<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-maven-plugin</name>
      <version>1.11.2</version>
      <description>Maven plugin for Avro IDL and Specific API Compilers</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org/avro-maven-plugin</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/lang/avro-parent/avro-maven-plugin</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.3.9</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26ca8120bcd92b50cd3eeaf72857f10b</hash>
        <hash alg="SHA-1">47154012330ea639849c618ebc11cff6870e570a</hash>
        <hash alg="SHA-256">070d55ec5a6f3e4a785564283a9704bb39a93f1a2f89cdf60a3b899fde563bf9</hash>
        <hash alg="SHA-512">ceadc6c74a108490ce48c0887395a4bd55f91a53e7e26dc0873f78aea41c2ab8003fd4dbdd4942d5c2fcf3c5ece28bf58492287ff3ea9055087e2e4ce3cc86ab</hash>
        <hash alg="SHA-384">272119fbd1de51514e3e0d07d0396e2a1740ff45124c9cf3dec074d28f45589821aed4757da7baed6bcc630abdd7d4b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-core/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.3.9</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7cad05127acd17c06329852e268f92e7</hash>
        <hash alg="SHA-1">6efde8cbcb4de4c47f7e9c2a3ab2806022b5c70f</hash>
        <hash alg="SHA-256">15abde67fa7ea1e573e1f68c34921e995f0971351aaf1fb96790688ff510efcd</hash>
        <hash alg="SHA-512">974b613509ae56bdd6b1592dbfe43432a804030183935ed5d4f045c411da8174887a16394abd6e543da2198dea2dd5898241694c890ae158ef79e7f897915124</hash>
        <hash alg="SHA-384">17411441ad21c2eccac3e980cb6ac02cc1a8e7a4017c6e254c03b4ed7831dd66365cdf3e1c9efcc7f45f976064264a69</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-model/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.3.9</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d67ab18c16b98763ee9142e87b62d22</hash>
        <hash alg="SHA-1">68d4180c51468ae8f45869f8f9c569092262fcca</hash>
        <hash alg="SHA-256">e4f569be53a076424e784222e7088f1827fcb2ef18d409132b3cda2fd92799e2</hash>
        <hash alg="SHA-512">5b6b4ba65748251182cace4e41922dc9a27eb0ca3d95aedad1a98137668ecb3544331cfec30383cf52e3bd4d569d989ea6e8e044304552934e3107b8c8807147</hash>
        <hash alg="SHA-384">f7a97fefd6021f600f00a8f6b859733b88245a0873b694780da19d8ea3f6a2cef60bbf4256e4efaaca2d93326d0b4419</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-settings/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.3.9</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20834b05fa4db46b67c963f3e1b91ed5</hash>
        <hash alg="SHA-1">fe5ad82564dc07a31855da543db8d5376def3c26</hash>
        <hash alg="SHA-256">b4da54d52e2996a8a77c4db1ca8e98fc31792f07eeff695776f00ecffc3d5b60</hash>
        <hash alg="SHA-512">f41b5c9a4a10a60ae07b57978234435b968c747d722e9f9d4556843ea91cc7878c649df891f8d3cd6a419d4fe3ddc26b92db6eb702b8d9e2819805a0e18b2d39</hash>
        <hash alg="SHA-384">df64f62530077c7d3fcb6bebf7358cc03be60c56c6d06df03eab1833ad1bdb2875dcaa82f037ef2574da4d5c1112efa5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-settings-builder/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-settings-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>3.3.9</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e6239035784eaa473c2254906499b73</hash>
        <hash alg="SHA-1">a96f29da7623c0e1db9824f628548fe8181f6dd0</hash>
        <hash alg="SHA-256">462a0d711a979c44791b97422ec4e91300ae555a598f684f116d725a2b9d297b</hash>
        <hash alg="SHA-512">0b03a8c83ce06a3589b505d2348f06cd4fc0363ad48e370add2a50e174022c5e28997f93e49e18e74a1fc4918d2229a7eeb13626aa8aca4e9d8152e986eb65b6</hash>
        <hash alg="SHA-384">0b3cdbd88ecbce2c512b1bb73404476bb2dd89447d2441876cb870ea7d861a9ccc48e844c0bc7dabe05d0072ee8d5a29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-builder-support/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-builder-support</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.3.9</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a518f665a8e0c80cd7b37d7e19e90095</hash>
        <hash alg="SHA-1">6850232b35e504057d67bde11efddebf6271e1ce</hash>
        <hash alg="SHA-256">6dbcc3d3d1dfb34df46c1ddb080fdd09fb899c80207016419cf13236c6b10399</hash>
        <hash alg="SHA-512">fdb7767eb59c44c8db58ad18d448be913abb41adb99221174a6b78422cb6738138752a076f6caced07c261be96a5be4df5bf35bd0a10eaa0d653284871a61fc8</hash>
        <hash alg="SHA-384">ea17839445729c440323c64dc4c495813d09c16684a6a1e5b593ac2996eeb6ae45125c90ec36cb718a31fb5db67b794e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-repository-metadata/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-repository-metadata</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.3.9</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eabb57cd2980b2776fa4c441307ea60c</hash>
        <hash alg="SHA-1">0f43afa184555fbc6e36b3334b17246c39b30f6e</hash>
        <hash alg="SHA-256">1f702928f2233c6ecdf308fbd8f2932ea287c7062183d3c8364b0db7e9c4445d</hash>
        <hash alg="SHA-512">22f5203e5b6639ef6134e811052a4e94caafa4ffb25c9f821c19672a7a7097ad3562cef0e7b9802ae66e005b151d410d4822a8e48a4e92819255758ef6c073ea</hash>
        <hash alg="SHA-384">1cbdfda98fc70734efb6e11716ffbafa6ea5148ed07c47a25d042481fa65b633b79fb920b2a89a3576113d4ac6f329b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-artifact/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.3.9</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2de70681e18aae4f174b0760e4e69281</hash>
        <hash alg="SHA-1">aa706ea7ca23776861b4eb2cea97cf345e791496</hash>
        <hash alg="SHA-256">14cae18fd7125901b12fc914e30ea26ad9bd43dbd399dd6e8fcbc6c754ef2c9c</hash>
        <hash alg="SHA-512">a6e993e404932f23b7fac1bdd0079fc33492c8a0406ff11431a27188f8f56345684d7d2ff73b07c1432d911830089474bf83a0b76a6add22aa3f565aede54be0</hash>
        <hash alg="SHA-384">c336db6f2ef04f3527b120b43af488ff56b7433ace208d8f242d2e5316112fdde4f7efa610b6716bff26a49a1cbe13d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-plugin-api/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-plugin-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.3.9</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1f2574146387b9bf42d8c6f474c31dc0</hash>
        <hash alg="SHA-1">e2055f9adb9f3c9a93e6b36fffe79781a785de2d</hash>
        <hash alg="SHA-256">6909cb229489e693df7960678528800a1759625835a1cb939c37b051c22193c3</hash>
        <hash alg="SHA-512">9e1d867d8cf5fb9b25a08356bca5fbd2a328cfa291f6e6f8c8be4cf9c407c8a39e3ecddd5868911426c9fa71b8798bffd1de80936d8593d9a922a4e19ecaaab6</hash>
        <hash alg="SHA-384">6e7e1862a07164f5f52532c69e96293fc8e3a807f71af11ad8d109cce5f6354f74ee976c7dbc7866fefbad9f5b2e5285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-model-builder/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-model-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@18.0?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>18.0</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">947641f6bb535b1d942d1bc387c45290</hash>
        <hash alg="SHA-1">cce0823396aa693798f8882e64213b1772032b09</hash>
        <hash alg="SHA-256">d664fbfc03d2e5ce9cab2a44fb01f1d0bf9dfebeccc1a473b1f9ea31f79f6f99</hash>
        <hash alg="SHA-512">c84ad9f1646b52b6e19f55c3c63936c6dbe59597d53cec6855f85e21ad26f9bc27b0c541b793fab117e2359b1bf3fcd59b222255345fce858bc03cc48cbffd65</hash>
        <hash alg="SHA-384">6bcf0dcbb939d277d0c0205aa4c433a6799bed542779f7670e4297f49e4b96ffbfc910e2f10686103356cc8519482d67</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-aether-provider</name>
      <version>3.3.9</version>
      <description>Extensions to Aether for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a59398f1c07cdb0acb7241c912277727</hash>
        <hash alg="SHA-1">29e8e7122f7a166ea53785cd75af0ef9d4d848d4</hash>
        <hash alg="SHA-256">f46962583d812cd4459a4cc963113b9c52f1f9b169172354693bc9efa0b3e3cb</hash>
        <hash alg="SHA-512">5cbc3737b0595098c9fa1930d224c91433e6ed973d67ec5401bcbeb9305633d8983fbbe6c975f2fae67d05f1b26e0fd614d92582809a9a782279c156c9fd92b6</hash>
        <hash alg="SHA-384">6de9582e2337cf3b3579a63962e64859479d7fc3ec9967a9723b6ab64837ce784569cb130858ab275462ad91abbe61ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.3.9/maven-aether-provider/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.3.9/maven-aether-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-spi</name>
      <version>1.0.2.v20150114</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27c2dcac7a0cd4818874d2c14abfd34e</hash>
        <hash alg="SHA-1">8428dfa330107984f3e3ac05cc3ebd50b2676866</hash>
        <hash alg="SHA-256">2cafa2629da49edd54eb4df6d15f628c2d80eec293f37cd561f1fe78e7bcff9d</hash>
        <hash alg="SHA-512">a8515e4ce0199dbc052fabdba92f0df9bdb40bd23a99292240f6375b1940a0bc31a52f72064556f68d83839a80716d7889d77fd8742045fc1c38bd1c89a9a1db</hash>
        <hash alg="SHA-384">bc80507f7a932cc1cc2b70835d47d2baf9179135bfb386447637bfa5dea66bd9de06bdd5962dd35d6966f767fb722850</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-spi/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-impl</name>
      <version>1.0.2.v20150114</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">90c5812e3e05a2419b47edd075920c3b</hash>
        <hash alg="SHA-1">f147539e6e60dfbda9ef7f6d750066170f61b7a1</hash>
        <hash alg="SHA-256">9a84f5863407acf2bf9cf280cd02f5a518952a386de61df3b8c5db8cfdec725d</hash>
        <hash alg="SHA-512">a073b183f42a4437d5b33ce04a0b7957ad8069feebd935318daec206bf197cec8e8c5f4ec86a9508a32f3dca6c0bda5bceb69dde310bd174b2f53fe8fca2fe28</hash>
        <hash alg="SHA-384">fd3cf1902b02e687b5e18cacc5e0fecce54ba3c8b812616b4783103123158e56e8e03a726f791c1623a67f9aae8bd501</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-impl/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-api</name>
      <version>1.0.2.v20150114</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17cca827aa6a828de92225021df327a7</hash>
        <hash alg="SHA-1">839f93a5213fb3e233b09bfd6d6b95669f7043c0</hash>
        <hash alg="SHA-256">3f74c7c7b9c924769cf3c5b4d52d21aa63e9a2ccbf16f5d26c30ebb31b99699d</hash>
        <hash alg="SHA-512">c75746a1b82ef2c7ae13a33f06ec82292934e4348ead4a57d0e6b356ba79903e4658d031dd347e1e2c627288de6585c125a70e0f1d47a696db1eb967cbc36da3</hash>
        <hash alg="SHA-384">27dd50b7386e1ccd073842d53fdc68308b18aa58c07bc2f111a046d28d8f20ca20fe78998e8da300c55f859a4f99ed05</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-api/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-util</name>
      <version>1.0.2.v20150114</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae0f47f571109fe3b7b40a7dea085714</hash>
        <hash alg="SHA-1">d2d3c74a5210544b5cdce89a2c1d1c62835692d1</hash>
        <hash alg="SHA-256">9e9a57439a98034732e94d841bb7065b56e3a065654361ca9cc07135e9fbe17c</hash>
        <hash alg="SHA-512">1c3e1669815cd77c0eb415e2017bf6feeaba9558985e0e2d69fbd5eea7bd3e12b4f07120353cd67c1dec25e39618b7ac25d55955eec2a6fae72e7142fb723bd8</hash>
        <hash alg="SHA-384">c391706cbbdf0ae84c5593d8591bd9c7b9bfb9b23753c17e4db13047718cc87cf8e94e2be83846feb90f8ee9aa34cb41</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-util/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.3.2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ffd4bd3eb3df02572248674218129cba</hash>
        <hash alg="SHA-1">cd84cb43788de23847eec2999070f64381bdb495</hash>
        <hash alg="SHA-256">f5cfe0d88e8276971db4ecff0e4186d5f2ec5fdb1b6bb8c2f359fdc4b43eb8b2</hash>
        <hash alg="SHA-512">2cc1af5470d06d1cc6a2f47c1a0781cb618f0b32995c02b1c84edc3bf92e7d0e01bdefad063f9332510d8b32ea87e369e4a2936cd2cf569b1e09c13a77646e64</hash>
        <hash alg="SHA-384">d56f17cf30fd5f7586f72443e4932836a9f8856f95f7e4062f153021249b667791a812d2eeb7f0fb1364ee2dcc2a06e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Plexus&amp;format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/org.eclipse.sisu.plexus/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar">
      <publisher>Seam Framework</publisher>
      <group>javax.enterprise</group>
      <name>cdi-api</name>
      <version>1.0</version>
      <description>APIs for JSR-299: Contexts and Dependency Injection for Java EE</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">462c0959f0322016495f4598243bc0f2</hash>
        <hash alg="SHA-1">44c453f60909dfc223552ace63e05c694215156b</hash>
        <hash alg="SHA-256">1f10b2204cc77c919301f20ff90461c3df1b6e6cb148be1c2d22107f4851d423</hash>
        <hash alg="SHA-512">3e326196a2cbf19375803ce37d743a9818c4fa2292914439e748060d6889c997fe33077f52e52d4dd61b60e7342aa31b446d7571a92ec864f44cead45ebd612b</hash>
        <hash alg="SHA-384">cff1b12eddd9d7c4e075ea91edf063bf22308dc1857e1ba19914baa5db0921828a8605c37a2a672af8a6e76116cbaf08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.enterprise/cdi-api@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.seamframework.org/Weld/cdi-api</url></reference><reference type="build-system"><url>http://hudson.jboss.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.jboss.org/browse/WELD</url></reference><reference type="vcs"><url>http://fisheye.jboss.org/browse/Weld/api/tags/1.0/build/tags/weld-parent-6/weld-api-bom/weld-api-parent/cdi-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar">
      <group>javax.annotation</group>
      <name>jsr250-api</name>
      <version>1.0</version>
      <description>JSR-250 Reference Implementation by Glassfish</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4cd56b2e4977e541186de69f5126b4a6</hash>
        <hash alg="SHA-1">5025422767732a1ab45d93abfea846513d742dcf</hash>
        <hash alg="SHA-256">a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f</hash>
        <hash alg="SHA-512">8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871</hash>
        <hash alg="SHA-384">33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.annotation/jsr250-api@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html</url></reference><reference type="distribution"><url>http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.3.2</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d3cb5c4eafb5f15dbfb73ae34d630394</hash>
        <hash alg="SHA-1">59044b92ec27cc6fda7a2d24b2cd6cec23f31d5b</hash>
        <hash alg="SHA-256">66e87705a818da44eb080a7bb1fc431de987754b4f92aa85f69991bfc677d40d</hash>
        <hash alg="SHA-512">af65b27e56628c3ac018476916aa6ed420fe5c07fb36483f6b4abd10966e35d3814d404f5b34974b54aa146c717042d8e31b74bed4a57b9c51b3b2b85dd87633</hash>
        <hash alg="SHA-384">36873d5a0203830576a17d6e13fc3c35dd9af677a1bcb10458d1c8ee82ae176df8e6b73dcad01b19b985ebc71e40ad19</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Inject&amp;format=guided</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/org.eclipse.sisu.inject/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">64ff538a6b272442aa00a5d0707ca1d9</hash>
        <hash alg="SHA-1">199b7acaa05b570bbccf31be998f013963e5e752</hash>
        <hash alg="SHA-256">19393891be59b6feaf7e308bd8a3843b4e552c10cdb687ebffd7695634a250a8</hash>
        <hash alg="SHA-512">9af46efaacfa911f4f337785ef75df2013eecc64af3842d10df97f453b84d0e7990d3e981c27f315184390355744f4b8857eb87b5a45e24549251da4c4d387d9</hash>
        <hash alg="SHA-384">84d2734f38afd7904b787f3d4a6fa8f192ba958f406cd9693bafc7c8fb4618189971afe384029f92040d5ae74f20b8ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.21</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6629656495f4e5eac4f244fe3b252ea1</hash>
        <hash alg="SHA-1">f92de59d295f16868001644acc21720f3ec9eb15</hash>
        <hash alg="SHA-256">aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f</hash>
        <hash alg="SHA-512">073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d</hash>
        <hash alg="SHA-384">2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-interpolation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLXCOMP</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-interpolation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.5.2</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53b54feee8cef6b843bd6748bda4bfa7</hash>
        <hash alg="SHA-1">4abb111bfdace5b8167db4c0ef74644f3f88f142</hash>
        <hash alg="SHA-256">b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7</hash>
        <hash alg="SHA-512">5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333</hash>
        <hash alg="SHA-384">27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-classworlds</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>1.6</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ad66cc6f2b6813485d624ed581d61be</hash>
        <hash alg="SHA-1">1a34a4e12b5fded8c548a568f463dfee21500927</hash>
        <hash alg="SHA-256">2b3a6ca5f19a9ad490bc233f45e68d3093c8c01b4acc3c1d14bad4ca7c7ff438</hash>
        <hash alg="SHA-512">d30428c57b888efc004f553d3834dd185182eca50e0f3cc2af419597a58fbaf0716e89d2a3850f3443905346926b40806ff5b46e0cfd829c58ba77d5c22289d1</hash>
        <hash alg="SHA-384">0ba7a2938d7b81ccb9e5de5acf6d429bc685c0e91b7d24af42b8dfb53796cfd9b68da9ea1d1d74859b3082f89b305a59</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>https://github.com/sonatype/plexus-containers/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53160199f5667de3fca69b723173639b</hash>
        <hash alg="SHA-1">dedc02034fb8fcd7615d66593228cb71709134b4</hash>
        <hash alg="SHA-256">3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063</hash>
        <hash alg="SHA-512">8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd</hash>
        <hash alg="SHA-384">539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-sec-dispatcher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-cipher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.4</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8667a442ee77e509fbe8176b94726eb2</hash>
        <hash alg="SHA-1">5fe28b9518e58819180a43a850fbc0dd24b7c050</hash>
        <hash alg="SHA-256">734c8356420cc8e30c795d64fd1fcd5d44ea9d90342a2cc3262c5158fbc6d98b</hash>
        <hash alg="SHA-512">b1b556692341a240f8b81f8f71b8b5c0225ccf857ce1b185e7fe6d7a9bb2a4d77823496cd6e2697a20386e7f3ba02d476a0e4ff38071367beb3090104544922d</hash>
        <hash alg="SHA-384">961bd98a9b176b23f6162fa26b887ea54e970815f6ad10c5f98c0d8a35d6f056c19a46889bb380947a741daf7bc264cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/tags/LANG_3_4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.5.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdec471a77f52e687d0df4c43f392a71</hash>
        <hash alg="SHA-1">c6bfb17c97ecc8863e88778ea301be742c62b06d</hash>
        <hash alg="SHA-256">86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b</hash>
        <hash alg="SHA-512">e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f</hash>
        <hash alg="SHA-384">ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>file-management</name>
      <version>3.1.0</version>
      <description>API to collect files from a given directory using several include/exclude rules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">94be12af3d234da86b130cb297234bef</hash>
        <hash alg="SHA-1">f87a3a54c856714e4157b9ce7a5ff6ffc310d447</hash>
        <hash alg="SHA-256">2e8cb2d546a01c2259cb17f1e06732db3d14b079d19622bf8400c82cb1ee6b96</hash>
        <hash alg="SHA-512">0fdc3236960e059d58eb8fd723ef4258f2d6f44a55b8ec75264f426af14d419aaf767cc673eb939a407936ba48c87023b1a117fec2f590bcf5eb0ca5d76acbf8</hash>
        <hash alg="SHA-384">10257cb34ae19d69ff3884ebb504b7845dbf149442709cf7a86d828914af7203eb9cf25c4b76cf1961fb2477965bcbf3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/file-management/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-file-management/tree/file-management-3.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-compiler</name>
      <version>1.11.2</version>
      <description>Compilers for Avro IDL and Avro Specific Java API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e3b2097b7562713cfaad51d595ede69e</hash>
        <hash alg="SHA-1">eea140dc790519f7fb92338f40310e7ec82ed4df</hash>
        <hash alg="SHA-256">1fa5017a6663a8f138b2296f2051a9aaf461a259bad39c24fa0670ef99797cc3</hash>
        <hash alg="SHA-512">f0ee3c5971a88db7d3ffc9bd921ee9cf81cd3d7cc64b3f0296ca3ff10c0f2ea5221bfae26d4612234d45eb964b5bf8cf5e2ebb69a0bbdc9d4f43c11696fc097c</hash>
        <hash alg="SHA-384">78bf324a5c81b4d199839856f5e6637f0043315553e9220117d68feda9b7e1cf93dde77265e57815151260943e84eb7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/lang/avro-parent/avro-compiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.11.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.11.2</version>
      <description>Avro core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">31ec52433bce066f1b5698142e138e5d</hash>
        <hash alg="SHA-1">97e62e8be2b37e849f1bdb5a4f08121d47cc9806</hash>
        <hash alg="SHA-256">31fa41e47437b2a4168fd57a24a19c687b7347b4ed01388f4779362085b2f92a</hash>
        <hash alg="SHA-512">e313df5bb18791807899591c040e862803b122d8479b43f7c81cfa6e29ffb4a77a6e41a06cac1cafe1f30a7e36fc53e07934252fa99be17cac68a857173117ae</hash>
        <hash alg="SHA-384">255fb78980edd0b0630a3f57126cd29d78d050db952b7715c863bf33715029eec29a03a5b3e9b4c80ab44f89c03629bb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.11.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/lang/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.22</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1e4db16fee4291212d91409313a8086</hash>
        <hash alg="SHA-1">691a8b4e6cf4248c3bc72c8b719337d5cb7359fa</hash>
        <hash alg="SHA-256">53d04a0efc7223baecaa303bd5d298eb0600e6b82b4076f9cecd558b97ba760b</hash>
        <hash alg="SHA-512">2d64fa6cd081fff5d73ee662a82f6186991fc13b4bdaee18b5f1bdcab06d9acb70e3713d18b296337791448251fbd6768bd84afaa817a10547652d0cfa885563</hash>
        <hash alg="SHA-384">295d7f69d151abbd784e1c4d021c77ce43e129bb5bda0c55762b32d77c8607863383297674ec8a212ea3dfe4007b0044</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.22?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.3</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e761e6088b946b42289c5d676a515581</hash>
        <hash alg="SHA-1">e2133b723d0e42be74880d34de6bf6538ea7f915</hash>
        <hash alg="SHA-256">b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629</hash>
        <hash alg="SHA-512">ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204</hash>
        <hash alg="SHA-384">5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://velocity.apache.org/engine/devel/velocity-engine-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/VELOCITY</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?general@velocity.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.avro/avro-maven-plugin@1.11.2?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.2?type=jar">
      <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar">
      <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/guava@18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.2.v20150114?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.2.v20150114?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.2.v20150114?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@4.0?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/file-management@3.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.avro/avro-compiler@1.11.2?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.11.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.11.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.22?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
  </dependencies>
</bom>
