{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-maven-plugin",
      "version" : "1.11.2",
      "description" : "Maven plugin for Avro IDL and Specific API Compilers",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org/avro-maven-plugin"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/lang/avro-parent/avro-maven-plugin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.3.9",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26ca8120bcd92b50cd3eeaf72857f10b"
        },
        {
          "alg" : "SHA-1",
          "content" : "47154012330ea639849c618ebc11cff6870e570a"
        },
        {
          "alg" : "SHA-256",
          "content" : "070d55ec5a6f3e4a785564283a9704bb39a93f1a2f89cdf60a3b899fde563bf9"
        },
        {
          "alg" : "SHA-512",
          "content" : "ceadc6c74a108490ce48c0887395a4bd55f91a53e7e26dc0873f78aea41c2ab8003fd4dbdd4942d5c2fcf3c5ece28bf58492287ff3ea9055087e2e4ce3cc86ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "272119fbd1de51514e3e0d07d0396e2a1740ff45124c9cf3dec074d28f45589821aed4757da7baed6bcc630abdd7d4b9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.3.9",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7cad05127acd17c06329852e268f92e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6efde8cbcb4de4c47f7e9c2a3ab2806022b5c70f"
        },
        {
          "alg" : "SHA-256",
          "content" : "15abde67fa7ea1e573e1f68c34921e995f0971351aaf1fb96790688ff510efcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "974b613509ae56bdd6b1592dbfe43432a804030183935ed5d4f045c411da8174887a16394abd6e543da2198dea2dd5898241694c890ae158ef79e7f897915124"
        },
        {
          "alg" : "SHA-384",
          "content" : "17411441ad21c2eccac3e980cb6ac02cc1a8e7a4017c6e254c03b4ed7831dd66365cdf3e1c9efcc7f45f976064264a69"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.3.9",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d67ab18c16b98763ee9142e87b62d22"
        },
        {
          "alg" : "SHA-1",
          "content" : "68d4180c51468ae8f45869f8f9c569092262fcca"
        },
        {
          "alg" : "SHA-256",
          "content" : "e4f569be53a076424e784222e7088f1827fcb2ef18d409132b3cda2fd92799e2"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b6b4ba65748251182cace4e41922dc9a27eb0ca3d95aedad1a98137668ecb3544331cfec30383cf52e3bd4d569d989ea6e8e044304552934e3107b8c8807147"
        },
        {
          "alg" : "SHA-384",
          "content" : "f7a97fefd6021f600f00a8f6b859733b88245a0873b694780da19d8ea3f6a2cef60bbf4256e4efaaca2d93326d0b4419"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.3.9",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20834b05fa4db46b67c963f3e1b91ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe5ad82564dc07a31855da543db8d5376def3c26"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4da54d52e2996a8a77c4db1ca8e98fc31792f07eeff695776f00ecffc3d5b60"
        },
        {
          "alg" : "SHA-512",
          "content" : "f41b5c9a4a10a60ae07b57978234435b968c747d722e9f9d4556843ea91cc7878c649df891f8d3cd6a419d4fe3ddc26b92db6eb702b8d9e2819805a0e18b2d39"
        },
        {
          "alg" : "SHA-384",
          "content" : "df64f62530077c7d3fcb6bebf7358cc03be60c56c6d06df03eab1833ad1bdb2875dcaa82f037ef2574da4d5c1112efa5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.3.9",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e6239035784eaa473c2254906499b73"
        },
        {
          "alg" : "SHA-1",
          "content" : "a96f29da7623c0e1db9824f628548fe8181f6dd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "462a0d711a979c44791b97422ec4e91300ae555a598f684f116d725a2b9d297b"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b03a8c83ce06a3589b505d2348f06cd4fc0363ad48e370add2a50e174022c5e28997f93e49e18e74a1fc4918d2229a7eeb13626aa8aca4e9d8152e986eb65b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b3cdbd88ecbce2c512b1bb73404476bb2dd89447d2441876cb870ea7d861a9ccc48e844c0bc7dabe05d0072ee8d5a29"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.3.9",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a518f665a8e0c80cd7b37d7e19e90095"
        },
        {
          "alg" : "SHA-1",
          "content" : "6850232b35e504057d67bde11efddebf6271e1ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "6dbcc3d3d1dfb34df46c1ddb080fdd09fb899c80207016419cf13236c6b10399"
        },
        {
          "alg" : "SHA-512",
          "content" : "fdb7767eb59c44c8db58ad18d448be913abb41adb99221174a6b78422cb6738138752a076f6caced07c261be96a5be4df5bf35bd0a10eaa0d653284871a61fc8"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea17839445729c440323c64dc4c495813d09c16684a6a1e5b593ac2996eeb6ae45125c90ec36cb718a31fb5db67b794e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.3.9",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eabb57cd2980b2776fa4c441307ea60c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0f43afa184555fbc6e36b3334b17246c39b30f6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f702928f2233c6ecdf308fbd8f2932ea287c7062183d3c8364b0db7e9c4445d"
        },
        {
          "alg" : "SHA-512",
          "content" : "22f5203e5b6639ef6134e811052a4e94caafa4ffb25c9f821c19672a7a7097ad3562cef0e7b9802ae66e005b151d410d4822a8e48a4e92819255758ef6c073ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cbdfda98fc70734efb6e11716ffbafa6ea5148ed07c47a25d042481fa65b633b79fb920b2a89a3576113d4ac6f329b1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.3.9",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2de70681e18aae4f174b0760e4e69281"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa706ea7ca23776861b4eb2cea97cf345e791496"
        },
        {
          "alg" : "SHA-256",
          "content" : "14cae18fd7125901b12fc914e30ea26ad9bd43dbd399dd6e8fcbc6c754ef2c9c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6e993e404932f23b7fac1bdd0079fc33492c8a0406ff11431a27188f8f56345684d7d2ff73b07c1432d911830089474bf83a0b76a6add22aa3f565aede54be0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c336db6f2ef04f3527b120b43af488ff56b7433ace208d8f242d2e5316112fdde4f7efa610b6716bff26a49a1cbe13d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.3.9",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f2574146387b9bf42d8c6f474c31dc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2055f9adb9f3c9a93e6b36fffe79781a785de2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6909cb229489e693df7960678528800a1759625835a1cb939c37b051c22193c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e1d867d8cf5fb9b25a08356bca5fbd2a328cfa291f6e6f8c8be4cf9c407c8a39e3ecddd5868911426c9fa71b8798bffd1de80936d8593d9a922a4e19ecaaab6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e7e1862a07164f5f52532c69e96293fc8e3a807f71af11ad8d109cce5f6354f74ee976c7dbc7866fefbad9f5b2e5285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "18.0",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. Guava has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "947641f6bb535b1d942d1bc387c45290"
        },
        {
          "alg" : "SHA-1",
          "content" : "cce0823396aa693798f8882e64213b1772032b09"
        },
        {
          "alg" : "SHA-256",
          "content" : "d664fbfc03d2e5ce9cab2a44fb01f1d0bf9dfebeccc1a473b1f9ea31f79f6f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c84ad9f1646b52b6e19f55c3c63936c6dbe59597d53cec6855f85e21ad26f9bc27b0c541b793fab117e2359b1bf3fcd59b222255345fce858bc03cc48cbffd65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6bcf0dcbb939d277d0c0205aa4c433a6799bed542779f7670e4297f49e4b96ffbfc910e2f10686103356cc8519482d67"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@18.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-aether-provider",
      "version" : "3.3.9",
      "description" : "Extensions to Aether for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a59398f1c07cdb0acb7241c912277727"
        },
        {
          "alg" : "SHA-1",
          "content" : "29e8e7122f7a166ea53785cd75af0ef9d4d848d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "f46962583d812cd4459a4cc963113b9c52f1f9b169172354693bc9efa0b3e3cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "5cbc3737b0595098c9fa1930d224c91433e6ed973d67ec5401bcbeb9305633d8983fbbe6c975f2fae67d05f1b26e0fd614d92582809a9a782279c156c9fd92b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "6de9582e2337cf3b3579a63962e64859479d7fc3ec9967a9723b6ab64837ce784569cb130858ab275462ad91abbe61ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://maven.apache.org/ref/3.3.9/maven-aether-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/maven-3.x/"
        },
        {
          "type" : "distribution",
          "url" : "http://maven.apache.org/download.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.3.9/maven-aether-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-spi",
      "version" : "1.0.2.v20150114",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27c2dcac7a0cd4818874d2c14abfd34e"
        },
        {
          "alg" : "SHA-1",
          "content" : "8428dfa330107984f3e3ac05cc3ebd50b2676866"
        },
        {
          "alg" : "SHA-256",
          "content" : "2cafa2629da49edd54eb4df6d15f628c2d80eec293f37cd561f1fe78e7bcff9d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8515e4ce0199dbc052fabdba92f0df9bdb40bd23a99292240f6375b1940a0bc31a52f72064556f68d83839a80716d7889d77fd8742045fc1c38bd1c89a9a1db"
        },
        {
          "alg" : "SHA-384",
          "content" : "bc80507f7a932cc1cc2b70835d47d2baf9179135bfb386447637bfa5dea66bd9de06bdd5962dd35d6966f767fb722850"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-impl",
      "version" : "1.0.2.v20150114",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90c5812e3e05a2419b47edd075920c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "f147539e6e60dfbda9ef7f6d750066170f61b7a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a84f5863407acf2bf9cf280cd02f5a518952a386de61df3b8c5db8cfdec725d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a073b183f42a4437d5b33ce04a0b7957ad8069feebd935318daec206bf197cec8e8c5f4ec86a9508a32f3dca6c0bda5bceb69dde310bd174b2f53fe8fca2fe28"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd3cf1902b02e687b5e18cacc5e0fecce54ba3c8b812616b4783103123158e56e8e03a726f791c1623a67f9aae8bd501"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-api",
      "version" : "1.0.2.v20150114",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17cca827aa6a828de92225021df327a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "839f93a5213fb3e233b09bfd6d6b95669f7043c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "3f74c7c7b9c924769cf3c5b4d52d21aa63e9a2ccbf16f5d26c30ebb31b99699d"
        },
        {
          "alg" : "SHA-512",
          "content" : "c75746a1b82ef2c7ae13a33f06ec82292934e4348ead4a57d0e6b356ba79903e4658d031dd347e1e2c627288de6585c125a70e0f1d47a696db1eb967cbc36da3"
        },
        {
          "alg" : "SHA-384",
          "content" : "27dd50b7386e1ccd073842d53fdc68308b18aa58c07bc2f111a046d28d8f20ca20fe78998e8da300c55f859a4f99ed05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.0.2.v20150114",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae0f47f571109fe3b7b40a7dea085714"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2d3c74a5210544b5cdce89a2c1d1c62835692d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e9a57439a98034732e94d841bb7065b56e3a065654361ca9cc07135e9fbe17c"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c3e1669815cd77c0eb415e2017bf6feeaba9558985e0e2d69fbd5eea7bd3e12b4f07120353cd67c1dec25e39618b7ac25d55955eec2a6fae72e7142fb723bd8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c391706cbbdf0ae84c5593d8591bd9c7b9bfb9b23753c17e4db13047718cc87cf8e94e2be83846feb90f8ee9aa34cb41"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/aether/aether-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.3.2",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ffd4bd3eb3df02572248674218129cba"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd84cb43788de23847eec2999070f64381bdb495"
        },
        {
          "alg" : "SHA-256",
          "content" : "f5cfe0d88e8276971db4ecff0e4186d5f2ec5fdb1b6bb8c2f359fdc4b43eb8b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "2cc1af5470d06d1cc6a2f47c1a0781cb618f0b32995c02b1c84edc3bf92e7d0e01bdefad063f9332510d8b32ea87e369e4a2936cd2cf569b1e09c13a77646e64"
        },
        {
          "alg" : "SHA-384",
          "content" : "d56f17cf30fd5f7586f72443e4932836a9f8856f95f7e4062f153021249b667791a812d2eeb7f0fb1364ee2dcc2a06e3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar"
    },
    {
      "publisher" : "Seam Framework",
      "group" : "javax.enterprise",
      "name" : "cdi-api",
      "version" : "1.0",
      "description" : "APIs for JSR-299: Contexts and Dependency Injection for Java EE",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "462c0959f0322016495f4598243bc0f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "44c453f60909dfc223552ace63e05c694215156b"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f10b2204cc77c919301f20ff90461c3df1b6e6cb148be1c2d22107f4851d423"
        },
        {
          "alg" : "SHA-512",
          "content" : "3e326196a2cbf19375803ce37d743a9818c4fa2292914439e748060d6889c997fe33077f52e52d4dd61b60e7342aa31b446d7571a92ec864f44cead45ebd612b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cff1b12eddd9d7c4e075ea91edf063bf22308dc1857e1ba19914baa5db0921828a8605c37a2a672af8a6e76116cbaf08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.seamframework.org/Weld/cdi-api"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.jboss.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.jboss.org/browse/WELD"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.jboss.org/browse/Weld/api/tags/1.0/build/tags/weld-parent-6/weld-api-bom/weld-api-parent/cdi-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar"
    },
    {
      "group" : "javax.annotation",
      "name" : "jsr250-api",
      "version" : "1.0",
      "description" : "JSR-250 Reference Implementation by Glassfish",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4cd56b2e4977e541186de69f5126b4a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "5025422767732a1ab45d93abfea846513d742dcf"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871"
        },
        {
          "alg" : "SHA-384",
          "content" : "33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        },
        {
          "type" : "distribution",
          "url" : "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.3.2",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3cb5c4eafb5f15dbfb73ae34d630394"
        },
        {
          "alg" : "SHA-1",
          "content" : "59044b92ec27cc6fda7a2d24b2cd6cec23f31d5b"
        },
        {
          "alg" : "SHA-256",
          "content" : "66e87705a818da44eb080a7bb1fc431de987754b4f92aa85f69991bfc677d40d"
        },
        {
          "alg" : "SHA-512",
          "content" : "af65b27e56628c3ac018476916aa6ed420fe5c07fb36483f6b4abd10966e35d3814d404f5b34974b54aa146c717042d8e31b74bed4a57b9c51b3b2b85dd87633"
        },
        {
          "alg" : "SHA-384",
          "content" : "36873d5a0203830576a17d6e13fc3c35dd9af677a1bcb10458d1c8ee82ae176df8e6b73dcad01b19b985ebc71e40ad19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "4.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64ff538a6b272442aa00a5d0707ca1d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "199b7acaa05b570bbccf31be998f013963e5e752"
        },
        {
          "alg" : "SHA-256",
          "content" : "19393891be59b6feaf7e308bd8a3843b4e552c10cdb687ebffd7695634a250a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "9af46efaacfa911f4f337785ef75df2013eecc64af3842d10df97f453b84d0e7990d3e981c27f315184390355744f4b8857eb87b5a45e24549251da4c4d387d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "84d2734f38afd7904b787f3d4a6fa8f192ba958f406cd9693bafc7c8fb4618189971afe384029f92040d5ae74f20b8ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.21",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6629656495f4e5eac4f244fe3b252ea1"
        },
        {
          "alg" : "SHA-1",
          "content" : "f92de59d295f16868001644acc21720f3ec9eb15"
        },
        {
          "alg" : "SHA-256",
          "content" : "aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-components/plexus-interpolation"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLXCOMP"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-interpolation"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.5.2",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53b54feee8cef6b843bd6748bda4bfa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "4abb111bfdace5b8167db4c0ef74644f3f88f142"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333"
        },
        {
          "alg" : "SHA-384",
          "content" : "27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-classworlds/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/sonatype/plexus-classworlds"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "1.6",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ad66cc6f2b6813485d624ed581d61be"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a34a4e12b5fded8c548a568f463dfee21500927"
        },
        {
          "alg" : "SHA-256",
          "content" : "2b3a6ca5f19a9ad490bc233f45e68d3093c8c01b4acc3c1d14bad4ca7c7ff438"
        },
        {
          "alg" : "SHA-512",
          "content" : "d30428c57b888efc004f553d3834dd185182eca50e0f3cc2af419597a58fbaf0716e89d2a3850f3443905346926b40806ff5b46e0cfd829c58ba77d5c22289d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0ba7a2938d7b81ccb9e5de5acf6d429bc685c0e91b7d24af42b8dfb53796cfd9b68da9ea1d1d74859b3082f89b305a59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/PLX"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/sonatype/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "1.3",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53160199f5667de3fca69b723173639b"
        },
        {
          "alg" : "SHA-1",
          "content" : "dedc02034fb8fcd7615d66593228cb71709134b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd"
        },
        {
          "alg" : "SHA-384",
          "content" : "539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-sec-dispatcher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-cipher",
      "version" : "1.4",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b2d6fcf0d5800d5b1ce09d98d98dcaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "50ade46f23bb38cd984b4ec560c46223432aac38"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617"
        },
        {
          "alg" : "SHA-384",
          "content" : "29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://spice.sonatype.org/plexus-cipher"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution",
          "url" : "http://repository.sonatype.org/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-cipher-1.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.4",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8667a442ee77e509fbe8176b94726eb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "5fe28b9518e58819180a43a850fbc0dd24b7c050"
        },
        {
          "alg" : "SHA-256",
          "content" : "734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d"
        },
        {
          "alg" : "SHA-384",
          "content" : "961bd98a9b176b23f6162fa26b887ea54e970815f6ad10c5f98c0d8a35d6f056c19a46889bb380947a741daf7bc264cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/tags/LANG_3_4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.5.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdec471a77f52e687d0df4c43f392a71"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6bfb17c97ecc8863e88778ea301be742c62b06d"
        },
        {
          "alg" : "SHA-256",
          "content" : "86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "file-management",
      "version" : "3.1.0",
      "description" : "API to collect files from a given directory using several include/exclude rules.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "94be12af3d234da86b130cb297234bef"
        },
        {
          "alg" : "SHA-1",
          "content" : "f87a3a54c856714e4157b9ce7a5ff6ffc310d447"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e8cb2d546a01c2259cb17f1e06732db3d14b079d19622bf8400c82cb1ee6b96"
        },
        {
          "alg" : "SHA-512",
          "content" : "0fdc3236960e059d58eb8fd723ef4258f2d6f44a55b8ec75264f426af14d419aaf767cc673eb939a407936ba48c87023b1a117fec2f590bcf5eb0ca5d76acbf8"
        },
        {
          "alg" : "SHA-384",
          "content" : "10257cb34ae19d69ff3884ebb504b7845dbf149442709cf7a86d828914af7203eb9cf25c4b76cf1961fb2477965bcbf3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/file-management/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MSHARED/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-file-management/tree/file-management-3.1.0"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro-compiler",
      "version" : "1.11.2",
      "description" : "Compilers for Avro IDL and Avro Specific Java API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3b2097b7562713cfaad51d595ede69e"
        },
        {
          "alg" : "SHA-1",
          "content" : "eea140dc790519f7fb92338f40310e7ec82ed4df"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fa5017a6663a8f138b2296f2051a9aaf461a259bad39c24fa0670ef99797cc3"
        },
        {
          "alg" : "SHA-512",
          "content" : "f0ee3c5971a88db7d3ffc9bd921ee9cf81cd3d7cc64b3f0296ca3ff10c0f2ea5221bfae26d4612234d45eb964b5bf8cf5e2ebb69a0bbdc9d4f43c11696fc097c"
        },
        {
          "alg" : "SHA-384",
          "content" : "78bf324a5c81b4d199839856f5e6637f0043315553e9220117d68feda9b7e1cf93dde77265e57815151260943e84eb7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/lang/avro-parent/avro-compiler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.2",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31ec52433bce066f1b5698142e138e5d"
        },
        {
          "alg" : "SHA-1",
          "content" : "97e62e8be2b37e849f1bdb5a4f08121d47cc9806"
        },
        {
          "alg" : "SHA-256",
          "content" : "31fa41e47437b2a4168fd57a24a19c687b7347b4ed01388f4779362085b2f92a"
        },
        {
          "alg" : "SHA-512",
          "content" : "e313df5bb18791807899591c040e862803b122d8479b43f7c81cfa6e29ffb4a77a6e41a06cac1cafe1f30a7e36fc53e07934252fa99be17cac68a857173117ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "255fb78980edd0b0630a3f57126cd29d78d050db952b7715c863bf33715029eec29a03a5b3e9b4c80ab44f89c03629bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/lang/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ee422ee4c481b2d5aacb2b5e36a7dc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f804090e6399ce0cf78242db086017512dd71fcc"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367"
        },
        {
          "alg" : "SHA-384",
          "content" : "e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.22",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1e4db16fee4291212d91409313a8086"
        },
        {
          "alg" : "SHA-1",
          "content" : "691a8b4e6cf4248c3bc72c8b719337d5cb7359fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563"
        },
        {
          "alg" : "SHA-384",
          "content" : "295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.10.0",
      "description" : "Apache Commons Text is a library focused on algorithms working on strings.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4afc9bfa2d31dbf7330c98fcc954b892"
        },
        {
          "alg" : "SHA-1",
          "content" : "3363381aef8cef2dbc1023b3e3a9433b08b64e01"
        },
        {
          "alg" : "SHA-256",
          "content" : "770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018"
        },
        {
          "alg" : "SHA-512",
          "content" : "afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831"
        },
        {
          "alg" : "SHA-384",
          "content" : "06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.3",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e761e6088b946b42289c5d676a515581"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2133b723d0e42be74880d34de6bf6538ea7f915"
        },
        {
          "alg" : "SHA-256",
          "content" : "b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204"
        },
        {
          "alg" : "SHA-384",
          "content" : "5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c1b12dd14734cd1986132bf55042dd7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "01e71fddbc80bb86f71a6345ac1e8ab8a00e7134"
        },
        {
          "alg" : "SHA-256",
          "content" : "501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424"
        },
        {
          "alg" : "SHA-512",
          "content" : "85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10d19982a8890f6eb37557af2f58e272"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7aae9525864930723e3453ab799521fdfd9d873"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3"
        },
        {
          "alg" : "SHA-384",
          "content" : "d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar",
        "pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar",
        "pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar",
        "pkg:maven/com.google.guava/guava@18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar",
        "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar",
        "pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    }
  ]
}