{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:4a083373-0c8a-4cfa-9624-ac4f58f27ed1",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2023-11-05T05:08:04Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system",
        "version" : "2.7.6",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "639c35c7f79c5514f3abe11247999b70"
          },
          {
            "alg" : "SHA-1",
            "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d"
          },
          {
            "alg" : "SHA-256",
            "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3"
          },
          {
            "alg" : "SHA-512",
            "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.orc",
      "name" : "orc-shims",
      "version" : "1.9.2",
      "description" : "A shim layer for supporting various versions of Hadoop dynamically. This module uses a higher version of Hadoop so that we can create shims that let us use new features of Hadoop without having a hard dependency on the latest version.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://orc.apache.org/orc-shims"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/orc-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eb51c886a594444d397825a00da2bd4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "9ffd994953fc4397830a1241a15c9121aebd9574"
        },
        {
          "alg" : "SHA-256",
          "content" : "b7698cbbcfaf93818f2388db63198948bba5f24bd9a2b378c0081f6d945c30a4"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb4138ca54f8dbf7edfc1ab39dcf75995b73520696682c87fdfab5d2a058839e345853b18cee0f00b5160e79ad65cb38a7c33e611bb285d740e229282c694202"
        },
        {
          "alg" : "SHA-384",
          "content" : "d77ca13ef7694da13b30c326b8ef5ce8a48506438670817533c4f61b3697c6f5498c5b0294b04c34c8bdbfbb594121ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Annotations",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04144ea13aa1d654c3f57894153baa05"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a55da50d8b25df34dc4ecab9cbd3a5a24664594"
        },
        {
          "alg" : "SHA-256",
          "content" : "d59b24615f1e1050e4bc987955a936f479a51058ae2ee59d751536ae75e563d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "216fbe0ad11c0d0eef67d8ab26707d1b6c1d3925c22ff37dc3eac94e4b0f18dec9a6592a37307f111c00ace9f8e6910ae08036c073cef69f89925243f5d894d0"
        },
        {
          "alg" : "SHA-384",
          "content" : "660c92e9d48fa5fa8edd09f4947dfca50df6130eb0d4e09da269128b0a0e0fa1d9739b95054d31aa24f5d5c9abc1fca8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.1.1",
      "description" : "The Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "505ece0d2261b037101e6c4bdf541ca7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6719d757a98ff24a83d9d727bef9cec83f59b6e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "a07e39d31c46032879f0a48ae1bd0142b17dd67664c008b50216e9891f346c54"
        },
        {
          "alg" : "SHA-512",
          "content" : "4716722ee06853789f5539f3b3f9726b3ddf3b358b3ee136196b9beaa63741df72a8a23b71f3864c565d5f945d19291beeb02053d8d98ec83119b7142c17ee23"
        },
        {
          "alg" : "SHA-384",
          "content" : "def2a41220a30eff80133c04f169baafde4d5a94f38a74d5bfed55042123b1b25f437d52d731f0135b7bd7885c4f5b44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/math/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/math/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "commons-httpclient",
      "name" : "commons-httpclient",
      "version" : "3.1",
      "description" : "The HttpClient component supports the client-side of RFC 1945 (HTTP/1.0) and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ad8c9229ef2d59ab9f59f7050e846a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "964cd74171f427720480efdec40a7c7f6e58426a"
        },
        {
          "alg" : "SHA-256",
          "content" : "dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443"
        },
        {
          "alg" : "SHA-512",
          "content" : "85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359"
        },
        {
          "alg" : "SHA-384",
          "content" : "973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/httpcomponents/httpclient-3.x/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.4",
      "description" : "The codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82b899580da472be37055da949b731fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "4216af16d38465bbab0f3dff8efa14204f7a399a"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aa4234c74f3a1035751a25822545867c8c3727125a642b6e049665d1863631b"
        },
        {
          "alg" : "SHA-512",
          "content" : "640bca4f1d4dca63724eedf417d3dccaacf77e5c1d9dac07190b0a64450f7b16fcb5f8578823303e08fb6d07b9c2897226c449f2c9b448b060ff5d8f683403b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1192ebd03bbdab3263d97805dc208821288d6726502cd800f01f55584572e71d0f9d0486b510530fca736dcccb3f7b5a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/codec/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : ""
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/codec/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.4",
      "description" : "The Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f97854dc04c119d461fed14f5d8bb96"
        },
        {
          "alg" : "SHA-1",
          "content" : "b1b6ea3b7e4aa4f492509a4952029cd8e48019ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc6a41dc3eaacc9e440a6bd0d2890b20d36b4ee408fe2d67122f328bb6e01581"
        },
        {
          "alg" : "SHA-512",
          "content" : "957a438894a196e534af9ae1e61fb21e16f273952b55a81abb8faf0b139fc031ea940cf477f81704db417d1ce6ff2d9ddd4a2cbf316903b0e2dc1aeaef24f292"
        },
        {
          "alg" : "SHA-384",
          "content" : "af8a3e210cb1dd5475d497249acf1a86266077f5c7df0ded76d92467ab7f69e445f79dcfacfd7375085ad24f49625955"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/io/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/io/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-core",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "73d196595f5e410a37c0a4337350ceb7"
        },
        {
          "alg" : "SHA-1",
          "content" : "8341846f18187013bb9e27e46b7ee00a6395daf4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb"
        },
        {
          "alg" : "SHA-384",
          "content" : "99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-core/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.1.3",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92eb5aabc1b47287de53d45c086a435c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f"
        },
        {
          "alg" : "SHA-256",
          "content" : "70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f"
        },
        {
          "alg" : "SHA-384",
          "content" : "00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.6",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b099d9f9b4b99071cc52b259308df69a"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cadde23955d7681b0d94a2715846d20b425235"
        },
        {
          "alg" : "SHA-256",
          "content" : "46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "www.apache.org//www/www.apache.org/dist/java-repository/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-core-asl",
      "version" : "1.9.13",
      "description" : "Jackson is a high-performance JSON processor (parser, generator)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "319c49a4304e3fa9fe3cd8dcfc009d37"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c304d70f42f832e0a86d45bd437f692129299a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a"
        },
        {
          "alg" : "SHA-512",
          "content" : "11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89"
        },
        {
          "alg" : "SHA-384",
          "content" : "26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "org.codehaus.jackson",
      "name" : "jackson-mapper-asl",
      "version" : "1.9.13",
      "description" : "Data Mapper package is a high-performance data binding package built on Jackson JSON processor",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1750f9c339352fc4b728d61b57171613"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873"
        },
        {
          "alg" : "SHA-384",
          "content" : "d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jackson.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JACKSON"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/jackson/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"
    },
    {
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "3.22.3",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e39845796ebd9fdb1b0f30ffef7ec2ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "fdee98b8f6abab73f146a4edb4c09e56f8278d03"
        },
        {
          "alg" : "SHA-256",
          "content" : "59d388ea6a2d2d76ae8efff7fd4d0c60c6f0f464c3d3ab9be8e5add092975708"
        },
        {
          "alg" : "SHA-512",
          "content" : "5af655e915e5895deed993848613a76da09c12c32954254edd01803fba841385799715c151c2050121f475c06fc342f9021f2c55812e2c763eec89317fd3315d"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b79d25632724a0b9b8f1b36a63c7d7476d767fdaf4efcfa1510b7757120719edf54a342ae1429ab357b0b6f648ca06b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar"
    },
    {
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.9.0",
      "description" : "Gson JSON library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "53fa3e6753e90d931d62cb89580fde2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8a1167e089096758b49f9b34066ef98b2f4b37aa"
        },
        {
          "alg" : "SHA-256",
          "content" : "c96d60551331a196dac54b745aa642cd078ef89b6f267146b705f2c2cbef052d"
        },
        {
          "alg" : "SHA-512",
          "content" : "13ff22a60ee6a72ba0c4e8fe3702b8f3f6be6b67ed4279079a9843f57ad0ca125d4ecc1564ac4e736eab10fb6254d2c011b2c08c514d708be7f8091332ed2c2c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde5b61066a8cdd711874ed42f20cb914e4193f1477456c431fb0ca32d86324414e92b0b2c5696f56d0b9d69521d8dee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson/gson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/gson/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.7.3",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "471760b62af31e3bfe4e6a73929868d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d1236a477accb4c67fc9615ed67732097fb9af9"
        },
        {
          "alg" : "SHA-256",
          "content" : "1d75f87e433c285ed99bee878bad6f251242613fec2fb7e6c544b862f3ddc428"
        },
        {
          "alg" : "SHA-512",
          "content" : "ddf4b3ca2a0bc6d4ece049da3f122f9a44f004b4b21933666410c9af634886d1cf8fbba98eeb919af4bd879e5420df8cd17b618beb1f3c2db9a07faa2146b563"
        },
        {
          "alg" : "SHA-384",
          "content" : "c226ad571a95788c234a092053f704d05a6cde93853e861611477c3241ae299b99497fd2f4b8b227008e85d4466e2b20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.2.5",
      "description" : "HttpComponents Client (base module)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d57d9336b460a91be6880784bdadc124"
        },
        {
          "alg" : "SHA-1",
          "content" : "666e26e76f2e87d84e4f16acb546481ae1b8e9a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "c7fb05b793a586633d2d801a889e0846f3f21c7f8dc3dab776421383f49ebb8c"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a33f34a2ef0853d6434bfb77bdc8e41c3df923d152bd9037245cfad6f41a3d1653f3f7504add7947f84cfbddfaa7ff3f5cd3bd82d6405201cbb832809c8ef52"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd160c1f484a350eb32a0b8ffa7e3deb435157a9be080324c642d1ba002ebb4e823cd6e3cb5a5e1d5427837fe9dd09e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/httpcomponents/httpclient/tags/4.2.5/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.2.4",
      "description" : "HttpComponents Core (blocking I/O)",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ccb86231d8a8b99c551b4ddf926ddd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3b7f38df6de5dd8b500e602ae8c2dd5ee446f883"
        },
        {
          "alg" : "SHA-256",
          "content" : "bda2b9e0464f7a0e122d5e9bff7b384f3bc3a91af18ad51e029deaaa599e5db3"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c4de4513cafb13a81bcad7cc1a4e45759ba32654eafde15665afde63a427b04ac25cfe17e4bbd1887225960b5aaf7e73382e35ec16993dbc1fd19a2bf5e8ab9"
        },
        {
          "alg" : "SHA-384",
          "content" : "641cac15a256f8d0a2ad0f455458dc022d8fdeb3a792b179e122d8e102966a06ed46c65f66e7fcba23dd0369665b80b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/httpcomponents/httpcore/tags/4.2.4/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "2.7.1",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35bff30d2a79a8b0731269604b1327ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c7b1eeb78e43bb91ea737111ba3dec0512be876"
        },
        {
          "alg" : "SHA-256",
          "content" : "a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b"
        },
        {
          "alg" : "SHA-384",
          "content" : "62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
    },
    {
      "publisher" : "jcraft",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.42",
      "description" : "JSch is a pure Java implementation of SSH2",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "74ea920580077b4c0b51101a8292a529"
        },
        {
          "alg" : "SHA-1",
          "content" : "a86104b0f2e0c0bab5b0df836065823a99b5e334"
        },
        {
          "alg" : "SHA-256",
          "content" : "74297550aecc3b566ee19e49befb9cd49e2326c9d8d71ad5071bacc655b760dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "900f9f14bbad4c4140dace31527134f831cf73c0315445dad20a5c3e49f23910a2871dc39a58a315cf5a4581a19333bdb19d97da7902861672315270425a00bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "b30123cf465ee7225fd1e768af377a4322ddfadf9639b3140a37ab55a3ce9b87e7b1453aa88e711df187bef74ecf54d2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "2.7.1",
      "description" : "Low-level API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b43933c18d1dcf15f88db73ee646396"
        },
        {
          "alg" : "SHA-1",
          "content" : "a591dfc085db3e9d4d480381cc7e6ae8a26b34af"
        },
        {
          "alg" : "SHA-256",
          "content" : "949ac95323bb13b4d9cde33ab1ca73f07a87e6e43cf76629e89fdd74d5b378e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "7938bab4600cbcc13c78256295766c6f1172902db87794a3a14b7acebdfad5de2c69419978420ce32168ea26524919bcbb42018995de53da1a96ae9c30cef499"
        },
        {
          "alg" : "SHA-384",
          "content" : "4392856c7e46f7f9819281f84e21e6d42e285d89018608d60b8faea5629a7954ec0920a921d383d204ef9248befc2506"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core",
      "version" : "3.1.0-incubating",
      "description" : "A tracing framework for use with distributed systems written in java",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c49a4662d691a09eed10e0a35dd73299"
        },
        {
          "alg" : "SHA-1",
          "content" : "f73606e7c9ede5802335c290bf47490ad6d51df3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d96c869afaf65315ece8ca09673b187557e9dbaad31df24467a5aa759812188d"
        },
        {
          "alg" : "SHA-512",
          "content" : "4401a31494026fd46ca90a4fb111eb3cf1d3d2def294dccc131dab0927edd48b3b852d40b257424041b6bf3165f2684b4a6b45568ec7ab7ab59452f34fe756a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "de9ecdbefc8ad5fb6a253bc8caecd99b252bfc0add781cbb9a646dd2ead203028a7bdafa0165f210f0c881bdb930fbcc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.1",
      "description" : "ZooKeeper server",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0a79f48c0a48eff277a1277735c86c33"
        },
        {
          "alg" : "SHA-1",
          "content" : "edb7d70db4390b9f54a92994577a9e344ade5c9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca65b863f2402cba82761204b77f04373f8d0a8adebb286619e1e5b33d0528e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "2317d5691d44abaace919890a496c1da85af07d476387c76900be0e97bc46309fbb1f51dde3ad66b65d556ec1544a45ae0827a669f3f2b7a476af42b238f435f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c7c4523d5ead16f136e754712e9ec4b9013a6b694253310c17d3476c56dabc63eb64bf26dfef62e83ca0dd8af690a06"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.1",
      "description" : "ZooKeeper jute",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a86cbae5a67619e4b554a69861e03e57"
        },
        {
          "alg" : "SHA-1",
          "content" : "aeb9b21ed9d2b99da9e0e3d1fd24d54f85fbf840"
        },
        {
          "alg" : "SHA-256",
          "content" : "66084b9930619876ff2daa55670dee744b2d68998e180a5ffa427f82f52bdfa9"
        },
        {
          "alg" : "SHA-512",
          "content" : "0aa6f0cb2599dae1283fddc550568b5898adf69a104d9133c8b8778b4f1fc9a5ce961f24535fbca9ff1420ec1f6214db47533b4e9dd4ad539cc6f2e6cf834c9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2afa4ee931d3d503229c8458ac521e269866f47c1e2faf66bd9d259d33e20e5dc31b4b1b32f21d42c9f9ff2c1e898e8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.12.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76ba71bbe18c4724d96bec68bbe12ff1"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0efa60318229590103e31c69ebdaae56d903644"
        },
        {
          "alg" : "SHA-256",
          "content" : "ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc"
        },
        {
          "alg" : "SHA-512",
          "content" : "264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715"
        },
        {
          "alg" : "SHA-384",
          "content" : "f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "ch.qos.logback",
      "name" : "logback-core",
      "version" : "1.2.10",
      "description" : "logback-core module",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "697b37f140ce9ac35a4ca3eaf4059f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "5328406bfcae7bcdcc86810fcb2920d2c297170d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba51a3fe56691f9dd7fe742e4a73c3ab4aaaa32202c73409ba56f18687399a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "8dd5175ab32120dccd48e44166f9f35df389385ac808b5ef18d43bd2ef98e43d440d982155f231883a963994644d4c0baf701ef6fd1ace2c6dab13f98d8c9d53"
        },
        {
          "alg" : "SHA-384",
          "content" : "452313d0e5ee35aef136e7db604d58cf782009d4bc0f0bbf25ac5c314377b7c2db72f8ff1cfa9095f7808ca6ed36946a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://logback.qos.ch/logback-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ceki/logback/logback-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.4.1",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, xz and ar, cpio, jar, tar, zip, dump.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7f7ff9255a831325f38a170992b70073"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02e84a993d88568417536240e970c4b809126fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "28a00d80716f073d644b9da76e94b5e8ff94de8e9323f06f558fba653fcf5f86"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac314af8e0d402a002b71797d0a96760f114c43873956d9650d2039fd6e2c0a9b48e2d4b1bffb9ec26094226d680c332d82c4bc23fc06ae4a9777a23db432070"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ec5c569bd1c58ca8950ebeb213f31b4bd12f7f938f4677df93e9c555e80e41265b52c592a34e3bc3cad83006be56377"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/compress/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/compress/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-hdfs",
      "version" : "2.7.3",
      "description" : "Apache Hadoop HDFS",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d91eee26b2b99c92d7bfb312daedb7e"
        },
        {
          "alg" : "SHA-1",
          "content" : "524d360c632c8cbe788b5411b00ed00770e52c3e"
        },
        {
          "alg" : "SHA-256",
          "content" : "31c486a5f7df9d28a4a0951e3837d7fa7091b3cf86847011c09c2fc445f43fc6"
        },
        {
          "alg" : "SHA-512",
          "content" : "44a41e52cac12d245b71997947190755a2f7b191bc5e4df33897919bf289e71de4f03caf2afed310687ac7c5ea1053da6b51010e43007722d5b1cb5e88e87912"
        },
        {
          "alg" : "SHA-384",
          "content" : "fde10955dc6332f82b43dc57d33e982011625b8edb2b4be0d3969296d7ab178d2f58ed9a6f37f47cf1883e7e3bf29194"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-all",
      "version" : "4.0.23.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4725826ca7ba3713db6748ee8f3906c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0294104aaf1781d6a56a07d561e792c5d0c95f45"
        },
        {
          "alg" : "SHA-256",
          "content" : "50510e9c9874b539b98ef931fe7eeeb002f6b5b1976ea37669b9493426294561"
        },
        {
          "alg" : "SHA-512",
          "content" : "80fcf9653620a614fb444d039c8bd8c195db25cb16f39ccccd87c1434fbc836c66f792e7717cc989b66d57c0a86365b8ae051c107916c231d4ecd0b4d2908490"
        },
        {
          "alg" : "SHA-384",
          "content" : "66461a564b0e5317ae9bf1312f44d38552df1031d09bf708f372e1347e1766b38e172d52b109910c48d2c00cbc22983f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://netty.io/netty-all/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-all"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.7",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "403dffa46cdd2e3c82da19df4f394a4c"
        },
        {
          "alg" : "SHA-1",
          "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.orc/orc-shims@1.9.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.7.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar",
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.2.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/ch.qos.logback/logback-core@1.2.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@2.7.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.42?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.4?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.1.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@3.22.3?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar",
        "pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core@3.1.0-incubating?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-all@4.0.23.Final?type=jar",
      "dependsOn" : [ ]
    }
  ]
}