{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:69c110f3-4f81-3633-a02a-b500f1c339cf",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.8.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "76ffec6a7ddd46b2b24517411874eb99"
          },
          {
            "alg" : "SHA-1",
            "content" : "5b0d5b41975b53be4799b9621b4af0cfc41d44b6"
          },
          {
            "alg" : "SHA-256",
            "content" : "6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81"
          },
          {
            "alg" : "SHA-512",
            "content" : "417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d"
          },
          {
            "alg" : "SHA-384",
            "content" : "5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d"
          },
          {
            "alg" : "SHA3-384",
            "content" : "0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8"
          },
          {
            "alg" : "SHA3-256",
            "content" : "3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487"
          },
          {
            "alg" : "SHA3-512",
            "content" : "59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugins",
      "name" : "maven-wrapper-plugin",
      "version" : "3.3.2",
      "description" : "The Maven Wrapper Plugin is a plugin that provides support for the Maven Wrapper by unpacking Maven Wrapper Distribution to the current project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugins/maven-wrapper-plugin@3.3.2?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/maven-wrapper-parent/maven-wrapper-plugin/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-wrapper/job/master/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MWRAPPER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-wrapper/tree/maven-wrapper-3.3.2/maven-wrapper-plugin"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugins/maven-wrapper-plugin@3.3.2?type=maven-plugin"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-core",
      "version" : "3.9.6",
      "description" : "Maven Core classes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d872ce50d16e02ca72e348b9f7b3487"
        },
        {
          "alg" : "SHA-1",
          "content" : "674ab3337566d493df8f95eddfda90e41002d214"
        },
        {
          "alg" : "SHA-256",
          "content" : "c1327590398759da1918dbf356eb6d63f8fce7192a805cb3c8e336fbb1155dc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1b3ffd0acebd8b786aa5c30768e44b0246f7f91c8e7443e2143e015ab297e532b3f8acd38cd3acc4435d00f843266e36757b78e6464f81ea3f647fe6adfb63fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff4d155ab40a86405c6a77036ddbf3a1c2aad9d25e66873a2394cae426120089e885337a55d66d751c55ca9f846821a9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "62b56af02e16b8c3c136b420077162e5ccd5d2ab5e642045b6cff2b1011c1f20d11f5d7d72147ad13b816b5f7eb356ed"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a26fe9b6dd5d21071fdb58a7d329472f1f3d80239762e18584d589516c54903"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca17f7a1a3280898bba077d9b3a7f573fd766f2eb7ecf79d5dfc9bcfa278dac2bebe92b86a29ff357889681d70fb6f849222ee376b7d3d0efe6b96552e6f0e37"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model",
      "version" : "3.9.6",
      "description" : "Model for Maven POM (Project Object Model)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac8747986567850914e2c7f0e85599b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac9a1c8a8cfa36f3a5489837e653ec0cd530d576"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f8f07fdb6b8701fa89a23a2edf830808fd65892d90cce40c0e6df7c8f2fcb62"
        },
        {
          "alg" : "SHA-512",
          "content" : "234eaac0bf4b9453321b5a140b2d26ec6ff7cacc02158c8cebe33f470ac66380ffbe088cb3281e371bf41c4f364a00c068971d163691c106077be575b95b89d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "96c8c0bac3905579974974076fbbae7e59f3728c32cac73d122bf1fe0449ce36dabedcd39f0bb04f5d8a6d622c60200d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bec8198468b4be72ddc3d420b941ab48407d4915ec6eb4d7c7ab0012c7aaf920d03d0144e32f8894f162e01c48b7ed95"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39efb719973a7dbd9fd57485eea2fdeed43477fb73dc91b0cbeca6bf01ee5458"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ac18a53d7b2e93514a0b76024223e33df0377279eb6cf20d1eddeed21c1486c3cd7a3e399c11bfe32a9269e1d53a5713f864527242c620e9f3d7a2335e46964"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-model/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-model"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings-builder",
      "version" : "3.9.6",
      "description" : "The effective settings builder, with inheritance and password decryption.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5480ba40c9ae1cac6931abf16f7e8b81"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b75954b6f0c7eef38f388d97b91ce1ae3229f21"
        },
        {
          "alg" : "SHA-256",
          "content" : "e97cc245e4ef833c589fce0b5a8a4d77e3a0e01e619c57b5342c5e16d37a791d"
        },
        {
          "alg" : "SHA-512",
          "content" : "da5f18b6d6959805cedf659bf3086576014ba48c9c8b6216b26995431c2c0b407c130869bab981123cc897371efa66d8e08515a18021614372bce46157f36534"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab60bc65e312ea41ed6fdcb08900941d0c63bf06c8ad8f31632a5ecd5cc9fcba6bc09c64be2b7f5d42dae048d2cccb4b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "09d98ef4cb7141b931cd9c4e54011cdaaef1d104146f4b5f7c9e3dbbdd479b616eb020b22ee0b8be864b81a8e38b265d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8343aa4e31b4190e5ea6f4b09ebb490eba0c4e2ffde82861a65d641b636f5909"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bcc1344c9cab3adf47863f024ee5f682c617bc2279a2d4d2705313d486c3bcc8878d4b05a0405ff9b101d0393dfda63498ed65400eda8cd342e98e4a3bcc6cc7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-settings-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-settings-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-sec-dispatcher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e68635a721630177ac70173e441336b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "f89c5080614ffd0764e49861895dbedde1b47237"
        },
        {
          "alg" : "SHA-256",
          "content" : "873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07"
        },
        {
          "alg" : "SHA-384",
          "content" : "4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-sec-dispatcher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-sec-dispatcher.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-cipher",
      "version" : "2.0",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55d612839faf248cbe3e273969c002c2"
        },
        {
          "alg" : "SHA-1",
          "content" : "425ea8e534716b4bff1ea90f39bd76be951d651b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65"
        },
        {
          "alg" : "SHA-384",
          "content" : "6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-cipher/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-cipher/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-cipher"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-builder-support",
      "version" : "3.9.6",
      "description" : "Support for descriptor builders (model, setting, toolchains)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e004677a88ec086ba79a6a646b120f06"
        },
        {
          "alg" : "SHA-1",
          "content" : "bcfc9d8175eaba21111edf21e0355a8523461abc"
        },
        {
          "alg" : "SHA-256",
          "content" : "e1f4d2784459ce8a34b9dae1829a1999b569e483e21ee9faa7368691e729296e"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c7e1dfec3285d0b834b76e815af3a41fabe20399a5144676b523cf5e1f7f4a35595b8de0e587c43e357b279114d43ac93449280a93634da934ca91911fe4817"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcbe5b83ce778902e2734a693861bec86656ce027cb794fc7f3306e1e3b01d0057f8eb2d4cc67cad7664c4d3b026e704"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e80adc67e2aab27122b520609a00fa15a8fe3b94a4602fbd5bb23bb3dc5d0a01cd95f6fba5f1889ede89bbb303d41896"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ffa18d4f03cb557eb51b204a8a7ae8f5be6d4a818e065a42497d006ce580f535"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d75a0f7038a1065ff6c9a52ece1b8d3830b5e52ad79abd0aa7c6a75fc110010e2277113c2662ba5b2322b4f15daa6549510303344dc1059f84bbafa48d9402c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-builder-support/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-builder-support"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-repository-metadata",
      "version" : "3.9.6",
      "description" : "Per-directory local and remote repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "58a684bcc774fb44e4f73fa7466dc44d"
        },
        {
          "alg" : "SHA-1",
          "content" : "497cda3149f3c661113f9a663e0270ce2566cc95"
        },
        {
          "alg" : "SHA-256",
          "content" : "e047a67b204c434994253e2ab5bdff5fe8cb7ada9316ac3e754c39f900ea847b"
        },
        {
          "alg" : "SHA-512",
          "content" : "6020ef7361dd3a1c30227c80521b0233d99c61365b9e936968bc7421e771ec995b08cffe0dd1a94495e41208c6f2fe5f61b19162a59c8e5afb18569347ae6646"
        },
        {
          "alg" : "SHA-384",
          "content" : "8a56f8bbcbe303e87c0397c17456df1c14c2e9a10b899b26b30c905152fed1ca12863aed01641d1e3e2dc0b2b6355285"
        },
        {
          "alg" : "SHA3-384",
          "content" : "39a4aa4493977feb0d1772b660191c0ad029ff2ad498752fa02fec74610eac50f5f7a00a91bd128eca71c72a305dc055"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5a4e09609b2472233b395fbb31842f4d6f2ec1cebd65236cd93d2c34e910114"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7d50337b8b9d9bea846b86cc25210e9ebda941f098bb415172a80748609a022e56057d7873dafe068f5fa7e3cd1591b7613d7c9fc479f36e4688e95a31a29d20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-repository-metadata/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-repository-metadata"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-artifact",
      "version" : "3.9.6",
      "description" : "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "96a7982d9a46c5c19696b4558be1bbd2"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb0979832c10c1a25d038a33ca862bef055fcdc8"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad7a0fb408f8e47585ccc0d0011e0b501d93bfc9888d369bbd4a043d19475073"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ac2f9e8a13c166b305ff2004d467a9f12ea65d08b444ccc651232384fc37592eae6c3263e5ba2d7c0ec2725ce5cfb0f40198f8a857a39c2379c72d0f4e16427"
        },
        {
          "alg" : "SHA-384",
          "content" : "f97efa314f7bb2c120fb1e1e65859e5ab8b367556a82efa4654b548cf1c19af0a803ce1048dd728442a894a2c022410e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c97ea2052e75590746004d2726b7b12dfcb7afbc652b9fe6fe4b09eaa3502fd2d8fdb5704384eac5a06b656fba63fe57"
        },
        {
          "alg" : "SHA3-256",
          "content" : "405547e3a1b5393cc72fd26de6cdef47f7b9a26a07c15eea0fdb799718ad5d21"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab2d2071750ba22913275953f543f65e9a1ed311a5f5c64c877ab30dd65d854af3fdc85d701f15772b579ded1ff7f96c5469ac53fd00627ba386cd4fc26ef5d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-artifact/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-artifact"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-model-builder",
      "version" : "3.9.6",
      "description" : "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b1aa0b78ffdb501dd4a6cbc0cbeff68"
        },
        {
          "alg" : "SHA-1",
          "content" : "983ce00d50a9f78ad1b805e21e4fd71807fa6ebf"
        },
        {
          "alg" : "SHA-256",
          "content" : "5f96dafbc411ee4b1e8426368d0d31d05ab5a4dace69808143142a0017598721"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4fb4c65d2decd27583e67872d677a5be764f46aa718fccf5b28e00a3da0897b123981d813419362bdb0f2f4be18fbc2a9a4af705382b930f63353e6c605718f"
        },
        {
          "alg" : "SHA-384",
          "content" : "e3339d859f7f0596eb9f70df32c7fd2e49831adbd6ff1ee15d720c480b7bc6b888e9a9296981cf638d5800cbfb7ef730"
        },
        {
          "alg" : "SHA3-384",
          "content" : "658944e788511a9d838bcbc0152ee56341c251d1b767b9f1cfaced0c6dd71a091247184e6c62e2443f6f8139a3268882"
        },
        {
          "alg" : "SHA3-256",
          "content" : "012de6c311ffead1cdebf70b8cde874ae21112411701a4ba139a95414f762e76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2908d9ae1d01b28352f72acbb9c545ac1b88687b917b7e31bdd8f83e5d2a0736d59b01230d0cbfa20b133ff306c1693f8bf7881588e60f8e9ca6a8cb64c5916"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-model-builder/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-model-builder"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-resolver-provider",
      "version" : "3.9.6",
      "description" : "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74c2e9695842a46c2c2c1cd5179266c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "848c45d334f6cc5c8dd602b0e58fd4482964eddc"
        },
        {
          "alg" : "SHA-256",
          "content" : "73b00b244b7b9e285654a45e765892bf5d369da77d42b5b4b5429122ed198a33"
        },
        {
          "alg" : "SHA-512",
          "content" : "94d795274f8c78c55b7d041a5f8abea14ec151a4c287c17f517cbe1cfe32413a835aee2d1585b5a43a6c58f4d87e0638166c1f1d360adb4495ce3379877883a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "a35dd490ec044890cc0a1cf663c2683d9117513742fe2dc3584e2b79de5dcf3db4ddd60338729afae8cbfbcbbfb0dd6a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d3930d3d2d5f4f0afd00cb4239c2963f24ba39d5653f4169d83e71f282470c8f312bf7088b1760a4f51cd2904f13e44"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4ba4e0317de799723660a5ad284012f2ccf4b7fe0bdb5645a13655b7f5f5e8b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1eac6b376405d776ebc9226eddfea1dd94b3a0587d6df0c4ab843ca3e90808be649f3c1a9d985d77eac43d588a7c85743f73a8855b7f4dff8c58f008b1d1d08d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-resolver-provider/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-resolver-provider"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-impl",
      "version" : "1.9.18",
      "description" : "An implementation of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0204f7788eb26200ff419d4abe21072b"
        },
        {
          "alg" : "SHA-1",
          "content" : "e928b128d1e52e6299f94431ce3df74647bc8c26"
        },
        {
          "alg" : "SHA-256",
          "content" : "6bb9c90d007098004749c867da2eaf5785fc1139907718749c1097bdb2929bf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "64126f7045f32088e0ea7589cb0bbdc2142774d04b482bedd4c8fa6eecabdeb7f8166e652b8b56c78ea1e1e87319494846e119b86972d0998f4b2b3387e2f9a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd7562286f2b65e32344e6090b15cac641e48e494d4c39faade90665e20f23657fcde8721ca9893edc6d2a23d6d078bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57d1c84a8194ce4f2156a02b62facc9f929a0da25541c6f8b73191890252afe0b83928e8e5041d88d67d4799248b39d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7d1b46b5b6697753b20f46c58ab48298cace29ce6ee9f9bcb6c8dcdc59221beb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d50a156eed57cc5d3ba0a73f8743e1fb68da2877957527db7cff213b904270ce5f2ece9b3cb7fb4db9ba1abaefa5e23652b666ca8e30f13536728fb1e73ee480"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-impl"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-named-locks",
      "version" : "1.9.18",
      "description" : "A synchronization utility implementation using Named locks.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6da3cfadecd128a47814dfc661163dc"
        },
        {
          "alg" : "SHA-1",
          "content" : "31f948d89dcb3d9739e70d5e1000ebd68eb4405d"
        },
        {
          "alg" : "SHA-256",
          "content" : "098de7bbc5b0b26c3eff74ac30ffba6680fdab9bf4aebab95c3f5e2fe9eaeea8"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b55a35aa8aa819e9e7287791790b9ac9ba70d9a2b3a6dbe7dee40254c6515f5d1cd61b15e4c6700036125529d0a2a2d13bf1ac0230e958b5f90aa8462a8d58d"
        },
        {
          "alg" : "SHA-384",
          "content" : "1c607e1e92b97856f6638a00e2e5f6d804450efea858c6d289575297eb071a8ced2b60f1b27694db286c0ae6ccfda786"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe75434380ebfa2e4b0e2a3d680a5447635552386c8801926c99134d130988003ad88d53ba462963180f144b820d0731"
        },
        {
          "alg" : "SHA3-256",
          "content" : "166cf9b1a9c4ba6cead05d6adfd7391a09d3d067187c971eb58323306428b951"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f47e7b380741460b9609047b32fac66001abff730ead00cf565d9034290c051199f0b74f535aa748e62091a539d21359b5ad16da8b847f809bd1696405d9b9ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-named-locks/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-named-locks"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-spi",
      "version" : "1.9.18",
      "description" : "The service provider interface for repository system implementations and repository connectors.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b99c631156da02290d0c95cf40c4917b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fa176b3353ef6d78d02db39e025f3c27a983158"
        },
        {
          "alg" : "SHA-256",
          "content" : "d364fce9a17b0e0b073c26efa92af95b29c00c42943dced4a1168a7923fd3fe1"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d5149923daa3ae532704b55abc9f553e8ae700a896df2c43467dc6be273b0458b81f7d453cf69c203d4c30a9770b41efbf4c52c1ad28038f544fafdb1a85f14"
        },
        {
          "alg" : "SHA-384",
          "content" : "cafb154ec6c2de03737310566e8ff04e3df40614fa2b5aaa274a2d1c4ded45ccf97f4e78597271f859b684a89d6d7180"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f73a5dcce5bae6ec88a9e9bf203e520ef6a28eb38ff74156e23054e5c169d76d21f15d21f1db35e3f6f9eccd3a07edc5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e9d0b1de73e887b97084e3bb9a533b428bdae96121e3333d012a5eabb8a22f0f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "471cf0ac9de5249bf80992d4e7fe7693a41359540d704982fa19a2be174e594ce0e18048c69404defa1fd22bf57185f51e864eac0c088baf33242cc349464170"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-spi/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-spi"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-util",
      "version" : "1.9.18",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e6aa5f372550f4239361df35a53b4a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ae9406f188ae4a999c353fce3fd77273797a216"
        },
        {
          "alg" : "SHA-256",
          "content" : "2eb0ea667bc489384478231dda7516407d4b5b22a138077229871de9362a7ae2"
        },
        {
          "alg" : "SHA-512",
          "content" : "b084984ea96448bfc70d26091553df0f798957c736c4b0f21874a3844e2ea656f64f253968fa49ed572c80920ede5883c0563cab8961c5bda5e869eda3e2e57a"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea25e9d331ffab938cc72306f536ac42b3af53f0c683c624e1a2751b12d503d1f8f9b6f948c361543938096ee7768049"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7886276d15c071d03fbfcf3b4e2d4043417ff725583362123711da116fd24a027456c8835b9a3a1b29a339a1a559103f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "650154a642fbb6069408aa452312f1abcad0656c6da7f9eb83ea8d683e5ce582"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fc1726dd19a05060846cd14635b2076f703e5e832139bdd4285e77c0939667dfbdf4c90dc3021250dfc08de63dc346c9bf8bd00a80e31e5adecb305410c3e80f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.plexus",
      "version" : "0.9.0.M2",
      "description" : "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98e320df2caac742b2ae33d938c69df8"
        },
        {
          "alg" : "SHA-1",
          "content" : "31456dd2293197bb282c03168f6767acca3dec96"
        },
        {
          "alg" : "SHA-256",
          "content" : "9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1"
        },
        {
          "alg" : "SHA-512",
          "content" : "907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec"
        },
        {
          "alg" : "SHA-384",
          "content" : "8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde"
        },
        {
          "alg" : "SHA3-256",
          "content" : "883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.plexus/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.plexus/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.annotation",
      "name" : "javax.annotation-api",
      "version" : "1.2",
      "description" : "Common Annotations for the JavaTM Platform API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe320d2b3763bd6883ae1ede35e987"
        },
        {
          "alg" : "SHA-1",
          "content" : "479c1e06db31c432330183f5cae684163f186146"
        },
        {
          "alg" : "SHA-256",
          "content" : "5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04"
        },
        {
          "alg" : "SHA-512",
          "content" : "2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959"
        },
        {
          "alg" : "SHA-384",
          "content" : "37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=250"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GLASSFISH"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.sisu",
      "name" : "org.eclipse.sisu.inject",
      "version" : "0.9.0.M2",
      "description" : "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb805c5b2e22c8002877f0caadc6a87c"
        },
        {
          "alg" : "SHA-1",
          "content" : "5ace70e1ea696d156f5034a42a615df13a52003a"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5"
        },
        {
          "alg" : "SHA-512",
          "content" : "89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/sisu/org.eclipse.sisu.inject/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/sisu/job/sisu.inject/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/sisu.inject/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "5.1.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2560169296aa94492af34af2115e9511"
        },
        {
          "alg" : "SHA-1",
          "content" : "da25056c694c54ba16e78e4fc35f17fc60f0d1b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26"
        },
        {
          "alg" : "SHA-512",
          "content" : "b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "32.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6951895e804b36322214c95917e598d4"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e5d51a72d142f2d40a57dfb897188b36a95b489"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd7fa227591fb8509677d0d1122cf95158f3b8a9f45653f58281d879f6dc48c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dbe7a697511cfbe44f3ffb954e32e997677ecc61f03bb7bb374f1b8fa4a931a95cd9d1f5288eb5d42e2aa380e3241b35059786c07edc48e5aa67c30cddad8a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "abad4556e073fb38062c636b6599ceed992302c7d98150e3842d32ce92f6aac7d630633c56efa581523d591361fcf898"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c7b02d77e04c567e8870674f71a60141e83ca9e5e9180138450ede78ad7f2be8b6636c514096e15ba2921c2889427852"
        },
        {
          "alg" : "SHA3-256",
          "content" : "17f18d8631c9bff9234c214522ce89eb1feef27a4dfe990760d4943ad3de710d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7cf7847812b47cc232ef3c27719457dd19610b3e3bb25c1be640821a3a2be67781047f41e34491b5c8ed68010bbb1d53c5f7706633f3a3f44f3f3133bb7635ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "4.0.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa4c6aabfa676c4a1a1bf0c7473f684"
        },
        {
          "alg" : "SHA-1",
          "content" : "2162c639aa9b081ef2a0be9d41643513e284bf99"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b9cc44439191d2d0635974e2d44e768736b4fb2abcb65f94cd95e41912fa8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "ecf609d495c9e7728476ca35d4290c94d862c393afc6a98090571f4047d4184d1c5231fd6af4bc68fe7d832eca26171f86af5ec590d6f2f70740b720a6f636b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "713234f501e1911062a1e4272e10ab355c7dfb8f67ee1068dd35e71f6c1bd97becf4cf41a242877f8272db4028408e3c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "615f7639ab790d564b7b96ba58bc30fe38e65348ab6f1d5fa3cc6e96924badea397fb6ceeef1ba3f4bfe738d9c7d9797"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ea14f0fa9b179ee6a286b3973bcb11ab30f419aa0f4bc02bfaaaa65ac984de2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e21bf0de988be9861c589574c742b5f94558baf69e965d103e9b8bdb24bbe3a805bff45c5358f515749b5e9061af2ab4b99f6328babc3c396fc04f1cfd4b5fcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-utils/tree/plexus-utils-4.0.1/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-classworlds",
      "version" : "2.7.0",
      "description" : "A class loader framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ed852b1a004288c44438381e6aaee1e"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6"
        },
        {
          "alg" : "SHA-512",
          "content" : "8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-classworlds/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.7.0/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-interpolation",
      "version" : "1.26",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1049ae9f5cd8cf618abf5bc5805e6b94"
        },
        {
          "alg" : "SHA-1",
          "content" : "25b919c664b79795ccde0ede5cee0fd68b544197"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60"
        },
        {
          "alg" : "SHA-384",
          "content" : "93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-interpolation/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-plugin-api",
      "version" : "3.9.6",
      "description" : "The API for plugins - Mojos - development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d554ff9d1f948ef4ad67dd590e0eb299"
        },
        {
          "alg" : "SHA-1",
          "content" : "64c127e31d9329928c72c403408a01f1871b6733"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fd664f7e511463561bc343822347618b8ca0952db85da785809166f0a762411"
        },
        {
          "alg" : "SHA-512",
          "content" : "859b71dbf56651790914de279eee8452afbaae293051eb8f0b47b285c5a5d0352ea042acd9f64571b7d1deffe851debbb85f5bc6d10d404600cc964449757d86"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc4188bdb695f52eea8f97d7b02fdc47e686ce61a1780ba85f147faed66257589768610896c5d04d3f5d24dae468835b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7ee1c8bd1039fc378b7336716740316cd9ad014d66d379410e8efcae25c773ea6a5b87f10ed52ee72d89b9eb0cc9d8f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fdd09d0f129afbeb9e114025d55cae1ab01675f007ab66ae2252beb2b0295148"
        },
        {
          "alg" : "SHA3-512",
          "content" : "86b904876b16d1eaa9c692894f22a1bec64b58ef4f18cf08c721f5bb97307dce61f8eeb42b1986ec558b4aac389b65c52095128edf90a14433e681160c8b3ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-plugin-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-plugin-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven",
      "name" : "maven-settings",
      "version" : "3.9.6",
      "description" : "Maven Settings model.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "144dfb04d530da655c5f96d80adb4ef4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7687311690b68c935753c55dd3f016d8c4a7820f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d200fd3b354d653d2a02cdba6a39b6dc2744a8539ff36ea423fe62cac736799"
        },
        {
          "alg" : "SHA-512",
          "content" : "169cd7f3ef1933bca97c8b05022a1537695c20d7205333775375353249913e343ed7d48651ef23278a5942f2751ffd6968812a02e23a53af7adfd2cc22dac709"
        },
        {
          "alg" : "SHA-384",
          "content" : "ff0eacfafb403c71c7b571101d44792e2c809b7e6c308e4906eb09af8520413579d4be31625059eb7547b2b875bf8ffd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "598fc70e1fa4885f2f31287d825fa169243b10ec1b87f9bf1a45026ee6e0d41eb5c164958ccb2995cf22f88738700801"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6b2525a09ad10ca6d70f4fc2fbd92d1f8ff0c5bf15b30ff33d6df84fab9c316"
        },
        {
          "alg" : "SHA3-512",
          "content" : "87a7ed26f07ab9f29ecc033fe4c40c99f5365f9ccd31bfa4be6f02fa02ba98a4cebaed7436037e264ca4c2b1173bd423e0ea3aee465535a7d9f721783ec70c17"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/ref/3.9.6/maven-settings/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven/tree/maven-3.9.6/maven-settings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-archiver",
      "version" : "4.9.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "408c466d4a20a02f4a2428a4f003ca13"
        },
        {
          "alg" : "SHA-1",
          "content" : "a03ed402ef8468c1d1bda368d7213cad67f16a71"
        },
        {
          "alg" : "SHA-256",
          "content" : "a837bd7d73291564dc8e8c826de0fede75896527a35bdcddb77b0545ee656a4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "a1f0e4de6726f6aad22aadb40e5453d42ec299a09465ea0df8aeec28b3a2f1b06e1d0e03f156db4d88836b81f87cea6f620f3c5aac8910a0fb22bce4e9448324"
        },
        {
          "alg" : "SHA-384",
          "content" : "057a284377116b1f7862d27267f06f731392a47ddaf9eabb416b6d55e00079ec0b81605d6b3c08e1357f5952617c95bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "085da469ee95cd8d301136ad5875e69e17d2323846bec96c272e11e09b38b24258666fd2ea03ecbebab2e7ba905e7042"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de713192117128611e59f76d8caaf6c7b06e3f14ac28e99c5c6e8234119f9a81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c719f55b47af87502e59affec58cc86e6ef79cf1f9a5f3890e508ffb04cba4d2a5e209ca7c6e1fd9c8a85299f0bc979382cac3efa4b3ab71c043deae15599750"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-archiver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-archiver/tree/plexus-archiver-4.9.2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.26.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7af7d22a7280508327d809b183114a92"
        },
        {
          "alg" : "SHA-1",
          "content" : "44331c1130c370e726a2e1a3e6fba6d2558ef04a"
        },
        {
          "alg" : "SHA-256",
          "content" : "27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02"
        },
        {
          "alg" : "SHA-384",
          "content" : "c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a6a43bc19652007a0a61c8007dc5e67c98bade39f0c8b567e10ec82dc95f2288fcac53ec7d31ca793f4c3edf8ef9fbe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c2bddb71dcfe84e98754a1e0f0b16ec60a8e4c5761cd4db210477fcd3a3bf595"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2636e83c2274019d7c1742477e5c641d0348afe5179e4a8316f28f41c51ca0f609a8e9a41fdaf0b68f7830d2e0fc74268fcee43d9c7cf49b57d74a426295f4ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.1",
      "description" : "The Apache Commons Codec component contains encoder and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c5be822d8d3fa61c3b54c4c8978dfdc"
        },
        {
          "alg" : "SHA-1",
          "content" : "47bd4d333fba53406f6c6c51884ddbca435c8862"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec87bfb55f22cbd1b21e2190eeda28b2b312ed2a431ee49fbdcc01812d04a5e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "bd33fd5340757ea0616a8c2a48760cfc9932f93b8e067701f4a122fd59735083468a016d8c0fd65973dd3fa4fc3537855e71a1fae7d14e1777e31ff1c47708ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee7f4c3e5c01cf77f4d82b09c358087738e6e79507ced9f2c82fdce3b32825bb62b2d66b30ef897e2972d3253478c525"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c200875af6359f6a584b108ecae3d83496942e1216dfacbd86e3c22e54b90b9519a9b01a229e71552111b10c8734c327"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81cd8a4c12e0b7ac84222e33b159cbd6f658b3e0f48e5fd8075d50cd03b05837"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c821b99a5b4a3fbf052f562d60479bc252aafa8057fcbe095e09e96cf01594a23455658f9c666866e1937910ff44a1a891760d04c22d5187cb98be9d0d58952b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar"
    },
    {
      "group" : "org.iq80.snappy",
      "name" : "snappy",
      "version" : "0.4",
      "description" : "Port of Snappy to Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0792d1dbe7f90d8b34c7c19961e0073"
        },
        {
          "alg" : "SHA-1",
          "content" : "a42b2d92a89efd35bb14738000dabcac6bd07a8d"
        },
        {
          "alg" : "SHA-256",
          "content" : "46a0c87d504ce9d6063e1ff6e4d20738feb49d8abf85b5071a7d18df4f11bac9"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd2559bf0388c6f1987d1393497a423203b2a72febbe648b3429e4d07b47a504797228e6e4e39a94c6800c5d3df8d3792863a3b841e6e8f65cfdcda91b6f0ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b5feeb0f1ee3fd3f5cd17c5ea31a75cdd060e7beaa1773474727711c308d2cf5b900b5717965afe8c14912e33c41538"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d96d486687e858c1ebe1fadbd731d33e0233922eee703f1a4e36e68fa1dcc527cdcc4fae8fc91894ebeada2a1214606e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf1b329b3f46891dc9e86fe9c6350a023dc0cb411739d2fd9d35490dfa8397aa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8584d15b63d4c371fed5b615f7a121fe2530d35d234b2caa499c53e7c558376ed22d289828276fbc77cd7c1311ba4d6c1af03edf08c5f051d5b674f01e6120"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/dain/snappy"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/dain/snapy/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar"
    },
    {
      "group" : "org.tukaani",
      "name" : "xz",
      "version" : "1.9",
      "description" : "XZ data compression",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "57c2fbfeb55e307ccae52e5322082e02"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ea4bec1a921180164852c65006d928617bd2caf"
        },
        {
          "alg" : "SHA-256",
          "content" : "211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://tukaani.org/xz/java.html"
        },
        {
          "type" : "vcs",
          "url" : "https://git.tukaani.org/?p=xz-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar"
    },
    {
      "publisher" : "com.github.luben",
      "group" : "com.github.luben",
      "name" : "zstd-jni",
      "version" : "1.5.5-11",
      "description" : "JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "00977099d76d2c01a7b19263375ee42e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca6ab366315e179dd80645aad4a60bab959c6523"
        },
        {
          "alg" : "SHA-256",
          "content" : "d75b2ced6059f81ad23e021c554259b906b6c4f2991cb772409827569ead4c1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d9bb13345d3a41a9ddbd0d4fbd9a4ab936f8ff98acbcb37394cd0e75aa5e550888d51b93c76fea8629e2f2cf39de4b0fe94abf853b46db426e40674cde8d69d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "c128f7dd3f6ec2f5a5566769bd60f6d3ed36583575bb2efdb9e53aee028b629d009ce4008efda5c38da778195ff42429"
        },
        {
          "alg" : "SHA3-384",
          "content" : "60e17c55ff7cbe9ec7411bd06ba10470396666dc78ed93943e1412512cb420413182c9071010b5e849d74415fe10ebf0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bba50765cfc050bd98cc6eac6d180751e920067a58c6a41050870e937ecce2d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a892530c4e30fff48cfb3d94bc59128ac853d172e8012f66184780cbafad5d5381ca239e0f68f712d3b1e399c5155287f0f8b077eb7cb48bdd1548ba7c89a734"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/luben/zstd-jni"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.16.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed8191a5a217940140001b0acfed18d9"
        },
        {
          "alg" : "SHA-1",
          "content" : "377d592e740dc77124e0901291dbfaa6810a200e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-io",
      "version" : "3.4.2",
      "description" : "The Plexus project provides a full software stack for creating and executing software projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "77515ce571e8169c13220c506ad177a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "40deb3076e4597f1ef973dc794f3a510fa3a942d"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ba7fb0db6bfa348c248df3f983ae31318e9c14f35a86a932af5ffd7450aa62a"
        },
        {
          "alg" : "SHA-512",
          "content" : "607de2dcb3826986f163a7d312d45ce43cbf6d845ca5f4006a966bf213b8c2625c14342f8de1e6c9cd9c4206fceda8ecc0fa27ace0c36d5e7b04857d63b3ae03"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bacec1f58c7d704a3bfe70d4564216438e7d0126bda201ad5c51b27cff46efe5fb3cc02b1378e6793f7effbc1b2cc59"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0aae7a1b6a72d8712393e5d6cfd59425e405f837ebe2e997622dc119f193430b2af5b7e5e4d1e28016a66766435488b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50a8c45be377dbecc46e7535fe35dbfedf31a36f773d86c76dd9942b854957d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ebf3a6ea15bb832f1a87cc455731ac8fcb731eb846c0f279ee3d3225327dbd1e01109b7d8a89d4f1582a71749547226f026f1a5e76cb89071898787f1459a9d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://codehaus-plexus.github.io/plexus-pom/plexus-io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/codehaus-plexus/plexus-io/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/forum/#!forum/mojohaus-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-io"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.resolver",
      "name" : "maven-resolver-api",
      "version" : "1.9.20",
      "description" : "The application programming interface for the repository system.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "424d206b1ab6cdedce55e575fe328ca8"
        },
        {
          "alg" : "SHA-1",
          "content" : "e9da4e71e96f5ca9418ebbf60d136fe37bfe4ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "dee92eda1cd293afbbbb0ee3d752f8c135e193e2232172e036a3f23e38c8c25d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e641a549f7078316bb26b193697e855432492153c3642189b25a84c03dd4101ae5cf4eff3d591590390c7361733e5308e67fd5a0b4f3ae08125b74900f7dd471"
        },
        {
          "alg" : "SHA-384",
          "content" : "555c1a9bff564efeebab84f1a66384b57c53529fb606e9d9d1e75a31bbc25869ea9a089465d70476b89dd2270becfc98"
        },
        {
          "alg" : "SHA3-384",
          "content" : "baada532d2c2b3eacf12c7103ddf4d4d73736f74f52f15869db45a6b831946fd946c803553cb29be71e4e7c00d8ab550"
        },
        {
          "alg" : "SHA3-256",
          "content" : "724ad8b918eb4ae741b4960671e0a8f7c14e2f7e78123d4e9b6881d358e90044"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ee2b2e2d13b57ce207667dec7f6d7161118e4e0eda505dcdebe7f796e73c92af94fe388b630ca19778669693d50df740c753168387ff467ce892e0767301b3cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/resolver/maven-resolver-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.20/maven-resolver-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-shared-utils",
      "version" : "3.4.2",
      "description" : "Shared utilities for use by Maven core and plugins",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53a038f77a81cb5816ad2b1c7daa8711"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa28296272a5915b08de9f11f34a94b0a818fd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b613357e1bad4dfc1dead801691c9460f9585fe7c6b466bc25186212d7d18487"
        },
        {
          "alg" : "SHA-512",
          "content" : "71db8a485a6436cb305276ea9d748f578e1a8ffa1346c8570f7038684ce53d320584174634aeffa1b51629af0171a2d6572854eb07236a83236ad1d9949988e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f7e2c449282244fea3151ac0c956b42bb7ae6cb2397ca8b18952aea802d33cccad6e08a5f515fc34e52bacfece18862"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ec6c2c5de8cd074bd59dbb8215005bedc9de58795484ec2792fa867eaf13547aaca81daaf06f1ec117d29b21e70cd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5cf6de29555bde0317d641e8a7afd7d1ed84dddff92c80f8493b4a2873d26c41"
        },
        {
          "alg" : "SHA3-512",
          "content" : "836acb2525ddc3b352da7db824e00c0831b25f46cb32a77c1e578b39978621e3c47da3554a901749af15b3981620875a4c4492f421a1833d8eb8e50c4804eff8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/shared/maven-shared-utils/"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.4.2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.plugin-tools",
      "name" : "maven-plugin-annotations",
      "version" : "3.12.0",
      "description" : "Java annotations to use in Mojos",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e5b825e2c793e62adcaad9d36633caf"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec4d83a57e597d4d132df8715d0074d1bad82c13"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ddd26c5b0e6c0e9521d1dac4ca5a02d633f628f6f06b847a5dc425c6b34e7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c28674a35d82f89cdcc51fb1088f527df1628013f488b4fcd6da9f00d03061c271d39ce353a594bad3f5b2d55ff94220b048908e160ec55049256cc308820c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "d185528f3e6cc3c5e329883907c199a83a28ee64c345ef42c04631a337274a2f70b115ea64d9efcdc803fc67d5dae06a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d794809a28795b77fc81416a8cecde17f6dc53aa9e8ae5151b5b07517ebc5660c2dce9df308e4c692e33869fb401e3d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4a570683f74ffdc5bcaa83785121b864fc331eb265ef2aecf014b87caf66e4a6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7facc53910e9613b77e8ce2d88e248b1137449efcf521cdae697eb25cecdc9465f264fa867ec2a9051271f112a5482848bfe48176c1daae017295598fa5009c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://maven.apache.org/plugin-tools/maven-plugin-annotations"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.12.0/maven-plugin-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.12.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.maven.plugins/maven-wrapper-plugin@3.3.2?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
        "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.20?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@5.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@32.0.1-jre?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-archiver@4.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
        "pkg:maven/org.tukaani/xz@1.9?type=jar",
        "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-io@3.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@4.0.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
        "pkg:maven/commons-io/commons-io@2.16.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.iq80.snappy/snappy@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.tukaani/xz@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.luben/zstd-jni@1.5.5-11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.12.0?type=jar",
      "dependsOn" : [ ]
    }
  ]
}