cd6c56a2c3d4093e25"
        },
        {
          "alg" : "SHA3-256",
          "content" : "be293088ee217633422b45202510ad63bbb8eefb63ca283439683a46a8014288"
        },
        {
          "alg" : "SHA3-512",
          "content" : "576b627b7f3be6317a64ac4747b64bd1576bca61757d072a38f58c31e6e7fd26b89ce398ae58ebf982168bdf8723852db65f375da4f4884a23118b482753276a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-core@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-core/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/mina-sshd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.16.0/sshd-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sshd/sshd-common@2.16.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sshd",
      "name" : "sshd-common",
      "version" : "2.16.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fe767ff1b17750a53d084b7dbec655cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "964e47b6a067a79cc21f394020950011d4058576"
        },
        {
          "alg" : "SHA-256",
          "content" : "81724582d58902addbf909f19945cd3b25579e7fd24ba0e4d9ada975cd82da85"
        },
        {
          "alg" : "SHA-512",
          "content" : "89eb12b2d72ebe0e5c1233e8468671473ed8b07023c57ef91dd7853f8fef10f2c86ad1776520769d120b08a57c0b0c9cb5854773a4d9faaf557caec5c13a5ab3"
        },
        {
          "alg" : "SHA-384",
          "content" : "71082e38f3602a1d17a8e4a17c48782cec886f2398299813bc01a9fb540aef34a170be03ea8f0cb146fc7ab4487a3595"
        },
        {
          "alg" : "SHA3-384",
          "content" : "981e9a88f32c0a231b30680400acfcfaede34864ee8560453ed3b50a9d00497a6a17b7f5658e1337b98509770114ccc1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a7d0f3917139e7f09eb0ce8d243b03841a3fcef94b995cbf67e0cffc95679cf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2ba880f06c623490b037f3f2c861020725337796c51c718990d56706fa9ea24fb66110824a988941dc54587268102f6bd3ba67825504ae63725c08095dafa184"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sshd/sshd-common@2.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/sshd/sshd-common/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/mina-sshd/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/mina-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina-sshd/tree/sshd-2.16.0/sshd-common"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-scm-plugin@2.2.1?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.maven.shared/file-management@3.2.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar",
        "pkg:maven/com.google.inject/guice@4.2.3?classifier=no_aop&type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.9.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.6.3?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.6.3?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.6.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.6.3?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.4.1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.4.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@4.2.3?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@27.1-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@27.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
        "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-manager-plexus@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-providers-standard@2.2.1?type=pom",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-gitexe@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-jgit@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-git-commons@2.2.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interactivity-api@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.1.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit.ssh.apache@5.13.3.202401111512-r?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@5.13.3.202401111512-r?type=jar",
        "pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar",
        "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar",
        "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-osgi@2.7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-sftp@2.7.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.sshd/sshd-core@2.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-core@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.sshd/sshd-common@2.16.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sshd/sshd-common@2.16.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.i2p.crypto/eddsa@0.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-hg@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svnexe@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-svn-commons@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.scm/maven-scm-provider-local@2.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.apache.maven.scm/maven-scm-api@2.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/file-management@3.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.15.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}