{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:9c0fae3e-9cb2-41c6-b1a9-6fa09d24ba68",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-01-16T21:33:54Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.4",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1c0045824ba8b7c3459faf37fadb5ca4"
          },
          {
            "alg" : "SHA-1",
            "content" : "c0259ad78634a65918e328d793d2ea0b8a9c2220"
          },
          {
            "alg" : "SHA-256",
            "content" : "47bd0e0176ba679b66739820bc52880a9e667c57c8b7301de698c0ce7e271bb1"
          },
          {
            "alg" : "SHA-512",
            "content" : "e8b72acd176d5d3e13646c2422d6fac1e47d369162cbde8796afa567d36bd182a5f8f4cbdc46185f3607a71e92c410ab0eacd87ab8c17b38e352eb3077a46ecb"
          },
          {
            "alg" : "SHA-384",
            "content" : "8759a5908a1dbd6797ce597bba7d67a073d63129e1affd9b827482581ee85815b118fb4e950991b9d6793a5d70e8b901"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.7.8",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.7.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-mapreduce"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/orc/orc-mapreduce"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.7.8?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.7.8",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c39b0b1c320b2c3490de9e2c47d571ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "119aa6e986c0c81ebd825399064d6f8843517e94"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2e03316c70bb55dd88b41354981f86fda853997ff0d28aebdd284cd71f294c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee6d4a3436d2ee66c3c3aeb3177354eefec1a2e5a73470a84c7d77990b2a11a668c8a6232713dc79c85f629e40d6cbd27b76e23fb178c5e132e5bacfbaea4e2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "0458f08a0b2f8331a8abee5ba81661dca529f3ab76a2ccb8c056b8d97a1642d2898a882a11a63b30d7a1a99f80c623cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.7.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/orc/orc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.7.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.7.8",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87d1f06c964c7de1377fae4dcf581d44"
        },
        {
          "alg" : "SHA-1",
          "content" : "c232a0396501361f12194a9f67d99442c898588d"
        },
        {
          "alg" : "SHA-256",
          "content" : "64e7d598e0f2d5a7b5fc05d1e271cdb2796c2eb9885d1e4a1254bba274154d96"
        },
        {
          "alg" : "SHA-512",
          "content" : "81af644a0e9bc32e13f28724ae3a5281e24b5d5d842859f104d1854c2f5680bec88ab1b97a58aeb331a9d642057b5b708b812a5fddae7116408ffff6ea3d837f"
        },
        {
          "alg" : "SHA-384",
          "content" : "ab201e1e42faa93888559a386b36e80f78b8a67043fd22f4bb0628196e0a6418c799dcdbab3ba0b09d0822d55baf60fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.7.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.7.8?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/protobuf"
        },
        {
          "type" : "distribution",
          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.21",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "43f5c177aaca2ba4e4ad78e4d6f3e992"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d1efd839d539481952a9757834054239774f057"
        },
        {
          "alg" : "SHA-256",
          "content" : "e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.5.0",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25fcd93381bd0b0d2cf6b99c231e4bb4"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6adb54fefe72482ed049f07af31ddf2c287345f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7def554536188fbaf8aac1a0a2f956b039cbbb5696edc3b8336c442c56ae445"
        },
        {
          "alg" : "SHA-512",
          "content" : "b399ef5480bb0fb0d7d56861291f1a540c78d324e9a8d25704fba458ba961fac6908552a34072faf8a7e501bf480f078b990c7e0d50c2691dba1150dbfdc6f7e"
        },
        {
          "alg" : "SHA-384",
          "content" : "3d5aa4e6d7549456ca57a18bdcafc3578a6c78edc33898cbeea5947597625b7e0d870dae72a8c51acdbda83dece44e47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org/threeten-extra"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.5.0?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "3.0.3",
      "description" : "Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d31aced491436960a12bded1d8e65658"
        },
        {
          "alg" : "SHA-1",
          "content" : "977d6b42d82de551fcf77dad84ef06c2839e3a74"
        },
        {
          "alg" : "SHA-256",
          "content" : "71727556d387eada4578305fd337b3e046ecf8535f99ed66169ab2a3034418e0"
        },
        {
          "alg" : "SHA-512",
          "content" : "044d38afae920d9ddec37ef233e4b3cdcd9cb059578e8578a03ec5f3fbfe003a8828e2c8f95552604397ba634e5eacee198b9aa71ae47914b1874e8dab446a85"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b9ab3f3ad9397c5d142ac595ba7afa72c5e829e1ebc28e0a247052bcfc79f2bc03e948cb056523a2d6cd04bcf9856b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@3.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@3.0.3?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f43bb28332a67508d0b7adda59a49b82"
        },
        {
          "alg" : "SHA-1",
          "content" : "a840350e4a1f5483f949ec5e72cfa2c6b2b3cf94"
        },
        {
          "alg" : "SHA-256",
          "content" : "02bbd795a1d9b406d5b01366cef8232da1c06fa6b9ed0a658436ce30fda6cc9b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3027ac6a3a91dcab02c2dce261b6a0d81b42cd5debd8209b5e93a1b61e5c6ff8138a29ad5085ca8ac0f8a5546d4440d0a74851ea00fd74571a387a53700c375"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ca607e3fcbc52cb787d2ddeed9dfc0342020583fc60ef6c6f6dbb9d0106e41b851ab2b01a63e46007d005decadc8d93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.2.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4153a652ce29816f39e8dfb72cd4841"
        },
        {
          "alg" : "SHA-1",
          "content" : "ebd95f271e3bce5c0dca5926bb3eb36530cd9ab6"
        },
        {
          "alg" : "SHA-256",
          "content" : "67fc6bc2827cbea4bf37d4295ae7a687219ec6ca7fb86cb0e1b7b3d706a35a03"
        },
        {
          "alg" : "SHA-512",
          "content" : "bef63faf7160e1b2eb51bc1ce7eacdf48c14883a8b6c8fee440cabf7bee3b42923d286e5a6d0e788b6fa7aa008621c2bbd67d49096f5a5f7e15d3c67fc9293ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "fee8cd5ef02f73bdcc26e45961991ee2151e9264b15a205f548c6deec9775b4e0b4f2bf62e72e6d71150fc17ae82b0b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.4",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c966d7e03507c834d5b09b848560174e"
        },
        {
          "alg" : "SHA-1",
          "content" : "c51c00206bb913cd8612b24abd9fa98ae89719b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328"
        },
        {
          "alg" : "SHA-512",
          "content" : "fa769a08a118141831cd4eaf2ce4f3f65855b8aeee86fbf3e07b4c619facf801f8b55c14c5e56a154cd14f438a8f120bb59a20c1b6be04979501e362f252ca48"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa516a360ed41568a618c45df5288daa75c2d2ddb9a9af61324962f2cf534834bb0fb51bf13710709a771f09992febc5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/cli/trunk/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math",
      "version" : "2.1",
      "description" : "The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67f7202f589cc8eac9eb837c306bd4b5"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3c4bdc2778ddccceb8da2acec3e37bfa41303e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "4ba6b73f55ff04cac3e77d8ed3676b696a222151a36ad18556554f4d1d55ee89"
        },
        {
          "alg" : "SHA-512",
          "content" : "241382df910da1b4616081a42f183aeb65ac5192c7f81bf4bf6e73f8e580b4300e2a28d91fecea536d0c5aa3653299b091e8763a4015712a8a26e58b6aee6ba4"
        },
        {
          "alg" : "SHA-384",
          "content" : "b5088aab953da7424375141d82d27e1adfa21f5260ce26bc2887861c3c6fca54c643165b49f43531da56e71e7102558b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/math/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/math/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math@2.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "commons-httpclient",
      "name" : "commons-httpclient",
      "version" : "3.1",
      "description" : "The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ad8c9229ef2d59ab9f59f7050e846a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "964cd74171f427720480efdec40a7c7f6e58426a"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443"
        },
        {
          "alg" : "SHA-512",
          "content" : "85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359"
        },
        {
          "alg" : "SHA-384",
          "content" : "973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/httpcomponents/httpclient-3.x/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.1",
      "description" : "The Commons IO library contains utility classes, stream implementations, file filters, file comparators and endian classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4854c2344aa182ad4f37976e83348aa0"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd51f906669f49a4ffd06650666c3b8147a6106e"
        },
        {
          "alg" : "SHA-256",
          "content" : "88dff860b1983f9640979196a4dfd9ae6cddd4a88119c81ce3a61de2f28cc927"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c5c463cc8020e9ad565024c5df2b88912cb736ee47339d8468ea10b2d4d321c6a1e5a3477c4142a5d4349658285dfba5345249f7d180e345b2682d5924db148"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc898c66f2a105d9a20bce692217fd2f229965baa47dd90fe488a4d908f0bc26fdf74a02f04fc230da410f1539618000"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/io/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/io/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.1",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed448347fc0104034aa14c8189bf37de"
        },
        {
          "alg" : "SHA-1",
          "content" : "5043bfebc3db072ed80fbd362e7caf00e885d8ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f"
        },
        {
          "alg" : "SHA-512",
          "content" : "470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff"
        },
        {
          "alg" : "SHA-384",
          "content" : "264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/logging"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-commits/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "log4j",
      "name" : "log4j",
      "version" : "1.2.17",
      "description" : "Apache Log4j 1.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04a41f0a068986f0f73485cf507c0f40"
        },
        {
          "alg" : "SHA-1",
          "content" : "5af35056b4d257e4b64b9e8069c0746e8b08629f"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logging.apache.org/log4j/1.2/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/builds/logging/repo/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/logging-log4j-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.5",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab04c560caea60d3b0050beb57776a32"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0236b252e86419eef20c31a44579d2aee2f0a69"
        },
        {
          "alg" : "SHA-256",
          "content" : "a64e0c73988fef8d5b73fc29d105a3a6e2dc5d9b90a94fca065cd2439dc56590"
        },
        {
          "alg" : "SHA-512",
          "content" : "eff388ecce06df2d557b63559db2a6b8932f3466e1015b15653c7f788c77b8bb8e42df7dc4fe93077c96cc40942387d38b8110e00400a7594d9395cf0ec7334d"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0d02094a045733951ebaa6cb711306b8260f0edb07060685353bc4af417b101d7e25663cd617e17fb03c8384b96581a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.6",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b099d9f9b4b99071cc52b259308df69a"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cadde23955d7681b0d94a2715846d20b425235"
        },
        {
          "alg" : "SHA-256",
          "content" : "46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "www.apache.org//www/www.apache.org/dist/java-repository/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.1",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "13bc641afd7fd95e09b260f69c1e4c91"
        },
        {
          "alg" : "SHA-1",
          "content" : "761ea405b9b37ced573d2df0d1e3a4e0f9edc668"
        },
        {
          "alg" : "SHA-256",
          "content" : "87363a4c94eaabeefd8b930cb059f66b64c9f7d632862f23de3012da7660047b"
        },
        {
          "alg" : "SHA-512",
          "content" : "8d0aa0e4e328c2e391d4d972f361a19ff085f508cb0478f5967280953abd3520ee92cc1d19b21cb4e29e4a7bc557487ddbaee9807b751824241269367b9e92cb"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5beca0365f4158cdab72a904eef2abcc88f5604bc52fce08b3439a5f1bef45bd64d715d733e624b58056f8d1c4707c3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-log4j12",
      "version" : "1.7.5",
      "description" : "SLF4J LOG4J-12 Binding",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "371e35747d6bd35e3800034bdac4150e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6edffc576ce104ec769d954618764f39f0f0f10d"
        },
        {
          "alg" : "SHA-256",
          "content" : "e3393b87604eeab24d72d71d0bfceb3436658ab0593f48f16523ad90f270c88f"
        },
        {
          "alg" : "SHA-512",
          "content" : "167ee81667879ad2c9f442f4c00c6942edb053de781e5de57cc9d04a76aa3c34e130fd1df0b1e0e4ad0945cf9a12b829243857626b50a9d8b634ecd3ec227dce"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a537dc1eb08e1aaa1e5566e96a667ceb3d867ffffc97be80c5620034bc8ec931fc197c8b9c2f8f6161cb761b4b1221b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/slf4j/slf4j-log4j12"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.8.8",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a65a9709da8186ed9a1c739355414460"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd2e90bb710ea3bc4610e24299d6a4c8dac5049b"
        },
        {
          "alg" : "SHA-256",
          "content" : "96b394f135bf396679681aca6716d8bea14a97cf306d3738a053c43d07a1308b"
        },
        {
          "alg" : "SHA-512",
          "content" : "0dbf768be32ac1de180b2c514d4b6f23353c39cf4c1cfb6a3a3f5c7a0596338a59946b3ea882804acec23b27072a5420f5733d9240410c3d8d2147604055ed98"
        },
        {
          "alg" : "SHA-384",
          "content" : "a40bad7509164f71eef0ad3060b84e66dc21064ab72b2ebf5f43265d4bf11ec847604148ee2450b44397d35819c4f3b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.8.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.8.8?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.8.8",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e6795b01c7b5fa40eeae9fe4eb7b523"
        },
        {
          "alg" : "SHA-1",
          "content" : "01bb32d9d2527c083a56e234acca49a48d3c65c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "56436abd3e06c45e496b8604fd3f3b0f22451a9b5de8433b6f8b416e7a14a048"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa896bc90753f11919e1f2b18a429af7933b0657b1a1c4ac1c07acfac34405857d98a6b3a8dc760b73843ea104e83689b5d882b50a1d6c9236ca5fad4c7f7600"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b018b58fbc233aaab15face4545e7dd1a9c805af8fd0e8687e0fcadb39942233c6ffc0f6b9f7e19cd0ff3b3c4b241c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.8.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.8.8?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8bb0f03bea387738b61642a2502b3289"
        },
        {
          "alg" : "SHA-1",
          "content" : "74e5f8b2134be51312c004d29e33a7bf4377ce20"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2c50d66e049c378088975774656d8e111265d12fbba1cde97de71dd01b96d2b"
        },
        {
          "alg" : "SHA-512",
          "content" : "34dc324a67bdeec6d4cc1002e34b25f05eebb588e198de9859e48481ee1b3f9b945d06f0b8059c1a839a42a41186cea634c747bf54441514d54d6349b4c6fd77"
        },
        {
          "alg" : "SHA-384",
          "content" : "078b784bdab857f9aff487ce54a3d88affcf35360e76923754fdadeb178ec125d1ba3ffa17b2d14d29a2ac7a209ab1fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.2.0?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.42",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74ea920580077b4c0b51101a8292a529"
        },
        {
          "alg" : "SHA-1",
          "content" : "a86104b0f2e0c0bab5b0df836065823a99b5e334"
        },
        {
          "alg" : "SHA-256",
          "content" : "74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.6.2",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7882670c60df817d78f9fa2c9ef4d99b"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd0630f2de482ce8a14bc1de8dc12ef6197f4624"
        },
        {
          "alg" : "SHA-256",
          "content" : "68294c8f41552add34d92181edf18d6e40ad949113c73a50518818a05ac95d76"
        },
        {
          "alg" : "SHA-512",
          "content" : "e721e6f1a76e649b710af01031b36daffe52dcd654867e8353ac37297db2ffbfee8e13a1eb28636bd573abb76b33b644b4a02ce928977a460813b67068eae308"
        },
        {
          "alg" : "SHA-384",
          "content" : "0114b756f659eb2b0fc499489c1f331da81ebf5ee14c1f38888585f14224fde886d0052e2d937e3167a8cccf13ab445f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.6.2",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ec8916fd55b93524d86805f6c1d47f61"
        },
        {
          "alg" : "SHA-1",
          "content" : "1cb72bc20e0796c2bb10034e514f76364e902898"
        },
        {
          "alg" : "SHA-256",
          "content" : "f95a9c95598daffc707ec074411e4b52eef3e7426cedd3e4b3cb1b982e8c783f"
        },
        {
          "alg" : "SHA-512",
          "content" : "445c5a1856a5a30de5f50eaa05dce2201383cdeba8a399e5eed9b213571c704127876b925ae846d686f2f39f4b0b099ecbc1fe3e5a9e1fcbb1aa001f3abef1d6"
        },
        {
          "alg" : "SHA-384",
          "content" : "5e2d152a6e032f2c3cc67a2a8d3c92a0c5007b663ffae7843953497e83cf692658ad1abd353608932847664afdec972c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.5.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "032788f0841d26b027957fe91f2cd696"
        },
        {
          "alg" : "SHA-1",
          "content" : "55762d3191a8d6610ef46d11e8cb70c7667342a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "c82631f06c75d46bf6524d95f0d6c2e3aef1b3eb4a7b584ca296624ef0d474be"
        },
        {
          "alg" : "SHA-512",
          "content" : "7c05f699ba6d63053d513dfc1bdd893f5a76f9973d2bf366c31a5eb99f9954521cb58db0f7d1274fddf2dd39dacbcde6907d5ffc8afc728c91817d2e99ee2a96"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e2b37e3c3e11a760663b9e4c08c5227d08c3d0924f581284d20afb9361bfb58e4052c255cb5f647b1ae1a2bffc3d10c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.4.1",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f7ff9255a831325f38a170992b70073"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02e84a993d88568417536240e970c4b809126fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/compress/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/compress/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-mapreduce-client-core",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "36b5ecb14a16a9f1789cb7f11583bee4"
        },
        {
          "alg" : "SHA-1",
          "content" : "4be274d45f35543d3c4dd8e2bfed2cebc56696c7"
        },
        {
          "alg" : "SHA-256",
          "content" : "36f29d1f53dc243c074efa0dc552efedc209ca532dfd94aa5cb2d9461b0ed91a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ffbdb2b4802b83f7486a1dc15da2293bbd882634b48a7551c3600c4e1a44b712549ea8a02b21faafc4707855749fa6ce1af5b1b786d07547e5d86b358f4fe6f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "f3cc30e7d11d42cc79cfcda79c82fee26273310ced66cd372a54552e6f8cc1be6151bb1937000dcd7533a89041a5892f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.2.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-common",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e76e2d21face77570946d3b2ebe00e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "77f18c3d40dcb45b0be2602cfa5115a5edb40db1"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3ce05a7e431e86aebb2240753d2d59ccbb4005199322f4d6373f6e24c90abd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "80768874eec7ebadada23bea5133f87d3928003c934ce36db292b918f77adc6ed72eb4c6a5c2c95d99ee800cfffa990122d3822b2e42b458437e578000623b93"
        },
        {
          "alg" : "SHA-384",
          "content" : "e2a9e90d11536b99eac8662212fbf3dc1b0da7ca6cc82d0737783383c6873efceaf8edd7d412ed715d5b091ecb06dc33"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.2.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-api",
      "version" : "2.2.0",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "99c98d7c9cbc5710880ec985071c9302"
        },
        {
          "alg" : "SHA-1",
          "content" : "655910becbe9c5c60033e9e64e95aab0ec4ce94a"
        },
        {
          "alg" : "SHA-256",
          "content" : "c050c00c4eb158bc0f788c6350cf1551df0ce5f5dd59740ede98d9feaf7eaef1"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5f0f4765397e9c344464d84bf7c472cbfa7ab84102b56171a2bd9f01567a4d028fa501665dc24db0d6a23add94708131141e804ee9261b3ed6ba369c7394077"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d4ec9bbcea967be6ac0efa1dac62874150847fbc87c9779ef03250bfa83e2f8ca5a5e2b9d24b3d6a7e8d3933dc94e27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.2.0?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1c7ba366884cfcd2cfb48d2395c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d84f15fe35e2c716a02979fb62f50a29f38aefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22"
        },
        {
          "alg" : "SHA-512",
          "content" : "8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/guice/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.jersey-test-framework",
      "name" : "jersey-test-framework-grizzly2",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8e817cde1c608f94b9b1dc9fafc2f05"
        },
        {
          "alg" : "SHA-1",
          "content" : "8bf4d5cef8cbf70a160cc2ff78b332db454030bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "eb52c51665dfa2ca1a684b1c9e0013a4c7aed33f20f47d028b85f5acfee7d2fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "325e8efe130975f3c22782e39433625b2938a8ea4348c765e180d58799f71950fc5ec849c4c680d89fa7a457682f198b5fd704c2675d8a883011a3be3dc89b61"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d595365ab9570c4775f572d19c5e2d7bf4730454f739b7b6dfe355ef88a0e089212a5baccafe0171d90d0b9ad8a434e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-grizzly2@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-test-framework/jersey-test-framework-grizzly2/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-test-framework/jersey-test-framework-grizzly2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-grizzly2@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.jersey-test-framework",
      "name" : "jersey-test-framework-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dce63542aa8b759bde7871be2a9dba45"
        },
        {
          "alg" : "SHA-1",
          "content" : "129431673b2735840b9216a651de38b4f1cb3c66"
        },
        {
          "alg" : "SHA-256",
          "content" : "20dd895f23892cf16ad94da3c412e58b498981d1e89dfe10c562f87e2eddf639"
        },
        {
          "alg" : "SHA-512",
          "content" : "01a3e65fa370a9283d13e18bd91cce55a111cfabd511f5522240179eefda1aaabea147624133db67b63dc4d118778049c0cbca5a18ffe06b9a63672e4aab2f20"
        },
        {
          "alg" : "SHA-384",
          "content" : "a4358a1c8a4fc9cd47e3311b13ae876332060960693354ac8cf2a77b08fa5182bb52f28455fac4e7204e86ffc4a45198"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-test-framework/jersey-test-framework-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-test-framework/jersey-test-framework-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-core@1.9?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "javax.servlet",
      "name" : "javax.servlet-api",
      "version" : "3.0.1",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ef236ac4c24850cd54abff60be25f35"
        },
        {
          "alg" : "SHA-1",
          "content" : "6bf0ebb7efd993e222fc1112377b5e92a13b38dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "377d8bde87ac6bc7f83f27df8e02456d5870bb78c832dac656ceacc28b016e56"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e087f1e4632048f1c6ea12e3820a30c7a6e66b13277ec8e784d8c5aba99335cd90cdb08e23756e815324cc9c8dc22d0937c7ccf4b89ee00222cd5e4a1d2a0de"
        },
        {
          "alg" : "SHA-384",
          "content" : "400399c84adfb450fe8f181c43ce7036d47a27c904707454abc97c8ddb89ec57033d740af53fb48e5c1a1a0da5649096"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://servlet-spec.java.net"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/SERVLET_SPEC"
        },
        {
          "type" : "mailing-list",
          "url" : "users@servlet-spec.java.net"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/glassfish~svn/tags/javax.servlet-api-3.0.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar"
    },
    {
      "publisher" : "JUnit",
      "group" : "junit",
      "name" : "junit",
      "version" : "4.8.2",
      "description" : "JUnit is a regression testing framework. It is used by the developer who implements unit tests in Java.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8a498c3d820db50cc7255d8c46c1ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "c94f54227b08100974c36170dcb53329435fe5ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "a2aa2c3bb2b72da76c3e6a71531f1eefdc350494819baf2b1d80d7146e020f9e"
        },
        {
          "alg" : "SHA-512",
          "content" : "7766ee8840cff0414db7de94fb98486a5f4e908b7a38af27b32155a8fdcd0662cea50aa3eaaa75a497621538747244a649cc036273b2a7a2eff2577e946dd69f"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9b3584a1e50e8b679f89e268904084fac869fbe47c10b11d0e0afae66130777404a8f11b35d14d0cbfdc74cc5a561cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Common Public License Version 1.0",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/junit/junit@4.8.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://junit.org"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/KentBeck/junit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/junit/junit@4.8.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-client",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdbba85f9cb7ce5e0ca51d610f0228e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-client/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-grizzly2",
      "version" : "1.9",
      "description" : "Grizzly 2.0 container for Jersey",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31502427909a1251aaba9fbae4923cee"
        },
        {
          "alg" : "SHA-1",
          "content" : "1e23ccc25f4dced8857b4296cceed42a7a49200c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e27584e5c0cef1e074d354a57ec83d4962d463a8dc4ecc774118f6bcd58a968"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d91249dd4bf0fea98b3c9a78522cbd005dc12f20c0e07f9aea7a671ba183241b2a4459b19e55742f20e7af543b750831ca209062d87760a56809d78863c8933"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd6d133bfae47041d8fc308c0229e27e8a4e12b7e3c8d107430f1775ef4a6dfbcee6d770769317532b5c3abd1f9f1903"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-grizzly2@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-grizzly2/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-grizzly2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-grizzly2@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "org.glassfish.grizzly",
      "name" : "grizzly-http",
      "version" : "2.1.2",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70fd197be9bac4d07e509592336406a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "aa477bd5b57367c344bf50f1f4af71a24a94ec9f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7563c842442f6e6c6a5b01967a68aa45950abc785ade3a4f942b08b37c146686"
        },
        {
          "alg" : "SHA-512",
          "content" : "40579f8b26e35bd56f28c27312925853b1cc380ac1551af4a185996aaaf88db2003caaf14f0174ec8e600cb9623d99c5ded88844201f3a609b894dbc41471ad1"
        },
        {
          "alg" : "SHA-384",
          "content" : "28c39ed3c00fcdb77e1426547bc643f6292d485b10aa8bfa27d3532a2b1bc9f87744470189ea82f1e5b201216ede09ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "http://glassfish.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.grizzly/grizzly-http@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://grizzly.java.net/grizzly-http"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GRIZZLY"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@grizzly.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/grizzly/sources/git/show/grizzly-http"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http@2.1.2?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "org.glassfish.grizzly",
      "name" : "grizzly-framework",
      "version" : "2.1.2",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e463c97ffbb80fe4a9fe2100f9f7330"
        },
        {
          "alg" : "SHA-1",
          "content" : "684c82b28f7e7a53c20d30e69d9787abfeb85d32"
        },
        {
          "alg" : "SHA-256",
          "content" : "056772d8992a991eb401f768fa5db749a7dc9358c754eb55a4bfac88720a8be1"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d61d3312042a39c03c0f86a87c3ae6612bab23a5c7d66d04b2596499d1bc70b4d31d20f5518d3a55cc187c83ddb0d91188ab6be6ff53744a9d9401c1f209dde"
        },
        {
          "alg" : "SHA-384",
          "content" : "73abd25a71329fcdb5240021e4798e90c3e30db135aaec01f1a8637a5e56f1d99084619321ffab661765e3682621481e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "http://glassfish.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://grizzly.java.net/grizzly-framework"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GRIZZLY"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@grizzly.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/grizzly/sources/git/show/grizzly-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar"
    },
    {
      "publisher" : "Sun Microsystems",
      "group" : "org.glassfish.gmbal",
      "name" : "gmbal-api-only",
      "version" : "3.0.0-b023",
      "description" : "gmbal API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9636b16e482cb694ad83ea2107dc69f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "14f077191ad7ec73004ca58de2c90a2137f1d882"
        },
        {
          "alg" : "SHA-256",
          "content" : "d8ce97a39add93377234e24709177a599542145336a5df5be3d8dfc0e18c625f"
        },
        {
          "alg" : "SHA-512",
          "content" : "e63e8224281224d7f31b667daa5b35f48ce7fcb727608d7007ee3359bfd883d70e00fbdef69d7442109a3ddf7bb19b21c954d669fd57abbf7e4ce62a4d820a12"
        },
        {
          "alg" : "SHA-384",
          "content" : "7322308dbbe9bdad01f066380dfb030f5cf92d120f53912f3e65dc3a5f78f4411025753885458a6f4a1cc5230934a6c0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "https://glassfish.dev.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.gmbal/gmbal-api-only@3.0.0-b023?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://kenai.com/hg/gmbal~master"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://kenai.com/jira/browse/GMBAL"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@gmbal.kenai.com"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.gmbal/gmbal-api-only@3.0.0-b023?type=jar"
    },
    {
      "publisher" : "Sun Microsystems",
      "group" : "org.glassfish.external",
      "name" : "management-api",
      "version" : "3.0.0-b012",
      "description" : "GlassFish Common APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "428636427bb6d92484320a9565f67394"
        },
        {
          "alg" : "SHA-1",
          "content" : "707686d845faede060b79bdf018a25a469a611b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "e114d4f4cf4261ab76d144c49d6ee1d75ddcfbb7c195260d1a782ebe0c34cb87"
        },
        {
          "alg" : "SHA-512",
          "content" : "7639ae9d6c8d0171a293c3854dbe80da662d9d06c569b9e06b863ea9c985c898f52122270b4aabfcab9a3b71b68846ba4657011427f4957b7ab91fa0a313c27e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ebbf1c28119dafa7da8ad0f02b2837347b6863a0603ed9fb464936c436cfa3490423ace2b08c8dcb76292124a12f0649"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "https://glassfish.dev.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.external/management-api@3.0.0-b012?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://kenai.com/hg/gmbal~gf_common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.external/management-api@3.0.0-b012?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "org.glassfish.grizzly",
      "name" : "grizzly-http-server",
      "version" : "2.1.2",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fadcc3a622beef24f2c30c4488ed2cb2"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1c41c688cb3a34998a3515048a2284e5201192"
        },
        {
          "alg" : "SHA-256",
          "content" : "f1c9d26845fc6ece7c9b6e55307c69b404254a37223dba9a82cdc16b4e9fe2a8"
        },
        {
          "alg" : "SHA-512",
          "content" : "1f4385e06800a873471f7d8b2560e9cb31066faedd69b148641026eb20c76c2bc5cc0da112e33d1eb8017af03bd16961f6c1dea423135f605d4fcbf979f33857"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bcd121b489e50076016b07ecc24796771c059090a42241e1186849e4a3835661fd18b0d474b731aae03c8406cc4061c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "http://glassfish.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://grizzly.java.net/grizzly-http-server"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GRIZZLY"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@grizzly.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/grizzly/sources/git/show/grizzly-http-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.1.2?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "org.glassfish.grizzly",
      "name" : "grizzly-rcm",
      "version" : "2.1.2",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f3ba5fe6dbf66ad46f2c49101a4a942"
        },
        {
          "alg" : "SHA-1",
          "content" : "19c3a4301ae7e38eb0518cfd4f3f34223c1b7f39"
        },
        {
          "alg" : "SHA-256",
          "content" : "70f6b5f1b1fa2ee44ae7abee3aff619059b37d365269ce2bb7c25a62eac5dbcb"
        },
        {
          "alg" : "SHA-512",
          "content" : "4693876577d7c1cf9e480577cfbcd47fe2ea20ed68bca80f641f346df043625242cc1a3ec534d7374bad2abf073559c15e2569a2cdf81015f74b252c0f6fe252"
        },
        {
          "alg" : "SHA-384",
          "content" : "b87486d070bc33890edc2e288a74c306e88073f35cc58b7af1ea007240a62b664347d03a96a070af41e4a0f0db928dd3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "http://glassfish.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.grizzly/grizzly-rcm@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://grizzly.java.net/grizzly-rcm"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GRIZZLY"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@grizzly.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/grizzly/sources/git/show/grizzly-rcm"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.grizzly/grizzly-rcm@2.1.2?type=jar"
    },
    {
      "publisher" : "Oracle Corpration",
      "group" : "org.glassfish.grizzly",
      "name" : "grizzly-http-servlet",
      "version" : "2.1.2",
      "description" : "Java.net - The Source for Java Technology Collaboration",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93ee30d57deab635356c829f76aacb00"
        },
        {
          "alg" : "SHA-1",
          "content" : "225700354dd0b7bc6132689c4fa046fa69744e20"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e90d201d7e80bb080f1383257542aa99a4c197f32db469b9d8bacef296abd92"
        },
        {
          "alg" : "SHA-512",
          "content" : "f6263dad7ff9d5df74ddc7dbdce5bcfd53c64b02b6dea87ae8d3793bb1ddc4e66175daf78991860ae94e70aa59290b8a6b0183b6bda034bfe120a66efe53d54b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba5a93e76b66642d5985abad2bdb7777fb7423fbb45a2bcd54d949b379e11390035646dc4f4971b18a7475712a7c13df"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CDDL+GPL",
            "url" : "http://glassfish.java.net/public/CDDL+GPL.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet@2.1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://grizzly.java.net/grizzly-http-servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GRIZZLY"
        },
        {
          "type" : "mailing-list",
          "url" : "dev@grizzly.java.net"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/grizzly/sources/git/show/grizzly-http-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet@2.1.2?type=jar"
    },
    {
      "publisher" : "GlassFish Community",
      "group" : "org.glassfish",
      "name" : "javax.servlet",
      "version" : "3.1",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b379d355039e0b4a5413057dc65d485e"
        },
        {
          "alg" : "SHA-1",
          "content" : "ab7db738667bea1b937efcf3a1845c0d28e6beaf"
        },
        {
          "alg" : "SHA-256",
          "content" : "17d6ece4c4a7e07c9ce17820cbf5ba26d3600fd041a9b840b93577fee3ff5bfd"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5cc9cbb270c7b3702ccf8be73c4df05421891106733f84e4b1fbcfab06e66a02ff37293e4620272dcd00f1a3472bcc81980ca65696b787a066055fa5c9cdc97"
        },
        {
          "alg" : "SHA-384",
          "content" : "104edd71238bfe1b41c82c10fcf921c7e361d227ff6c8afc3b4f958851add21fcc9dd8839019654464247d1d4302fd44"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/org.glassfish/javax.servlet@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jcp.org/en/jsr/detail?id=315"
        },
        {
          "type" : "distribution",
          "url" : "dav:http://glassfish-maven-repository.sfbay/maven/repositories/glassfish/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/GLASSFISH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/glassfish/lists/dev/archive"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/javax.servlet@3.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.2.2",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a415e9a322984be1e1f8a023d09dca5f"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeb3021ca93dde265796d82015beecdcff95bf09"
        },
        {
          "alg" : "SHA-256",
          "content" : "30233df6215fb982d8784de91d307596748cea98d6d502293c7c3e85c1697137"
        },
        {
          "alg" : "SHA-512",
          "content" : "e17cac8509b5c0eef2c8a0c8e16fa5bba75f64d82a1a4d51725d488aa9af5c5474eefa329af47b9065232e811f9d4b48163b5e62cba88467d1be4ac4cb1ead88"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c511c647f7c8e76cd4392c75b5cfd9143a9269df5f565e73cd4289da12ea02cd8cc32f932d945172dc287809309b663"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jaxb.dev.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "java-net:/maven2-repository/trunk/repository/"
        },
        {
          "type" : "vcs",
          "url" : "https://jaxb2-sources.dev.java.net/source/browse/jaxb2-sources/jaxb-ri/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1",
      "description" : "JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ae38e87cd4f86059c0294a8fe3e0b18"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6cb541461c2834bdea3eb920f1884d1eb508b50"
        },
        {
          "alg" : "SHA-256",
          "content" : "2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.sun.com/products/javabeans/jaf/index.jsp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.8.3",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7634227657d2414a0c65e0818b30d5ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "3604ca9f572170e2ef5813141ec1f0e0100efd19"
        },
        {
          "alg" : "SHA-256",
          "content" : "cadd12137aaf121722630d00117df63e34afc5b3dab5be68c921740114a05fba"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b18eb8573a6f4e2e790aaf169f5b7529d13d0d9bdd0a93335fffde52cd968ec3bda471d6fdde5b8eb41a72640b13fa0765bc20908868e7cf920d461b7645249"
        },
        {
          "alg" : "SHA-384",
          "content" : "d4da3574d6b397dd75d3374aae9efb1af630430a764fbfd164013907c4e46d4ea01e4c0ed14638fb5a74b78349870103"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.8.3",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ee32b08580654d69147ecfab0321270"
        },
        {
          "alg" : "SHA-1",
          "content" : "1226667dcdb7c259b3ee07e112ed83446554516e"
        },
        {
          "alg" : "SHA-256",
          "content" : "e25789f6d6e0c60c0f46f89d33586190bef23626d9efd3b5d41fe42b45afec96"
        },
        {
          "alg" : "SHA-512",
          "content" : "5b23009a505ab04a43025e01d5905d57c03ef61417165fb08a67280a23ed15a8fc34a4b91fb50b26c75af8cb22bbbdb4917d39bd99af1806d2fe610453c137fb"
        },
        {
          "alg" : "SHA-384",
          "content" : "148dc3970f2219e527d316aeeb55cdeb8497ba04e2181ad928709805cf13394a60f4d5913637d0e9a3e32c7f5e55b043"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.contribs",
      "name" : "jersey-guice",
      "version" : "1.9",
      "description" : "Projects that provide additional functionality to jersey, like integration with other projects/frameworks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a81140d246f420c1e2eabe649417c5b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5963c28c47df7e5d6ad34cec80c071c368777f7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-contribs/jersey-guice/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-servlet",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9f66a5f6a0d840d9057b30853f25b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/extensions-parent/guice-servlet/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.6.2.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65546c0885e83ba36f1f4d9ff9f8c776"
        },
        {
          "alg" : "SHA-1",
          "content" : "69be11c61427f0604a30539755add84ad9e37e5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4ff9f0a2959633e062edd0e678d8187bbe95ad19195384ac524fd41f00f5a44"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e86cb7f68707b69a45859d615e3a5799c5077d9c356b38ca0d352ce20521d45810d94dd8677ad0e977604ec85fa761e1f8f3c1703715cc9301c7c6fd01a00e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "71e55f3ac9dc7601350d673e3ddce16b68b007412286222f7031dd8cfa83ddbfe2a7f571ae05dd0666fed0bed3e72b55"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.33",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de8684fca5e9042d0120cb3306e8278f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d375aa1b98d34d5ddf73a3f19eaad66e98975b12"
        },
        {
          "alg" : "SHA-256",
          "content" : "336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.7.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-core@1.7.8?type=jar",
        "pkg:maven/com.esotericsoftware/kryo-shaded@3.0.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.2.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.2.0?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.7.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.7.8?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.5.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.7.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@3.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
        "pkg:maven/org.apache.commons/commons-math@2.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.1?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.5?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.8.8?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.8.8?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.2.0?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.6.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.1?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.8.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.8.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.8.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.2?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.2.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/log4j/log4j@1.2.17?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.2.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-grizzly2@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.slf4j/slf4j-log4j12@1.7.5?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.2.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-grizzly2@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-grizzly2@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-grizzly2@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.jersey-test-framework/jersey-test-framework-core@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
        "pkg:maven/junit/junit@4.8.2?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.servlet/javax.servlet-api@3.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/junit/junit@4.8.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-grizzly2@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.grizzly/grizzly-http@2.1.2?type=jar",
        "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.1.2?type=jar",
        "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet@2.1.2?type=jar",
        "pkg:maven/org.glassfish/javax.servlet@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.gmbal/gmbal-api-only@3.0.0-b023?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.gmbal/gmbal-api-only@3.0.0-b023?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.external/management-api@3.0.0-b012?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.external/management-api@3.0.0-b012?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.grizzly/grizzly-http@2.1.2?type=jar",
        "pkg:maven/org.glassfish.grizzly/grizzly-rcm@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.grizzly/grizzly-rcm@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.grizzly/grizzly-http-servlet@2.1.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.grizzly/grizzly-framework@2.1.2?type=jar",
        "pkg:maven/org.glassfish.grizzly/grizzly-http-server@2.1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/javax.servlet@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/activation@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}