<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:87b79a22-790e-4196-b1e2-3530f8dc21d1" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-11-05T05:14:03Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-mapreduce</name>
      <version>1.9.2</version>
      <description>An implementation of Hadoop's mapred and mapreduce input and output formats
    for ORC files. They use the core reader and writer, but present the data
    to the user in Writable objects.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-mapreduce</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-mapreduce</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-core</name>
      <version>1.9.2</version>
      <description>The core reader and writer for ORC files. Uses the vectorized column batch
    for the in memory representation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b1e834a0fe23149b86c41e49b178d3af</hash>
        <hash alg="SHA-1">da94087a7ed2adc718a4da0fc1721f189e36489c</hash>
        <hash alg="SHA-256">802282878f7287c3ef17637ce6fbb1b57a17bfb5d9d127e883021dd2849a1183</hash>
        <hash alg="SHA-512">4b95871c49079908ef279894c08accb87a8948a0d9d033d79f6c31ee63c1f32373513c8a2dbf206ea0acfe78ed844d4fc72ee90d98bf083b46548ed88f94c9ac</hash>
        <hash alg="SHA-384">6c74642d8acfeaec5ff05599b48423afc3e4eace371ef6f29bc22cf0ab5e57cf779d1b320ea815aa55026e2da0c620fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>1.9.2</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <hashes>
        <hash alg="MD5">565b53425678114de7cdabde16dad744</hash>
        <hash alg="SHA-1">76325c52a4215a7e9fb5ae14c980962e6fd094b1</hash>
        <hash alg="SHA-256">ed94d8ad118955c8d13babe10eeb078cd49639f22dcb081e210f163487802ce5</hash>
        <hash alg="SHA-512">702b12f02383fac81374cfde11de32e4768f80ff872f41120e7282eccbdc127128acf339513b746e4451ba815abd6a5428c8f31f69957a8362e271978c7542a3</hash>
        <hash alg="SHA-384">4550c127affe0167fbd1316b540176d5017c59be4613c702096f6b4db089babbdbc4d9039e1e9d7acc98849b4eafc7a2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-shims</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.22.3</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">e39845796ebd9fdb1b0f30ffef7ec2ee</hash>
        <hash alg="SHA-1">fdee98b8f6abab73f146a4edb4c09e56f8278d03</hash>
        <hash alg="SHA-256">59d388ea6a2d2d76ae8efff7fd4d0c60c6f0f464c3d3ab9be8e5add092975708</hash>
        <hash alg="SHA-512">5af655e915e5895deed993848613a76da09c12c32954254edd01803fba841385799715c151c2050121f475c06fc342f9021f2c55812e2c763eec89317fd3315d</hash>
        <hash alg="SHA-384">9b79d25632724a0b9b8f1b36a63c7d7476d767fdaf4efcfa1510b7757120719edf54a342ae1429ab357b0b6f648ca06b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@0.25?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>0.25</version>
      <description>Compression algorithms</description>
      <hashes>
        <hash alg="MD5">6a953d6f1861aebbab2261cfb5d068fa</hash>
        <hash alg="SHA-1">f9335fb25f31289ffbe512aa0732c872abdfd64d</hash>
        <hash alg="SHA-256">610938768aee8e4279af55f35bba5276d34cac447d4614897e26deb907e3115d</hash>
        <hash alg="SHA-512">78c04ed1b5efd0fd9125a28268de55e518b197b466623a3d8cab1582ffc098b2e71d7b12d5f3179184fcaa52d389e8d62372e2881ef7700f31eeba69dc48f8ce</hash>
        <hash alg="SHA-384">c73d4fb907b864db515f75f9754a04a5b78bd12ddd03951417167381dc5bc4f46234e3d5bfb2f6199bbec701a9b974e5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@0.25?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>17.0.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <hashes>
        <hash alg="MD5">7b06437ed47fa7b4a8ec8909f4fb9022</hash>
        <hash alg="SHA-1">8ceead41f4e71821919dbdb7a9847608f1a938cb</hash>
        <hash alg="SHA-256">195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2</hash>
        <hash alg="SHA-512">839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b</hash>
        <hash alg="SHA-384">c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/JetBrains/java-annotations</url></reference><reference type="vcs"><url>https://github.com/JetBrains/java-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar">
      <publisher>ThreeTen.org</publisher>
      <group>org.threeten</group>
      <name>threeten-extra</name>
      <version>1.7.1</version>
      <description>Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later</description>
      <hashes>
        <hash alg="MD5">5994a4f9bc61fe4bfae13fab1253ac47</hash>
        <hash alg="SHA-1">caddbd1f234f87b0d65e421b5d5032b6a473f67b</hash>
        <hash alg="SHA-256">9bbcbe09a631320bdc3325bbb04c93068473bc0e04b85e2ef3e42314d5a7dacf</hash>
        <hash alg="SHA-512">1ae1558df2e6e33a0a463e0204dc084bc2bcff6b27ebc983743533bee65f3e42915737a7e2f2096047b2ae5cb8363413964aab0f4eaed0b5f0d5865de56e9336</hash>
        <hash alg="SHA-384">df9dd8ee46fdd640c3abe5d5168570d29028bc94e931b505f3d36fac01da60ac90f2ed706f37b7eaa3aa8a23538488ff</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.threeten.org/threeten-extra</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/threeten-releases</url></reference><reference type="issue-tracker"><url>https://github.com/ThreeTen/threeten-extra/issues</url></reference><reference type="vcs"><url>https://github.com/ThreeTen/threeten-extra</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar">
      <group>com.esotericsoftware</group>
      <name>kryo-shaded</name>
      <version>4.0.2</version>
      <description>Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27717b481916c44eed34ea7a68782ed5</hash>
        <hash alg="SHA-1">e8c89779f93091aa9cb895093402b5d15065bf88</hash>
        <hash alg="SHA-256">a4899f57fef456b9ec66f730e7b493ecb3dc494cc5758721ed9c18416fd2d3b6</hash>
        <hash alg="SHA-512">21d3500194117f5f34951c7374bdde658be18b842866ea68f16ef47453d4dd31b11d384af2dab3ac4340b015b414402f6b45d4e6a10354fbda5bd8a17e4ce3e3</hash>
        <hash alg="SHA-384">33c8d09ba00c14a077e82f2d7c1a54496a21d20896505d1d97cd30f22d9cb773e060061abc43fc14f15b6619ba4f0c86</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar">
      <group>com.esotericsoftware</group>
      <name>minlog</name>
      <version>1.3.0</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">5ab0ee168b90e0ad7010b159e603d304</hash>
        <hash alg="SHA-1">ff07b5f1b01d2f92bb00a337f9a94873712f0827</hash>
        <hash alg="SHA-256">f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2</hash>
        <hash alg="SHA-512">ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000</hash>
        <hash alg="SHA-384">3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/minlog</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/minlog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-common</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb51c886a594444d397825a00da2bd4b</hash>
        <hash alg="SHA-1">9ffd994953fc4397830a1241a15c9121aebd9574</hash>
        <hash alg="SHA-256">b7698cbbcfaf93818f2388db63198948bba5f24bd9a2b378c0081f6d945c30a4</hash>
        <hash alg="SHA-512">eb4138ca54f8dbf7edfc1ab39dcf75995b73520696682c87fdfab5d2a058839e345853b18cee0f00b5160e79ad65cb38a7c33e611bb285d740e229282c694202</hash>
        <hash alg="SHA-384">d77ca13ef7694da13b30c326b8ef5ce8a48506438670817533c4f61b3697c6f5498c5b0294b04c34c8bdbfbb594121ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Annotations</description>
      <hashes>
        <hash alg="MD5">04144ea13aa1d654c3f57894153baa05</hash>
        <hash alg="SHA-1">0a55da50d8b25df34dc4ecab9cbd3a5a24664594</hash>
        <hash alg="SHA-256">d59b24615f1e1050e4bc987955a936f479a51058ae2ee59d751536ae75e563d1</hash>
        <hash alg="SHA-512">216fbe0ad11c0d0eef67d8ab26707d1b6c1d3925c22ff37dc3eac94e4b0f18dec9a6592a37307f111c00ace9f8e6910ae08036c073cef69f89925243f5d894d0</hash>
        <hash alg="SHA-384">660c92e9d48fa5fa8edd09f4947dfca50df6130eb0d4e09da269128b0a0e0fa1d9739b95054d31aa24f5d5c9abc1fca8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.1.1</version>
      <description>The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">505ece0d2261b037101e6c4bdf541ca7</hash>
        <hash alg="SHA-1">6719d757a98ff24a83d9d727bef9cec83f59b6e1</hash>
        <hash alg="SHA-256">a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54</hash>
        <hash alg="SHA-512">4716722ee06853789f5539f3b3f9726b3ddf3b358b3ee136196b9beaa63741df72a8a23b71f3864c565d5f945d19291beeb02053d8d98ec83119b7142c17ee23</hash>
        <hash alg="SHA-384">def2a41220a30eff80133c04f169baafde4d5a94f38a74d5bfed55042123b1b25f437d52d731f0135b7bd7885c4f5b44</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/math/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/math/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar">
      <group>xmlenc</group>
      <name>xmlenc</name>
      <version>0.52</version>
      <description>xmlenc Library</description>
      <hashes>
        <hash alg="MD5">c962b6bc3c8de46795b0ed94851fa9c7</hash>
        <hash alg="SHA-1">d82554efbe65906d83b3d97bd7509289e9db561a</hash>
        <hash alg="SHA-256">282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026</hash>
        <hash alg="SHA-512">3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f</hash>
        <hash alg="SHA-384">3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/xmlenc/xmlenc@0.52?type=jar</purl>
      <externalReferences><reference type="website"><url>http://xmlenc.sourceforge.net</url></reference><reference type="vcs"><url>http://xmlenc.cvs.sourceforge.net/xmlenc/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>commons-httpclient</group>
      <name>commons-httpclient</name>
      <version>3.1</version>
      <description>The HttpClient  component supports the client-side of RFC 1945 (HTTP/1.0)  and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.</description>
      <hashes>
        <hash alg="MD5">8ad8c9229ef2d59ab9f59f7050e846a5</hash>
        <hash alg="SHA-1">964cd74171f427720480efdec40a7c7f6e58426a</hash>
        <hash alg="SHA-256">dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443</hash>
        <hash alg="SHA-512">85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359</hash>
        <hash alg="SHA-384">973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/httpcomponents/httpclient-3.x/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.4</version>
      <description>The codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">82b899580da472be37055da949b731fa</hash>
        <hash alg="SHA-1">4216af16d38465bbab0f3dff8efa14204f7a399a</hash>
        <hash alg="SHA-256">6aa4234c74f3a1035751a25822545867c8c3727125a642b6e049665d1863631b</hash>
        <hash alg="SHA-512">640bca4f1d4dca63724eedf417d3dccaacf77e5c1d9dac07190b0a64450f7b16fcb5f8578823303e08fb6d07b9c2897226c449f2c9b448b060ff5d8f683403b8</hash>
        <hash alg="SHA-384">1192ebd03bbdab3263d97805dc208821288d6726502cd800f01f55584572e71d0f9d0486b510530fca736dcccb3f7b5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/codec/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url></url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.4</version>
      <description>The Commons IO library contains utility classes, stream implementations, file filters, 
file comparators, endian transformation classes, and much more.</description>
      <hashes>
        <hash alg="MD5">7f97854dc04c119d461fed14f5d8bb96</hash>
        <hash alg="SHA-1">b1b6ea3b7e4aa4f492509a4952029cd8e48019ad</hash>
        <hash alg="SHA-256">cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581</hash>
        <hash alg="SHA-512">957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292</hash>
        <hash alg="SHA-384">af8a3e210cb1dd5475d497249acf1a86266077f5c7df0ded76d92467ab7f69e445f79dcfacfd7375085ad24f49625955</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/io/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/io/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-net</group>
      <name>commons-net</name>
      <version>3.1</version>
      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>
      <hashes>
        <hash alg="MD5">23c94d51e72f341fb412d6a015e16313</hash>
        <hash alg="SHA-1">2298164a7c2484406f2aa5ac85b205d39019896f</hash>
        <hash alg="SHA-256">34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007</hash>
        <hash alg="SHA-512">66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8</hash>
        <hash alg="SHA-384">444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-net/commons-net@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/net/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/NET</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/net/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-core</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">73d196595f5e410a37c0a4337350ceb7</hash>
        <hash alg="SHA-1">8341846f18187013bb9e27e46b7ee00a6395daf4</hash>
        <hash alg="SHA-256">2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc</hash>
        <hash alg="SHA-512">9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb</hash>
        <hash alg="SHA-384">99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-core/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-server</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">0c98f6cca5df8197b310a0d1d89bb34a</hash>
        <hash alg="SHA-1">3a6ea7cc5e15c824953f9f3ece2201b634d90d18</hash>
        <hash alg="SHA-256">3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0</hash>
        <hash alg="SHA-512">9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8</hash>
        <hash alg="SHA-384">231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-server/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/asm/asm@3.1?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>asm</group>
      <name>asm</name>
      <version>3.1</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">b9b8d2d556f9458aac8c463fd511f86d</hash>
        <hash alg="SHA-1">c157def142714c544bdea2e6144645702adf7097</hash>
        <hash alg="SHA-256">333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a</hash>
        <hash alg="SHA-512">074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d</hash>
        <hash alg="SHA-384">c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/asm/asm@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm/</url></reference><reference type="distribution"><url>http://mojo.codehaus.org/my-project</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.ow2.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-configuration</group>
      <name>commons-configuration</name>
      <version>1.6</version>
      <description>Tools to assist in the reading of configuration/preferences files in
    various formats</description>
      <hashes>
        <hash alg="MD5">b099d9f9b4b99071cc52b259308df69a</hash>
        <hash alg="SHA-1">32cadde23955d7681b0d94a2715846d20b425235</hash>
        <hash alg="SHA-256">46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee</hash>
        <hash alg="SHA-512">e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0</hash>
        <hash alg="SHA-384">3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-configuration/commons-configuration@1.6?type=jar</purl>
      <externalReferences><reference type="distribution"><url>www.apache.org//www/www.apache.org/dist/java-repository/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-dev/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-core-asl</name>
      <version>1.9.13</version>
      <description>Jackson is a high-performance JSON processor (parser, generator)</description>
      <hashes>
        <hash alg="MD5">319c49a4304e3fa9fe3cd8dcfc009d37</hash>
        <hash alg="SHA-1">3c304d70f42f832e0a86d45bd437f692129299a4</hash>
        <hash alg="SHA-256">440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a</hash>
        <hash alg="SHA-512">11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89</hash>
        <hash alg="SHA-384">26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-mapper-asl</name>
      <version>1.9.13</version>
      <description>Data Mapper package is a high-performance data binding package
built on Jackson JSON processor</description>
      <hashes>
        <hash alg="MD5">1750f9c339352fc4b728d61b57171613</hash>
        <hash alg="SHA-1">1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7</hash>
        <hash alg="SHA-256">74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2</hash>
        <hash alg="SHA-512">81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873</hash>
        <hash alg="SHA-384">d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.9.0</version>
      <description>Gson JSON library</description>
      <hashes>
        <hash alg="MD5">53fa3e6753e90d931d62cb89580fde2f</hash>
        <hash alg="SHA-1">8a1167e089096758b49f9b34066ef98b2f4b37aa</hash>
        <hash alg="SHA-256">c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d</hash>
        <hash alg="SHA-512">13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c</hash>
        <hash alg="SHA-384">fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/gson/gson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/gson/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <hashes>
        <hash alg="MD5">471760b62af31e3bfe4e6a73929868d7</hash>
        <hash alg="SHA-1">7d1236a477accb4c67fc9615ed67732097fb9af9</hash>
        <hash alg="SHA-256">1d75f87e433c285ed99bee878bad6f251242613fec2fb7e6c544b862f3ddc428</hash>
        <hash alg="SHA-512">ddf4b3ca2a0bc6d4ece049da3f122f9a44f004b4b21933666410c9af634886d1cf8fbba98eeb919af4bd879e5420df8cd17b618beb1f3c2db9a07faa2146b563</hash>
        <hash alg="SHA-384">c226ad571a95788c234a092053f704d05a6cde93853e861611477c3241ae299b99497fd2f4b8b227008e85d4466e2b20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.2.5</version>
      <description>HttpComponents Client (base module)</description>
      <hashes>
        <hash alg="MD5">d57d9336b460a91be6880784bdadc124</hash>
        <hash alg="SHA-1">666e26e76f2e87d84e4f16acb546481ae1b8e9a6</hash>
        <hash alg="SHA-256">c7fb05b793a586633d2d801a889e0846f3f21c7f8dc3dab776421383f49ebb8c</hash>
        <hash alg="SHA-512">5a33f34a2ef0853d6434bfb77bdc8e41c3df923d152bd9037245cfad6f41a3d1653f3f7504add7947f84cfbddfaa7ff3f5cd3bd82d6405201cbb832809c8ef52</hash>
        <hash alg="SHA-384">1cd160c1f484a350eb32a0b8ffa7e3deb435157a9be080324c642d1ba002ebb4e823cd6e3cb5a5e1d5427837fe9dd09e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.5/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.2.4</version>
      <description>HttpComponents Core (blocking I/O)</description>
      <hashes>
        <hash alg="MD5">6ccb86231d8a8b99c551b4ddf926ddd1</hash>
        <hash alg="SHA-1">3b7f38df6de5dd8b500e602ae8c2dd5ee446f883</hash>
        <hash alg="SHA-256">bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3</hash>
        <hash alg="SHA-512">0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9</hash>
        <hash alg="SHA-384">641cac15a256f8d0a2ad0f455458dc022d8fdeb3a792b179e122d8e102966a06ed46c65f66e7fcba23dd0369665b80b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/httpcomponents/httpcore/tags/4.2.4/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-kerberos-codec</name>
      <version>2.0.0-M15</version>
      <description>The Kerberos protocol encoder/decoder module</description>
      <hashes>
        <hash alg="MD5">3118e22eac44e150c383df1d417772f4</hash>
        <hash alg="SHA-1">1c16e4e477183641c5f0dd5cdecd27ec331bacb5</hash>
        <hash alg="SHA-256">4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded</hash>
        <hash alg="SHA-512">9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0</hash>
        <hash alg="SHA-384">c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-i18n</name>
      <version>2.0.0-M15</version>
      <description>Internationalization of errors and other messages</description>
      <hashes>
        <hash alg="MD5">f5877c02fd56ade67713560e589c81b9</hash>
        <hash alg="SHA-1">71c61c84683152ec2a6a65f3f96fe534e304fa22</hash>
        <hash alg="SHA-256">bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c</hash>
        <hash alg="SHA-512">2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632</hash>
        <hash alg="SHA-384">fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-i18n</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-asn1-api</name>
      <version>1.0.0-M20</version>
      <description>ASN.1 API</description>
      <hashes>
        <hash alg="MD5">cf4561832dab76e9f37461342ec18d17</hash>
        <hash alg="SHA-1">5e6486ffa3125ba44dc410ead166e1d6ba8ac76d</hash>
        <hash alg="SHA-256">484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298</hash>
        <hash alg="SHA-512">10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97</hash>
        <hash alg="SHA-384">f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-util</name>
      <version>1.0.0-M20</version>
      <description>Utilities shared across this top level project</description>
      <hashes>
        <hash alg="MD5">2c5a6722666882024becdd64301be492</hash>
        <hash alg="SHA-1">a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb</hash>
        <hash alg="SHA-256">fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1</hash>
        <hash alg="SHA-512">b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3</hash>
        <hash alg="SHA-384">1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-util/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>2.7.1</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <hashes>
        <hash alg="MD5">35bff30d2a79a8b0731269604b1327ee</hash>
        <hash alg="SHA-1">8c7b1eeb78e43bb91ea737111ba3dec0512be876</hash>
        <hash alg="SHA-256">a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb</hash>
        <hash alg="SHA-512">c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b</hash>
        <hash alg="SHA-384">62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-framework</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar">
      <publisher>jcraft</publisher>
      <group>com.jcraft</group>
      <name>jsch</name>
      <version>0.1.42</version>
      <description>JSch is a pure Java implementation of SSH2</description>
      <hashes>
        <hash alg="MD5">74ea920580077b4c0b51101a8292a529</hash>
        <hash alg="SHA-1">a86104b0f2e0c0bab5b0df836065823a99b5e334</hash>
        <hash alg="SHA-256">74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc</hash>
        <hash alg="SHA-512">900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd</hash>
        <hash alg="SHA-384">b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch@0.1.42?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/jsch/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>2.7.1</version>
      <description>Low-level API</description>
      <hashes>
        <hash alg="MD5">3b43933c18d1dcf15f88db73ee646396</hash>
        <hash alg="SHA-1">a591dfc085db3e9d4d480381cc7e6ae8a26b34af</hash>
        <hash alg="SHA-256">949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4</hash>
        <hash alg="SHA-512">7938bab4600cbcc13c78256295766c6f1172902db87794a3a14b7acebdfad5de2c69419978420ce32168ea26524919bcbb42018995de53da1a96ae9c30cef499</hash>
        <hash alg="SHA-384">4392856c7e46f7f9819281f84e21e6d42e285d89018608d60b8faea5629a7954ec0920a921d383d204ef9248befc2506</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-client</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.htrace</group>
      <name>htrace-core</name>
      <version>3.1.0-incubating</version>
      <description>A tracing framework for use with distributed systems written in java</description>
      <hashes>
        <hash alg="MD5">c49a4662d691a09eed10e0a35dd73299</hash>
        <hash alg="SHA-1">f73606e7c9ede5802335c290bf47490ad6d51df3</hash>
        <hash alg="SHA-256">d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d</hash>
        <hash alg="SHA-512">4401a31494026fd46ca90a4fb111eb3cf1d3d2def294dccc131dab0927edd48b3b852d40b257424041b6bf3165f2684b4a6b45568ec7ab7ab59452f34fe756a0</hash>
        <hash alg="SHA-384">de9ecdbefc8ad5fb6a253bc8caecd99b252bfc0add781cbb9a646dd2ead203028a7bdafa0165f210f0c881bdb930fbcc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar</purl>
      <externalReferences><reference type="website"><url>http://incubator.apache.org/projects/htrace.html</url></reference><reference type="build-system"><url>https://builds.apache.org/view/H-L/view/HTrace/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTRACE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.8.1</version>
      <description>ZooKeeper server</description>
      <hashes>
        <hash alg="MD5">0a79f48c0a48eff277a1277735c86c33</hash>
        <hash alg="SHA-1">edb7d70db4390b9f54a92994577a9e344ade5c9d</hash>
        <hash alg="SHA-256">ca65b863f2402cba82761204b77f04373f8d0a8adebb286619e1e5b33d0528e9</hash>
        <hash alg="SHA-512">2317d5691d44abaace919890a496c1da85af07d476387c76900be0e97bc46309fbb1f51dde3ad66b65d556ec1544a45ae0827a669f3f2b7a476af42b238f435f</hash>
        <hash alg="SHA-384">2c7c4523d5ead16f136e754712e9ec4b9013a6b694253310c17d3476c56dabc63eb64bf26dfef62e83ca0dd8af690a06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.8.1</version>
      <description>ZooKeeper jute</description>
      <hashes>
        <hash alg="MD5">a86cbae5a67619e4b554a69861e03e57</hash>
        <hash alg="SHA-1">aeb9b21ed9d2b99da9e0e3d1fd24d54f85fbf840</hash>
        <hash alg="SHA-256">66084b9930619876ff2daa55670dee744b2d68998e180a5ffa427f82f52bdfa9</hash>
        <hash alg="SHA-512">0aa6f0cb2599dae1283fddc550568b5898adf69a104d9133c8b8778b4f1fc9a5ce961f24535fbca9ff1420ec1f6214db47533b4e9dd4ad539cc6f2e6cf834c9b</hash>
        <hash alg="SHA-384">c2afa4ee931d3d503229c8458ac521e269866f47c1e2faf66bd9d259d33e20e5dc31b4b1b32f21d42c9f9ff2c1e898e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.12.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">76ba71bbe18c4724d96bec68bbe12ff1</hash>
        <hash alg="SHA-1">e0efa60318229590103e31c69ebdaae56d903644</hash>
        <hash alg="SHA-256">ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc</hash>
        <hash alg="SHA-512">264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715</hash>
        <hash alg="SHA-384">f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.10</version>
      <description>logback-core module</description>
      <hashes>
        <hash alg="MD5">697b37f140ce9ac35a4ca3eaf4059f1a</hash>
        <hash alg="SHA-1">5328406bfcae7bcdcc86810fcb2920d2c297170d</hash>
        <hash alg="SHA-256">ba51a3fe56691f9dd7fe742e4a73c3ab4aaaa32202c73409ba56f18687399a08</hash>
        <hash alg="SHA-512">8dd5175ab32120dccd48e44166f9f35df389385ac808b5ef18d43bd2ef98e43d440d982155f231883a963994644d4c0baf701ef6fd1ace2c6dab13f98d8c9d53</hash>
        <hash alg="SHA-384">452313d0e5ee35aef136e7db604d58cf782009d4bc0f0bbf25ac5c314377b7c2db72f8ff1cfa9095f7808ca6ed36946a</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logback.qos.ch/logback-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/ceki/logback/logback-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.4.1</version>
      <description>Apache Commons Compress software defines an API for working with compression and archive formats.
These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.</description>
      <hashes>
        <hash alg="MD5">7f7ff9255a831325f38a170992b70073</hash>
        <hash alg="SHA-1">b02e84a993d88568417536240e970c4b809126fd</hash>
        <hash alg="SHA-256">28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86</hash>
        <hash alg="SHA-512">ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070</hash>
        <hash alg="SHA-384">6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/compress/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/compress/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-mapreduce-client-core</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Project POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ca375461477843ff262c200345fd67d</hash>
        <hash alg="SHA-1">bc47392a6830a22900a84723837e04bdba12a2d4</hash>
        <hash alg="SHA-256">da4e3e68a6193ae3aa3642a0daf45207c883f930d93c3e58ade75d41979b3f3d</hash>
        <hash alg="SHA-512">c91d44727275042d8a34a5a5cc0ed7d01efd665c424848c5ee952c49ebc920d56ac00fe5851374e10a03c4faf8461aa80d7a7f404d760a15239da7616f401e91</hash>
        <hash alg="SHA-384">69cf501388defd4b9e0b61d0f45d92ba9099b7eadced08afa247ec80d700a8abffaa7bf0800b32f45f9bd966b1c00563</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-common</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">21e6f54eaf36b4bce72cfd3a089a567b</hash>
        <hash alg="SHA-1">455420e0d0a9e645d9489e8c7d34d0b02cd1c36f</hash>
        <hash alg="SHA-256">5ba492bce0eca5e814af88d0a0fd4badbdc5c5ee890f70846b94bc20227a75be</hash>
        <hash alg="SHA-512">3409fae31f7e05c5edaf4d55f154bb61e8a0eda926bf1a821937f92753c36b3a87746fe8d2b66559b97405d4893c31bdb9da3b44504e9e719b44866c29ed9754</hash>
        <hash alg="SHA-384">20c69980e7caa794ded44a3ee6e0c24b9f6888073d91e2f2b8717ac1c78d1061a0c8bdb6bd4bc13a4a1b7dde805dd899</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-api</name>
      <version>2.7.3</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">b3b51aa62d826c939b1e37a55617aa9a</hash>
        <hash alg="SHA-1">b15b7673cbe076dccf973ac45721a89f1ef95948</hash>
        <hash alg="SHA-256">d01c2d9bf67b41a81a63323d7ae75f45f8dec71098f6c01dedae9d10ca96e5a5</hash>
        <hash alg="SHA-512">3f8b4f3601bd0c60e8d139a69624b430c56865a62e806067844b6c6c9c69ee995177d2dd5b878672bc23f50ec5e0405cfabd3ace43fac2f71daba305487a1a1a</hash>
        <hash alg="SHA-384">5af5405e5dc9575090fd16c2d603534608e2fd476005bf0a9bc70f16c7df0d19cf943a33d372d39f8fcefdaa091804a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.2.2</version>
      <description>JAXB (JSR 222) API</description>
      <hashes>
        <hash alg="MD5">a415e9a322984be1e1f8a023d09dca5f</hash>
        <hash alg="SHA-1">aeb3021ca93dde265796d82015beecdcff95bf09</hash>
        <hash alg="SHA-256">30233df6215fb982d8784de91d307596748cea98d6d502293c7c3e85c1697137</hash>
        <hash alg="SHA-512">e17cac8509b5c0eef2c8a0c8e16fa5bba75f64d82a1a4d51725d488aa9af5c5474eefa329af47b9065232e811f9d4b48163b5e62cba88467d1be4ac4cb1ead88</hash>
        <hash alg="SHA-384">3c511c647f7c8e76cd4392c75b5cfd9143a9269df5f565e73cd4289da12ea02cd8cc32f932d945172dc287809309b663</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jaxb.dev.java.net/</url></reference><reference type="distribution"><url>java-net:/maven2-repository/trunk/repository/</url></reference><reference type="vcs"><url>https://jaxb2-sources.dev.java.net/source/browse/jaxb2-sources/jaxb-ri/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar">
      <group>javax.xml.stream</group>
      <name>stax-api</name>
      <version>1.0-2</version>
      <description>StAX is a standard XML processing API that allows you to stream XML data from and to your application.</description>
      <hashes>
        <hash alg="MD5">7d18b63063580284c3f5734081fdc99f</hash>
        <hash alg="SHA-1">d6337b0de8b25e53e81b922352fbea9f9f57ba0b</hash>
        <hash alg="SHA-256">e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7</hash>
        <hash alg="SHA-512">a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5</hash>
        <hash alg="SHA-384">005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public Library</name>
          <url>http://www.gnu.org/licenses/gpl.txt</url>
        </license>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-client</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">cdbba85f9cb7ce5e0ca51d610f0228e9</hash>
        <hash alg="SHA-1">d3c4b2b5f89db32c96ceddcb863684821910a7bb</hash>
        <hash alg="SHA-256">8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68</hash>
        <hash alg="SHA-512">06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6</hash>
        <hash alg="SHA-384">1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-client/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-jaxrs</name>
      <version>1.9.13</version>
      <description>Jax-RS provider for JSON content type, based on 
Jackson JSON processor's data binding functionality.</description>
      <hashes>
        <hash alg="MD5">8481e1904d9bfe974157a6af04b4445e</hash>
        <hash alg="SHA-1">534d72d2b9d6199dd531dfb27083dd4844082bba</hash>
        <hash alg="SHA-256">1770570a6ba5c87a4795c0aeb40ee7c5fe5e31df64ef1d4795a0d427796b84bb</hash>
        <hash alg="SHA-512">9163284c2e06575f3be10a5dba476fa7905273546e1b524571de5cdeb02c34627cecde2408a6417725344e3f5e6844596f0dce30d07dba5b31d7bc50c0e4f741</hash>
        <hash alg="SHA-384">abfab565c15d170c75889a4a202466427f9eedbbce15c5fde5c3e0fc5a0b80cfc1bcc5ec77ed5696a73b0ae70f247936</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License (LGPL), Version 2.1</name>
          <url>http://www.fsf.org/licensing/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-xc</name>
      <version>1.9.13</version>
      <description>Extensions that provide interoperability support for
Jackson JSON processor's data binding functionality.</description>
      <hashes>
        <hash alg="MD5">49f6a735bae30745dcf5ecec27090720</hash>
        <hash alg="SHA-1">e3480072bc95c202476ffa1de99ff7ee9149f29c</hash>
        <hash alg="SHA-256">2d2905fcec7d1c55b775995617685dbb03672350704d9e40b492eab5b54d0be7</hash>
        <hash alg="SHA-512">09a043d9eb469842622636d3814b474af7c74ea3e3e88c9f44ac752c2d14eac4aa4d5bb96e8c8672d445e562d6043bcf484417ee8ef3381279150c00c8fcaf2d</hash>
        <hash alg="SHA-384">7a806e3d31eb7b0d3342a74816299f18a7d416a7e16cda479ed9ee6d830c0feae5c183d38e336dc452a0045a8c9e065c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License (LGPL), Version 2.1</name>
          <url>http://www.fsf.org/licensing/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@3.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>3.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 5 and above</description>
      <hashes>
        <hash alg="MD5">ca1c7ba366884cfcd2cfb48d2395c400</hash>
        <hash alg="SHA-1">9d84f15fe35e2c716a02979fb62f50a29f38aefa</hash>
        <hash alg="SHA-256">1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22</hash>
        <hash alg="SHA-512">8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf</hash>
        <hash alg="SHA-384">f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-guice/guice/</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/job/Google-Guice/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://code.google.com/p/google-guice/source/browse/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-json</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">17ca6b0d49ed8db159b7827b6defa6b6</hash>
        <hash alg="SHA-1">1aa73e1896bcc7013fed247157d7f676226eb432</hash>
        <hash alg="SHA-256">cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6</hash>
        <hash alg="SHA-512">266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a</hash>
        <hash alg="SHA-384">6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-json/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.1</version>
      <description>A StAX implementation for JSON.</description>
      <hashes>
        <hash alg="MD5">fc80e0aabd516c54739262c3d618303a</hash>
        <hash alg="SHA-1">1a01a2a1218fcf9faa2cc2a6ced025bdea687262</hash>
        <hash alg="SHA-256">377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801</hash>
        <hash alg="SHA-512">075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9</hash>
        <hash alg="SHA-384">6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>dav:https://dav.codehaus.org/repository/jettison/</url></reference><reference type="vcs"><url>https://svn.codehaus.org/jettison/tags/jettison-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.xml.bind</group>
      <name>jaxb-impl</name>
      <version>2.2.3-1</version>
      <description>JAXB (JSR 222) reference implementation</description>
      <hashes>
        <hash alg="MD5">1b689e7f87caf2615c0f6a47831d0342</hash>
        <hash alg="SHA-1">56baae106392040a45a06d4a41099173425da1e6</hash>
        <hash alg="SHA-256">fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8</hash>
        <hash alg="SHA-512">6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683</hash>
        <hash alg="SHA-384">223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jaxb.java.net/</url></reference><reference type="distribution"><url>svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository</url></reference><reference type="vcs"><url>https://svn.java.net/svn/jaxb~version2/jaxb-ri</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey.contribs</group>
      <name>jersey-guice</name>
      <version>1.9</version>
      <description>Projects that provide additional functionality to jersey, like integration
        with other projects/frameworks.</description>
      <hashes>
        <hash alg="MD5">a81140d246f420c1e2eabe649417c5b1</hash>
        <hash alg="SHA-1">5963c28c47df7e5d6ad34cec80c071c368777f7b</hash>
        <hash alg="SHA-256">544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34</hash>
        <hash alg="SHA-512">e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1</hash>
        <hash alg="SHA-384">c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-contribs/jersey-guice/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/log4j/log4j@1.2.17?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>log4j</group>
      <name>log4j</name>
      <version>1.2.17</version>
      <description>Apache Log4j 1.2</description>
      <hashes>
        <hash alg="MD5">04a41f0a068986f0f73485cf507c0f40</hash>
        <hash alg="SHA-1">5af35056b4d257e4b64b9e8069c0746e8b08629f</hash>
        <hash alg="SHA-256">1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9</hash>
        <hash alg="SHA-512">3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc</hash>
        <hash alg="SHA-384">80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/log4j/log4j@1.2.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logging.apache.org/log4j/1.2/</url></reference><reference type="build-system"><url>http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/builds/logging/repo/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/logging-log4j-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject.extensions</group>
      <name>guice-servlet</name>
      <version>3.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 5 and above</description>
      <hashes>
        <hash alg="MD5">c9f66a5f6a0d840d9057b30853f25b85</hash>
        <hash alg="SHA-1">610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9</hash>
        <hash alg="SHA-256">9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618</hash>
        <hash alg="SHA-512">c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa</hash>
        <hash alg="SHA-384">1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-guice/extensions-parent/guice-servlet/</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/job/Google-Guice/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty@3.6.2.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty</name>
      <version>3.6.2.Final</version>
      <description>The Netty project is an effort to provide an asynchronous event-driven
    network application framework and tools for rapid development of
    maintainable high performance and high scalability protocol servers and
    clients.  In other words, Netty is a NIO client server framework which
    enables quick and easy development of network applications such as protocol
    servers and clients. It greatly simplifies and streamlines network
    programming such as TCP and UDP socket server.</description>
      <hashes>
        <hash alg="MD5">65546c0885e83ba36f1f4d9ff9f8c776</hash>
        <hash alg="SHA-1">69be11c61427f0604a30539755add84ad9e37e5e</hash>
        <hash alg="SHA-256">d4ff9f0a2959633e062edd0e678d8187bbe95ad19195384ac524fd41f00f5a44</hash>
        <hash alg="SHA-512">8e86cb7f68707b69a45859d615e3a5799c5077d9c356b38ca0d352ce20521d45810d94dd8677ad0e977604ec85fa761e1f8f3c1703715cc9301c7c6fd01a00e3</hash>
        <hash alg="SHA-384">71e55f3ac9dc7601350d673e3ddce16b68b007412286222f7031dd8cfa83ddbfe2a7f571ae05dd0666fed0bed3e72b55</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty@3.6.2.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://netty.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-storage-api</name>
      <version>2.8.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bea1adb65022d4616d23be770207600d</hash>
        <hash alg="SHA-1">4b151bcdfe290542f27a442ed09be99f815f88e8</hash>
        <hash alg="SHA-256">2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8</hash>
        <hash alg="SHA-512">e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7</hash>
        <hash alg="SHA-384">93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hive-storage-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.7</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">403dffa46cdd2e3c82da19df4f394a4c</hash>
        <hash alg="SHA-1">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>
        <hash alg="SHA-256">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>
        <hash alg="SHA-512">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>
        <hash alg="SHA-384">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.orc/orc-mapreduce@1.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-core@1.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.25?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/io.airlift/aircompressor@0.25?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.threeten/threeten-extra@1.7.1?type=jar"/>
    <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.2?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"/>
      <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
      <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"/>
    <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
    <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
    <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.6?type=jar">
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"/>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch@0.1.42?type=jar"/>
    <dependency ref="pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty@3.6.2.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.7.3?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.4?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"/>
      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.7.3?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar">
      <dependency ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"/>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar">
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar">
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar">
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty@3.6.2.Final?type=jar"/>
  </dependencies>
</bom>
