{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:e2c5cd62-c7ee-3c52-9a36-0643a96d87d1",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-plugin-plugin",
      "version" : "4.0.0-beta-1",
      "description" : "The Plugin Plugin is used to create a Maven plugin descriptor for any Mojos found in the source tree in order to include them the resulting JAR. It is also used to generate a generic help goal.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@4.0.0-beta-1?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-plugin"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-plugin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@4.0.0-beta-1?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.9.8",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16f8316d64b14e7848f8488f141a209f"
        },
        {
          "alg" : "SHA-1",
          "content" : "986fe65310335f62a37d8da9cb90105e604f2642"
        },
        {
          "alg" : "SHA-256",
          "content" : "136d95ada12098f48222638bfdb68ace0e1b518d676cd43845d31eb0aed37736"
        },
        {
          "alg" : "SHA-512",
          "content" : "bcdb964d71380af4fcff00760ab653111e77386597c892a7661198520bd2d822e21ae414ebc92b2d86b0b36ae33d21be510986a37249eacb3858fe93c84ccbe5"
        },
        {
          "alg" : "SHA-384",
          "content" : "1875fdf165b3dc05937303dcdc086b2ee1738c375276a13512dd24a55808111213ebd0d9068ee39494a92850baf61b63"
        },
        {
          "alg" : "SHA3-384",
          "content" : "36cb5e2bd106306681f6ea945992ccc777469c72c8d898761574e4d96af5a6b955b3deb1fb1e773485de8b2c619fdfa7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3b73fe26147b80ddb45239436e892b39ee3c16bac1f956ff5f239fee3485717f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "17eaec6ce154138e3637ddc9edb1fa2903dfbcd394af6851f0d9ce16e815a439d8673c2de8159540fba0e646540df1278dab510749abb097b927e74044781bed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.9.8",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea76db59df88fc388d45dad4fe4f410c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ae79e5910986ae7e511bdb9e0eca12009ea83fd3"
        },
        {
          "alg" : "SHA-256",
          "content" : "46471aa98f27db5c8a90b383294d8ac3b529b7c30afe2bf02ac996cc2c175c99"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dc5f488362778e90a0515369ec435b53569cbfdfef8c522b06a02da6f08035a2d6c58105cf5997eeb47d73bc7a7c618c8e3432c988ff0422298fc95f47aa87f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e6201c7aae296c83b4f8c89c095f42517c28bff78b7f1283bde2f54c7e91f2f4b2227842c429e1facdd38a7eaee84cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e87500be530647506f9c8f02d6b7095f81949bd35c12b3ead6d1547dc1f9950556b375fd244bfcfed828b367e60810e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1518021882c4a30d00cb6f0c1a131279c223b929f2f22c93bb6014d798304140"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b2eb6449c8a7952a129688a7b95c34fa4fa13f8992e3b3e8184bdd2810d14bb2b8f00d02bda2680f7f2e7ea1480a831aeeeb872d5dc8af8f5072339ed142f283"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.9.8",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2fbd3edbf7d0e6e223d7169214c27572"
        },
        {
          "alg" : "SHA-1",
          "content" : "b64ad95a741566ab289916d8073f45d6e03884ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "70103cdd84a039a620fb37ffb6f8c689f490af5c5dc5f11cbc15adc515a62e74"
        },
        {
          "alg" : "SHA-512",
          "content" : "54708d7f93081d9f3464bd5eafac2156b573997dc1dc683f95523e16089cce1c4f365f9c7579b1ef71e1d8439c7fef88507490446bbf4d8cd7d31911a26b4044"
        },
        {
          "alg" : "SHA-384",
          "content" : "062a7571027485d0dcd060ff6f59bcde5bd68802a9e5b386bae46325d254ec031fc46c2269420bc93b4372bee3f49862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a720bfee2c4932289022f8cf0722979ea7d0737f40e5032c0a9bacfec44410c414be78d88be54abebc79842a54e5cc0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ae39504e1459af6b17917df87ddd2ca97bdf67c392a26e9252a93e0d08bb9972"
        },
        {
          "alg" : "SHA3-512",
          "content" : "674be8be4945025d644fc05fe3855df2fcf2e311546b33dfc0c68cc8ad9f0f7f304227515535c6f8ff016a99e1033d4a632f4653725971469c86f6d1b681bfc1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.9.8",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c00db0db68735f4f5e993ef958ac2b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf62656255b038d5df460c95c3c2c75c98e2b350"
        },
        {
          "alg" : "SHA-256",
          "content" : "de166f6c06c217d9333de569f7661ef11d5122f74a78103ed5dd48e8a3bd3820"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e8415840adc131565c10ca2423cf5bb7835e87140b8998f422aa601c0d9999afce9c89da0d4584a3e6c1ca1763c397d9e1cb162832f16d0f7739b4259214349"
        },
        {
          "alg" : "SHA-384",
          "content" : "7e37338d5744fe2910bc48eafeaf8564c8420f88f2e20050b16721a2fb7d1433b872ea9866bbbe212538bb4b0d79cec6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87c9a27a8d8ed31d2a7016ef3ac9afbf6672895babbdc6f3d33e4844335922d492f81dc2065e3f8619ede7c195016bd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b2eb615f5a762280a47056759d17b07dbc29ebe0a9d4c8ad6fe0250853a60753"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a4201aaa0151b50373881e4cc4a91787dc97a8c21a2de785c48b54ac93961f53dfee24f79527ad1a4454d48e044a1e163e907ff26036d0c663de8ea3bbf317aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.9.8",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "724fba630d1325ac672cfbf43b83bf27"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b9b8dc45536107e9e514e038c36aeb6f7f9a33d"
        },
        {
          "alg" : "SHA-256",
          "content" : "20f3c83142e89cb40a7af50ff22df38268cd0ce8fafdca4244453207b8c39750"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6328a923d2426d1de2c4b9297c1c8009a3e80500361eae5af6def5e47ed89f852065309cce7042a740921b4cd68a9352822f84f4d469acb067f1197b73da702"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2a2ce8a0c37950e0e6a93b03c5b61d52222872fb0355e5dd37a5b636b043c0fb22270e2ac28def828be3d6f4c7666be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d7730191df18abffe164e4bd0484c4cec7cb101622e479a117b657f21b537f94abc2aedee2b6f848dfde9d093d63107d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71e86f7b220c34faca308b6a54f7346256f57d97ec1c14eabf8d6c5f74228009"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1fbb63ae4cedaa56d4876857684eadef1724b65d94a083972bae483df5bc07f4f580a450c370deed72638a264927cff2cd25a2cf7e816952d218d40277a7cabc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.9.20",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "887341c5fba0ba48bc5d2d57d1f698d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "719030b9a577b2897983a23389a8e10dad393b36"
        },
        {
          "alg" : "SHA-256",
          "content" : "55672351fa78c1004188944ef874c21b924c32b1333a834ebebf65c3c499739b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae9368a3388dea6a5c6ea8a6379cb8c336b0c4342b5b743868b218e27cf565214a7598e519f1e7a6f4920212b72970400526f69a2fccd16a84cef70b354b2ffd"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ab572b51ccc2e6bd4270fa82ee91e75dc13e7b30322a30a4fdd085fc0ed697e5041d37c561d0a180704dbff9175904f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ec901acf20fbc9f850e1bd830a52008d884f2599e28e7cd2ebdb8b3d7eefda2cb789a72f78b134881939c92e3e2cd89"
        },
        {
          "alg" : "SHA3-256",
          "content" : "976f9d16fb5bef8fcc5210dd7e7d41d1e24056f1e026f89f4be09e62954be3ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "73d6f292258284780f74117e922806b1df2bdebd05029c00fc94cb5b07581a256d0bb7c07d2961b535abd012b6fe83e497eb65963a83add9b0edf754464b764d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "1.9.20",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "956e10ad44281cedbf628fbbd141829a"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ff232fc989b53c8b0a6faf3b3160b19c7c7260e"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d0725edfc618555bb70509865307287b80820438a327f778dbe8d6f8e26417d"
        },
        {
          "alg" : "SHA-512",
          "content" : "212f0e031ddfca69095636e2862854f2501bd13752f418ecaa7858fe525e0a805f8f982a3a7b254668a08b18411f08f227a98b63b1cd819833c420920bebc8d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9617b3ff3a2e16503b3b21f12bf7a2acd917012d80c7b0aa5fca0cf8051de3b8ca54cb64296381217ca75566bf927f7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4e7b27393fc215d61df745f730f73f3092b6dda5e76f7a5c22530bba1601af80a2883979e2188ecc9984762f737ac13e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8dede3eae6dbe2200e78643d8f0bb755e986dbefb49c194cf631577a59bdc24"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a0de8e06df3271155694b0de882394d05869161127e707dc61fdb2ffb872b2aa0fdb439268ad528f1aded32f63db32ac8a1d3f7667e87ce899a52e31f7cef54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-named-locks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.9.20",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "003ee5056c5f7ad9946922604a6677ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e0c56befb978b02c91c2684a2bb7906b18314a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "04c3c41454298dff4f42ad2b69d5b18e74c3c9a329b4f501d717e157d56ebd11"
        },
        {
          "alg" : "SHA-512",
          "content" : "f0210976e5377c175ab45a301f2df586b85011d710b8a515043e2ed89110e6c89fe0ee56589e5413a776b6a8e4f23a9d2752b607bed8cd97c4f0f2dc9a50c287"
        },
        {
          "alg" : "SHA-384",
          "content" : "bcdbfb3e9163247e3c374496beb242fdbd105db4f5cd2dc2ad4e3da7c6e20ec5f3abde24efbc250b3d3b5bbb37e942af"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f100acca4d9c36f4c8d15aa4695e5500aed812278b4fd27d89dd98da9d7bcaf3304f1c97cee81d3c1a4b5c2e48b65a9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bf486bde5a1255c154b088f95ef45719150a77c12961b61990bfb708792d381f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "46cac08c5250f60d10b9b7ec3cb40b3fadd5d14d08331ad0f7fa912add7e79bbd4e58823b49e684086f83b2733f9a9276e435cb51dc89ad4f13580635d4f1857"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M2",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb805c5b2e22c8002877f0caadc6a87c"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ace70e1ea696d156f5034a42a615df13a52003a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5"
        },
        {
          "alg" : "SHA-512",
          "content" : "89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "5.1.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2560169296aa94492af34af2115e9511"
        },
        {
          "alg" : "SHA-1",
          "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "33.2.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872309e5982530bdc7e68096c0d53cd2"
        },
        {
          "alg" : "SHA-1",
          "content" : "818e780da2c66c63bbb6480fef1f3855eeafa3e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "452b2d9787b7d366fa8cf5ed9a1c40404542d05effa7a598da03bbbbb76d9f31"
        },
        {
          "alg" : "SHA-512",
          "content" : "daf6b2eca6df556f70052361657ad11167a21a3b8a76b5821416fe1f7bbe262367216ae5f9135cc8ddb4f94e5d532ca79555b438a9967fbea41e26b203914b85"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdfa6908c68fcdc4969a260998bb65da326ccd3afaecd9c1b6fe72ce84aedcdc30f3c14ca812647a62e65da5cc74f95e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3e516ba3b32697eb71c511c0fc872113ee4ee6e6239241f9c6e54ca53b06d96a161de9b2431ef77433e7793e3b1cef3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a48184d72e92dde277e29ac0ab73d8b4b8afb7d5ca4db94a08f7fd5a3934379f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ac0a9fad5d942e5b00423116e773196f8f37163b84e48213891500b5b060f89e3380038efad7ef7da5303c6a2c7f6c0e73d0b48a9024b759edcc3a26ea89551b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.2",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes are conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f75955b49b6758fd6d1e1bd9bf777b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4a06a64e650562f30b7bf9aaec1bfed43aca12b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51"
        },
        {
          "alg" : "SHA-384",
          "content" : "85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.8.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92089dee35db6423c2128559238430cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "5d0d8c71b61b38ce127a46702a453f9aa09a4ee2"
        },
        {
          "alg" : "SHA-256",
          "content" : "081b40e0eab033cd5ac72d2501bfff4f5fd2a3eef827051111730ea152681c72"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f8eeaf5089244ca8e0eec46ab0d57924dd187375413ddf55edf5881a2fd17f7b4a12abd0b402e8a2d5c8428bff87809f40921eda9f6ddc20585e861825618ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "b689762c3c4a75b2f6eda24e97c6d77c1a550b755baa1d7f6b3151f413421380232d5474f3c1b2a15665651d8909b456"
        },
        {
          "alg" : "SHA3-384",
          "content" : "929e03c89948c96515c8ff58da7653c1396e261b7c5b7d22575634f7266496d655397864ab2e129778af759993f57520"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1006c9de6b5f60a8e2ee5839c2fbc128158f6008458e42e65123e7bb2e3cbbc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5a813f86a7246cd2f0021d1d6891497128cefcbb2258d3865dc41eb7f4fb5f21c5875f21418a8bbff2b6b100ed0523e7101b7937aa84b6be87a808cfee73e50d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.8.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.27",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2edbe0dbc934692794aaeac6006055a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8dc73f4ff5eafcbb7ec035ba54736e828b272533"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fb4fb6143fdf964024c3cb738551524b9ea84e5c211cd660c559ad0703e5230"
        },
        {
          "alg" : "SHA-512",
          "content" : "34ae1399e75560d6aec6743ce37e10d2236342ec58145c3fdd7b03340f4ed3ef500f824c845d452dbb8c3f14d118c855707de4a080074fa572daf7ccfef4dddf"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf31f04d414db3c864a403628707df8b36c379a984d75804e5cbfeeea5fea54d2510620de045c0b01a7745063b3135fb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a439b4e81260659af067e91d5e2482337dc718cd32abc08562e9a90fee45da6a0cbfffdc7190b13ba662ed3153fcde1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8cd271924ed99a870e9f8c17796e2ab0a3e69350465508517992bee0cea6bbe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75a3e2cbde1c45b70c1b4103620f76673db127e17518e2ca51cff1e6d7a84041e495c71171490004650d6476679d009594db2557898e231962bea3744914c501"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.27/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-tools-api",
      "version" : "4.0.0-beta-1",
      "description" : "The Maven Plugin Tools Extractor API provides an API to extract descriptor information from Maven Plugins.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8e47c349dad09e83661040f44ac3fe90"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b305ac707ce83beb7e2fed4989a10a64905a6f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d05032c9937a3bc028041fb66bbbd5ab9085d47061a545d3fc23e31f39de954"
        },
        {
          "alg" : "SHA-512",
          "content" : "f82087072a60efde6c00224a046ad26523434d5eca853b6a342773f50152f6f871096873b894b4bc138b7ea287913869977ca807a43e4b82e04a4608ba2f009b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3a654a19be6c6852c99381440a37c5fc331fc78d62197181bc98937b00c8d0635720b03c40539e9caa49e30a5d4acc5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cebd104afa6e911953d41eee2f6136f97ec1788b16941dafe8d9698181801924a094cb008f59927944bb79a8e4d7af45"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2402a8da1dfe69bf79a7ea1b8767f20e6fdd28daebaeaf11f93499efe76c3bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f8505be39b2b650461d3217cf4f91c5e84a97c689607124db649ce414ff8565aea89ddc1555289e499b8372ea37ae3473975a5b2ab3233643668920d15c87549"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-tools-api"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-tools-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.reporting",
      "name" : "maven-reporting-api",
      "version" : "3.1.1",
      "description" : "API to manage report generation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e1e0b2f189c861995e33a2a746501bb"
        },
        {
          "alg" : "SHA-1",
          "content" : "74ca00a13e46d065071cdf6376d7d231e0208916"
        },
        {
          "alg" : "SHA-256",
          "content" : "25be6603c97d28fa3dcd122073054271c8fcaf667d220dce7a26a61a6f3cffd1"
        },
        {
          "alg" : "SHA-512",
          "content" : "a129606b163aab3cbbea22c8157a4349952739211b878aea8f75d4f0f756b44c3f0d40bbeeb682af35f5538d25dad3c02fc67fcb6eeb8a4235eb93e9200e7ed1"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa1c5cf8c8069176c3c35577a58a0e9f5bf03bf387282a63fb11f4886dbd788aee7c651efe4dfe35b5665c5ccaad10cd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0e4d69e1ee5ec90007f84e3ba423f2e23b343774c7f4c847f4d81194b65b6b5095f721b704b598da1e99474872477f1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7e251bf4ac0468511e0f58a6203257b12898138e7af42e0798d5847ec4076c15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "68117514c3a2a0f0e110b64da6d4135aec08c901d664952ddb41bc9a0934bc34e0c82e960ceb75f192edc266932ff6a22953d73fa66df4076c5bcf73ff07ed61"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-reporting-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-reporting-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-reporting-api"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-reporting-api/tree/maven-reporting-api-3.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-sink-api",
      "version" : "1.11.1",
      "description" : "Doxia Sink API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1bd5c9efde9f14969fa881b87fe709b"
        },
        {
          "alg" : "SHA-1",
          "content" : "59c2255f58c78fbbcb7e638e82bd2914e78aec8b"
        },
        {
          "alg" : "SHA-256",
          "content" : "39ac38bb7d752ea003be17a0065522e4e1b076a4f7e374bea55259f3e133f28f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2be3a3859737732cc7d5f6bed028d5f0ffbadd90c4e79a1dc7aaede258496c7c4017b49c606d2f4fc2c56f8df327befe21766a483147840b122f0606192555ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "710aa1003a7d35c7e66efbfcfda24ba3c2c0f19e55f6be6e67d61aaa92469d55f786c078ede479a394caf7b3466f840f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a1960d6bc80fea9b2e80ec26d97ec6afa5463142be0c135dbc3146ce6fc33b1d74bb393fbd7ef025fa453a1636a199c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "641e16336ff9efb2d8ef73040d57ede810395cc0309bfd2285301b1c4f334164"
        },
        {
          "alg" : "SHA3-512",
          "content" : "20769dded70cad7be78bbe3a9a11fd4a277b6f8523aa067de33f7ec7e4638b9903f5733307938c4d44db9c14afa3e0253d4ec5af0aa9aa7f9fb727a9fc9f448b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-sink-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-sink-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.doxia",
      "name" : "doxia-logging-api",
      "version" : "1.11.1",
      "description" : "Doxia Logging API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6452e33a36b87939630e0b18f8ffcff0"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee28757cce6ee0215bac550dead25074c97c532d"
        },
        {
          "alg" : "SHA-256",
          "content" : "243c66f842cd2b3ded7c6d2c36b177a65c3f5d94800cef988ba3e29ec8cf60c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "a09084b6973c059654c8ff171d1eeff236f9d9737149ccdeb83ae6a6104df41a5400aafe708ef3412835622a6385bbbb9342bcf775050a859544c005866c66a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "88d49fe6721215cf896afdb0e99baf54a4d48c8dcc610b4e1afd160f92ac19ac3798f3c83e0bb71bd33c960e12108c0c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9fb11e49f1a3426e2e463a1354fa7158b884c8841b4ebc838d11b2e3b35ae321648f245239c132e681aa4d2fffe267c9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "558bdecdd6ebca212693bf51b9fdc6f278aba1b7b80c94435836209f5c5855ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6042f2536f4e0e4179d58d3fe145d046b08dc4c2987b0c3169fad7e3d3847972154f86e6f6d8fd3812f1cdf4fa93a0051684c0cb523564de7743eb6ae154f98d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/doxia/doxia/doxia-logging-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-doxia/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DOXIA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-doxia/tree/doxia-1.11.1/doxia-logging-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-xml",
      "version" : "3.0.1",
      "description" : "A collection of various utility classes to ease working with XML in Maven 3.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd868918ebc742350840124ea4422ab0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0e73c21402f03c2765674b8dede21673b3288cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1a510a87a62bd2d74ac1472dd31c3f9e9b0b8b8568f37d77c0f135415bebd05"
        },
        {
          "alg" : "SHA-512",
          "content" : "422f2ccdda00dd8c90c2f5b5f4ad6f0410fb6f2bcb3429d196f7f39c96a44a6709c70539648214d5b7686a70240a6c16c7b985b943f8002d318f90896230a259"
        },
        {
          "alg" : "SHA-384",
          "content" : "da397eb08963f4366d2119af1d993efa00fee25e50b09454422805ce83e662507e2afc7f6b4171a9c5da111d7ada3365"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d21cc3459871a9f6e9a893df8f8bcb85a4f20cee96e821098e2a0f2655b20c9f01f1139e7dc4a80444d627d9854c56f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bdf4b087b5d0ed2473c5ff7524b7c6dff791738715aa5499f14ed11729b3690b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fedd50a88c651e5a5da1639d5c507634bd50cb9103acfdec9e0db7827656855b7d1ee19ec7318de91996e86dc5e9c38f1b507433498c75ae327b865534999a9a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-xml/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-xml/tree/plexus-xml-3.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.11",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "567159b1ae257a43e1391a8f59d24cfe"
        },
        {
          "alg" : "SHA-1",
          "content" : "3acb4705652e16236558f0f4f2192cc33c3bd189"
        },
        {
          "alg" : "SHA-256",
          "content" : "e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.wagon",
      "name" : "wagon-provider-api",
      "version" : "3.5.3",
      "description" : "Maven Wagon API that defines the contract between different Wagon implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55a4be47ca51799ae3c18ed521f296df"
        },
        {
          "alg" : "SHA-1",
          "content" : "39c44ebb3945dee359665272d8acb83f9460491b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e72000338945ed3e96f8e4f578d1d0672e1af7e19c0e9014197ae5b31af3ef4"
        },
        {
          "alg" : "SHA-512",
          "content" : "e690aabfce0e7217d9810ffa8fc688bcca1e79fb9f440880f44c6e5e204824e6985dfe4171682a3ad60d89566d2d95bcedfe0cd62f59858ef089dbd8193b627c"
        },
        {
          "alg" : "SHA-384",
          "content" : "c73cda1798ef0ac17d20545182c639cc26355b1af97cb6f5571b6b655d9e7cb92a0e25183d7b05aabc6c87c38cfe9bfc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fbdb2900e8e9694b695a658a8194979930cd40d89d79c3dd0f66c690d37b27f915e7e12ec8a674ded950637ae87d5006"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c00e9215820072e746b9f5fd0367f88b6791855f760086c69377dfed33222bf4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2c1ba65d1f2d0aaa86c6391cf84501a148ed0c9106a2884cd824582580db96ade64729587ab157fee167c50c60d5fdc4fa810713052abaf757d4c65d98add836"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/wagon/wagon-provider-api"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-wagon/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WAGON"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/maven-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-wagon/tree/wagon-3.5.3/wagon-provider-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-java",
      "version" : "1.2.0",
      "description" : "Plexus Languages maintains shared language features.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc0976d9a939e5afe5c543f72438f290"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f161764aac786d64c4cac26511215369250d4fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d2d63cdcad46feba432110ef64bcdc8f8fad48538fda5cd2253686b45a94304"
        },
        {
          "alg" : "SHA-512",
          "content" : "c221a9b754734d0500e0cb0eda7f2cf748c48ffaad3f07d170459f0cdda5575ef44226767ce42ca5a7a642e4b5d74275c26af00122d2ab1371c8f5e5d948cf00"
        },
        {
          "alg" : "SHA-384",
          "content" : "8633d8002af703254e55aa900e75eb0562fc7ee693165b5911edd6c50012315673d8ac1f3b4a4dfb6438507ee961044c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e203a3cac6acfda699bcbc02c8c3069786b8a0879ae756fe02460ba127dd1ab48e491cff07bf11a9bd2ab4b17ef2353"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b53da143673fe37a0a0dc1e9c0eb4a5c16183c68d93b434db65005ead6972846"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dba737997787bef494596fa70774884b8107b6f51393cacce8e74dc1fe7808403000ba47c5b3bfdb280a9a7d266ccec7d002e8720380de88e076c130afad6068"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-languages/plexus-java/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-languages/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-languages/tree/plexus-languages/plexus-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-tools-generators",
      "version" : "4.0.0-beta-1",
      "description" : "The Maven Plugin Tools Generators provide content generation (XML descriptor, documentation, help goal) from plugin descriptor extracted from plugin sources.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a0b5bdb6c7221aaf2614df73f3540a5c"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d047509abadac6e3c103b72334f23667b94b91f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b74558da2fc57cbfe9d4afba980a1a4b812e81153bbcf891a09bcfc1b0486d66"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4bb2a9a0bbdaa172fe91ddd75ba64ebafdf29a924db38d3bf2a75cd6f3e593abeaf0aeb67a3f95551afeb76a96225843f1921edf1559719c0efe05813408635"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a06dfb739a693bb98b5b17ba47d80fad10aa6a6494b20645961186dfc99ed1c7fcb25430bc0957276131a8bf51a4b1c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "906acd3f5ad75e22b45887c65b95be53a3364f298d32bbaa295ce924cb73410477934e0580a4cf2ab062e999d13a4708"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9dbb9d2509dfb3879168788f19235137d0a77b5678905f09608d1875e562414"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2903c85c8974d179473a5a2eb85ba41b8094d77d3268ee7e8f78120b95d4fd6801566bb9b56bf121d5476ee26c977312441b58147f20402fa488ed85f54f0b42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@4.0.0-beta-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-tools-generators"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-tools-generators"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@4.0.0-beta-1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity",
      "version" : "1.7",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3692dd72f8367cb35fb6280dc2916725"
        },
        {
          "alg" : "SHA-1",
          "content" : "2ceb567b8f3f21118ecdec129fe1271dbc09aa7a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec92dae810034f4b46dbb16ef4364a4013b0efb24a8c5dd67435cae46a290d8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e521785d947cae1a02070b26a43d235b6319439a6364c58266d3f9c458f9a099406c10aab5f51c5db5ba541e88322cb35203c6758b4b8bb65f9539a345da9a04"
        },
        {
          "alg" : "SHA-384",
          "content" : "94eb2247eb326dfc5f39a6d5bb71f6402531dad128281db32cad84d5571fb5fd4d07bdcdddb6fde91576021fe5faaa2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "32292f15259b5a1cfee52be3c0e7ca08b778e7b4d40b07136d836f726bb9893075e3444dcefe7ab7ff0f1284092b138c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b3e19d65650a20bf773683b7aadb92edd588237d3c8a6600dcfe25fd22098535"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00ed4a489b0372cac0e677df29b07e7c21c54aec229833c92b92bdb16da9178a94826fe665154f1e6ea22e2c1fdce4aa847fa40b75928dc82a87b68f6bd6aec6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/velocity/engine/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.4",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "237a8e845441bad2e535c57d985c8204"
        },
        {
          "alg" : "SHA-1",
          "content" : "16313e02a793435009f1e458fa4af5d879f6fb11"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c73b940c91250bc98346926270f13a6a10bb6e29d2c9316a70d134e382c873e"
        },
        {
          "alg" : "SHA-512",
          "content" : "ae35b761d16f4327cdb6fda16789166fc67020efd71fd2cc3395b97444f439dfcc7eee948a3efd3b02440416caeb873417d95db6a2b16f4ef198de9d1afbc045"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef894734c328ec53b22c4efa33759c6ddb888093498411a439eb9a5494a8529beaa71cde0fd1d9ca526812d748c3a88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "970e56888f04a30878e6d6b7ec895060f61eeb6f745a8a58beb2ab94871e45845a468443629c1d1dc5ed6b8eecd5f6e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c6b19be6e3d3bb980cd6ecb6c0e2daaa506200d6e4e8a2a3cf29748581406971"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1cb8ff6c49109acb57dbc0ae2a21e0a689fc34ddf01521ced8c4ae93355b55527ced59c6b3f324b44cf4b24ced5f063815046f9bd62c44e3ef41417d8eff972"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.7",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3957b18bf02a62edcb6726d074b90b08"
        },
        {
          "alg" : "SHA-1",
          "content" : "073d7b3086e14beb604ced229c302feff6449723"
        },
        {
          "alg" : "SHA-256",
          "content" : "adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d"
        },
        {
          "alg" : "SHA-512",
          "content" : "ada37fcc95884a4d2cbc64495f5f67556c847e7724e26ccfbb15cc42a476436fa54b5d4fd4d9ed340241d848999d415e1cff07045d9e97d451c16aeed4911045"
        },
        {
          "alg" : "SHA-384",
          "content" : "b34c6230cd1c46e34067ae8429f72c7e031a1c0fc75b93ef6accf18fd5fe6a74c3659160b3199652d88bd916cbd63d4a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a89b843fededac03bb2448087468814e1214c3de8e754a3456b8b6f518fff1db41b2e787a0a255b6d2a99906f3d2890"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8377efe9c0ccba595a223feb3a90bbfcb0a3f9b1ac30975abf1f2493d864f50"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aeb8e1002420c8998b59c44c27574205a55730e7f8e299b88e730bb187d9fff3723347441f0e1adebb12839e1bd7c418ea1275b81c12a2cdb510faac76fc5369"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-commons",
      "version" : "9.7",
      "description" : "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a46610df6a8dbc4ff85b8fd4cdea66"
        },
        {
          "alg" : "SHA-1",
          "content" : "e86dda4696d3c185fcc95d8d311904e7ce38a53f"
        },
        {
          "alg" : "SHA-256",
          "content" : "389bc247958e049fc9a0408d398c92c6d370c18035120395d4cba1d9d9304b7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "64544d7515aa4582ebf40e9a5ec32cbcee3ef0e3e15448bd56e6adb583d4ff764a34bba866816e4415298da939b029384a6ccf887c70b5fe98ac23589e626f79"
        },
        {
          "alg" : "SHA-384",
          "content" : "341c31b9113151038127dd84a7147396b671028b3e093b698a73ac908e03afd7a2e14ca231963b24bd97e4fbd610d184"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0e92d55bbeee69d94499dbaf58413e71e6d7422082ed29c40c0b149155d77de933486d1cf3766c92c234e8f97a4e8ffb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "379bef4f4dc55ccb161a765145bff3e00b256453c9c0ab26e9f6e933ac8dcda8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11c337cd943e835838e306948b1d1fa0077396b7779fa55606e3dba079ed4c72af5f0fad99f5145ed87364c47faf188573f3e7556070edd82cc684153411afff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-commons@9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-commons@9.7?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-tree",
      "version" : "9.7",
      "description" : "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ea5cad3e0cbd2520688e4b0b5c4218e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "e446a17b175bfb733b87c5c2560ccb4e57d69f1a"
        },
        {
          "alg" : "SHA-256",
          "content" : "62f4b3bc436045c1acb5c3ba2d8ec556ec3369093d7f5d06c747eb04b56d52b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "60c548f80af02ea8da5866104921ca818a8de846504faebac5cf016becba6b277a33bf594a7fd783443856310864b2ffc99aa11cd6f4e439c086734923ef823b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2872f70f10ee0831786b255a6302d77e62405be1e06b4cfcea6b484b2c1b2f7e76155025616b8a9616efc0b41346d212"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d0e084f3d1438f99a2940947816dc3f6694d843f070c57b3e69a49e6e9b1bc120e3f218c1053e0d6bf5238712a646c57"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6eded18da3930d5fb22bfaf5985bfabb6d4d65a8297ff20e18d5b447a8f90f08"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a286ed6edf9a59b9e87e245a31da446bc82a000ea2757236bf13a1314b1d15587997aedf35e99b61d0bbb87412f5d87071ae4df0990a061e45cd67462fc42e17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar"
    },
    {
      "publisher" : "Jonathan Hedley",
      "group" : "org.jsoup",
      "name" : "jsoup",
      "version" : "1.17.2",
      "description" : "jsoup is a Java library that simplifies working with real-world HTML and XML. It offers an easy-to-use API for URL fetching, data parsing, extraction, and manipulation using DOM API methods, CSS, and xpath selectors. jsoup implements the WHATWG HTML5 specification, and parses HTML to the same DOM as modern browsers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9dd58c3f8a09f45e57d85e78993be6e"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e75b08d7019546a954f1e359477f916f537a34d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f60b33b38e9d7ac93eaaa68a6c70f706bb99036494b2e2add2bfee11d09ac6f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a36e1b9f52ef61963a7d80f3bc13d62d9a513576d031fa4bb244b6155565d53d54527ae8b3d281815c65712c5a6ad97cf8fa6b4a13e5ca43c5233f6c1858e710"
        },
        {
          "alg" : "SHA-384",
          "content" : "6a6c77987f726f7b2e152f85f8e1a0eb839bbf9dade8e86a245c92ee94a208f413d8eeba2cd1efe46c09daf4b1bff3be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "040b6dd19d53fe1a06060f8257111696b074fae1c2b7353cd4c48d71abe3ea4a61777937a04ea1bc93509b3c00d729e6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6ceb561f903f5d48b576ff82e52bb2b85017b57b7f5a0c6ccf25d31b5cfa33b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe66606e7f77dcf5dc82f82943c0f168456e53fed79a296c4f961ec80b0b3f4e3c684713e5a62d83e8526e69f80058cc0fcf1929537befcd4fd59cb2ac2961c8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.jsoup/jsoup@1.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jsoup.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jhy/jsoup/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jhy/jsoup"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jsoup/jsoup@1.17.2?type=jar"
    },
    {
      "publisher" : "sourceforge",
      "group" : "net.sf.jtidy",
      "name" : "jtidy",
      "version" : "r938",
      "description" : "JTidy is a Java port of HTML Tidy, a HTML syntax checker and pretty printer. Like its non-Java cousin, JTidy can be used as a tool for cleaning up malformed and faulty HTML. In addition, JTidy provides a DOM interface to the document that is being processed, which effectively makes you able to use JTidy as a DOM parser for real-world HTML.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a9121561b8f98c0a8fb9b6e57f50e6b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab08d87a225a715a69107732b67f21e1da930349"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc03e51e73fa884f06e7eae0761e045e56fdeb4e146a4d952e3023cc9e3fb43"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c6cc198bd8cde62b6cc9091ed95a4114eaad035c196317c891f8f2263b28649a33b1f26f74f2b043a17cec2a3d025eda81acf317fdf2d04641fa646e486b345"
        },
        {
          "alg" : "SHA-384",
          "content" : "c84e98ad1babe6badd85ba66737b43929175a80ea1f29c8b1991acbe02d338311f32989c2b830b84a84ecfa58b2ee1c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d0fab3e09a5c9a486708a17350477db981dffef39c26735150103f42b89d6033ae44f9b45ca7970ca703af5cd0a8c414"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0bf9c35b90b2e9639bd5b638eff5002c81cb2d9898b5da458b71ac80ddf655c8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9cffc69bb57e29177a5a4e6df4270a6aa31e74360d2a9fc402b0ec58000967233e88d92db9fcd80a5b88a1ed116268a1568bf02f2d65671b2380ad03b9c9b042"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Java HTML Tidy License",
            "url" : "http://jtidy.svn.sourceforge.net/viewvc/jtidy/trunk/jtidy/LICENSE.txt?revision=95"
          }
        }
      ],
      "purl" : "pkg:maven/net.sf.jtidy/jtidy@r938?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jtidy.sourceforge.net"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://shell.sourceforge.net/home/groups/j/jt/jtidy/htdocs/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://sourceforge.net/tracker/?group_id=13153"
        },
        {
          "type" : "mailing-list",
          "url" : "http://sourceforge.net/mailarchive/forum.php?forum=jtidy-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sourceforge.net/viewcvs.cgi/jtidy/trunk/jtidy/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sf.jtidy/jtidy@r938?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-tools-annotations",
      "version" : "4.0.0-beta-1",
      "description" : "Descriptor extractor for plugins written in Java with Java annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "601e79e0b66604caf989437ca4e8c2a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "2d1b6aae1aafe5f54023215f916fb231b7c8a87a"
        },
        {
          "alg" : "SHA-256",
          "content" : "f99ec867d942c8627fed0e018932e438efca34354e53cd5ce873f1d223d7a668"
        },
        {
          "alg" : "SHA-512",
          "content" : "71494c7074cb0d2b8546a3b8cc32421365639c56dde04c4c7bb5c2e9f87505e3308412d3297a19773c687b8f5898987e2da9c1c9054a80dff90b38a57089842c"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0214554e5fbb3bb2df3a9cb4de966ffb5d9e2478fb3c79d1d1614cf3cfe9b4d124afd3179ceb0e235e1e0e945860214"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8238bb1a3904465cab846c86cc8f6e7f0e159eb2bd6ab9bc7dcff49fe48bd47a9758184beb8320a6ce47abca4d237d09"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d72f26eec1ae98d3be1eaf61335b97873472fe27defb97783209379aba12b51e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "404f4301879bf28501575d6a9a77e944f13c5867553fa46b26e99bbb6dee978c6d3cdfc216c7649b6556e02b79f43d41dc4666deabae94ef7fc2aaec09955133"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@4.0.0-beta-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-tools-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-tools-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@4.0.0-beta-1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.9.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "408c466d4a20a02f4a2428a4f003ca13"
        },
        {
          "alg" : "SHA-1",
          "content" : "a03ed402ef8468c1d1bda368d7213cad67f16a71"
        },
        {
          "alg" : "SHA-256",
          "content" : "a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1f0e4de6726f6aad22aadb40e5453d42ec299a09465ea0df8aeec28b3a2f1b06e1d0e03f156db4d88836b81f87cea6f620f3c5aac8910a0fb22bce4e9448324"
        },
        {
          "alg" : "SHA-384",
          "content" : "057a284377116b1f7862d27267f06f731392a47ddaf9eabb416b6d55e00079ec0b81605d6b3c08e1357f5952617c95bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "085da469ee95cd8d301136ad5875e69e17d2323846bec96c272e11e09b38b24258666fd2ea03ecbebab2e7ba905e7042"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de713192117128611e59f76d8caaf6c7b06e3f14ac28e99c5c6e8234119f9a81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c719f55b47af87502e59affec58cc86e6ef79cf1f9a5f3890e508ffb04cba4d2a5e209ca7c6e1fd9c8a85299f0bc979382cac3efa4b3ab71c043deae15599750"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.9.2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.4.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77515ce571e8169c13220c506ad177a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "40deb3076e4597f1ef973dc794f3a510fa3a942d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a"
        },
        {
          "alg" : "SHA-512",
          "content" : "607de2dcb3826986f163a7d312d45ce43cbf6d845ca5f4006a966bf213b8c2625c14342f8de1e6c9cd9c4206fceda8ecc0fa27ace0c36d5e7b04857d63b3ae03"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bacec1f58c7d704a3bfe70d4564216438e7d0126bda201ad5c51b27cff46efe5fb3cc02b1378e6793f7effbc1b2cc59"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0aae7a1b6a72d8712393e5d6cfd59425e405f837ebe2e997622dc119f193430b2af5b7e5e4d1e28016a66766435488b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50a8c45be377dbecc46e7535fe35dbfedf31a36f773d86c76dd9942b854957d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ebf3a6ea15bb832f1a87cc455731ac8fcb731eb846c0f279ee3d3225327dbd1e01109b7d8a89d4f1582a71749547226f026f1a5e76cb89071898787f1459a9d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7af7d22a7280508327d809b183114a92"
        },
        {
          "alg" : "SHA-1",
          "content" : "44331c1130c370e726a2e1a3e6fba6d2558ef04a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02"
        },
        {
          "alg" : "SHA-384",
          "content" : "c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a6a43bc19652007a0a61c8007dc5e67c98bade39f0c8b567e10ec82dc95f2288fcac53ec7d31ca793f4c3edf8ef9fbe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c2bddb71dcfe84e98754a1e0f0b16ec60a8e4c5761cd4db210477fcd3a3bf595"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2636e83c2274019d7c1742477e5c641d0348afe5179e4a8316f28f41c51ca0f609a8e9a41fdaf0b68f7830d2e0fc74268fcee43d9c7cf49b57d74a426295f4ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.14.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e5c3f5e6b0b965ef241d7d72ac8971f"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ed471194b02f2c6cb734a0cd6f6f107c673afae"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c"
        },
        {
          "alg" : "SHA-512",
          "content" : "0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8"
        },
        {
          "alg" : "SHA-384",
          "content" : "908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
    },
    {
      "group" : "org.iq80.snappy",
      "name" : "snappy",
      "version" : "0.4",
      "description" : "Port of Snappy to Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0792d1dbe7f90d8b34c7c19961e0073"
        },
        {
          "alg" : "SHA-1",
          "content" : "a42b2d92a89efd35bb14738000dabcac6bd07a8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/dain/snappy"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dain/snapy/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-11",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00977099d76d2c01a7b19263375ee42e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca6ab366315e179dd80645aad4a60bab959c6523"
        },
        {
          "alg" : "SHA-256",
          "content" : "d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9bb13345d3a41a9ddbd0d4fbd9a4ab936f8ff98acbcb37394cd0e75aa5e550888d51b93c76fea8629e2f2cf39de4b0fe94abf853b46db426e40674cde8d69d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "c128f7dd3f6ec2f5a5566769bd60f6d3ed36583575bb2efdb9e53aee028b629d009ce4008efda5c38da778195ff42429"
        },
        {
          "alg" : "SHA3-384",
          "content" : "60e17c55ff7cbe9ec7411bd06ba10470396666dc78ed93943e1412512cb420413182c9071010b5e849d74415fe10ebf0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bba50765cfc050bd98cc6eac6d180751e920067a58c6a41050870e937ecce2d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a892530c4e30fff48cfb3d94bc59128ac853d172e8012f66184780cbafad5d5381ca239e0f68f712d3b1e399c5155287f0f8b077eb7cb48bdd1548ba7c89a734"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-util",
      "version" : "9.7",
      "description" : "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7d6e20888e6fd99605f4c5fe1dfa8b0"
        },
        {
          "alg" : "SHA-1",
          "content" : "c0655519f24d92af2202cb681cd7c1569df6ead6"
        },
        {
          "alg" : "SHA-256",
          "content" : "37a6414d36641973f1af104937c95d6d921b2ddb4d612c66c5a9f2b13fc14211"
        },
        {
          "alg" : "SHA-512",
          "content" : "7056f5905a27a8a3bc2e2b9774d1c70378b2441779bdce218f45aa2a549d1f4e2b81d562f20bf9a8d5be96d33e30a8f9e15caeebade6287dde6cc082afb36089"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e5762641cdddcd7e98d60f6339a13856b46dd7246875dc58ef3aaec5a50c3e55d950a25745ba20b2ee0a801ca7b30e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3cad374aa1e2c262d810c82dc25ac4ecff8889414e351871fe95cbdc944a04784b4b02f6e703c2c4703ff6834330eb1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a90774a4e3d5f2ae350483d5b5e5fd393e0789d97c8805d57ae04a533a79813c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "60191cfba5de3b07c7b20ae9b508cc97f306ee150938a43a53bef99ae6966e2f04760d4374fb7fae737b52374ccf8d6e5dbd8cba5fac57981f00fc47f6ed2e91"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-util@9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-util@9.7?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm-analysis",
      "version" : "9.7",
      "description" : "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "910ac9c691023f1a9ff33c413ae9fbf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4a258b7eb96107106c0599f0061cfc1832fe07a"
        },
        {
          "alg" : "SHA-256",
          "content" : "7bc6bcbc21379948a0c8c467fb0f864206e5b818f6bc0b546872f5c9f941556f"
        },
        {
          "alg" : "SHA-512",
          "content" : "69c2a9f73262b0fe5c1758973b5406dc0639b0e1d9a82863d5bc2d664395b737e45f50789c6f7ba3c8915d7ec79858e197032066d6b8386e35d6aed6cd95a8f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9432b6c8ce9f519943da80196f0b7930172622039ecd0782f710bdbbfc2944d6c75a85cbb3cc7443fef258dbdd4f9bcb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7912969ac6f09bdc6f79c5c4040bf5901c5c458594f23d238b77f90cfc71eb0900f429c2822cac0244b25f494255c740"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e44e5da7608df8e7a54d18d5340afaa6c04ba8254ab838d62a0b5b0ed037890b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "63b386c91a7bce2fe5d7da8568226b90109b9f63eb44d76f40ffff13e37e957ad689f61769804b796c82fd0b4b6fd01f3e270aa96b9b5e95008a577415d76a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm-analysis@9.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm-analysis@9.7?type=jar"
    },
    {
      "group" : "com.thoughtworks.qdox",
      "name" : "qdox",
      "version" : "2.1.0",
      "description" : "QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb59cbe3eb621103fc9375e2c830bfb6"
        },
        {
          "alg" : "SHA-1",
          "content" : "064dd4d16364d1eaecba9f6c4c0d6dbcef8e8160"
        },
        {
          "alg" : "SHA-256",
          "content" : "804d51f9bae9e0a84889f3d1b79f5b6586aa91baaa33a8f2175a7b327bd9910e"
        },
        {
          "alg" : "SHA-512",
          "content" : "14344da51752e12775d455536a7aea39d341c69dac53137d8859874c68c6145d9c51aab4f8f2b3ff36033a1ad65d537dc5f51dfff689278a5056f6c25872c61a"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ee839ad459f09366a1e0b803a7e738a581572881177a1e0234bc30be09b1f872cee9833504be2fdd55012689b46da03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95c691b564ab6db0892ba7a48b218796e3dfebf6a63d8d82ba47f49605aee3b63455127a0eec4ebd7ba7a298b389187d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d7929c6bafb0209cc19c0adaf40243061f2a33773c02fa086b602037b6f5d51"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6d790d60e7e75460728941e2c94f1d9beef6ca725285d416e3add316c30be03d386567e083ea857d958355f61f6ef99154596f0bda3d306d74da7b0063abe43"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.thoughtworks.qdox/qdox@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/paul-hammant/qdox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/paul-hammant/qdox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/paul-hammant/qdox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.thoughtworks.qdox/qdox@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "4.0.0-beta-1",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c68f027de8b07cb798e812c4f1136431"
        },
        {
          "alg" : "SHA-1",
          "content" : "821415a8be8f6b77ee43f1b9d5457ab86264eb3d"
        },
        {
          "alg" : "SHA-256",
          "content" : "92f05ed7abbf73b2ed19bdff949ca677f39cbcfa0884c5f0ad9ac0b8186c7863"
        },
        {
          "alg" : "SHA-512",
          "content" : "41cdc543287b45eb3c6493152463402a276376cc45bed5860ebfb90958fd7066fe75ce51d4dad311ef2814d505442d3d3e1a1511bdb023faa1854d7aa1596a6d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d9a27dddb1c1e74e9fde02266724781ae86f3bff6bdf4899e3cba8d85301750cae9f6f5bf9131a5fd743caf5079eb091"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ebcb9ba5b5c75c50c8810e1577e94e7045a4ff47faac736f63d24dc61f4dd346961d709667b24527eb664f353ecf639"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2db182666fc6ec8a50b2cd18cede788fa0ca1c83616dc31507c65f173ce23f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "59c9ec4715b6065d0f6f1ad4023db5b015e993d12ec44fe8f9c46c8584cd456a048482fb3351efbbe42da93694c8d4976b9188015cadd631ee1bfcdc0703fc08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-4.0.0-beta-1/maven-plugin-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.9.8",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "377ff71179bafa180f347c25f6535c0d"
        },
        {
          "alg" : "SHA-1",
          "content" : "e7c822d321fcfe0aad7ce4cc5e4499e320718d61"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec0d41b3c6de899b202523373fdf8571d354f09052c17bf4230baa1ca1cd7936"
        },
        {
          "alg" : "SHA-512",
          "content" : "17b665495a72f2b2bef88e930973f1063d74b40228a8d432b5e9eba40c827589f00ba0c11dfa9d50fb822d3457dc4418fea562ee607bb02c7ecf6c2ad8d1f50c"
        },
        {
          "alg" : "SHA-384",
          "content" : "435315f16448c0e45fa53902c39a403fcfaa043c7c024f4d79c0220f3d017d233b4a30bc4c3a40b95e1404953a069fea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4771194d2c8a83b5b8e35341e3d40fae109aaca4e73a1e8a3bca942e590994b536d1f92b5e0a31c672837d4cf39168fc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "10a72d0ca9566115301c3ff4a8d04736d71be91d68db8e7113c2ba00b10d56cd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ee345e5bf732df56cc3e3378c5ed77820c39383dda1a29db8d88388b84a1ea5f3d9736db6276ac41e28deac5b74856e3a9d82b0b8cb79a1c49fd8e7516f5110"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.9.8",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9444eab1467f505fa169de504def7c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ba1512e002efe9f9efc09ac8899c613f344d518"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b4be46c55f0720162664615d4fe8468f99866697a484e1652a19189656cb37d"
        },
        {
          "alg" : "SHA-512",
          "content" : "7e4639c9091358403e3b80331e376d8cc4ce84fab9026e46d76d8c2eb46d14a6ee2557a6003dcc2952452d7cafce442b2e4ba259d952be2e19fb9ab43a913853"
        },
        {
          "alg" : "SHA-384",
          "content" : "d6ded2d54e9df12411d93c1dd9e021dcd174db91eb0b0ecaa649199ad4f98a687d81e70cd06a6998c8d9b9a64277f518"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01eb4d470f3dffe0cc1ddb25303a3e20f39826821eb686300642285a452475146c094de9df7eedc1467b21bafa66f713"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c7dff99aad1421186dcc35cf28c8938ef63b95d82bcebfdf74dca487c852b52e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e34641aae488c574214fc1bfc9a522a0277ed59c86b10df21b25528753237db4041fffc060707fa01337f4af4b2e9e2eb3235970f5656cb5ee7d1c5b69d21f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.9.8",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2778729df8446d53806c149826fbc874"
        },
        {
          "alg" : "SHA-1",
          "content" : "2bcee8fce7cd50016148d4e667474867c6191d3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "4087160614240b04cbb7e1d3af46ee27362e9d0d52e18356dd8bac7c183288ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "00f41d611fd90116f33b4c0aeae2cdb6db7040b9a8a81a0abed3067fd085fecb219e776429ff984a0bc8e561387fd691c92f5c9b344b521a8b756ca8696f8274"
        },
        {
          "alg" : "SHA-384",
          "content" : "d976f625afcf7b9b3b111c785d73d988cc91d1560010297c5abca391ec5ca89cbaac10280e208b3bed75fd589e63781c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8a67cba96899f662b00f7dd86e88b7250e50a913b5c00fef8c26cee8e61523646e07f68f99c9f5e9a1e8d19565f807ad"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c4e4ed17ef0887788e4da97d033973bd164c16753a3241c4ff8f6a6149248bfa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ed6c6f0b41e79b88b70d4f5095a1de6c6f274a5feb048e961ad42e52a31f1a36d4b30541b81f68d648dbca1edce342a3c1375b5494286d50943fddc75b0ef86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.9.8",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30cdf526d0176a20067f436790d794d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa8893d34ef8540b0e11adb452e9921074144e93"
        },
        {
          "alg" : "SHA-256",
          "content" : "1f3f29a6bd8a35c92a6e3cbb5992be74863868fd962e90457c33d28af25472f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "481bcc75b66937a87005226b81be2708207eead48a028fe5a982dcf8da9a08c0fb5f8a47f4ca1c2430f60a15c4de11f5a31c975934cff0afc00de249dbaa9662"
        },
        {
          "alg" : "SHA-384",
          "content" : "165855a8186f3a72b87b4ef130c8ce7a02b23a7f0ed64298b3a105566a5bf91afd2429180ea650642921d24fc8b5e66d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27196b8a857074dd4117c5759e91ba7726c3b92f4590c2aa7aa9083d7bcd5fd7e52233b37e39c89d78d9496db12b829b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7229c5561246ab75fc4274a9c18d23ccddaa2541d3cc394a71c790b438862321"
        },
        {
          "alg" : "SHA3-512",
          "content" : "db95b28e746d28d1d4bbb8664f6bc5d85a520260f9347858304c06122b539a80dfb5f398792f3a5bf28d9e09f7d9216d3f356f5cf8fa75ca51237d4bb1b1e2ea"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.9.8",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17edb392c44a1cf3c17fc03de10e5a66"
        },
        {
          "alg" : "SHA-1",
          "content" : "a7f2d502a8bf72d17ea97eca6c46776314703a66"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e2f3cda004182fc815d48b70bc0d144cb128230a841dc711357d57c76c95972"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e0722b5abd825d8e35d2cbb6cf769bdb853cf614bc63c758a65a94833b2b38e78e41cef50a8ccd60429e96f8b37e974699168857783d1cc40c35d553c933ff2"
        },
        {
          "alg" : "SHA-384",
          "content" : "12cc6030d522c63ca594eed7866db24f31d05a129fa345cc1e49f85a50234b3bb53a2f7f39320af3771972a2fdf24759"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f2f6d8f0ed3bcd1e6c03dac2a81f57b01f5096da6c9bffbd9fa5635655e4859dc6d000937c20a76a08c67b653b1f840"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1b8b0af181d43d513992d8cc0e3c21ce266cc575187f16d7fdbf0a69e4ba99d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79ce575ad6b70b0add933f87a3cfad907077de495609ff6a0cc2c87b9bcb897ef3c3b5aec372d96044d745bc413fa778eb004ad67f34781532f56ce64c67cbe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.8/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.8/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.9.20",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "424d206b1ab6cdedce55e575fe328ca8"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9da4e71e96f5ca9418ebbf60d136fe37bfe4ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "dee92eda1cd293afbbbb0ee3d752f8c135e193e2232172e036a3f23e38c8c25d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e641a549f7078316bb26b193697e855432492153c3642189b25a84c03dd4101ae5cf4eff3d591590390c7361733e5308e67fd5a0b4f3ae08125b74900f7dd471"
        },
        {
          "alg" : "SHA-384",
          "content" : "555c1a9bff564efeebab84f1a66384b57c53529fb606e9d9d1e75a31bbc25869ea9a089465d70476b89dd2270becfc98"
        },
        {
          "alg" : "SHA3-384",
          "content" : "baada532d2c2b3eacf12c7103ddf4d4d73736f74f52f15869db45a6b831946fd946c803553cb29be71e4e7c00d8ab550"
        },
        {
          "alg" : "SHA3-256",
          "content" : "724ad8b918eb4ae741b4960671e0a8f7c14e2f7e78123d4e9b6881d358e90044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee2b2e2d13b57ce207667dec7f6d7161118e4e0eda505dcdebe7f796e73c92af94fe388b630ca19778669693d50df740c753168387ff467ce892e0767301b3cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.9.20",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a4793187c72b39cc4d0b5c6b90de0578"
        },
        {
          "alg" : "SHA-1",
          "content" : "a1f2b661b14dec2f1644c501e0657ed46459bac0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b869aca6c208d2b1fc92e846e1c13612a5ed2fda3bed9a7c1ae2ff5f14f8cf48"
        },
        {
          "alg" : "SHA-512",
          "content" : "b136d8aa7b0068a723c1df33c229e4b75aac4edd85023025553d6b6c5c3ed037c5118d15cdfcef0455bba8e7f215cc1727918124fd9f0e6473387c7bd3ce5a0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "5dd6a1452357667e86b04cbba972dfba63d368133dfbecf897c8db05b2307ccc049fa690429a63141e5196cc3b2fc62a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "618ba43f00e7b89a1cd9812b61efd35c20bb8f6c149ebfb7f7b49a460fb8c870c9ec2239ccb5fe90d66638d97ee224a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8a8fae4bb711d19d0711358be15a85295ceca1d11348d430c5654214b96ce78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eaf2de08ba3dfdb283836c75d8409be586695fa671e500093cf79162d2e98b3c72a5824e96ed7ac63786a8bf6dc1633d32a88062aa135b459c910a6a1ab79a5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "615f7639ab790d564b7b96ba58bc30fe38e65348ab6f1d5fa3cc6e96924badea397fb6ceeef1ba3f4bfe738d9c7d9797"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ea14f0fa9b179ee6a286b3973bcb11ab30f419aa0f4bc02bfaaaa65ac984de2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e21bf0de988be9861c589574c742b5f94558baf69e965d103e9b8bdb24bbe3a805bff45c5358f515749b5e9061af2ab4b99f6328babc3c396fc04f1cfd4b5fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M2",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98e320df2caac742b2ae33d938c69df8"
        },
        {
          "alg" : "SHA-1",
          "content" : "31456dd2293197bb282c03168f6767acca3dec96"
        },
        {
          "alg" : "SHA-256",
          "content" : "9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1"
        },
        {
          "alg" : "SHA-512",
          "content" : "907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde"
        },
        {
          "alg" : "SHA3-256",
          "content" : "883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.plexus/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.plexus/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe320d2b3763bd6883ae1ede35e987"
        },
        {
          "alg" : "SHA-1",
          "content" : "479c1e06db31c432330183f5cae684163f186146"
        },
        {
          "alg" : "SHA-256",
          "content" : "5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04"
        },
        {
          "alg" : "SHA-512",
          "content" : "2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959"
        },
        {
          "alg" : "SHA-384",
          "content" : "37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=250"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GLASSFISH"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"
    },
    {
      "publisher" : "JBoss by Red Hat, Inc.",
      "group" : "javax.enterprise",
      "name" : "cdi-api",
      "version" : "1.2",
      "description" : "APIs for CDI (Contexts and Dependency Injection for Java EE)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a8c973affa178efb89e6c50f78d79da"
        },
        {
          "alg" : "SHA-1",
          "content" : "53bba91dc3968adf411e076df020cf207283d7dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518"
        },
        {
          "alg" : "SHA-512",
          "content" : "d73772ea4b1d63828ea2aaa71edb788026065bf5ffbc54fed2d86ca88f08f61199bf9df734941531a3eaf1aea5858b3a37034240f92bec6e1e4e72ce5364c791"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbb55bbf43e02c72e0f0dc86569a5666b1fb1b48f97081b00d22e911b152fa0fd0d997bc0816473a70a74da3fbe0c273"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bda81740c8fbdf902116bca4bd821c492e99bcc7987d6251ccac98431d1e0cc0c7caf9e6f0acb84be3c86b8e42703944"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8cae07e6827d09807cee9c64be0edbefb243b77d254b810d1311ad96d22c9011"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6c7268ca95f9c4fca0f24a1d8f14778669fdba4b69a6efacd39dfc033b1093e521bd8424a3f3984388866bd402c5db8d8902382bc5a01ab7f65dfdd1d091af14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.enterprise/cdi-api@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://cdi-spec.org"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.jboss.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.jboss.org/browse/CDI"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:cdi-spec/cdi.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.enterprise/cdi-api@1.2?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-velocity",
      "version" : "1.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d7805136e8165f53c944612a809f1a6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1331b9d6bbf99ead362c68c2f318ebe5fedda598"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4c4a0dbeacad54306a1ae230eff5ab45d58e3ab88c86ab7245d3a0772be57ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "421e51c12343c5537b2e52b1fea89e9ade7db095b9c71ef47c019e1cb586ec94e24b48b18a851669c1d6fc9c0ca1456683fa1a020f4ca34084ab2c3a54600df4"
        },
        {
          "alg" : "SHA-384",
          "content" : "844f82a7b5f116afbcd5e24f7d1cbb6491ba4fca20d8bb1da6351dababddcec90ae2d76667a0bb873213e9892eedc900"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1af2e6be634af622c2cf6c43d757d831cc699cc5818100072adf7577977fbac7200ef768a49bebf0104495c08d3269ab"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0da4dea1c0775cdcc0d74a30cfb0e83f91e91814e63e98b0b84d60bb8b8f2728"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa2603b57a73215173854724afc05e507cb8b78a82b838c5737eca21056e0cdd2d7f65f6bb44e56d805d3b0d690d86d42576b751a5c785aaa52689fe715bff66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-components/plexus-velocity/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-velocity"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.1",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1dcb0fbee884bb855bb327b8190af36"
        },
        {
          "alg" : "SHA-1",
          "content" : "40fb048097caeacdb11dbb33b5755854d89efdeb"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1547d185ba6880bcc2da261c5f7533512b6ffdbbc1898db5b793c0cb830fcf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "19bcfc52f095adbc8bd6b1b020b8392e8c91e41e05aa0099275f7b391fab51348f32052a1c556c814840a4ed4b6701f26012b05b3d9a243300a2616e8ece1e0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "76549ee57b9dea4043f239af847fdff70e7251d741c0755a05fec715ed5baec5f757cf128cbafe2f98e1db6c8f52ddaa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f794ea96bf2c1a9a60b8ed4ae1bbb32e2c78db3851efa9ab21675fa625c87c1d35fcd64ee828a49e713ae26bbe3c12a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f487b838a66f077a703ac812c2d3179180b8202c026698933cabf5c0263a171"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d3008636448f980d8f762922cdf1c14f6adbce9a61437867eb1d3f0df274ba7babb8a818f69921bb33cc888c67bf20b4bf46aa8df364b65d1a1981415694624d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.1?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.1?type=jar"
    },
    {
      "group" : "org.sonatype.plexus",
      "name" : "plexus-build-api",
      "version" : "0.0.7",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49f0f8c6bdf2687e358870a4fc1559c6"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6ba5cd4bfd8de00235af936e7f63eb24ed436e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "934171640fbd3d2495c50b79b0d9adb11e2c83e65bad157df8fe34bcac0ff798"
        },
        {
          "alg" : "SHA-512",
          "content" : "e073d367ce5edaf6dfcbf6d1ec9f544082d4536aec8a84b060d24625c0d8ff1facf90529843f9bf4383ef43aa5cd3d0e143f473dffa6da7fd910f1d2e3872ec7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e6c177e34d0bb3fd05ea8f635f01a6b01afd28113f214392cae8f6bdc73715ee1dbfa4d1525f42321f8a8dd05db9191"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe41dea9191319334edb863c438ffe78b19c5f2669a653058d7d4fe5527d7e66a7f382f806ff12fcb09c3f468542e870"
        },
        {
          "alg" : "SHA3-256",
          "content" : "530e25ed3a34ee1d1aacda1a935608e70ef6494bb931fee33eb7366df2d85642"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9f1b45445d930a9833436b57baeda25522f0151be0b2f2a27ef1c1dcc8f6ccc5f1168fe40ea91f1e3ac1d98308b3dd1da3c7b49a90cb75eb6a924534545435a5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://forge.sonatype.com/spice-parent/plexus-build-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://repository.sonatype.org:8081/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.sonatype.org/browse/SPICE"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/plexus-build-api-0.0.7"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-plugin-plugin@4.0.0-beta-1?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
        "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
        "pkg:maven/javax.enterprise/cdi-api@1.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.enterprise/cdi-api@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.27?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.8?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@33.2.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.8.0?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.reporting/maven-reporting-api@3.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-sink-api@1.11.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.doxia/doxia-logging-api@1.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.wagon/wagon-provider-api@3.5.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
        "pkg:maven/com.thoughtworks.qdox/qdox@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.thoughtworks.qdox/qdox@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-generators@4.0.0-beta-1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-core@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-xml@3.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.7?type=jar",
        "pkg:maven/org.jsoup/jsoup@1.17.2?type=jar",
        "pkg:maven/net.sf.jtidy/jtidy@r938?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-velocity@1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.1?type=jar",
        "pkg:maven/org.apache.velocity/velocity@1.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity@1.7?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-commons@9.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jsoup/jsoup@1.17.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sf.jtidy/jtidy@r938?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-annotations@4.0.0-beta-1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.8?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.8?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-tools-api@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.7?type=jar",
        "pkg:maven/org.jsoup/jsoup@1.17.2?type=jar",
        "pkg:maven/com.thoughtworks.qdox/qdox@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@4.0.0-beta-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.11?type=jar",
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-util@9.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.7?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm-analysis@9.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm-tree@9.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.sonatype.plexus/plexus-build-api@0.0.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    }
  ]
}