{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:87b79a22-790e-4196-b1e2-3530f8dc21d1",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-11-05T05:14:03Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system",
        "version" : "2.7.6",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "639c35c7f79c5514f3abe11247999b70"
          },
          {
            "alg" : "SHA-1",
            "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d"
          },
          {
            "alg" : "SHA-256",
            "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3"
          },
          {
            "alg" : "SHA-512",
            "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-mapreduce",
      "version" : "1.9.2",
      "description" : "An implementation of Hadoop's mapred and mapreduce input and output formats for ORC files. They use the core reader and writer, but present the data to the user in Writable objects.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-mapreduce"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-mapreduce"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-core",
      "version" : "1.9.2",
      "description" : "The core reader and writer for ORC files. Uses the vectorized column batch for the in memory representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1e834a0fe23149b86c41e49b178d3af"
        },
        {
          "alg" : "SHA-1",
          "content" : "da94087a7ed2adc718a4da0fc1721f189e36489c"
        },
        {
          "alg" : "SHA-256",
          "content" : "802282878f7287c3ef17637ce6fbb1b57a17bfb5d9d127e883021dd2849a1183"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b95871c49079908ef279894c08accb87a8948a0d9d033d79f6c31ee63c1f32373513c8a2dbf206ea0acfe78ed844d4fc72ee90d98bf083b46548ed88f94c9ac"
        },
        {
          "alg" : "SHA-384",
          "content" : "6c74642d8acfeaec5ff05599b48423afc3e4eace371ef6f29bc22cf0ab5e57cf779d1b320ea815aa55026e2da0c620fc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-core"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.9.2",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "565b53425678114de7cdabde16dad744"
        },
        {
          "alg" : "SHA-1",
          "content" : "76325c52a4215a7e9fb5ae14c980962e6fd094b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "ed94d8ad118955c8d13babe10eeb078cd49639f22dcb081e210f163487802ce5"
        },
        {
          "alg" : "SHA-512",
          "content" : "702b12f02383fac81374cfde11de32e4768f80ff872f41120e7282eccbdc127128acf339513b746e4451ba815abd6a5428c8f31f69957a8362e271978c7542a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "4550c127affe0167fbd1316b540176d5017c59be4613c702096f6b4db089babbdbc4d9039e1e9d7acc98849b4eafc7a2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.22.3",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e39845796ebd9fdb1b0f30ffef7ec2ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "fdee98b8f6abab73f146a4edb4c09e56f8278d03"
        },
        {
          "alg" : "SHA-256",
          "content" : "59d388ea6a2d2d76ae8efff7fd4d0c60c6f0f464c3d3ab9be8e5add092975708"
        },
        {
          "alg" : "SHA-512",
          "content" : "5af655e915e5895deed993848613a76da09c12c32954254edd01803fba841385799715c151c2050121f475c06fc342f9021f2c55812e2c763eec89317fd3315d"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b79d25632724a0b9b8f1b36a63c7d7476d767fdaf4efcfa1510b7757120719edf54a342ae1429ab357b0b6f648ca06b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"
    },
    {
      "group" : "io.airlift",
      "name" : "aircompressor",
      "version" : "0.25",
      "description" : "Compression algorithms",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a953d6f1861aebbab2261cfb5d068fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "f9335fb25f31289ffbe512aa0732c872abdfd64d"
        },
        {
          "alg" : "SHA-256",
          "content" : "610938768aee8e4279af55f35bba5276d34cac447d4614897e26deb907e3115d"
        },
        {
          "alg" : "SHA-512",
          "content" : "78c04ed1b5efd0fd9125a28268de55e518b197b466623a3d8cab1582ffc098b2e71d7b12d5f3179184fcaa52d389e8d62372e2881ef7700f31eeba69dc48f8ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "c73d4fb907b864db515f75f9754a04a5b78bd12ddd03951417167381dc5bc4f46234e3d5bfb2f6199bbec701a9b974e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/airlift/aircompressor"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/airlift/aircompressor/tree/master"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar"
    },
    {
      "group" : "org.jetbrains",
      "name" : "annotations",
      "version" : "17.0.0",
      "description" : "A set of annotations used for code inspection support and code documentation.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b06437ed47fa7b4a8ec8909f4fb9022"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ceead41f4e71821919dbdb7a9847608f1a938cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/JetBrains/java-annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JetBrains/java-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"
    },
    {
      "publisher" : "ThreeTen.org",
      "group" : "org.threeten",
      "name" : "threeten-extra",
      "version" : "1.7.1",
      "description" : "Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5994a4f9bc61fe4bfae13fab1253ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "caddbd1f234f87b0d65e421b5d5032b6a473f67b"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336"
        },
        {
          "alg" : "SHA-384",
          "content" : "df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.threeten.org/threeten-extra"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/threeten-releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ThreeTen/threeten-extra/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ThreeTen/threeten-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "kryo-shaded",
      "version" : "4.0.2",
      "description" : "Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27717b481916c44eed34ea7a68782ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "e8c89779f93091aa9cb895093402b5d15065bf88"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/kryo/kryo-shaded"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"
    },
    {
      "group" : "com.esotericsoftware",
      "name" : "minlog",
      "version" : "1.3.0",
      "description" : "Minimal overhead Java logging",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ab0ee168b90e0ad7010b159e603d304"
        },
        {
          "alg" : "SHA-1",
          "content" : "ff07b5f1b01d2f92bb00a337f9a94873712f0827"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000"
        },
        {
          "alg" : "SHA-384",
          "content" : "3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/EsotericSoftware/minlog"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/EsotericSoftware/minlog"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb51c886a594444d397825a00da2bd4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ffd994953fc4397830a1241a15c9121aebd9574"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7698cbbcfaf93818f2388db63198948bba5f24bd9a2b378c0081f6d945c30a4"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb4138ca54f8dbf7edfc1ab39dcf75995b73520696682c87fdfab5d2a058839e345853b18cee0f00b5160e79ad65cb38a7c33e611bb285d740e229282c694202"
        },
        {
          "alg" : "SHA-384",
          "content" : "d77ca13ef7694da13b30c326b8ef5ce8a48506438670817533c4f61b3697c6f5498c5b0294b04c34c8bdbfbb594121ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04144ea13aa1d654c3f57894153baa05"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a55da50d8b25df34dc4ecab9cbd3a5a24664594"
        },
        {
          "alg" : "SHA-256",
          "content" : "d59b24615f1e1050e4bc987955a936f479a51058ae2ee59d751536ae75e563d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "216fbe0ad11c0d0eef67d8ab26707d1b6c1d3925c22ff37dc3eac94e4b0f18dec9a6592a37307f111c00ace9f8e6910ae08036c073cef69f89925243f5d894d0"
        },
        {
          "alg" : "SHA-384",
          "content" : "660c92e9d48fa5fa8edd09f4947dfca50df6130eb0d4e09da269128b0a0e0fa1d9739b95054d31aa24f5d5c9abc1fca8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.1.1",
      "description" : "The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "505ece0d2261b037101e6c4bdf541ca7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6719d757a98ff24a83d9d727bef9cec83f59b6e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54"
        },
        {
          "alg" : "SHA-512",
          "content" : "4716722ee06853789f5539f3b3f9726b3ddf3b358b3ee136196b9beaa63741df72a8a23b71f3864c565d5f945d19291beeb02053d8d98ec83119b7142c17ee23"
        },
        {
          "alg" : "SHA-384",
          "content" : "def2a41220a30eff80133c04f169baafde4d5a94f38a74d5bfed55042123b1b25f437d52d731f0135b7bd7885c4f5b44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/math/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/math/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "commons-httpclient",
      "name" : "commons-httpclient",
      "version" : "3.1",
      "description" : "The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ad8c9229ef2d59ab9f59f7050e846a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "964cd74171f427720480efdec40a7c7f6e58426a"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443"
        },
        {
          "alg" : "SHA-512",
          "content" : "85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359"
        },
        {
          "alg" : "SHA-384",
          "content" : "973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/httpcomponents/httpclient-3.x/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.4",
      "description" : "The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82b899580da472be37055da949b731fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4216af16d38465bbab0f3dff8efa14204f7a399a"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aa4234c74f3a1035751a25822545867c8c3727125a642b6e049665d1863631b"
        },
        {
          "alg" : "SHA-512",
          "content" : "640bca4f1d4dca63724eedf417d3dccaacf77e5c1d9dac07190b0a64450f7b16fcb5f8578823303e08fb6d07b9c2897226c449f2c9b448b060ff5d8f683403b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1192ebd03bbdab3263d97805dc208821288d6726502cd800f01f55584572e71d0f9d0486b510530fca736dcccb3f7b5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/codec/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.4",
      "description" : "The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f97854dc04c119d461fed14f5d8bb96"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1b6ea3b7e4aa4f492509a4952029cd8e48019ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581"
        },
        {
          "alg" : "SHA-512",
          "content" : "957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292"
        },
        {
          "alg" : "SHA-384",
          "content" : "af8a3e210cb1dd5475d497249acf1a86266077f5c7df0ded76d92467ab7f69e445f79dcfacfd7375085ad24f49625955"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/io/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/io/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.6",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b099d9f9b4b99071cc52b259308df69a"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cadde23955d7681b0d94a2715846d20b425235"
        },
        {
          "alg" : "SHA-256",
          "content" : "46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "www.apache.org//www/www.apache.org/dist/java-repository/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.13",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1750f9c339352fc4b728d61b57171613"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.9.0",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg" : "SHA-512",
          "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "471760b62af31e3bfe4e6a73929868d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d1236a477accb4c67fc9615ed67732097fb9af9"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d75f87e433c285ed99bee878bad6f251242613fec2fb7e6c544b862f3ddc428"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddf4b3ca2a0bc6d4ece049da3f122f9a44f004b4b21933666410c9af634886d1cf8fbba98eeb919af4bd879e5420df8cd17b618beb1f3c2db9a07faa2146b563"
        },
        {
          "alg" : "SHA-384",
          "content" : "c226ad571a95788c234a092053f704d05a6cde93853e861611477c3241ae299b99497fd2f4b8b227008e85d4466e2b20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.2.5",
      "description" : "HttpComponents Client (base module)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d57d9336b460a91be6880784bdadc124"
        },
        {
          "alg" : "SHA-1",
          "content" : "666e26e76f2e87d84e4f16acb546481ae1b8e9a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "c7fb05b793a586633d2d801a889e0846f3f21c7f8dc3dab776421383f49ebb8c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a33f34a2ef0853d6434bfb77bdc8e41c3df923d152bd9037245cfad6f41a3d1653f3f7504add7947f84cfbddfaa7ff3f5cd3bd82d6405201cbb832809c8ef52"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd160c1f484a350eb32a0b8ffa7e3deb435157a9be080324c642d1ba002ebb4e823cd6e3cb5a5e1d5427837fe9dd09e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.5/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.2.4",
      "description" : "HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ccb86231d8a8b99c551b4ddf926ddd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b7f38df6de5dd8b500e602ae8c2dd5ee446f883"
        },
        {
          "alg" : "SHA-256",
          "content" : "bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9"
        },
        {
          "alg" : "SHA-384",
          "content" : "641cac15a256f8d0a2ad0f455458dc022d8fdeb3a792b179e122d8e102966a06ed46c65f66e7fcba23dd0369665b80b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/httpcomponents/httpcore/tags/4.2.4/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.7.1",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35bff30d2a79a8b0731269604b1327ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c7b1eeb78e43bb91ea737111ba3dec0512be876"
        },
        {
          "alg" : "SHA-256",
          "content" : "a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b"
        },
        {
          "alg" : "SHA-384",
          "content" : "62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.42",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74ea920580077b4c0b51101a8292a529"
        },
        {
          "alg" : "SHA-1",
          "content" : "a86104b0f2e0c0bab5b0df836065823a99b5e334"
        },
        {
          "alg" : "SHA-256",
          "content" : "74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.7.1",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b43933c18d1dcf15f88db73ee646396"
        },
        {
          "alg" : "SHA-1",
          "content" : "a591dfc085db3e9d4d480381cc7e6ae8a26b34af"
        },
        {
          "alg" : "SHA-256",
          "content" : "949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7938bab4600cbcc13c78256295766c6f1172902db87794a3a14b7acebdfad5de2c69419978420ce32168ea26524919bcbb42018995de53da1a96ae9c30cef499"
        },
        {
          "alg" : "SHA-384",
          "content" : "4392856c7e46f7f9819281f84e21e6d42e285d89018608d60b8faea5629a7954ec0920a921d383d204ef9248befc2506"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core",
      "version" : "3.1.0-incubating",
      "description" : "A tracing framework for use with distributed systems written in java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c49a4662d691a09eed10e0a35dd73299"
        },
        {
          "alg" : "SHA-1",
          "content" : "f73606e7c9ede5802335c290bf47490ad6d51df3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4401a31494026fd46ca90a4fb111eb3cf1d3d2def294dccc131dab0927edd48b3b852d40b257424041b6bf3165f2684b4a6b45568ec7ab7ab59452f34fe756a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "de9ecdbefc8ad5fb6a253bc8caecd99b252bfc0add781cbb9a646dd2ead203028a7bdafa0165f210f0c881bdb930fbcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.1",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a79f48c0a48eff277a1277735c86c33"
        },
        {
          "alg" : "SHA-1",
          "content" : "edb7d70db4390b9f54a92994577a9e344ade5c9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca65b863f2402cba82761204b77f04373f8d0a8adebb286619e1e5b33d0528e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "2317d5691d44abaace919890a496c1da85af07d476387c76900be0e97bc46309fbb1f51dde3ad66b65d556ec1544a45ae0827a669f3f2b7a476af42b238f435f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c7c4523d5ead16f136e754712e9ec4b9013a6b694253310c17d3476c56dabc63eb64bf26dfef62e83ca0dd8af690a06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.1",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a86cbae5a67619e4b554a69861e03e57"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeb9b21ed9d2b99da9e0e3d1fd24d54f85fbf840"
        },
        {
          "alg" : "SHA-256",
          "content" : "66084b9930619876ff2daa55670dee744b2d68998e180a5ffa427f82f52bdfa9"
        },
        {
          "alg" : "SHA-512",
          "content" : "0aa6f0cb2599dae1283fddc550568b5898adf69a104d9133c8b8778b4f1fc9a5ce961f24535fbca9ff1420ec1f6214db47533b4e9dd4ad539cc6f2e6cf834c9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2afa4ee931d3d503229c8458ac521e269866f47c1e2faf66bd9d259d33e20e5dc31b4b1b32f21d42c9f9ff2c1e898e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.2.10",
      "description" : "logback-core module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "697b37f140ce9ac35a4ca3eaf4059f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5328406bfcae7bcdcc86810fcb2920d2c297170d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba51a3fe56691f9dd7fe742e4a73c3ab4aaaa32202c73409ba56f18687399a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "8dd5175ab32120dccd48e44166f9f35df389385ac808b5ef18d43bd2ef98e43d440d982155f231883a963994644d4c0baf701ef6fd1ace2c6dab13f98d8c9d53"
        },
        {
          "alg" : "SHA-384",
          "content" : "452313d0e5ee35aef136e7db604d58cf782009d4bc0f0bbf25ac5c314377b7c2db72f8ff1cfa9095f7808ca6ed36946a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback/logback-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.4.1",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f7ff9255a831325f38a170992b70073"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02e84a993d88568417536240e970c4b809126fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/compress/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/compress/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-mapreduce-client-core",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ca375461477843ff262c200345fd67d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bc47392a6830a22900a84723837e04bdba12a2d4"
        },
        {
          "alg" : "SHA-256",
          "content" : "da4e3e68a6193ae3aa3642a0daf45207c883f930d93c3e58ade75d41979b3f3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "c91d44727275042d8a34a5a5cc0ed7d01efd665c424848c5ee952c49ebc920d56ac00fe5851374e10a03c4faf8461aa80d7a7f404d760a15239da7616f401e91"
        },
        {
          "alg" : "SHA-384",
          "content" : "69cf501388defd4b9e0b61d0f45d92ba9099b7eadced08afa247ec80d700a8abffaa7bf0800b32f45f9bd966b1c00563"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-common",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21e6f54eaf36b4bce72cfd3a089a567b"
        },
        {
          "alg" : "SHA-1",
          "content" : "455420e0d0a9e645d9489e8c7d34d0b02cd1c36f"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ba492bce0eca5e814af88d0a0fd4badbdc5c5ee890f70846b94bc20227a75be"
        },
        {
          "alg" : "SHA-512",
          "content" : "3409fae31f7e05c5edaf4d55f154bb61e8a0eda926bf1a821937f92753c36b3a87746fe8d2b66559b97405d4893c31bdb9da3b44504e9e719b44866c29ed9754"
        },
        {
          "alg" : "SHA-384",
          "content" : "20c69980e7caa794ded44a3ee6e0c24b9f6888073d91e2f2b8717ac1c78d1061a0c8bdb6bd4bc13a4a1b7dde805dd899"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-yarn-api",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Project POM",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3b51aa62d826c939b1e37a55617aa9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b15b7673cbe076dccf973ac45721a89f1ef95948"
        },
        {
          "alg" : "SHA-256",
          "content" : "d01c2d9bf67b41a81a63323d7ae75f45f8dec71098f6c01dedae9d10ca96e5a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f8b4f3601bd0c60e8d139a69624b430c56865a62e806067844b6c6c9c69ee995177d2dd5b878672bc23f50ec5e0405cfabd3ace43fac2f71daba305487a1a1a"
        },
        {
          "alg" : "SHA-384",
          "content" : "5af5405e5dc9575090fd16c2d603534608e2fd476005bf0a9bc70f16c7df0d19cf943a33d372d39f8fcefdaa091804a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.2.2",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a415e9a322984be1e1f8a023d09dca5f"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeb3021ca93dde265796d82015beecdcff95bf09"
        },
        {
          "alg" : "SHA-256",
          "content" : "30233df6215fb982d8784de91d307596748cea98d6d502293c7c3e85c1697137"
        },
        {
          "alg" : "SHA-512",
          "content" : "e17cac8509b5c0eef2c8a0c8e16fa5bba75f64d82a1a4d51725d488aa9af5c5474eefa329af47b9065232e811f9d4b48163b5e62cba88467d1be4ac4cb1ead88"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c511c647f7c8e76cd4392c75b5cfd9143a9269df5f565e73cd4289da12ea02cd8cc32f932d945172dc287809309b663"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jaxb.dev.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "java-net:/maven2-repository/trunk/repository/"
        },
        {
          "type" : "vcs",
          "url" : "https://jaxb2-sources.dev.java.net/source/browse/jaxb2-sources/jaxb-ri/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
    },
    {
      "group" : "javax.xml.stream",
      "name" : "stax-api",
      "version" : "1.0-2",
      "description" : "StAX is a standard XML processing API that allows you to stream XML data from and to your application.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d18b63063580284c3f5734081fdc99f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6337b0de8b25e53e81b922352fbea9f9f57ba0b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public Library",
            "url" : "http://www.gnu.org/licenses/gpl.txt"
          }
        },
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"
    },
    {
      "group" : "javax.activation",
      "name" : "activation",
      "version" : "1.1",
      "description" : "JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ae38e87cd4f86059c0294a8fe3e0b18"
        },
        {
          "alg" : "SHA-1",
          "content" : "e6cb541461c2834bdea3eb920f1884d1eb508b50"
        },
        {
          "alg" : "SHA-256",
          "content" : "2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.sun.com/products/javabeans/jaf/index.jsp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/activation@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-client",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cdbba85f9cb7ce5e0ca51d610f0228e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3c4b2b5f89db32c96ceddcb863684821910a7bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68"
        },
        {
          "alg" : "SHA-512",
          "content" : "06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-client/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-jaxrs",
      "version" : "1.9.13",
      "description" : "Jax-RS provider for JSON content type, based on Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8481e1904d9bfe974157a6af04b4445e"
        },
        {
          "alg" : "SHA-1",
          "content" : "534d72d2b9d6199dd531dfb27083dd4844082bba"
        },
        {
          "alg" : "SHA-256",
          "content" : "1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741"
        },
        {
          "alg" : "SHA-384",
          "content" : "abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-xc",
      "version" : "1.9.13",
      "description" : "Extensions that provide interoperability support for Jackson JSON processor's data binding functionality.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49f6a735bae30745dcf5ecec27090720"
        },
        {
          "alg" : "SHA-1",
          "content" : "e3480072bc95c202476ffa1de99ff7ee9149f29c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7"
        },
        {
          "alg" : "SHA-512",
          "content" : "09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License (LGPL), Version 2.1",
            "url" : "http://www.fsf.org/licensing/licenses/lgpl.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ca1c7ba366884cfcd2cfb48d2395c400"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d84f15fe35e2c716a02979fb62f50a29f38aefa"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22"
        },
        {
          "alg" : "SHA-512",
          "content" : "8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf"
        },
        {
          "alg" : "SHA-384",
          "content" : "f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/guice/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/atinject/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.1",
      "description" : "A StAX implementation for JSON.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc80e0aabd516c54739262c3d618303a"
        },
        {
          "alg" : "SHA-1",
          "content" : "1a01a2a1218fcf9faa2cc2a6ced025bdea687262"
        },
        {
          "alg" : "SHA-256",
          "content" : "377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801"
        },
        {
          "alg" : "SHA-512",
          "content" : "075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "dav:https://dav.codehaus.org/repository/jettison/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.codehaus.org/jettison/tags/jettison-1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey.contribs",
      "name" : "jersey-guice",
      "version" : "1.9",
      "description" : "Projects that provide additional functionality to jersey, like integration with other projects/frameworks.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a81140d246f420c1e2eabe649417c5b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "5963c28c47df7e5d6ad34cec80c071c368777f7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34"
        },
        {
          "alg" : "SHA-512",
          "content" : "e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-contribs/jersey-guice/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "log4j",
      "name" : "log4j",
      "version" : "1.2.17",
      "description" : "Apache Log4j 1.2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04a41f0a068986f0f73485cf507c0f40"
        },
        {
          "alg" : "SHA-1",
          "content" : "5af35056b4d257e4b64b9e8069c0746e8b08629f"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc"
        },
        {
          "alg" : "SHA-384",
          "content" : "80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logging.apache.org/log4j/1.2/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/builds/logging/repo/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/logging-log4j-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-servlet",
      "version" : "3.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 5 and above",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c9f66a5f6a0d840d9057b30853f25b85"
        },
        {
          "alg" : "SHA-1",
          "content" : "610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-guice/extensions-parent/guice-servlet/"
        },
        {
          "type" : "build-system",
          "url" : "https://grid.sonatype.org/ci/job/Google-Guice/"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty",
      "version" : "3.6.2.Final",
      "description" : "The Netty project is an effort to provide an asynchronous event-driven network application framework and tools for rapid development of maintainable high performance and high scalability protocol servers and clients. In other words, Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol servers and clients. It greatly simplifies and streamlines network programming such as TCP and UDP socket server.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65546c0885e83ba36f1f4d9ff9f8c776"
        },
        {
          "alg" : "SHA-1",
          "content" : "69be11c61427f0604a30539755add84ad9e37e5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4ff9f0a2959633e062edd0e678d8187bbe95ad19195384ac524fd41f00f5a44"
        },
        {
          "alg" : "SHA-512",
          "content" : "8e86cb7f68707b69a45859d615e3a5799c5077d9c356b38ca0d352ce20521d45810d94dd8677ad0e977604ec85fa761e1f8f3c1703715cc9301c7c6fd01a00e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "71e55f3ac9dc7601350d673e3ddce16b68b007412286222f7031dd8cfa83ddbfe2a7f571ae05dd0666fed0bed3e72b55"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hive",
      "name" : "hive-storage-api",
      "version" : "2.8.1",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea1adb65022d4616d23be770207600d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4b151bcdfe290542f27a442ed09be99f815f88e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8"
        },
        {
          "alg" : "SHA-512",
          "content" : "e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.apache.org/hive-storage-api/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar",
        "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
        "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
        "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.airlift/aircompressor@0.25?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jetbrains/annotations@17.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/io.netty/netty@3.6.2.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
        "pkg:maven/log4j/log4j@1.2.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
        "pkg:maven/javax.activation/activation@1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.activation/activation@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/com.google.inject/guice@3.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/log4j/log4j@1.2.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty@3.6.2.Final?type=jar",
      "dependsOn" : [ ]
    }
  ]
}