<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:c861c59e-4f01-48e7-819b-7ae24e62af34" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-03-26T00:26:00Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.3</version>
        <hashes>
          <hash alg="MD5">ab886f1cb1a79b4244ac54dde22a0989</hash>
          <hash alg="SHA-1">9ed658496dfeef87fe6072b95c62ec37165cc741</hash>
          <hash alg="SHA-256">df9b43417bef6aeac86a393abcc1ac2ed0518239ba544aaeb595b9619c603503</hash>
          <hash alg="SHA-512">223da34bb51c5339e0f7285757608c1a56b1ea887f7ad835af9299fabacc693053163da74af352af86b16e18e04db730bd44214eda04291410c42b6ae657d85c</hash>
          <hash alg="SHA-384">3aaf057329ed0f90ec3a49a45b3cf4ec5ce637fd75d6202e9483fa4274cec3e7b74308016e146b6ba087df5fce9397bb</hash>
          <hash alg="SHA3-384">0e2ce6d2a0e0ddea90f63d2e521e640e83aeac1230c201042e542186e9f32bceaf54ed9d26e6a9dec04c0f7895bbae19</hash>
          <hash alg="SHA3-256">dd3ba8325a1a759e5a8f159a3363213d4a34d51120c4e4c77097a6779964fb33</hash>
          <hash alg="SHA3-512">e5f87b2380e9785330fce113fedd5866a1498d5a9e365b7b00cb6fea50fd47166c471a6347d46d3edb7dd247a583874169624db5be2845c5c87dfdbcd58d9e89</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-configuration2@2.9.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-configuration2</name>
      <version>2.9.0</version>
      <description>Tools to assist in the reading of configuration/preferences files in
        various formats</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-configuration2@2.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-configuration/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-configuration.git</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar">
      <group>org.apache.commons</group>
      <name>commons-jexl</name>
      <version>2.1.1</version>
      <description>The Commons Jexl library is an implementation of the JSTL Expression Language with extensions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ad8f5c161dd3a50e190334555675db9</hash>
        <hash alg="SHA-1">6ecc181debade00230aa1e17666c4ea0371beaaa</hash>
        <hash alg="SHA-256">03c9a9fae5da78ce52c0bf24467cc37355b7e23196dff4839e2c0ff018a01306</hash>
        <hash alg="SHA-512">dcd62490cc386516f66427f5e478c308f6937eb6d64a34a02de56255129ded20bedb85c01b5c794d95ca3c4d6a11d58fa920779c5e517b78a881c5a229e4fba2</hash>
        <hash alg="SHA-384">db60a120271ed224dbe535219de2d13603a5ec9e397ce5cb3006b10464ceb9a23a6c742fa1262352bed179032b7f4357</hash>
        <hash alg="SHA3-384">8bf28ee3c9334fd57160f0d60006d2b20099d50898f919f901e9c97dd9e3ba634b4c02ba7f861e9d4076799a778524a9</hash>
        <hash alg="SHA3-256">cc6d0fc318a59e25d3eea3cea560e9502c5248a7bad1458a9db4727d344d2f41</hash>
        <hash alg="SHA3-512">652c1d03ed332fa6a3ca178e9af600508f0e2edb2840162dd86cff0827378e24144eb2996478973a11e30512dbb6ffeee32118505ff7194d37283935fcc9a51e</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JEXL</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/jexl/tags/COMMONS_JEXL_2_1_1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-vfs2@2.9.0?type=jar">
      <group>org.apache.commons</group>
      <name>commons-vfs2</name>
      <version>2.9.0</version>
      <description>Apache Commons VFS is a Virtual File System library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">beba9c4909dd2799ee95c8e0c280dbf2</hash>
        <hash alg="SHA-1">48115c2fb1c5f0a2498a4365162d6b69adec73f3</hash>
        <hash alg="SHA-256">266f96b77aa18773191f6992fc7910999bf8ee8a244ec67a3398b486eb726a7f</hash>
        <hash alg="SHA-512">36506e4e530f1d42fdf001a3cbbe012554caa24c3cd6b16c9ecf933bd3488b267c93b648c94c745a747573b273dbb07b21606e1315ca03d4fb2eb7295bbe4f2f</hash>
        <hash alg="SHA-384">038f94dfedf3289656fe5ad96fbe635e3c402c253a679c47129d9d353478eaae586549114077349583ac8d2355f4b9c3</hash>
        <hash alg="SHA3-384">0bd45f6a6f2bfbce4eb1eff305b908943c28600241658566331361127e3036be06da1adb8e711ecce216991b8b7bfd1c</hash>
        <hash alg="SHA3-256">78410e63856ba2515f99d06a410bf8295ddd1afb31902ce72e2b0bd829dab85e</hash>
        <hash alg="SHA3-512">85df6862c58ee9020bec4b02ed966ca55b97bf6cf44cc3ca14c12d204ca2e229623fc07750dee31670c0d664e87d502b67b0baae4d2395d629909978ac037fbb</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.commons/commons-vfs2@2.9.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/VFS</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-vfs.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-hdfs-client</name>
      <version>3.3.1</version>
      <description>Apache Hadoop HDFS Client</description>
      <hashes>
        <hash alg="MD5">df16b76d5b2b4c33561e94ae47827637</hash>
        <hash alg="SHA-1">5ad71520a3632a9b5b2c65f9f53d1c9d80544ee0</hash>
        <hash alg="SHA-256">23e86d658b016394c263f80b8e318f232167a8862a07a3d50e5369175f3e8a58</hash>
        <hash alg="SHA-512">6e2dd639e395cb2f13aa8cff69b3e705d063d433a805e2c2c8c79c1d51376a0a8816fed27116b7c57412511d691208a62a81e2f6efe9806b08a45c2a9b83c283</hash>
        <hash alg="SHA-384">234de40f855a1f0ed7fe981846ff661a2b442cd35c784f7a700b694369b26bb24eb9cd26677c97ef7f0d3f17f539fa01</hash>
        <hash alg="SHA3-384">17334386b86822f099102eec49d9107ea3e60bc3005a37ac4a3c8b729d6356e3bc811fdbb9a8e187df49ce2b8f92289a</hash>
        <hash alg="SHA3-256">be94bc39c7966392594df41549640e70dfd33c44f87b1a39d9d98614071d86e3</hash>
        <hash alg="SHA3-512">cac918ddd7c940f3ced2066552ffd0cf1f5ebb73c9a17ac0fa1bbf37200926d4609e6d15a96475f72b54fd6b0b4ac318f15709406f6e5f0c701b82352e5c8ba6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar">
      <group>com.squareup.okhttp</group>
      <name>okhttp</name>
      <version>2.7.5</version>
      <description>An HTTP+SPDY client for Android and Java applications</description>
      <hashes>
        <hash alg="MD5">1943a0ecbb1c503874c8c483284377e4</hash>
        <hash alg="SHA-1">7a15a7db50f86c4b64aa3367424a60e3a325b8f1</hash>
        <hash alg="SHA-256">88ac9fd1bb51f82bcc664cc1eb9c225c90dc4389d660231b4cc737bebfe7d0aa</hash>
        <hash alg="SHA-512">4cd162e8e54127fec029f82aee8797ad4eb87ae976973b0148d7c405255870e5cb4e2ef52791116a5bf52b87a0d0d7ab47688b921eba01272616368a5cf145d8</hash>
        <hash alg="SHA-384">f7513f7d5728d29ac93ea533078c6ec61b3407671b0fa7a0384669c7869a69f1d2e98268c9e5a62ab3410dbd4c9fcea3</hash>
        <hash alg="SHA3-384">ff2e156a63cbe975c1eb43149ae975fe67aa763750487ebc0c42e33b91076b251a341c820b967cbaf3780327c894723c</hash>
        <hash alg="SHA3-256">a673cff4dff28000634360d74eee71a0f9095018b9a3da1dd844ad5f7c95ba93</hash>
        <hash alg="SHA3-512">ddb64671877c7267b0288449632733c806ebfb81c039d74e22cc771e8942f78a63de029e201c01921a2b70b635350aa49b008558d0bbc3af57dadc31adb7cad5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okhttp/issues</url></reference><reference type="vcs"><url>https://github.com/square/okhttp/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.squareup.okio/okio@1.6.0?type=jar">
      <group>com.squareup.okio</group>
      <name>okio</name>
      <version>1.6.0</version>
      <description>A modern I/O API for Java</description>
      <hashes>
        <hash alg="MD5">164d1c28c323cf6e2a917d60374c5718</hash>
        <hash alg="SHA-1">98476622f10715998eacf9240d6b479f12c66143</hash>
        <hash alg="SHA-256">114bdc1f47338a68bcbc95abf2f5cdc72beeec91812f2fcd7b521c1937876266</hash>
        <hash alg="SHA-512">17bab3c4fde83d0865d2c3ef61b403059e44b83f38b3c42ca352be4faa28afa08416d2525f2941baaa864c7a4730672228928373ba2e2179d9d8b4976d6747ba</hash>
        <hash alg="SHA-384">a00830a0a6b3f435e852a7eb181b057ab11e6563cff8f1359503f498d204b9f327ed78b31e5ed902f8e154ce65cf7dad</hash>
        <hash alg="SHA3-384">9ab3e8c6e047006aef7f33b3cc50fb2603efc4a641c098e8ccaf4ac2d9764defb5a9739b5bc7615be1a6b2fab02342bd</hash>
        <hash alg="SHA3-256">150d6944c7c3176db6815bd343a47ff9c6a81091faf1280118fbed002aab0789</hash>
        <hash alg="SHA3-512">9f726097dacf3d9965d4334945f4ec807d186d5f80369303da75740d5d05f071838961f088543425c59123357d768a2065b620c94bb9705b3ce1312ce6d52f71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.squareup.okio/okio@1.6.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://github.com/square/okio/issues</url></reference><reference type="vcs"><url>https://github.com/square/okio/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-jxpath/commons-jxpath@1.3?type=jar">
      <group>commons-jxpath</group>
      <name>commons-jxpath</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61a9aa8ff43ba10853571d57f724bf88</hash>
        <hash alg="SHA-1">c22d7d0f0f40eb7059a23cfa61773a416768b137</hash>
        <hash alg="SHA-256">fcbc0ad917d9d6a73c6df21fac322e00d213ef19cd94815a007c407a8a3ff449</hash>
        <hash alg="SHA-512">351c5f6af0711a955e5d839551833015956812765e9dc35e78bfd7c99656f1ecec5cf6587469229688340f00c2b5d07917993ccb0809561e0dd35b4ffb074d93</hash>
        <hash alg="SHA-384">327139dac9f672ffa772480a754ec6c3125a3057faf7911188a34cc52d088770efe8464bb303e2347be7f55303d24493</hash>
        <hash alg="SHA3-384">b2913b137433bfc2fe78ed57dc44de5737410947e809c0b8bb1d6a83ad333069e41fd97167c20e9fd3a052c2a7dfa9b8</hash>
        <hash alg="SHA3-256">3bbafe102ece8be037419a214a524f0c52fa0c3455322d3c2633f1c075e9efbc</hash>
        <hash alg="SHA3-512">e050591ecd10746ffee670e1e95a53afa8b43b01164c3ae581bce9ee0a5410eece3f71d05175486eb4d186de88d5defeebef52730939611951ca1cd50ec978a7</hash>
      </hashes>
      <purl>pkg:maven/commons-jxpath/commons-jxpath@1.3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>xml-resolver</group>
      <name>xml-resolver</name>
      <version>1.2</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">706c533146c1f4ee46b66659ea14583a</hash>
        <hash alg="SHA-1">3d0f97750b3a03e0971831566067754ba4bfd68c</hash>
        <hash alg="SHA-256">47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1</hash>
        <hash alg="SHA-512">eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a</hash>
        <hash alg="SHA-384">3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710</hash>
        <hash alg="SHA3-384">717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a</hash>
        <hash alg="SHA3-256">bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46</hash>
        <hash alg="SHA3-512">762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xml-resolver/xml-resolver@1.2?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/</url></reference><reference type="website"><url>http://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.26?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.26</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59e6a6c94326b8904dda10bf0ebfcd85</hash>
        <hash alg="SHA-1">81f0f0bbba14ca6e17d52f0b1c7d52da8c4da098</hash>
        <hash alg="SHA-256">7da41000cb31ed2b60ec3b5001ca57a07eaae289ce5983ddbb1df4fe8fe31208</hash>
        <hash alg="SHA-512">6aad0a6959b9b3759dab0fe690a074324ad2cdfc99317da7fa72b653a263a318e6cb0c348f8bda427028ecd14a7cca1fa736bc9cff97245482e1dac4cbee65ee</hash>
        <hash alg="SHA-384">a63608903e2d56875aa473169ec27410c329ac76da81004a7e939580ef5dcda046f3646b0f73abcc96fc9d15da6c8452</hash>
        <hash alg="SHA3-384">e311044d4b9044f73bf328a472b29bad5d604c2549832030a8997fd52f635ea938e2ab40ce447ed3d72cac29754ea41e</hash>
        <hash alg="SHA3-256">52a72fce0b8965687784c4a5b017d86385834c09cca7393d77181e116e986250</hash>
        <hash alg="SHA3-512">1c6e319054953d6814f97da9cd8816452a7a26c207063afdc763da34c8f46fb6d1508aad3ea04545897af18d0f45538af359bfdf5308608601f7a308ba5638b9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.26?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jcl@5.3.26?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jcl</name>
      <version>5.3.26</version>
      <description>Spring Commons Logging Bridge</description>
      <hashes>
        <hash alg="MD5">55930335e83f78870e8c6b6a19809f76</hash>
        <hash alg="SHA-1">2005accc2cf5212c614df3760b3a434e7dce807c</hash>
        <hash alg="SHA-256">73ea7af1c2a40020455381056bd3cd8bf2ef50d92602ef08c6df951320211aef</hash>
        <hash alg="SHA-512">6d511ac5e971760270f42713aec0dc3f8423d390389539446bbaf7c2420966f7c4c93fc33900f923a4769b1e689914944d4598a74c121954db5275961de6f961</hash>
        <hash alg="SHA-384">f64914397f717ad5b11da5fa4e41d2c3790a1387cd444f77fe3e3d2c7249cf9920ea9d3794dde6bd0625e66d60b3db66</hash>
        <hash alg="SHA3-384">87b03d6f15452cc5d1967ac19b582ed8b486119827c08d1f8fa03539bbce507e32beb7ca99a9a03723c7651a071f7439</hash>
        <hash alg="SHA3-256">e926187c6825dca90e0d845aec49aed14b5468655a8ec4a5eb149254c752235c</hash>
        <hash alg="SHA3-512">f50c7792360c438f4136dc22cee26be82405c34bf7fbccfbfdc8c718b967336ea9c064d21281d5475c8b98c98f76cbfa0464cfebbf5f4b8acfb21a92bf9c0d50</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jcl@5.3.26?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@5.3.26?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>5.3.26</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fda115916db9ecfbe97450591b12b589</hash>
        <hash alg="SHA-1">203a417a6022ba6597db2026b64bac656b7ede0a</hash>
        <hash alg="SHA-256">c04e2e1850f434488de769d0972403a85fbf740b585d077248a1d74e6fa716c4</hash>
        <hash alg="SHA-512">3e94a486085b60bea06a10df835f8421c6bb283131072f4c7aac1295304a883c5e6a4dd1eb0b700e80a82f8a0fce01da2985af0a8857a2115d4e33a7c30ac743</hash>
        <hash alg="SHA-384">ccf4d3fc438636a672fc6f18733e2e8e3505f662ae287cad2f4c7699700e33682092b0daa2269f1dfea380af48eb06d4</hash>
        <hash alg="SHA3-384">7a37867873045944abd099a3aa5fe92b371d8d0c7200719b2f8a717c80f7d31dfec4352c709835f421e3d3e5b45bc982</hash>
        <hash alg="SHA3-256">20c89022ed9a3b71cc7d2c18449356383c44e4bffc1e7bdd24f57ccefcd2cdd4</hash>
        <hash alg="SHA3-512">19fe994278db84164d464d7eef8e36098290e25cf098d061913aee7da7aa28f0f9dc4a188e05aad4f16d3631da4fadb2e8e3f161fb755013bb19555bd9f6407e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@5.3.26?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar">
      <group>javax.servlet</group>
      <name>servlet-api</name>
      <version>2.5</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69ca51af4e9a67a1027a7f95b52c3e8f</hash>
        <hash alg="SHA-1">5959582d97d8b61f4d154ca9e495aafd16726e34</hash>
        <hash alg="SHA-256">c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc</hash>
        <hash alg="SHA-512">363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6</hash>
        <hash alg="SHA-384">1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824</hash>
        <hash alg="SHA3-384">2c62a7bf3f321aaa2ccd80e9fa633eb36a672a208c79e117a91e9812e3abfd7df3934930191d109be65441deed2cbd20</hash>
        <hash alg="SHA3-256">319bcec5b7eb366f63655cdf3cbdaa385e160f61edf3cbd94938e53b59905995</hash>
        <hash alg="SHA3-512">dd44fc227d6e790255376ef0473746725fa7703d38ae3805715910d1846f41ac789acdc2d2ba1ebde874f7ee32d906608966612c90c618872aed3fca8e28e952</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.servlet/servlet-api@2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>2.0</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">caf24b81b9d57e6d4f68b1ccd36e00a3</hash>
        <hash alg="SHA-1">3aab2116756442bf0d4cd1c089b24d34c3baa253</hash>
        <hash alg="SHA-256">880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa</hash>
        <hash alg="SHA-512">93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8</hash>
        <hash alg="SHA-384">63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe</hash>
        <hash alg="SHA3-384">fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760</hash>
        <hash alg="SHA3-256">66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4</hash>
        <hash alg="SHA3-512">0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@2.0?type=jar</purl>
      <externalReferences><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c1b12dd14734cd1986132bf55042dd7e</hash>
        <hash alg="SHA-1">01e71fddbc80bb86f71a6345ac1e8ab8a00e7134</hash>
        <hash alg="SHA-256">501d3abce4d18dcc381058ec593c5b94477906bba6efbac14dae40a642f77424</hash>
        <hash alg="SHA-512">85473a29d23292f49092af9e7a7a63993206847c53b3e71f3c67245d68f7b19cc7c341e0ece409eb5e96602df98a848e957d8691fdd2c5fcddd807df9078255e</hash>
        <hash alg="SHA-384">5c54d6c497cb329c3424a30319bf657ea222349eadc5ae74c30e8dc1525d7b60b7785f4d20370267b03343dd738cc13e</hash>
        <hash alg="SHA3-384">98ff0b2a4dfc1faf319d4b0d38376c3c7a58b65d071db293232eed810adf2e525fecee3be45c99b41e20cf6a3a8ebef9</hash>
        <hash alg="SHA3-256">2dba45f78a0d37402083975e18dbb3201705faf7e533c3e9721b9364c2a1ab0f</hash>
        <hash alg="SHA3-512">76ef73198269cfd0922f4ae86c8b7e6a9cd1b96ee55da43ebfe57dd34365cc1c5c5630fadf79e46156a52b6b96b7d1f694f5e4f5c4f6a3d3ebb31c927e414435</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">10d19982a8890f6eb37557af2f58e272</hash>
        <hash alg="SHA-1">a7aae9525864930723e3453ab799521fdfd9d873</hash>
        <hash alg="SHA-256">2c6869d505cf60dc066734b7d50339f975bd3adc635e26a78abb71acb4473c0d</hash>
        <hash alg="SHA-512">a978384791bdc074df8039ffc95bb93f0f60d14d476861ee2a0ce208b33a991c486a07345cb80559252c3ff1dea14d3efb818c19bdc18435946dc8754d8e6ee3</hash>
        <hash alg="SHA-384">d5111c69020666689414921ae4a8950f9fbdf86dec1360f6827beeee9ebd3f78db74e69c76e0becaba47eb34fdaaeb5a</hash>
        <hash alg="SHA3-384">53b1a8891482e16a7d8849251cb0dcd1aacf6aaa2161a73589d9742ad96763e384d426d04db762e56fc4536f4e719084</hash>
        <hash alg="SHA3-256">14f7b3c51c96f7429f7c60a69e3b7e4f9f2207820141f197d56b57018ffd5640</hash>
        <hash alg="SHA3-512">75e4e4fb847fdacdd497cf6b340362581ab4091120ccf2ec32a273709d336af0f78c90ce12b2dd1d17354aa08583af0d3ded89bb415720f45f2d9c110d71dd7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">6ee422ee4c481b2d5aacb2b5e36a7dc0</hash>
        <hash alg="SHA-1">f804090e6399ce0cf78242db086017512dd71fcc</hash>
        <hash alg="SHA-256">b5d37a77c88277b97e3593c8740925216c06df8e4172bbde058528df04ad3e7a</hash>
        <hash alg="SHA-512">208953cf72691b3bab1ca2f9a045cccd3d75c46c90099ba884fbf16bc3e45045e5cd014d2c68c96e8a8826f87a5f0e18cb34b35e7ef03348953869c21e197367</hash>
        <hash alg="SHA-384">e806595862c5fcdae801d9845befc1d12c97e6036ee839d34590dbd785a422d5832cf4fc5c7ee6e1a5ee7a59f37740f0</hash>
        <hash alg="SHA3-384">4fa59f572f2e100e2eba6fc664a3b9f804fabd911a552cb40805f39e624a9c04246b679cf4b017bb782c8272877f49d2</hash>
        <hash alg="SHA3-256">cef17d3a539cbf798cfb0bfa9faffa2b7baff3670b50743e91ee58b4c60b59f1</hash>
        <hash alg="SHA3-512">fceeed5cb8fe4335d88282d15657762a4728483275a7ff45f50b9fe6a999757ccb37c415d001eb6250226f98f5c576b1b36a83e601fb393cfd34a811c2df5d00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar</purl>
      <externalReferences><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="website"><url>http://fasterxml.com/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.20.0</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">986cff74b065cdd1d6b860ac1e9a20fa</hash>
        <hash alg="SHA-1">689151374756cb809cb029f2501015bdc7733179</hash>
        <hash alg="SHA-256">89d761af83de7e08e3c1916bc757242cedbbc1f38fb76fd13f89ef36b2671a45</hash>
        <hash alg="SHA-512">64f208ca34f3ca9d7902024d781b629795ffaa41ac4f4dd4487e1e0ff97351d62d83f399d6f8b5a7044af5d9b117a7cdd74a7b0fd2030af5bc4ba05a3e344a24</hash>
        <hash alg="SHA-384">6c33bce8423e1ac38ac9f11fbec247bc2255dc2a9f1d9994e87c6db861de51df606d1a4163b1c1a3e57987f0f64e2694</hash>
        <hash alg="SHA3-384">7abc1977a8bcba026bbd7d266ac0fef80e9c30ca1358227c4e951065566b1cfd78acecf0e2348367c7d096d971532ff2</hash>
        <hash alg="SHA3-256">f1e8286b150ffa570adef3382ad800fb88639fa3c274d683448e798e877c3ee7</hash>
        <hash alg="SHA3-512">2695803fa6533ce0ee7c29eb7bb0dcd7523c0146d0ebe35ccbd1686ec5a427f6f5b705a4e1ce37ffae41a834f48c576258661074dc9b8c5f7254fae7447a528c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.20.0</version>
      <description>The Apache Log4j API</description>
      <hashes>
        <hash alg="MD5">f9446464667f0139b839b5e9da37f5b9</hash>
        <hash alg="SHA-1">1fe6082e660daf07c689a89c94dc0f49c26b44bb</hash>
        <hash alg="SHA-256">2f43eea679ea66f14ca0f13fec2a8600ac124f5a5231dcb4df8393eddcb97550</hash>
        <hash alg="SHA-512">851016b38421d21864bb3073089c44000f941bfbaa9dc518db7bf7fb3c7f942bfb2c0c7b832e375e82b2f285379bd0935e42aa1833817daacb4fca2a6a9500bc</hash>
        <hash alg="SHA-384">12b05c61f49caab0b845e93967228a3bd3ab096c4ea1516cb7263f49963137a688a178ddebe790ccc3c0c73f2d4440fc</hash>
        <hash alg="SHA3-384">87151e10c182a828d06fb5299361f01091f5ff066c3d8ba1fac0358d40c370a06ea46d9d93613499ebf94a855aef2f41</hash>
        <hash alg="SHA3-256">2047730cb45c594da67d019cbd9f379e1d409a574deadfc9bc907461047f1fde</hash>
        <hash alg="SHA3-512">5fde3529958bd5e9567f0dc6015c58621521641cfe0517eb1237413c750558415fdeb45cc1b4332c3d1f09938fc8fe327de86cc876ed52594c216d2c04c9d2d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.20.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">20bd40d026d35a93fe710acb141e93da</hash>
        <hash alg="SHA-1">eb2a9a47b1396e00b5eee1264296729a70565cc0</hash>
        <hash alg="SHA-256">6137df848cdaed9f4d5076f75513c6c85da80b953f4e7acca38098b770763f55</hash>
        <hash alg="SHA-512">a7fe8fa2304c1b013513c1838013804cf601a7148dfef95642ea763c9550a6d844d9a1e528c9c21efc7ea830d13fbbb55e2db2c2eeb5542c4d9f00c127f211e4</hash>
        <hash alg="SHA-384">1d8b0349286118f102014706f02b7851f10ca0b1554bd7a2e1efdda76ccab6e0abd967490d06fca030f2a26289686275</hash>
        <hash alg="SHA3-384">1448a9c78c339abc0768deaa54e4d680091a6e6539ba2589e09ae6f5988176fcef0ee16b0b574a37374eeac0b8c91616</hash>
        <hash alg="SHA3-256">11a9f2311fbfcc334ff2ab26d04fd4e265b94c12f206c676ff1913e90ae4c916</hash>
        <hash alg="SHA3-512">ed2bc1a05c856f7ad3ad71cbcb9d2bc9104d3a9badeadda0886616c1c99eb8442577e16bd8d85ca2437176e379a4307d43c3e34157165210460dfc7bf3ca3f9d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar</purl>
      <externalReferences><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference><reference type="website"><url>https://www.apache.org/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.9.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-vfs2@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/commons-jxpath/commons-jxpath@1.3?type=jar"/>
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.26?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.26?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-jexl@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-vfs2@2.9.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-hdfs-client@3.3.1?type=jar">
      <dependency ref="pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okhttp/okhttp@2.7.5?type=jar">
      <dependency ref="pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.squareup.okio/okio@1.6.0?type=jar"/>
    <dependency ref="pkg:maven/commons-jxpath/commons-jxpath@1.3?type=jar"/>
    <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.26?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.26?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.26?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@2.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.20.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.20.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.20.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
