<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4a9ddc8f-c5a4-35dc-9dae-6408152e8a8c" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <timestamp>2025-09-02T05:39:06Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sql-kafka-0-10_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/connector/spark-sql-kafka-0-10_2.13</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-token-provider-kafka-0-10_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9454baa7b226cf4513247b56cae6dc9d</hash>
        <hash alg="SHA-1">398ca8e587f74a0677f6c0a9ff73b4cbdee1f1e4</hash>
        <hash alg="SHA-256">adaf5b803fdffc4d8d95dad73c11d26f991e590d81ce1b31aa429595aa1c4733</hash>
        <hash alg="SHA-512">38a899b299bd0c0412b8d8ba8954e1bcc99a2bab9027269e7f5fddd8c4c1d56337a0fb23db38ab24017922f7c5f26a0d47aad3b912dce1588202198f56cfd9cc</hash>
        <hash alg="SHA-384">da59253423d2c4829f45b0a614139c01ed7faa39b4a2390577d109fdcb2ed169cde7bc2d6c82fa32e0f18c1e67cbd155</hash>
        <hash alg="SHA3-384">36b15022618f3ac9d09d7d21ce0bfefe94d8c1a60184e9c49fba6a83778b6c62217d7bf100f7775a0990db3804557b07</hash>
        <hash alg="SHA3-256">1533a14b0b6d88409e288167dd603a20d71331fb67b5f2bcc4e90e144bb9e09d</hash>
        <hash alg="SHA3-512">758f613eea197fc46a2ed0ff81b3793711a4d80cffcacfc83aed613cc956a0cd4fdc8b57d163032595737c26c38fc9b4d2d720250266ae1e035a21c026c01219</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/connector/spark-token-provider-kafka-0-10_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-client-runtime</name>
      <version>3.4.1</version>
      <description>Apache Hadoop Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b30c1f2d1477803072091dd4378f744d</hash>
        <hash alg="SHA-1">30ec07ceccb224b2ef17af34fbb593bff3e9e071</hash>
        <hash alg="SHA-256">f6a800a159f918670db533606d33560d6c13b7e13f14eda493280ae33b9eeb2f</hash>
        <hash alg="SHA-512">6363e4b786f49c7f7e1efe733000399e781e4827e26f8f22259f2e32f907a37401283aaf5fea201584c6cc8ddba8716c0d305917bb628e3438ed199cb1a3e00a</hash>
        <hash alg="SHA-384">bddfef7a2e6e1b1f43e9169407a659397ee2fd708bdfa42492b100c622f37e640da3245bd6395aa4f6ceeee2a40b0dc4</hash>
        <hash alg="SHA3-384">3adfe0360ca2d0138475644778e269817b93390fc8e5e95e0343e317a888204fc263c104ad9b29e57c6b8c5d85887863</hash>
        <hash alg="SHA3-256">868b40ba169150d01c65b62efb3c41ef6915e9f130baa94c0b291742ecfbc4df</hash>
        <hash alg="SHA3-512">e1acc634501253ffa4531b5cbd37709a5ecf2e72aad15a9b065fd2e0b834a65e8f63927da672ab7825af49e1733df75ec4713ebb406022813c5669b48683bf2e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar</purl>
      <externalReferences><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sql_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sql_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">90b2f7cf2370a18a319d289a9cbaab7b</hash>
        <hash alg="SHA-1">b924896e144f69f591966a96d2a4a660428e2b3d</hash>
        <hash alg="SHA-256">f514d99434cd9b3900cd7087a48af70f1647089b13f8b23d1e9f26b47e2dcdb2</hash>
        <hash alg="SHA-512">9c98db649ac84396a64f8bce535e96020ed1937e1bee2b3ea40959f4bb8a9ccc671bed2ab61339895b98f356d515649781011df8005c40b2226b0dcaf64d4e24</hash>
        <hash alg="SHA-384">0bbf5b4a11e10441796d305defbfb78f87909d6e6f7fbb51b1a9b0a2b46528703290ad5889874aad3122f21fd59bb644</hash>
        <hash alg="SHA3-384">ccfc08294c9489fddb2e5330d20dfc91f74d6f8ebc14d712fdd18369e677485625ba25ed1031d26256d5da80252393ae</hash>
        <hash alg="SHA3-256">c3ef9f1e5de212a22505e8410318ec8b64c9eed14be3925dd29c9d112eae720d</hash>
        <hash alg="SHA3-512">e99b461bfcb6eff926e8c10badad115fec02490096234d149c31f0c279d20be3e9da9419dbbb2a276cf36a432f198a40a0d0da992a6a015d1aefad1dc12efc69</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sql_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-sql_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar">
      <publisher>Facebook</publisher>
      <group>org.rocksdb</group>
      <name>rocksdbjni</name>
      <version>9.8.4</version>
      <description>RocksDB fat jar that contains .so files for linux32 and linux64 (glibc and musl-libc), jnilib files
        for Mac OSX, and a .dll for Windows x64.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cf83b3439db59f840b00454dd89f5796</hash>
        <hash alg="SHA-1">1cb5c057d3f76feb98e75e22df57dd4fd1d05976</hash>
        <hash alg="SHA-256">b60144a306bf7dd3de2b6fea947681fe940ba1510b9bc36ece836484af7bb7fa</hash>
        <hash alg="SHA-512">8e01f935a1f9f2e6b425ed3b49808df15e329df27f686e9b9229195675bd139ed848a7ebd9578dab08af663f51bfefaee4fa7cff06440bbdd46baecd6aaa8a47</hash>
        <hash alg="SHA-384">b90ef2dd638ce430a9394b9299a8656906f20826ad68ae94778a69c25e783e6050cd0f444c318731f9edc4da374387ba</hash>
        <hash alg="SHA3-384">d671cffa47053a78ee52dc99bb74f5b08fb92146156d1d3fc0c2ae73929ef113a6c9ddb68305df62f6a8d6be5e8c2490</hash>
        <hash alg="SHA3-256">8a3cf71b947cee33ba8582f11e399cfa7e1f98113b529edc893e433930978a0d</hash>
        <hash alg="SHA3-512">24be057dcf4d8d5278c241e7539ee35af0a7627b9f31fc168b1eb434c3789574c8a4cd11db69efdd46a646980ff533fb22dcb8f8c6d76af7d1303d32ee8cd0a2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2</name>
          <url>http://www.gnu.org/licenses/gpl-2.0.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://rocksdb.org</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/rocksdb</url></reference><reference type="vcs"><url>scm:git:https://github.com/facebook/rocksdb.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar">
      <publisher>Univocity Software Pty Ltd</publisher>
      <group>com.univocity</group>
      <name>univocity-parsers</name>
      <version>2.9.1</version>
      <description>univocity's open source parsers for processing different text formats using a consistent API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7032ba85007afd0bfc702a72bf486fd0</hash>
        <hash alg="SHA-1">081827d186e42129f23c3f1e002b757ad4b4e769</hash>
        <hash alg="SHA-256">31685122d5e392e98672ed6009a95a4c1623ca1185567bd44ee94527d454e5c3</hash>
        <hash alg="SHA-512">95656c856840b203507e42c33ef15bbf1995ad364ff229dba4f6358713259cbcad96a4aeb11db57d3f5ace2500bcfd702dd9457bea45186aa5ae7ed1bfd60559</hash>
        <hash alg="SHA-384">c29f921251bafd86bcc18b5cedf28fa53a3cbbc0fb8631c72c61038b02ce53c2141900faa54586edbbaa519cc5a815ab</hash>
        <hash alg="SHA3-384">d620a82f969d032e4500ecd1ac93354888164c30f54c375572e005fbbcf640b9a3df0230f6981d9f701253273698b154</hash>
        <hash alg="SHA3-256">f772ddaa17883c4ba0c804f9d622cb2ab83619e827b32175978d90380a63985c</hash>
        <hash alg="SHA3-512">befd7c25e69ea7ec0e34f4f6df5e5300f60e9f5311dc880e2fcfe7c87b2e020d3ac58e5988a9df615269531500c5d87e03654fa0b66b020a008900eefa9a213e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/univocity/univocity-parsers</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/univocity/univocity-parsers/issues</url></reference><reference type="vcs"><url>https://github.com/univocity/univocity-parsers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sketch_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d22ce2bd2438a884b9de2a3246410067</hash>
        <hash alg="SHA-1">d4b0de4b86e8b8b313eeb170a38ccc203bc1c665</hash>
        <hash alg="SHA-256">2cc84cd3d6db149e51e00fcfe01fa3d590a64b06de7f6fec236e8f6a136fe479</hash>
        <hash alg="SHA-512">e09f0c2db18aeea29f323b8d3d27fe336b45dd54fda7c567177ace6f140b9bdb25b97ba9ae7aa7ee11f4b096cc84a62fca208bda960a810a31561d9c47cda658</hash>
        <hash alg="SHA-384">aaf2591895fd539a5a0b9ed4dfd6226a412bb55475d5f6250faaa98d88abd633ea7e1261f98c5f36d0e5f6d3738d36c8</hash>
        <hash alg="SHA3-384">1e4787f80c084598d81838383edebf439679d1c293c99caa91f3845e8a5397d4a6d1adb83b5faed0bfd0c4af33f30caa</hash>
        <hash alg="SHA3-256">2c6460924eb637af6c7b34ed535948f7d3f173143a344266c927d1b70b934d3c</hash>
        <hash alg="SHA3-512">dcdd8afe68edda8ca02dfedc0a760da6bde03729eab62d7d31132183be6dcdd16fe3d7085731c59f71d01250618c689cefe835583432e4fe31dc8397371d609b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-sketch_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-core_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-core_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a419397086060c567a9b3e9bec0eda5</hash>
        <hash alg="SHA-1">fd329db083d7acf45d26a38b6dcb9a350c2d1204</hash>
        <hash alg="SHA-256">d217d44517383cd825687e822e6339b4c34806177aa56c0f038d6da60ef49919</hash>
        <hash alg="SHA-512">d34d161476353ea7c840d34267492f3a4e678e1f489c19303550c9d6577b570b92e4d027dfd0cce984aab1eef18edb11141ce13dfbc9b458586e5298af3deae3</hash>
        <hash alg="SHA-384">d72d39ad93fe673e29ed854e4d4bd916e77560cfe7818a447bb852bb01b766825dc07916d8c1cd6d50445a9240ed77e3</hash>
        <hash alg="SHA3-384">6f2e0bc3376e9c73a27e9cd3c18784b6cafcb00586e20df99c0ae7b10b3262cca467e81e0b2b13c93153207fa2c83636</hash>
        <hash alg="SHA3-256">6397b17f6cd3fdb7c85247648ae11a385b9c2d27d895fb01db63a8672615f569</hash>
        <hash alg="SHA3-512">276d1253f8228aa78a53fe194b04f011fcc70e0228f2db202f63463a65a825df095b762428f7e2695845243997baae7927b60916c010a5d17e9f6992a08faa83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-core_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-core_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-catalyst_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-catalyst_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdbe70dc3f2ae381724c885e0096ff03</hash>
        <hash alg="SHA-1">a1bf0098d386ec059586ed4a1d052339d781002b</hash>
        <hash alg="SHA-256">0bcc2534e68699d9d8501a40d294200c64a8f78aeb9966d9b68a205c85a89277</hash>
        <hash alg="SHA-512">e92c0f1ac7cb85296402b66b5dca367ee8934a71b5b7ab7f7b64075db56390f4c5518bb35e4c218de0ab3a5ab16e1755e9b00d5375953fdae26db68ea15095c2</hash>
        <hash alg="SHA-384">47b8255e8faa3e0e6f9cfd676045f0afe6d6b653f7428ef9f9048be8ed52d075ba41e1bc772871489eeea2a35e1e7b03</hash>
        <hash alg="SHA3-384">24369b3d6f8408619b41a1555e8280700145be9d52cfaa63cda20cbd756695624c36c5c562e70a514e65018c0f44d4c4</hash>
        <hash alg="SHA3-256">7e3e8a394d2b793bfa47b1b5029dd9ed3fd9005e89e580f58d5987002348468b</hash>
        <hash alg="SHA3-512">b413cbe78d0bfe942ff50ef4b77550a8d1425cf79a1d4b9b6480fc9bcbb693f852e44791ac2c7223049df16e70b80bca47d6a2fcd80449b0b4580589b1c5a236</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-catalyst_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-catalyst_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-format@1.1.1?classifier=shaded-protobuf&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-format</name>
      <version>1.1.1</version>
      <description>ORC is a self-describing type-aware columnar file format designed
        for Hadoop workloads. It is optimized for large streaming reads,
        but with integrated support for finding required rows
        quickly. Storing data in a columnar format lets the reader read,
        decompress, and process only the values that are required for the
        current query.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20f3c86b75fc87817d77e55b7d2ab758</hash>
        <hash alg="SHA-1">c88ccce44a5ebcb6d2b7948efdcebb903a9131c8</hash>
        <hash alg="SHA-256">8d7fee1fd60fe6e4589c8b46d58d118e45613aa416a14ac0835e12150f3ee2a9</hash>
        <hash alg="SHA-512">40fe6fdda8add9ea73ce0f58b2356d8a3420d4e9aeb056717207f500fa95f13de307261259babfdd2c511cbda9caea6b6b1b30a9c03af207ace4b0c27468d971</hash>
        <hash alg="SHA-384">be317341c812be0405d90460c06eb303b296b45b55e65923a4022565bad65deb2740d70423cefe5305cad485bd7b6f7a</hash>
        <hash alg="SHA3-384">472737d826e23f53ea20049d3d5618e13e49861226ad3199e49b4e76fbdb50d361fc5d7b6289ce2d57b5b90b053cee20</hash>
        <hash alg="SHA3-256">d37ae1d70402aad9660f372c09ce7f6a7a2cd519eb81019ac687373e6e5ac311</hash>
        <hash alg="SHA3-512">4158fd92b7c176f0e283595f95deb88f2e826c2d126e017621b1a8b25fce035b724cc1e8d984ad671ffbf12788adbc25daa6a086a694682b1a6d5f74df379148</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-format@1.1.1?classifier=shaded-protobuf&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-29/orc-format</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-core@2.1.3?classifier=shaded-protobuf&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-core</name>
      <version>2.1.3</version>
      <description>The core reader and writer for ORC files. Uses the vectorized column batch
    for the in memory representation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b71ad4afca915249d4cb2e9cc45236bc</hash>
        <hash alg="SHA-1">24bfde9befbe5224bac76abed81f61da69cbda2e</hash>
        <hash alg="SHA-256">f86fed048133d6322747b0117dc5b32d60a679c76275b0bd4f14ce76b5164a8d</hash>
        <hash alg="SHA-512">e985bab3d0846e1a1e97e856a619b32c202e57f8e33bde74f45e515e6b95a9ab5ff30ccd9316a33942a54a424e8c4906a5a32eadf27b2c694f67f7d49894ed85</hash>
        <hash alg="SHA-384">a7e20d620e7ff2329a07376e38a2387e2f78fa5bcaf4b895ae2815d9ca84bb2197873bcba06ef75f04028c96cfb5f6da</hash>
        <hash alg="SHA3-384">f94b0eca29900803ba8af9b038e0214fd03e199e51ea0c0f1d2e07b1d0e700be80786cea5258eccc48fcb8b01ec5b3ac</hash>
        <hash alg="SHA3-256">223023e2c69c448c550578f7e4f0e5bf047f936749df27d232b0604ba0c0df17</hash>
        <hash alg="SHA3-512">1a07ee4a0d7f3e98ffff3004617fdb18fb9123a9af94d9c9446fd85d75c298558b5637f3740397474ec6e0a1b2cf4cdaf28457d9179784f03fc07e2302661f0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-core@2.1.3?classifier=shaded-protobuf&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-core</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-shims@2.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-shims</name>
      <version>2.1.3</version>
      <description>A shim layer for supporting various versions of Hadoop dynamically.

    This module uses a higher version of Hadoop so that we can create shims
    that let us use new features of Hadoop without having a hard dependency
    on the latest version.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f342949c8476c3be1aafe65de5958a3f</hash>
        <hash alg="SHA-1">a87f41de2e3a15828b8c041a8d285f750eaf45bc</hash>
        <hash alg="SHA-256">dd174554db0da091b77a50193576bc202f4e5e4c6a2e6b77dc1ffa30b36092de</hash>
        <hash alg="SHA-512">38585cbb03981b7011fa8cf315ba34e6a646dac027c886a4730cb3c51181da6610ca317b290f7e1e755f77d15ab0237ba7090bd5e54d789c68590f9c2896e6f1</hash>
        <hash alg="SHA-384">fe190de52b14c057c9a0aacfceb3f04c79d751894e14d44545b2e4c706b9a9534f16f3c3c67756c68494b36a0bfeb78a</hash>
        <hash alg="SHA3-384">2333ef639e69d85db292353cbdade85c4a9ab56e0ad1711ed4db6918a5542c789541860cd51d24b1d95281b60c19ff41</hash>
        <hash alg="SHA3-256">efd9056c3dce69443eeb00c6182ee686214c5b5570529493769663e55c393546</hash>
        <hash alg="SHA3-512">f02101fc9d612da687f467ea554066fd83c12eb368ed55f6b123b0735971f3c039331986ce00dfc619d94ebd16fd175eecf5319378f4911a17a1b302ce504add</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-shims@2.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-shims</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-shims</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>2.0.2</version>
      <description>Compression algorithms</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86ebd034828b5af24292c985370c360a</hash>
        <hash alg="SHA-1">527952aa21839e8664618e1fe73c5648173607ac</hash>
        <hash alg="SHA-256">0c2a96bf86d5fb24ff7f20c92483c61391cb10d440a4bd278c77365a2b165698</hash>
        <hash alg="SHA-512">db5379867ff66f5570f48f42093f9172df23ef75f124fae4ec2dec74ee977ad081139f9dc0a663aae261439cb435a5c545edb7122d1bac40223401fe93fb431d</hash>
        <hash alg="SHA-384">117c41b463396e88a025f4bf3f1904dbe2f111dcb86e8e99b3960705bd92b205982df031b68d046bc65c3cab2d503fed</hash>
        <hash alg="SHA3-384">0558592618b70715c5308f6d3e5d2ba64126a9d521f2ed6f7dc1183dc0039ce88f3298a4462d3c3cfe3bf34f517db7c5</hash>
        <hash alg="SHA3-256">ab3d5a6f88eb30b9c32e90c7bb829774a5efe201fae82a5ebbf66f2c32267276</hash>
        <hash alg="SHA3-512">764f153c20a2ae0a3ddc90ca6a5b660709854171fe96cc2b5ab423de3da447b85b4329bab5054df41705becb2cb5da006585bdb64cc780a86f220bcce87621c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@2.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/airlift/aircompressor</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar">
      <group>org.jetbrains</group>
      <name>annotations</name>
      <version>17.0.0</version>
      <description>A set of annotations used for code inspection support and code documentation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b06437ed47fa7b4a8ec8909f4fb9022</hash>
        <hash alg="SHA-1">8ceead41f4e71821919dbdb7a9847608f1a938cb</hash>
        <hash alg="SHA-256">195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2</hash>
        <hash alg="SHA-512">839ec18d4a6f930ecd39827ebd4013c13a7176003543b8f60056770179032648faf1651e9e73109e811881b68a39757ca7e39731a61ff4a3461637b196fe4f7b</hash>
        <hash alg="SHA-384">c9d045a68ef2b0d5b12aa00b636e43af22de4c02f4dfcc6b5b7b04fdd57c98c7246decd2e5dc3eb9f1b10d929ac33a11</hash>
        <hash alg="SHA3-384">25ad733b460552705dd624634191beb909a6ed35f2475723faa06551d9542b87e724266f5f6003350c39965a92b5e54c</hash>
        <hash alg="SHA3-256">f731cde48fa6a20e57e97a829184492cfa5fe0e14a5082e7810205c2b9f1ac1c</hash>
        <hash alg="SHA3-512">b6698f9d65c0a364854717e64edd5df4fb1c97300d4dc3cc7ae7194b0b7b9e826b3d800dd362e2ad05417dac6ee3b2164294796c3ae46f4cbed840c2481b79b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jetbrains/annotations@17.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/JetBrains/java-annotations</url></reference><reference type="vcs"><url>https://github.com/JetBrains/java-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar">
      <publisher>ThreeTen.org</publisher>
      <group>org.threeten</group>
      <name>threeten-extra</name>
      <version>1.8.0</version>
      <description>Additional functionality that enhances JSR-310 dates and times in Java SE 8 and later</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4af91264b2e3d26f4c41f055f7ce02f8</hash>
        <hash alg="SHA-1">d3b1ac7e361b642132e529f562622aac7dfea752</hash>
        <hash alg="SHA-256">51e4d21edc4e9447f7760c050e0baee75d7d973f387ba605a17abdc4d24fd6d8</hash>
        <hash alg="SHA-512">b60d18135450dbca9660097f6f726676940c1925343e0ce9547e57e68beb321ecd5df73710332113e1ea3aba71fb5ceb0483cc8f41806a3c6ef075d3c690aae6</hash>
        <hash alg="SHA-384">b6e8c6861fe876ac0fc34f97b4966c8816d94ab566cfe8458709b48825cf600fcec4d845de35a3d518d4c28e160b665b</hash>
        <hash alg="SHA3-384">1eaf035067146399ff4698dfe6f418e2f812d203b7b8b9b2bb7afaa34b4d380bbc06d8836456e732111ea2c35820d09a</hash>
        <hash alg="SHA3-256">981ad37d8273108f1bd1de37f7bca594b8ef49ab33dfbbc2e84c647aba733ead</hash>
        <hash alg="SHA3-512">7b528b1f6d625f647f63fc7117c006dce4c08c5f447151c34b1acfa9bd8062c2c31f2e579a38024dad6f86d9f3e7f0cc4a3ea0e9c011926b49413515045a291d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.threeten.org/threeten-extra</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/threeten-releases</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/ThreeTen/threeten-extra/issues</url></reference><reference type="vcs"><url>https://github.com/ThreeTen/threeten-extra</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-mapreduce@2.1.3?classifier=shaded-protobuf&amp;type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-mapreduce</name>
      <version>2.1.3</version>
      <description>An implementation of Hadoop's mapred and mapreduce input and output formats
    for ORC files. They use the core reader and writer, but present the data
    to the user in Writable objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41cd34a3542cbe19f9af6bd8e955efb1</hash>
        <hash alg="SHA-1">bb8dfdd533aa313afd094e4e137a93c13aead8be</hash>
        <hash alg="SHA-256">524c38ad4480f6a061739e66809740bda754a417124b7337e7ca884e347e17da</hash>
        <hash alg="SHA-512">2bfe167c760733b99018f43c06709ffcde09d4225cbd881ee59b589c6dd47c496a5d60614429fdfd8f3aa8d5d9c710d5afb7f9e3c002dfdf13f3070681f94fa2</hash>
        <hash alg="SHA-384">8ebba97a5d6ebc7fcc491c5f88c7ce07f7a752e6f0eb02d296500e88fc148292d109763e3a3c144d79ad88e68b3d5425</hash>
        <hash alg="SHA3-384">88029abd583f6f4e116f37a196a5a4b31b794a44d0cf8c586bd9bfab938895692a7049b356cb4e108134f143377c76cc</hash>
        <hash alg="SHA3-256">4c8fa5f530207bf668b4c744af655a6816d22c09e954c1ffd135d05ff79da65f</hash>
        <hash alg="SHA3-512">766814fb1250e91244556627e6f9de8ac75b6f498c371c3c4342c7863dd2c7a5dd0cfb1f2c079d1709350f89b8ff277236be2ee9dfd2a484899f613c15d3207f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-mapreduce@2.1.3?classifier=shaded-protobuf&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://orc.apache.org/orc-mapreduce</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-27/orc/orc-mapreduce</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-storage-api</name>
      <version>2.8.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bea1adb65022d4616d23be770207600d</hash>
        <hash alg="SHA-1">4b151bcdfe290542f27a442ed09be99f815f88e8</hash>
        <hash alg="SHA-256">2bb77d246a9724a371301049239c6e53039efe4136b0ed34ee5a9c7b3cd861d8</hash>
        <hash alg="SHA-512">e76d1f1dcae0fcf26c56bf2006776a39b46572e9a67fcfab26774506a30de0a92447dcc545894c1796bbe092df53a51216c56721bfbc05c8a9b5fe9636ff07e7</hash>
        <hash alg="SHA-384">93eb2ba57fc637800ba539994682cf764436617f1b1584aa71f288797dad73e6b5dd95bc1dfb19be802a60e31b139866</hash>
        <hash alg="SHA3-384">1b2ce0214f9767816e67c928ff90d0da0fb0a309de6f9a13f624c89d0d01d41e8476e6f66de5a8236fd9edb761538e5a</hash>
        <hash alg="SHA3-256">352ec7ea1b92294e1b02b52b37c73e9b08d6c612c2fce173cd7e43317a9491e3</hash>
        <hash alg="SHA3-512">d67d633607797d8f75d6c8f581fb3858421358b7a4daa079fc9960c2e397f33e7535eef5796b3876c29a311f896c02b4b867812a212efebd12e1fc63a8c79402</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hive-storage-api/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-23/hive-storage-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-column</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae419f99f43cf37f8b25fedf31b10a6a</hash>
        <hash alg="SHA-1">db7b1b50eb4bb5345bb175605e1ef7a339d9e837</hash>
        <hash alg="SHA-256">856e759164450d1373e98f761968bd19a6a26899c2f93720770501a1b0e59e4c</hash>
        <hash alg="SHA-512">85892e350f087e46fd8c8f470af280ee727c229fbce08223b8bc46549cd8fb4d2d94cdc55b81c24b07992ac100f4e7b80adaab760d3550582adb30bab69fbdb0</hash>
        <hash alg="SHA-384">13409c8450db766004d6a1433a2541b75886b9c933d56a21e2e7bcfe5e2242c3668447e4e0a05c6771e3452636df4fa9</hash>
        <hash alg="SHA3-384">e17de078a4ca9acdddf4dcbc9ee47d89d421cf603e1338ae71d7a0f5d96934b6ba54f97644f3200b86dd44db9ed10220</hash>
        <hash alg="SHA3-256">e896913149e07db243065a90fbe9c58e8519bd91acfcc7de4758277c9d82b245</hash>
        <hash alg="SHA3-512">a1d7b6ac43865b6b55a54cd155257712590a2e148f5430a728335e045c35561fcce1f623c5fc5a3d0e9a51767caa9b94906d4a6057945e5b424daac75d020f08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-column</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-common</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4678a7a3e055e19308ef31ba38f1fc70</hash>
        <hash alg="SHA-1">5078b2fe961156896a6d07a3894a6f8ff0bb706e</hash>
        <hash alg="SHA-256">a1e57537661f18f259d342a93123db10b5796e30a0585d0652af987ea7c33596</hash>
        <hash alg="SHA-512">7dc871bc96a97e9232622882ff4c6affbcf18691f77f3845c135e1d348dda85f8b06ed5719d1b0ed0da78c842282744f3d0babc5e22b24c184fe55c8a8d4331a</hash>
        <hash alg="SHA-384">0e827475289fe7d3f4475957f037f73bfbd88a6c05058f7ce9fefa7d47e04bb23cfaedba342e4749e6dcdf47df11d3b4</hash>
        <hash alg="SHA3-384">fc5530fb3aac43b01f97295e8067d3a68bfbbd5260d8b2dcf8fe3c1ec38414d3b02d9fcd6dfd5c623bab958212940467</hash>
        <hash alg="SHA3-256">abed4d4bdad889184795f1ae7a876d0a3388f66f4a4d2f4439288cda121a5a74</hash>
        <hash alg="SHA3-512">409b879d66047fe93a9e4ed75b354966f891072bfbc10e4b8233a6f5587435cca6631e067ccbb9a9777e7582fdda6954d641c617c77975e33166835baef9b77e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-encoding</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab4f588e4f676b9e8223931387046041</hash>
        <hash alg="SHA-1">1f0566b33202fc5562e3c6de01a164898d26be25</hash>
        <hash alg="SHA-256">da2b2df9749cce2eee3205a6f4ec07612f985d51aebbd8f5861d8ec344824dc1</hash>
        <hash alg="SHA-512">61e336d60917b2e8319b66cadcdb1c862bce715ab32c7efac99786ef1217afc0eaa845b36975b1ac0ef6a05d96a4b2e8755892e1220c17261a76fd67489798f1</hash>
        <hash alg="SHA-384">25a896f02ef75c4e7ff3d818f109c304ecdcd71baaf4bde1c721af18b6b2ce77b9145a14efba136bc70a8f408d912751</hash>
        <hash alg="SHA3-384">d2fb6b7a13a382a9021e5e836545f4b63f5ee532f10e616f76fd9ec53a4ccd40b7a0831269c918337351841168457dbc</hash>
        <hash alg="SHA3-256">87d79dedebbc7384fa8a4577831c8651a16c0320d0330703dfd47d46075f7d6b</hash>
        <hash alg="SHA3-512">ab7ff2ea25a037e86d406d4d299d49f630d81b3ebd223970a6f5d6568ed99e78b3c900fc49068ad0fb5359424d31689029f3f660de3f30f96d169c292c82f2e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-hadoop</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96eee89cf6f14943ccaf773827607f7c</hash>
        <hash alg="SHA-1">b68b561099a3c18eb47618cfd1b070afb254f34f</hash>
        <hash alg="SHA-256">a9015cbd8548a43bed459d1ee5cbc2748110f1cf484fdab785e5171e515d810f</hash>
        <hash alg="SHA-512">d7f4293d5f266d2cd9555dfadb52895bd894787d2fdeb476077d85dab7cad784abf7418d9748a51118be91b2cb72c8775710e0938c7e0995041755dddd9f7855</hash>
        <hash alg="SHA-384">41a220da2a407cdf7eef9d5213aeb1d9999cad5a0745948928e45d13cda3402ed5c57c23ec1a1a225e66085dd7fc8cd7</hash>
        <hash alg="SHA3-384">c17c72d79fe5b8599b9a6b0ded4b0273973effa3ae827cf5583fb957659196a4382b5907d4701b1669c14c9852af631f</hash>
        <hash alg="SHA3-256">082fb07cc17264c8f4f9a6b63a1377b5674b613c2fb66d316093a04ae7a6f66b</hash>
        <hash alg="SHA3-512">3d9661ffb7a0e29396b65199db4f26b35572bcecbfd03cfe873095b532cebf2bf7d780e8f6785d38c7f51afa1a37e580f36917ddbdce115503bad54d4dadce32</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.15.2</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d80e52c29b76d2bd0eed96fd3e958c5e</hash>
        <hash alg="SHA-1">235614fcd44b7e0f348744fcc914d82d73607970</hash>
        <hash alg="SHA-256">417175f24f18e50f82873d604f36532c6b1c924611c4357dff5851c631d87a45</hash>
        <hash alg="SHA-512">837da2ca1a85dad0cad29040a15f51f2cf0ba953e9e2fc1e9a4279e06af7f8d9966adc733d3ab4092359f836b315be0f04d9925498fc73b00e7e91e776c5aeda</hash>
        <hash alg="SHA-384">208f01dd7f813dc1b8f48e71194d9c5fa870d0379f2389d88265392b1ccfd954460cc58165fe170c125257356cd73b0a</hash>
        <hash alg="SHA3-384">4cce054c951bf353935aa1b68cf046de3a2a1ee8dfa08b70b8ede9bc5c95b7733148c2b7d37589ce811df470cf32ecbc</hash>
        <hash alg="SHA3-256">7bb806c4fbd3578af0af3e7666af404a19207373c2e3fe0e2767cd9508257994</hash>
        <hash alg="SHA3-512">6bec16f1ed552ba58cc677ba0ff25cd4a1fc5adef085b982bd562d31a3d0d687ae653a727e483ff79f09664fd511cfec02ba6e9f862dd954b198f3a614dd0ab7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-jackson</name>
      <version>1.15.2</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">70ecbb7e2c21e4c82e920f4d35ba062f</hash>
        <hash alg="SHA-1">554c04e1c5ab964288cc47aa1747a82abca945e2</hash>
        <hash alg="SHA-256">0df26fcc7958e155da758676cdcc1028702d1876e62e4f87c406cee42cffcfe4</hash>
        <hash alg="SHA-512">4622d76bae26e1a3e390eefa2bf43274f227342432ac81f91deff209425ef6935d7e3e7e5886a09f7827c50e23859e8d9fa878ad0388b4289a623c40047711f0</hash>
        <hash alg="SHA-384">705c2cee5b8f1455642b96b68244005d22a233bb56f7e3bb0c0737b92c78b86baef1724696e19a3dc4cb15d1c3b4eae3</hash>
        <hash alg="SHA3-384">8d38fc4cd15e6ef5accb43d5d284f0b11339c7a7864a46fb57322eb902ed9ef8099b804f91165e59f7886cc0ef6dd255</hash>
        <hash alg="SHA3-256">37166adf9d2ca24bac38b878f5df9844aa2201cefd5e1721b61fa8447b2c9ff3</hash>
        <hash alg="SHA3-512">2e4f49ed86cc95f661bb39d76a3d5481ecd1dca74809911f6fd3412bb089ef485044cc9f80192f798cda5ba7263f6d842a9d30865fa45b833890e0337e09ea18</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/parquet-java/issues</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.18.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b56887bcd3eaea1ff710eb673e610b0</hash>
        <hash alg="SHA-1">deef8697b92141fb6caf7aa86966cff4eec9b04f</hash>
        <hash alg="SHA-256">4b364e6850dc89172fcf1d4dd26b8ff5488eda44ff4657e22dd265203dd5ab3c</hash>
        <hash alg="SHA-512">bbdfaaffaaab2a032a754cd9dade06552e9f79fd39ae396873315415219b37e0675fde0a02953efe0701e17be4c282b118a96fcb752f53ca37ab89624f0a52ac</hash>
        <hash alg="SHA-384">77607f963531b8b7a963e0691ec0196d0877f13763fcd7485fbbe14a37054a9babd343aecc96c8d29ec2480546cd1e4d</hash>
        <hash alg="SHA3-384">e02fdf4bba51730989da3efac6e0dfce5649215ec78c7d21713386d36874d621f65ea9881399ef80c87a9436877453a1</hash>
        <hash alg="SHA3-256">ced61fd9988c4418e98f5bd061a3aa099dd4e0a0074a272e87803262c2177bf8</hash>
        <hash alg="SHA3-512">6f6610e9bbbfd344ebd716a7709a19bdcf0180f214437473602db312a5e6d6e592bed40776ce9a445ab6b7b5c0fd9291fd11257a6b06e5dbf4b971fe996b2972</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.18.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">79d38d3c51068a2bbc40268d02f80763</hash>
        <hash alg="SHA-1">985d77751ebc7fce5db115a986bc9aa82f973f4a</hash>
        <hash alg="SHA-256">581bd61000ef7648943f781ca05689e56d03f6052748365a8e2b3a9b5d3fa32f</hash>
        <hash alg="SHA-512">d375e5761052e202e409400637cdc9ce0f45cf01a90628f36ca3c81757ac30695cc6e60146cbf14685c5c50912ad932564eb794ea76ab8461ce1786a02eab867</hash>
        <hash alg="SHA-384">cc68a2e188dfb8a3687542b7e6b0d2b8323536dd82716a545f73320915e5f9602cc7a3c3d67a15f5adb579c31d5ed96f</hash>
        <hash alg="SHA3-384">ffcc40615a2d6f0c0382595da8601f7501dfb78f6f78718e9f05f309253379e9d9101d82bc7aaf8735746eafa190d8c9</hash>
        <hash alg="SHA3-256">9cb3a706d1bc0401a7bdd9c42a6ec048cd7bebce9f60f395e44c254a67ea230b</hash>
        <hash alg="SHA3-512">f1a5af82d49e1db5898b4caa487a4ae061cf31b5db25e2172fdba59970dab3308618f7e34f6fcf0842b7c9da958c274d69022d10d85f3e862be88a44ef8b7fc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.18.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bf935e6eca3a57defa13918661905cb0</hash>
        <hash alg="SHA-1">fb64ccac5c27dca8819418eb4e443a9f496d9ee7</hash>
        <hash alg="SHA-256">d8054ae7c0d1c2d2f55d28e46026ebe5892881f3fab5f439233184381c3b4a1f</hash>
        <hash alg="SHA-512">2223f6d8235c6831b488dd2723a4569e4dab6c2371f0e39f867b57a3a443e093d1fce05dc070a350fa306d7e952888cb09c7c816254147b01083d122964fc3a5</hash>
        <hash alg="SHA-384">7c5183b4e0ceb3d9dd089e29253832fdbe5f126a7b8c08fa66ab46f5050eb3b8fd792e00bd914f49000719e547586e23</hash>
        <hash alg="SHA3-384">2a973e2dcd1b65eb63f783878c542fa804254c880d47180717cd5ab239670b529c61ca4de647d4683cf4b459b6a7f5df</hash>
        <hash alg="SHA3-256">c99bd2cc1f13748357bf002d92d83f9f2d14d777c5e3fb7ed38c6891c76dbcb8</hash>
        <hash alg="SHA3-512">10b0328f2cd2a347f8c3eb8ed1967036b8940fe9b444ac27ffdb66bd373686a13fe7ec7498de5b81af1a301ed4afeb85aece0afb782aa6cadcf78362fa7ea5ae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/XMLSCHEMA</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.26?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.xbean</group>
      <name>xbean-asm9-shaded</name>
      <version>4.26</version>
      <description>Repackaged and shaded asm jars</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d0f2b6bb756076a63bc8fd9a34a550c7</hash>
        <hash alg="SHA-1">0ecdacd2ae11ba213c1ca0a492d38286b3469601</hash>
        <hash alg="SHA-256">685fd5b31f5b3de28b59c4de2aeb1b4fcb5c854655ad1a351d1c07bff3b1a5c9</hash>
        <hash alg="SHA-512">12d718589164036c9f3530f649f81cc3b7cabe27b5608206acb7358968f2b09fc06606ce08e953cf83e6716637e381ae289797e27778674c37cf3811cee1d43c</hash>
        <hash alg="SHA-384">1d32dd2893415281e34f401a2adf2bb3921b1a430bd562d1a197d79f10bd2a19180ba36608a69ef9df3260fe1346acc1</hash>
        <hash alg="SHA3-384">860ccffcda5933485c90ce9f1a195536a08d713cb966e9410e4a232517025dd965554514c18f99ce971477370d2ccff8</hash>
        <hash alg="SHA3-256">f6326635bbae5e27120c39ba81c0270a342b0d6269606f6fd602b9971bed8757</hash>
        <hash alg="SHA3-512">5f275c29c03a3e7cc7309d3ce6eb07ea6ba496c381bc7029db6f4ae5bf7b84928519198a6292a12481b86242c3846339a5f9083bc834234b8d4c579b52448674</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.26?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/xbean/4.26/xbean-asm9-shaded</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/XBEAN</url></reference><reference type="mailing-list"><url>mailto:xbean-dev-subscribe@geronimo.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/geronimo-xbean.git/xbean-asm9-shaded</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>4.29.3</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed5e69d5bac6e38ec1a73bf6180e5c86</hash>
        <hash alg="SHA-1">83afa847b893932b49a8fd896608fa23cd5fb0b5</hash>
        <hash alg="SHA-256">442db5991a11974d72127353be7d7e7abdf8d943d83b16668cb2e336d7392f54</hash>
        <hash alg="SHA-512">be0db486896b4a03ee2c32ba5d8e827a93d53064cab2377ad1810ab91fc100a8171868b8f1f09090c44255d1eb1abff0f56e245fa050d40a581c119f77d4c389</hash>
        <hash alg="SHA-384">8ab01eff47491c420dfae9420bed4ab6c0de1f7a9d91e5664a4dd8e97d27aade1d747867a5c70cfe3e2189ed8a89fd43</hash>
        <hash alg="SHA3-384">458322bdc016cf86d795552567a57952c8db2ed7249caf221bae3dee3211dc768d528353847dcfb3fc97cb83f2d45f68</hash>
        <hash alg="SHA3-256">6d806fa62fc704a0a729b6b51d673ea393810d3df5e4dfd38318280c495f5440</hash>
        <hash alg="SHA3-512">c279caa0c9535f3e567b19f63f976e5b6468f42acef3b962d30b20aaa652da0acdf907540aee0d0776f74976c79b8f115f3a23a6775d54f3e8dc8a653059f4fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@76.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>76.1</version>
      <description>International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0621976c76a3b05b0622aef5a4c1d981</hash>
        <hash alg="SHA-1">215f3a8e936d4069344bd75f2b1368fd58112894</hash>
        <hash alg="SHA-256">732cdf18121b1642899da1f5e37e52cc7f48e3ec07fa737105d4603976781b33</hash>
        <hash alg="SHA-512">5f4126df9bf28c2ea82b63b3c0d0f08a1e371b3fac0c7acab34a37f087927b1876535f4e0b889d28f20fcf42e816af00b3f302d48bc01c8dc13b49e40dd3927d</hash>
        <hash alg="SHA-384">5919c70254e73df90d66b4d7d2ff4cf23a16771f12706ea137b045618659e67dc23adca520c536376c73fa5bf126216d</hash>
        <hash alg="SHA3-384">30acad7cfff3d6e547822f0c6e5b125518a9875ce00be8feede77ae55a9d1a71a8959386edc022b4f20961570dbe1a77</hash>
        <hash alg="SHA3-256">2460c21e85eece1c5b83b4324ab86afd75652e71de5dc8f0b69065df83a40033</hash>
        <hash alg="SHA3-512">44e8599fdf6c5ee284e6a4e7e57bfc23d67a7846d2c8ad4246cd782bbc977f12da07ae08c3054fee424469b8d4174ba4050b1d43a268e45f227e29192cd353c6</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode-3.0</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/maint/maint-76/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@76.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://icu.unicode.org/</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.12.0</version>
      <description>Avro core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">21fa3115ff1dc131ca6432bc73927fa5</hash>
        <hash alg="SHA-1">6e692a464b213f6df49f8e3e7fcf42df0dbb7639</hash>
        <hash alg="SHA-256">1f5fbfff9b7427d6832cc3031a3c81413d3e21d9e2551847d9231c28493f9492</hash>
        <hash alg="SHA-512">4b3f8989d397ded52a52c57c9de4270c5a986529038af0ae0e8ce176cb0c7280b275c54383d041a7fda3ead66240e3a1d218996364ebb6405eebb7ef9fc9b08c</hash>
        <hash alg="SHA-384">b234297e89458b30ef5918fad8592413ba21a71d2a036cb0f1f33a593cf1013a520c849dd35aa1aafb338603fd97be92</hash>
        <hash alg="SHA3-384">9a3bca58630f7e2dc1e0b5664bb44a8016a4b7a69363df700cb78308c92f73d25c52c9e7b190194b88bf98f1e4cf3301</hash>
        <hash alg="SHA3-256">6c5023d28e8dc832c1e4151fe8c66013e78857df88b85eb3c826fe775eb4c3c6</hash>
        <hash alg="SHA3-512">2009fee794493719c2d22e680e1e87a884395fc27436915780e6aaa54fee50fb593a02bdfbaac63301ee0b1608da34b8254115d7867694076a9b08b54d3787be</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-mapred@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-mapred</name>
      <version>1.12.0</version>
      <description>An org.apache.hadoop.mapred compatible API for using Avro Serialization in Hadoop</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22b1970822415c840a0b0acf94349bfa</hash>
        <hash alg="SHA-1">f9b03f960eba06829c52a6ed907009ae81724c93</hash>
        <hash alg="SHA-256">cbd650f5264ed138c170a049fd7b98dced90f66e39788ad1be7269a18778d972</hash>
        <hash alg="SHA-512">f21a8e042c2c2375ad1fb1c7e81a89aa1d0d3f300ea818e6f56ce5532ce58c8073016c4118d8a78fc22583cc05c2cdee2f3e3221dccc93d06e0ea4712aaf18d0</hash>
        <hash alg="SHA-384">f66532336ac9ffdea625de1ae4e37c1a18eef6400867558946ed3f53696bf29f1a89328875a797a9fd9ccaa70dfc122a</hash>
        <hash alg="SHA3-384">82ba9fbc929bb6bfce709255f91ca393322204785884ddda91827dd2d4d8db4c65c9bc66b9186f522690eccbcb15d9e0</hash>
        <hash alg="SHA3-256">f5378e86d8732f1da5ca40af32ab37c57af166a08899d66d5fce41c81218f0c9</hash>
        <hash alg="SHA3-512">38242e20b8ee12c8753bb540446d9e3ff9d0ee9d2401272042a332a9f13e5ff7b5d949c9ddd29dc8a36ad828eefe33662d39291414c09c6f2029e1f011c033fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-mapred@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org/avro-mapred</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro-mapred</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro-ipc@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro-ipc</name>
      <version>1.12.0</version>
      <description>Avro inter-process communication components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2a74fa9f316966a7b7ef9e2c998a13e</hash>
        <hash alg="SHA-1">1ba6b729d7cdc98896f0b09fdc913d1de1cd00fd</hash>
        <hash alg="SHA-256">009b533e854f7b25ef8eddf8afd7f84a2149749542c8e2f03cb36205343ffced</hash>
        <hash alg="SHA-512">0a251ad3c40758a5609351d2810258877a55e5cae72359541ae813c1c7f61dd267bc164fe9edc36bb79e50f192fb8f26fc9a5ed9a3d45a5ef73c48e358d1d24b</hash>
        <hash alg="SHA-384">e524a564ed6f9e1b8ac49e30ee8c1ab1c6dd184a5fd176afc934934b37eec75263516caad62c2f41d9611e0cee668931</hash>
        <hash alg="SHA3-384">a7e90cd982ed6707558281cfcd276c84cb9bba9f945b3999a44a2b81e9945fad944d9120add9a78cd16d65cdb305614b</hash>
        <hash alg="SHA3-256">23f3bf6c1261f23ef587d3d9d1a728756d20bca227e10e67758e218a463fe03c</hash>
        <hash alg="SHA3-512">d535d606780ca2cae1a3cc53f4f969789aff172c4d5d7cb60f3b0fe2dbf0e5b7f07256877f409830533978d17b9a615fee61f05dca52394322eef05f7f8ea863</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro-ipc@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://avro.apache.org</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>scm:git:https://github.com/apache/avro/avro-parent/avro-ipc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.10?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.10</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">56e3fd256e5423a74393bd5eaa5302bb</hash>
        <hash alg="SHA-1">1be8166f89e035a56c6bfc67dbc423996fe577e2</hash>
        <hash alg="SHA-256">95c63c1a55b22dd6453890a419cc1a640f790bbf7d8ae82db1e30aefefb08888</hash>
        <hash alg="SHA-512">af234bb2a5d42b355ea020c5b687268f0336e393eae69a05251677151d1e85b1e34999d5a6be6451e0b047e3cf13341dc227a5483553766252b0ea66025a44f9</hash>
        <hash alg="SHA-384">b078b623faac3600d11bf905fd3e800439b101bf11096834305c04e015aae0096765bbd20e61bacae83eadd7e3a9e2af</hash>
        <hash alg="SHA3-384">c51f9a76a9d9972526c8acf1d0e3eebe77557ea00aba2296bf4eee2cd47e11c98fcec5343c2507c83dc2e2ff6c73a40f</hash>
        <hash alg="SHA3-256">e211a91b89c5198152dd602caf00f3433462004859e885d5dfb4f00ca6b2633e</hash>
        <hash alg="SHA3-512">baa9fff0a0c0e1409bc2b5cf1b024397aef8a189a11b648bc0d4eea0b4827a30a78865b2db7ad99b0143e370de2a854efc3b95ca61fa770ab46c12e68aff2754</hash>
      </hashes>
      <licenses>
        <license>
          <id>0BSD</id>
          <url>http://landley.net/toybox/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://github.com/tukaani-project/xz-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill_2.13</name>
      <version>0.10.0</version>
      <description>chill</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a18d9c6269d2c7259ae324fef89c9ca2</hash>
        <hash alg="SHA-1">764f2844ce1c7033869e069dc7cfe3f9682d175f</hash>
        <hash alg="SHA-256">b6507cab344bf8a86bf8bd3987cef15a35c096570eb31893f760d4754de4d8b1</hash>
        <hash alg="SHA-512">4268042407f091073cdf3930187cedcf89436ebe8efd2bb9c0c12115bd4cd79cd28bef875b3196cc52a27f091a7faec0e5585eac364914bd7935c0bd28785bda</hash>
        <hash alg="SHA-384">7e8bc767010f8ca60e1c031a403127bd109078d73e8672957d63c250071b46d5f9d7f40a3476c002de7cdf7014609bce</hash>
        <hash alg="SHA3-384">ae6b434c8ef981afcc0ad9e37b9c414d861c51bd327b2b9a5859917899bc2862c0b14a9269ed6cbbcb37d903382ded24</hash>
        <hash alg="SHA3-256">cbb9400ddbd0538522a5770f6c0845462d028773674b803d1263dca322d4ebaa</hash>
        <hash alg="SHA3-512">3b2a84843bb55777dc3c94e586d5a2550ab1dab1b8d0b2d37a38d8e84c0fc1732271f7bc6126a14d99da130b9f4f95719419d475e887b66056ff8117e9cf59cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference><reference type="vcs"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.10.0</version>
      <description>chill-java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3c0e9cbbb2016364333f2cea3922ae97</hash>
        <hash alg="SHA-1">0fd2eb52afd9ab4337c9e51823f41ad8916e6976</hash>
        <hash alg="SHA-256">52afd3c1256d6f89293ba616c0c9ebf11191bb9e8159cd0c1cfdc99e5e0c5ffe</hash>
        <hash alg="SHA-512">48ae455095f0a9ff7ed9b84c9b9bf339c14f6599703b7a34a473ea9c457b0ae700f793d6bf00d1af5e0eb307c9a68d2a10309faea77aaf2245afded08420cb8d</hash>
        <hash alg="SHA-384">7641e1570bd40b064e17c98c656b8b80680b36d2678973c53ea0557fb212d9ce535eda748cb7234813d953ef90e2cb8d</hash>
        <hash alg="SHA3-384">faf3cd7194a5ac06f9890d5a0cedd4645195dfa8de96d79245aeae7638915ce22495abb39ca82af6f604600fe15b2869</hash>
        <hash alg="SHA3-256">486eb481050b3da17ec5b3cf51c8c5cbcf8a972b27261dd34693977644873dae</hash>
        <hash alg="SHA3-512">2d4e782d6a2db53be3e36c9c5861b46a23320c15149d3ba2907575ae3de7372324e56fba30143d0c86f0132b49bedc5290704266b172a08d8747ab27346bcde9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference><reference type="vcs"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.3?type=jar">
      <group>com.esotericsoftware</group>
      <name>kryo-shaded</name>
      <version>4.0.3</version>
      <description>Fast, efficient Java serialization. This contains the shaded reflectasm jar to prevent conflicts with other versions of asm.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cffa6fce5594dd99374882abd33890e9</hash>
        <hash alg="SHA-1">8fa9a4ad14fae2217b2f1efd51cb35dde2ee4e06</hash>
        <hash alg="SHA-256">cb32b28ba586a96260d7d5016ffe7a2132c300644ddb68d78545ff31849c367d</hash>
        <hash alg="SHA-512">dc2357a7a6d91b7601deb553c24aa5e60e2d2802a9baf08e9eee2b5c1f7947f8d3a613efd54de7011f9ece55aa24d7a845942afa9002f8fa759b25e97c30e6a3</hash>
        <hash alg="SHA-384">5078519b214b387230addf3e8c63affe91e35eba1d54cdffe9048edaa65de885dd424951e022f24b0bb3c533fb5908dc</hash>
        <hash alg="SHA3-384">0db794168fa3f5567cb9262eebf0b699ab1f3b64fca0bf17946d8a5ffef0ed1ecdac9ffedb608ca24edf0ea4edc01085</hash>
        <hash alg="SHA3-256">9996c0dd2bb57010c60570009a6c91c503601c827df51a1efadcb3a4e3db1aef</hash>
        <hash alg="SHA3-512">d3e14f8f4661f12607b413321c5cd996f561a84545b41b569876dec63deff63f83261164ba2fb3a965579a4da82bc3dd4403e9974136ae3e798ec640605e1a7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/kryo-shaded@4.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo/kryo-shaded</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar">
      <group>com.esotericsoftware</group>
      <name>minlog</name>
      <version>1.3.0</version>
      <description>Minimal overhead Java logging</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ab0ee168b90e0ad7010b159e603d304</hash>
        <hash alg="SHA-1">ff07b5f1b01d2f92bb00a337f9a94873712f0827</hash>
        <hash alg="SHA-256">f7b399d3a5478a4f3e0d98bd1c9f47766119c66414bc33aa0f6cde0066f24cc2</hash>
        <hash alg="SHA-512">ca319c94b7fd8a275dcc3c5102fc01d73071ac77f5e14b4fc5b6547f96574a4fff0e8cb7b0b0d5006e71faa00575a91defdbfc92a94d9d38dd65520d4ab52000</hash>
        <hash alg="SHA-384">3f9b5b7fd91332ad64d235024d486e24b00760e714713153a61f10e6867bc3e5b617a7bf0bed889a01f0cdb435415d6a</hash>
        <hash alg="SHA3-384">53f87e7d1c0615c0d443cf8f1dc2d83cbe8c72ba18061a68ec4d8dea8020a21aed04fec338e7eb2d566acac1f7f267b0</hash>
        <hash alg="SHA3-256">5eb8dd240a7196fc28a6c312148513f6c3d4af48abb46e1744bd730f479b0dd0</hash>
        <hash alg="SHA3-512">7573361d0b824f2db4fc9d06aab133021a2e07b5f32be296781eb105b3f6002314520fea1f2c856d0e4a0522ea5ff6a5cb046f1a832f2d772999cd17e36d7bd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/minlog</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/minlog</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>3.3</version>
      <description>A library for instantiating Java objects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab0e0b2ab81affdd7f38bcc60fd85571</hash>
        <hash alg="SHA-1">1049c09f1de4331e8193e579448d0916d75b7631</hash>
        <hash alg="SHA-256">02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb</hash>
        <hash alg="SHA-512">1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61</hash>
        <hash alg="SHA-384">2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502</hash>
        <hash alg="SHA3-384">a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e</hash>
        <hash alg="SHA3-256">fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f</hash>
        <hash alg="SHA3-512">ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org/objenesis</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/objenesis/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-client-api</name>
      <version>3.4.1</version>
      <description>Apache Hadoop Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca3ecadd54afd54a1620c9d87cc55ef1</hash>
        <hash alg="SHA-1">7e4cfae7f5c85cffdbc21fdf749262fc78d4463a</hash>
        <hash alg="SHA-256">a964d4daa054c9615bbafb4553efbb140fa7fb9ac6f358a24393f183a5703438</hash>
        <hash alg="SHA-512">d505c0f8cfffcfe0090c69de854c971c7d88646f1f9f31af43ad3934a686dc06ae39250c3c99998ea57a27fc226a0fa5fb4da39867cac3997577ad7ffb01b239</hash>
        <hash alg="SHA-384">d445f3faf75f0d8d8708c4d15ebe509267e03e1362e826e731cb9e30c911ab54d63c2b5e6328ea847e71a7f3e5ccd696</hash>
        <hash alg="SHA3-384">05836b3a60025f8e74b64db919b16ac3ae2d4015f0f22a61212516658b2d033fd12c9a653fae18c79f8a08f5eab67894</hash>
        <hash alg="SHA3-256">fa7f3eb51d296717e92fdcf97c314df909718a766bebd6156e284f247a254426</hash>
        <hash alg="SHA3-512">1650be915561e8d0119410db55913bd1ed0bf034e6683b4a3c4acaa71834c1acdffe1b4cb90719e421e8fdeecdd5a5f2c7dcf94c4e6a72220931a9f7db96c4aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar</purl>
      <externalReferences><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-launcher_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-launcher_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">868dfd359dc5ffd586b9e109976be14c</hash>
        <hash alg="SHA-1">e9c113437b87a62063ff7036d218e484d8c31c70</hash>
        <hash alg="SHA-256">c534e7243701aaddbdfe0518acd5ea2587f758434f2d9d5e134993c0d7dfd7ca</hash>
        <hash alg="SHA-512">fcd1427dc437accf9f367965c0342583133e7923f669712feabf65b76f082ec48f688c64df794d4d52de1529f6e386e088a58ed5a0cd785f1f4a196b11eac9d4</hash>
        <hash alg="SHA-384">23c41dd7063c0e88db55a103d6329c83787f0614cf2797675bde95f26035c434fdbde0f28bb177ce8493ea55e1d69ee3</hash>
        <hash alg="SHA3-384">f08612ef360ee418bc82fe8d10cb7307a87cca517f29162ebe89ebd8aea218b6227cbefd748935a37dcd803b4a7e35eb</hash>
        <hash alg="SHA3-256">4be0672cb355c40ea2c7b2ee3f48974a625166dcae000881b4ae48de0f9fc91d</hash>
        <hash alg="SHA3-512">3e21830f7631d38f6e627f67720f8e5d723e7eb55f674f4517d44e6d511ae66dd90f756e76f4303a3c11e22a7f2a2e6e479877cba321c487caf7c432fbecd522</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-launcher_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/spark-launcher_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-kvstore_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-kvstore_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f06f9063b5886510bb1056310cb56147</hash>
        <hash alg="SHA-1">4be852adb632ffae4599698ba9d78b4207caf746</hash>
        <hash alg="SHA-256">2f89dd26e371b324c05e063d6ea5d5ddd4d25faca5d5ca1f05b07082b66fd6ad</hash>
        <hash alg="SHA-512">3a4cad1ba9a9f2bf19fb0d9fe90401a6f0dae14a4d3a3792e24bec1bec1692bdeff5224023a700544e33d4ca36138b2824dd20803a93a6a5a655a7451c0bc868</hash>
        <hash alg="SHA-384">627c4de52aef0d25f2716e6120a15c38b76dd50f146b4e52f3d8f6fe647e88e83640689517e13a7773115f5d69cbd864</hash>
        <hash alg="SHA3-384">56254049740d53d5ee34297e6dd5060924ba929b8a77260c54058619e55197cd376b7640e5f8d4ade80d1942731d8720</hash>
        <hash alg="SHA3-256">4721138ba6f0b29cd6b5fa7fa335480a3e54b6f404f411710854ae071506f87e</hash>
        <hash alg="SHA3-512">43d54e7617a9033105d20b670839fc25656ae05817ca61436153ce319da62bfc7e9c8c8668d05deacb023bb60394deb22c486b45af657320050db0c477a9d3df</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-kvstore_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-kvstore_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.leveldbjni</group>
      <name>leveldbjni-all</name>
      <version>1.8</version>
      <description>An uber jar which contains all the leveldbjni platform libraries and dependencies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6944e9bc03c7938868e53c96726ae914</hash>
        <hash alg="SHA-1">707350a2eeb1fa2ed77a32ddb3893ed308e941db</hash>
        <hash alg="SHA-256">c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe</hash>
        <hash alg="SHA-512">2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96</hash>
        <hash alg="SHA-384">f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2</hash>
        <hash alg="SHA3-384">b5919e94b576b4c30017e16f0b1a983aed10ba755bda341cd3f6056b56e0d024c1c63aa9892aab3be166c8a70fc94e47</hash>
        <hash alg="SHA3-256">5a8e38c0619923426a8a37733a9249986e6b9b389ebe2fe04b9235e045fea406</hash>
        <hash alg="SHA3-512">136aed54a48e86ec78e99ff19fc40de5dacfe9f0d9975e5e5c19024b68e35cdf88f82587d09d1f4e32db6ddb96fe7cd663bf1e01098e8366547a6a1620f938fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>http://leveldbjni.fusesource.org/leveldbjni-all</url></reference><reference type="distribution-intake"><url>http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/fusesource/leveldbjni/issues</url></reference><reference type="mailing-list"><url>leveldbjni-dev-subscribe@fusesource.org</url></reference><reference type="vcs"><url>https://github.com/fusesource/leveldbjni/leveldbjni-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-network-common_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-network-common_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">da8d3f622c0d05075caf73154175895e</hash>
        <hash alg="SHA-1">14b5af01bdd5e3083375b3016b1725de58f21527</hash>
        <hash alg="SHA-256">7822af7600fcf35d35b2bed5b272c653c2c532d837990d66f7a8fc0a18641ff6</hash>
        <hash alg="SHA-512">a42e7ebef169b72126acda47736028f92fdc7b0d758b2812f5d3de9321857afcdf7bb773a848688e6fc841dd9281e8e26f51402af473e8a894a7edcd14027ff6</hash>
        <hash alg="SHA-384">0ed823584443537a8a52210d4d5b5ca5c69441d6030ead85f370c6547b2810683a5cd43ce30eb4690b972e6c9ce26424</hash>
        <hash alg="SHA3-384">2c40f261ec41cb2a34aaa085deb9c28988c65c1988a8fe30815dc2d7f0bef6f400253e22e5c27700324ebfe96d7b7309</hash>
        <hash alg="SHA3-256">768becf8ca1b47a7ddb5d06327c564f985d8730ea95ff2ff88fb157286a18098</hash>
        <hash alg="SHA3-512">007027d16b4842110ce75a39ab8315405a01c3b24b855a77bf99e17ee07c2c1c81bd44b46e9a73d59c3f7bde7ed90e4ac1dfd47894dcc44a3612d187dd7887bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-network-common_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-network-common_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-x86_64&amp;type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-boringssl-static</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">13d5beeacc488f3e3523798173e86c81</hash>
        <hash alg="SHA-1">3b12b1baff8d672493256fd3eb034fd61125ca4c</hash>
        <hash alg="SHA-256">3d773aac73fe40f5d04de37ce14a1f7abd27caf0b3bd8275884f5d2968b3e254</hash>
        <hash alg="SHA-512">115739789746abd0de7f4ce605f4a57f1307353552186dc57046c37e5fdd0ef9dcf89c3498e691465186bc325fdf0e9af45a5216e13378fa53956f63e8ac3eb0</hash>
        <hash alg="SHA-384">5d966bd2c49947325255479f109d2d821666e8b1228a9eebbc6d71e64f528c136d76607906ce158e7863265ee8262d7a</hash>
        <hash alg="SHA3-384">f78205d684b0bb40c5fc12013377692d0a22b7ad14e549295002c6809be6afe333e18b25d24d6a11cda76c8be9180e55</hash>
        <hash alg="SHA3-256">4be59ee55f970de53a396d0d2d5f1bfea177e506fd9a59866e1c4dc528e68b3b</hash>
        <hash alg="SHA3-512">6f03316ef59e154f3451d8c6c4fd050050511060a0e52d2d95800d18fd2ca27580ac5c526126295d9ce4e55ebdf085d558a05cdf7ba90eea49920a2837ccee21</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.70.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-tcnative-classes</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked
    to OpenSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af67c685397310283abea146f6785896</hash>
        <hash alg="SHA-1">5f75accc769e69f2e6c1e56ba3a08b6c4bcc25f8</hash>
        <hash alg="SHA-256">a79c1579313d4ad48a3ecc1d01a25da06d22d6449c3bcc369c2318749bcf55bc</hash>
        <hash alg="SHA-512">12551a5f377c55c11a68587cb631a08228a1d5be1b7a4c843f2b8a09057b7e39e1ba1b7d387b7b94e615ea83a31568298ffaecdb82ff6aa01dd0316a8c4b3232</hash>
        <hash alg="SHA-384">de63b64ef785daa9424837859a60482ce3663e2f522b0e75adddd17d7a37281f7b12d4cd38df0e7114799009db5118c2</hash>
        <hash alg="SHA3-384">28289956fa046b9a9552d7ce007940ea5cd0af56215abaf9188404aa9120e9d03941b2549409e9f8dc57710d7d1ea407</hash>
        <hash alg="SHA3-256">ec363366bae3835bffde034079dbecca6eeb16db43185250a4c777faa35a4c8a</hash>
        <hash alg="SHA3-512">62593ccc4a71e917c147fb8adb955d97c6280891ed62e977c26892bf932c7a48fb2f998ebc2cb09c5d95e6fab02f9d04d3403900069a625cad8d2a356ae4d504</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-classes@2.0.70.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-classes/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-classes</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=windows-x86_64&amp;type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-boringssl-static</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcc2055d0e13e91337df043519893fb4</hash>
        <hash alg="SHA-1">0e1d5e83d6f78908008a4fb9881bc4352b4f710c</hash>
        <hash alg="SHA-256">b3e3e0559df29a5624bcf529cb8e2bd9375c6d68164dda338e841677586a14c4</hash>
        <hash alg="SHA-512">bd7877247153088a590b9fba8bfa9b8a1852e2e2cfc97ef7199cc3527d2c206c109f468c2fcddb598fd1854df04d41c5e7ac913facda96867dfbc6422d71e929</hash>
        <hash alg="SHA-384">30208ca8a7130c47854d66b9ecc9a3f92595b7f2489e3857ee9ac3dedc5fc61fa093006be8352ba1d98675d40d41a483</hash>
        <hash alg="SHA3-384">b345610bc1e21f0d8e53816a1868dfd95ac436d73e09301972202b4bf283bc65b1296aa4f0de8ec247aa493cee6483ff</hash>
        <hash alg="SHA3-256">285baf4d5104ae53a8470e07364dbd30cfb5b82216375a05178b54118df471d9</hash>
        <hash alg="SHA3-512">806cca5709437eed2f747d6d81dedfdbb54bd52187f67600a650d30836a938fa21a1918c64ebaa96e8fc6124129b7db273f7a36f5e2e8088c8dfc17cda38d26e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=windows-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64&amp;type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-boringssl-static</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">05c6438938d82ac730299685facf1c92</hash>
        <hash alg="SHA-1">7cc7d15769a4cb9a2f38d3e863cc55f28732d71f</hash>
        <hash alg="SHA-256">523c43f67ad9040d70f9494fc28eebf711d8c54e2aa30e3fd1a199c38740f53b</hash>
        <hash alg="SHA-512">16f4d1177029fc5241f2eb2de61ff1677f21ce65cdb8be35baf5fd49842c9154fbca3d4eafce6a2ee7d80b3c8114a0aa9240a52795a1dbb3d22baa9201b4cc5c</hash>
        <hash alg="SHA-384">ed887827aeb042c241f523e6f3bcac79cf257f2585a506b29e77039242dc97a5df3e6351edaf517d8ccf61099a109906</hash>
        <hash alg="SHA3-384">e7609421af9dd8437d47cea412ee8faed103a7f0422581b4d2112025a7dc986436cffe6f0c9f7a8e6e0c820c8f70f523</hash>
        <hash alg="SHA3-256">3908d8e9fc098c2cc816edd0ed9d2ee6335642c930e099dbba9f5341f6f9c4f3</hash>
        <hash alg="SHA3-512">0274f5b0c52cdebee6fa90cde8af1e8435780d27f6d1e1cdb40ff1512150fd1bcd8d3c1d0b3dd743736ed6a9c723ec2ccd404469eae32c911b7ddb649089ddda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64&amp;type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-boringssl-static</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61e9b4bb5cadfa742b6a598b10c0338a</hash>
        <hash alg="SHA-1">2b94b79fee15810c9307a23afa7004c5ff979300</hash>
        <hash alg="SHA-256">0454c53e65da6e253b2104d1ae26ecc79df4faf999e8924b659846b5bf41e996</hash>
        <hash alg="SHA-512">51385142c8bad72c9bdb4cc21b0214a778e8aaf3a4712134b87add9ec7d0881be9b697a7531b729734f75e51a6491c2cc771092c07bd8098af53cb3d3f9268e6</hash>
        <hash alg="SHA-384">3e56423e3bcc4189127f7f7cd338f00663d85821b2172ad8ac40ea47a01bf1c69c593a90fd22ae7473546e46b46973ff</hash>
        <hash alg="SHA3-384">c3a6bd9d78f835372da3945ea25f76ee0893544a3f4fa56f24d391b64507a0eaad576b4420eeb4dcb648da71ccb2190e</hash>
        <hash alg="SHA3-256">bba5f74fdbbab558bfbe2f2bbb41333b9c263a5afd2fa768b245bded2e19d75e</hash>
        <hash alg="SHA3-512">3aa60e02bfe409661e82a26ab1214ca28a254808e574f313fc701708073d087311d274191c0eb1b87413a9c43640ae6003401f683290668794472a322e40a386</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64&amp;type=jar">
      <group>io.netty</group>
      <name>netty-tcnative-boringssl-static</name>
      <version>2.0.70.Final</version>
      <description>A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
    to BoringSSL and Apache APR.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c1bc63725e879206498d38ea9ffe36b</hash>
        <hash alg="SHA-1">b9573f41469f8de0a90c2326178c644139a9c906</hash>
        <hash alg="SHA-256">9c6a23335f296689fb3538bc49e4e280ff163675212c6fe01c9cf2a9273ee19a</hash>
        <hash alg="SHA-512">68c1ae9974a6740c3e42a971c657cb3af1a86bcc32c402eeb77cdebd1648944668b8548803ccfa9c52a5b2259f982766f57808bad0b143e5b565e33528365195</hash>
        <hash alg="SHA-384">9de58c215264100bffc1c7c5be0bcc4f997baae228f916618669a7ae644216f4890c1b04fcbb0f0a53f4e0d0261ecc97</hash>
        <hash alg="SHA3-384">42c906c2e18d7f9ca1d0f76d7c903602df4a1fa010c5cdc11d047dff7080c813efa68a48fed0e480ccaf2742f04e38f3</hash>
        <hash alg="SHA3-256">4ad0e1be4f053796d1d0a13d340836747858a6125537e79b17e0c560b2bfdec0</hash>
        <hash alg="SHA3-512">1aafb92a76c921cf8606b6fe6ab1f64c1bdf55e1c31da7819fb4a00fdeb723123e3b15ab72c655037c7a3428c02e6baca907571a3f38ae44b69233765a7ad2a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/</url></reference><reference type="vcs"><url>https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>33.4.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5732af16367192820c7bf177e9b29512</hash>
        <hash alg="SHA-1">03fcc0a259f724c7de54a6a55ea7e26d3d5c0cac</hash>
        <hash alg="SHA-256">b918c98a7e44dbe94ebd9fe3e40cddaadb5a93e6a78eb6008b42df237241e538</hash>
        <hash alg="SHA-512">778bd20c3ad83dd17d742368814cf97f28f3ec5723ef952a634290dbe0b4ced8c2a8f878d710fed10223d4393c510df39583c78921c592f605a0bb7003d98f84</hash>
        <hash alg="SHA-384">4beba310b95d9d0d6ecceec863b056ec84a3b4d8a6591b8ee3c85e4cbaf6d744a70021b1e5779d90bdb66aa6e2b9c69e</hash>
        <hash alg="SHA3-384">8ba470051b86bda40cf096d27f11f887f4080a8fff36b7823b0dd63a8875b043f33ebb649f44f6f2f3fcc749f61357ce</hash>
        <hash alg="SHA3-256">05caa13e6a20cec5bf02c6e49dfd9863f43edbd6778ae39dc8c89d7d3b4f559b</hash>
        <hash alg="SHA3-512">d829570cb2b9e446cd3afa17d523501fc4c13736ff0d1e59167bd9f0a83e2eebd489dc6e728ea06b24695d53db91fce5bc265f8a127852082a194b8a006628dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.2</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes are conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3f75955b49b6758fd6d1e1bd9bf777b3</hash>
        <hash alg="SHA-1">c4a06a64e650562f30b7bf9aaec1bfed43aca12b</hash>
        <hash alg="SHA-256">8a8f81cf9b359e3f6dfa691a1e776985c061ef2f223c9b2c80753e1b458e8064</hash>
        <hash alg="SHA-512">ff4ee76aa661708989d53d45576cff3beea9ebbd86481dbbf2ee8c81bb22f882097b430588312b711025f0e890f22c6799d722ccd422a6a7278de08660fe2f51</hash>
        <hash alg="SHA-384">85a7bd379da27ad57a4e5c02099fef206083caa52244597ac858a921b48e2912cfa7ef0e7d0c7a10ab2dd8d0f7d6ada0</hash>
        <hash alg="SHA3-384">652b22d09b297320e62ac254801e7d3a0fd2a8038461c5cbf7a53a27d681f62b768b964aa62c864453c4e7af217c8c4a</hash>
        <hash alg="SHA3-256">a650b2f7982affc2dbb7e2807fbb0fbf58b74fd8dc111cc6dc5e95a00179b7e3</hash>
        <hash alg="SHA3-512">2c5ee7629a8fb1c952f437b80fcd1cff86c54ff81de02eda1eb73c0bbfe38d3f072946f8c6396c7f1e46e16a6d44ad393dfe6fd2dd96f75ebb854263d36bb193</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.43.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f56e65c8f302ca8b4cb384c9b4a53b6</hash>
        <hash alg="SHA-1">9425eee39e56b116d2b998b7c2cebcbd11a3c98b</hash>
        <hash alg="SHA-256">3fbc2e98f05854c3df16df9abaa955b91b15b3ecac33623208ed6424640ef0f6</hash>
        <hash alg="SHA-512">823ea28e3c822ff48e4e985a421fa0b53ca3419e2c0635c3d4d0a9822399b6491780e26a9161d4733857c97987bff2d725ff4453b2c22ed412eef46ea27f5d84</hash>
        <hash alg="SHA-384">bb0de208c965955c3cd52415db69b9794f475df08ae46da0273c54689a143f0735a52dffaed491d80c137ef14afec1ca</hash>
        <hash alg="SHA3-384">90fe63d39de280812885d1f81d8099c211a2deef5d82ae521ec88aff1077c2bd44b0e9334c53ea9e386707ec68f811ce</hash>
        <hash alg="SHA3-256">5e6baf5bdda40b096ee17e784fcc4ca9d5251a07b04de59542b0480712dd7ed4</hash>
        <hash alg="SHA3-512">58031c81517dd8a700b482a33c78f3bb5eeddb2f878bee1568aa54ea502b56187bc73ad4ba046163c3b95cb5572921e6d2b0dd1d1f0905bd7996eaa2bba25812</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org/</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.36.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e48e5ba2cd0a8d8d09bad849b99f6a6</hash>
        <hash alg="SHA-1">227d4d4957ccc3dc5761bd897e3a0ee587e750a7</hash>
        <hash alg="SHA-256">77440e270b0bc9a249903c5a076c36a722c4886ca4f42675f2903a1c53ed61a5</hash>
        <hash alg="SHA-512">bd6f5650902526d3db06aa1cc7bd36723658166acfabb823aca27d0b2c3814e83ae24a8217ce915c3e194c2c696a102580b4c21ef5dba61f7610bcb8d580f566</hash>
        <hash alg="SHA-384">a5cb9ba6b5bf550de90def11ec4bb014410a14949f8598856e1693e213ec0e7d2b3c6cb41b34ba8cfe209a29801de529</hash>
        <hash alg="SHA3-384">00492c18861d7d4fa5517ccf2bcc5c170b575ff9fe88fdc834827d9fc8747846d6345f5270c64dc130228f53ac96f1b6</hash>
        <hash alg="SHA3-256">ec8420b1f4e27c3eef932a764c4cedc8b3547e114285227ceb0612e93648ac29</hash>
        <hash alg="SHA3-512">344bc9be8f3417d4bc3e9e073bff4657aace3cac73e5ace038a11f1435d04d3182f344b8237cd6b311ab0748042a4c4f84259713ec2dcbe472c75cde2e787320</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>3.0.0</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f59529b29202a5baf37f491ea5ec8627</hash>
        <hash alg="SHA-1">7399e65dd7e9ff3404f4535b2f017093bdb134c7</hash>
        <hash alg="SHA-256">88241573467ddca44ffd4d74aa04c2bbfd11bf7c17e0c342c94c9de7a70a7c64</hash>
        <hash alg="SHA-512">1406b1aa53b19f8269129d96ce8b64bf36f215eacf7d8f1e0adadee31614e53bb3f7acf4ff97418c5bfc75677a6f3cd637c3d9889d1e85117b6fa12467c91e9f</hash>
        <hash alg="SHA-384">24373643a4e2f8e1cf919d495e1e79b24dd9dbbbeecb06477be8764313f0b3b465fde74ea2cf5542fc8cba090132052f</hash>
        <hash alg="SHA3-384">afa264c8d8d946e43438ae728f0ae7a2c12797b56f9ad885d5b3e9a7396eb8481ca6840c2a990a7c5da45968794b36d8</hash>
        <hash alg="SHA3-256">4df89618b479d5fbede9363c6f914218a44007f48f29c6b6d58243558ced6152</hash>
        <hash alg="SHA3-512">b25b2ad8dddeed8757ffe22a96cfa7511617d86baa0ed4a25b1850162b54e1132d40dbc2dfca0a6ff0a350b16628a0d2b523418eeb8f986e0f505833da4f7181</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/google/j2objc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.crypto.tink/tink@1.16.0?type=jar">
      <group>com.google.crypto.tink</group>
      <name>tink</name>
      <version>1.16.0</version>
      <description>Tink is a small cryptographic library that provides a safe, simple, agile and fast way to accomplish some common cryptographic tasks.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9fad84f8ba4dddf00bd54dfb84a911cf</hash>
        <hash alg="SHA-1">883213082b39103b6093fa4e9880353494df9f85</hash>
        <hash alg="SHA-256">7f5e380dde874cd44613952f374723da1f8636526c6a574945bceb0e65571d0a</hash>
        <hash alg="SHA-512">77977867d8e3978fa00e1857c4a856d50484d424a1d5b6d55ab78c8fb4fa2888708a358c8c9112d790f101602fb68aa2089221fc0c5e4b44ac6816bb84fb4406</hash>
        <hash alg="SHA-384">c6c864f0535f22abecc2bcb7879baded4d08d0401939056598e06a64f47fa8549e3c04c05bffb830818552ab62096bdb</hash>
        <hash alg="SHA3-384">5084d35650cf3f328398fbd7011049a36831103ace327eb81b823d3879634d2e9ea6476c3564d4037ce5d025cbe56c77</hash>
        <hash alg="SHA3-256">f39cf4bb79729d756d79fa48a6c66331b66c638489753e6287d1e181f9d0004b</hash>
        <hash alg="SHA3-512">27f36cddae6f965cc5b61db84a3d2062bdebd578e1e4e0ceace3d6a560071c05e6a784c0ef106acc25890dcf1e070f943a3287432cbed34d7c94c18edf167137</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.crypto.tink/tink@1.16.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/tink-crypto/tink-java</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/tink-crypto/tink-java/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/group/tink-users</url></reference><reference type="vcs"><url>https://github.com/tink-crypto/tink-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.11.0</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c69b9199d3a4e6c34dc03619ff7feee</hash>
        <hash alg="SHA-1">527175ca6d81050b53bdd4c457a6d6e017626b0e</hash>
        <hash alg="SHA-256">57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b</hash>
        <hash alg="SHA-512">b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a</hash>
        <hash alg="SHA-384">8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf</hash>
        <hash alg="SHA3-384">e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280</hash>
        <hash alg="SHA3-256">aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094</hash>
        <hash alg="SHA3-512">31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/gson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-network-shuffle_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f927be1a82c410bdddb53479d04574d3</hash>
        <hash alg="SHA-1">900263973679a7d01accca11f0113be1bd3740a3</hash>
        <hash alg="SHA-256">f836dfb26eebc01b13789cbe287639e2c6233ae7a8564dc10a12453aed100657</hash>
        <hash alg="SHA-512">f00ce3dfdabc8397b855ac3ad16663a2a80f16f81f399d0df313d93c2fd456e73bfa0bf4ee0a3709cf880940e92803afe2fb20cf3f1599f94575f6ba3b380c23</hash>
        <hash alg="SHA-384">777ad27ce6b4b1970c044c9dba0e8f1ceb1433c640d69711ccbe85325ba7a71831f63817fffa7346b2be9b1e3acf8fd7</hash>
        <hash alg="SHA3-384">b5eda38dad6016c98fa81c923a4e3d4b8a5f3004651025cc6b22ecc393109d9b9a9c89a43d6dcf7a7827af5271a012e3</hash>
        <hash alg="SHA3-256">c238411d28cff8ea60110efa493ac771b740887c2906bc8291c1fc25d5bf612b</hash>
        <hash alg="SHA3-512">473d54af8a73acc58f3241f6074f100c444305d4691fe6b0be04c6be1e3bf05cb30a9cc06360021bcdbbe901993afe3df312c93c5b0598d830bde5965ea1eab8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-network-shuffle_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-network-shuffle_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-unsafe_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c21edc69ce3282837f909e6b48f85860</hash>
        <hash alg="SHA-1">db8eb16519d3adc179620f6319471943ff285486</hash>
        <hash alg="SHA-256">5b1697751dfdd7dc5f3bda251cf7139ca7e9ddb06e8718e6b1f1c514fac9285b</hash>
        <hash alg="SHA-512">cbff286eb255e6e21a6e23629182b6a5fe990cd7ffcfe3b067325be62fa55eb7d3684289677baf58bb5cd094e7244685c0f4673b8bf67a2d42b9845939cc404b</hash>
        <hash alg="SHA-384">8261d84347efe39a5be8719513212ecd27e9037717abf65f953540dbbc831dd891efc355dc94f9c3d742096c9e3680e1</hash>
        <hash alg="SHA3-384">a2a706f919fb9b8cefe7ad6136bca6a8e24de60988ba63975ee939ac771a520d27184b3543d7d1407bd2ad9491fe1b58</hash>
        <hash alg="SHA3-256">d6c3fe3ee74e1358ca4b6c2ea4b8d5651aef47172037deb63ba92843b77466ed</hash>
        <hash alg="SHA3-512">f3a14c6666a0bd13c24e1b78962ce9a2ecdd1fbaba965467f750b600c13a0334102af0ab662e6f2712dcafc156cc97038c7bb0bd9098d0797b516ad242b70009</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-unsafe_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-common-utils_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3bcd7608dc1e350a5276bec7ed509e5</hash>
        <hash alg="SHA-1">366c66411f997c09171a7107390e8f371744bcad</hash>
        <hash alg="SHA-256">242dbf9a0d2bbefd5a757b05a924f093dbf2cce6409e8e4d1b7536b5b2350066</hash>
        <hash alg="SHA-512">bfa6294001a9168f4b85b3fabdf1391bc8ea5c67120da668ff6f9f21447e7fc96130d0c023770b8025d9ee1a8f00df1769330e2c3b6ceb1521bb5862868777ff</hash>
        <hash alg="SHA-384">642014dffdecc947d325ff75ce228e8bb3665eb9cacd7c9670ddb879031033a1e8f16bf754a89a127f4e26a197b004b2</hash>
        <hash alg="SHA3-384">2075843403f0034967477398be2092fa0fd67b5935bb2399222210bd6d97ff85519e2695f926acfc573e553495860f28</hash>
        <hash alg="SHA3-256">728bbca8edd9c54a91981ab78cf3ae18d650152c3b257c5c028e4908f0e982ce</hash>
        <hash alg="SHA3-512">1f8d8fc8336e071d70c6c890051c116102fea09a61484a04e9a91298ef64ab3603455c718c3e2b8e527b171567fed1dc77fc7143ef11f58aacb117701d7a56a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-common-utils_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ivy/ivy@2.5.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ivy</group>
      <name>ivy</name>
      <version>2.5.3</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4d09f19aa90390308e50ddbc49f9227</hash>
        <hash alg="SHA-1">163b4d6b330cd4590a05f3e97a6eb8bf5b54665e</hash>
        <hash alg="SHA-256">9502aa5aabf0b1484924a13ef4b5d24f121f7f91aab6768f11cc9d0906c0803b</hash>
        <hash alg="SHA-512">be291ddf612703fd3657a72820199430d053a8e06f7631e78477b428ba343631bc36b16bde8c25df544b64b420be84568d3898921f8db63fe676fb590586355b</hash>
        <hash alg="SHA-384">2d4b27645c4cf77d8814f45845ef3e6a40208823b13fca106b1f8564d17bfb65d6972dd58fec3829a12e0f23690d2313</hash>
        <hash alg="SHA3-384">696dfa4292c3eed1e24c4c3b5665af86cc184842fed676cbff3f5776f78884a578c0cbff5d3ee92cbbf8d4c063cee475</hash>
        <hash alg="SHA3-256">61397f02e250a2f9a66854753ed390e026218a4499da0a4a17d37893e9ad5b64</hash>
        <hash alg="SHA3-512">101d885a3e85f7241787c65a4e2c1aba10af74a9267d6d05b94e7037ce7dc9c39e1c1bdc1d61ebbb97d3ffed89078d49cfdcf74fea2d3ee1da2baf0ace463abc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ivy/ivy@2.5.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ant.apache.org/ivy/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/ant/ivy/core/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
      <group>oro</group>
      <name>oro</name>
      <version>2.0.8</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jul-to-slf4j</name>
      <version>2.0.16</version>
      <description>JUL to SLF4J bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">410ad2f2230e0150216d86e12a4af995</hash>
        <hash alg="SHA-1">6d57da3e961daac65bcca0dd3def6cd11e48a24a</hash>
        <hash alg="SHA-256">0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d</hash>
        <hash alg="SHA-512">0c4c1f62bdaa29e7b6fb41fdd62e398fb92e74e64ab36788be930468947ec94821e97cbc820159ec792f9be4cd3840ce60731be2c7437a734a458cbd2e412184</hash>
        <hash alg="SHA-384">3216d143cb8efa77b87e54dc4f9e77f256b21d1c9525f45a26177a7ad264c32d229cf65bf67cf4bcab546663f41e95f4</hash>
        <hash alg="SHA3-384">8c551dfa80d6dc591b6376024362884625f259c8ddc4258190386e90a7b2141b40e2ed42b4ab6be93cbb1d81bbf0ffc9</hash>
        <hash alg="SHA3-256">ec1e9fbe3de9345a41059a3f45486a24948fc041d86e5455106b06501a6a254e</hash>
        <hash alg="SHA3-512">e5912c03ec7a44feae7aff8d56221572be431a1c1b08407090d4187d64c4c8c2fd25f6d4d441005f95410637377f3c0fdee683c86d83a3c78918b3b84267caaf</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.16</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c077b88c43f9d63f64f9880fdb457efb</hash>
        <hash alg="SHA-1">9d08badad22f1ac07deac9188ade596472a2bfd9</hash>
        <hash alg="SHA-256">5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78</hash>
        <hash alg="SHA-512">5c4c540ac68898e49a126611665bbe47e660591a6aaf9f1d1c342116a2b0f6b5f7225d8072917b1fab0cef4c5ca48c0d1508655ce5ab368d7c27be78b3c75c87</hash>
        <hash alg="SHA-384">90c2ce65783350a6bf25cf6abe6a4583f7ad9ec8807ee51fe7543c7a6a163ecd5141c29853c3ea35e05c0069e09141f4</hash>
        <hash alg="SHA3-384">c65b56e6743867a1de077828446999c0f8de4b47fd56e40f136157735143f462ebb5fc3f6fc02a3db790a81cf823c1bc</hash>
        <hash alg="SHA3-256">c00f9fc1f31f03afa6ad252a7aff15edaee78b2b742bf65a97cdd74f7189120a</hash>
        <hash alg="SHA3-512">9e7c5af053bc0334fe2a4c9c2c6311a55c34b54889a2051c33e97eb9edabf3ea1064a017de4b510a54f77720c9a24ffdb832218bc92b4db6fc3b9cf972f268dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j2-impl</name>
      <version>2.24.3</version>
      <description>SLF4J 2 provider (binding) for the Apache Log4j API.
    It forwards SLF4J 2 calls to the Log4j API.
    This effectively allows using Log4j as an implementation of SLF4J 2.
    (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0ec2df0e6ab3e63e2d7b043bd0478c3f</hash>
        <hash alg="SHA-1">c3bda2dc612bfc780ad06c5acf5e0ffd55b770e5</hash>
        <hash alg="SHA-256">cdaac22e40ec30c4096e1ebe8c454c8826c0d1c378d7db5d7b3ad166354b0bd3</hash>
        <hash alg="SHA-512">c837d1724dc85479ec0eabfd8adef32d5bc3e9ba94c058eac6904894c9d3dff4f85762287159b0ae9f1e314e64861414de36a0d6e314e2d3b7aef8bedbd37b2b</hash>
        <hash alg="SHA-384">9c4eb0ae56d844b202546868a8eec8529647d7b38967234ed79a794cc4b8740bf3264a2958d5db7111de588efd2dfc37</hash>
        <hash alg="SHA3-384">246549536ddbbd348a1f37d497f9f7c684b53311008ee3cec2705e86e35afa274774be4f0da966923ed32f77a3e9f4e5</hash>
        <hash alg="SHA3-256">213a0e3d560934abdfa725581e5b7f49155e95328ad67be9f49afa6275592370</hash>
        <hash alg="SHA3-512">81706150cf1a117569e4bdd8061964be4bf3042cdabd7bc24b5f524d212d4fca69c6952a8bafa41f973858ba9161a6bc89bb46880243c727b5f70a44b6b77a51</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.24.3</version>
      <description>The logging API of the Log4j project.
    Library and application code can log through this API.
    It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases.
    Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d89516699543c5c21be87ee1760695f3</hash>
        <hash alg="SHA-1">b02c125db8b6d295adf72ae6e71af5d83bce2370</hash>
        <hash alg="SHA-256">5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f</hash>
        <hash alg="SHA-512">d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7</hash>
        <hash alg="SHA-384">d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e</hash>
        <hash alg="SHA3-384">7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c</hash>
        <hash alg="SHA3-256">5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3</hash>
        <hash alg="SHA3-512">7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.24.3</version>
      <description>A versatile, industrial-grade, and reference implementation of the Log4j API.
    It bundles a rich set of components to assist various use cases:
    Appenders targeting files, network sockets, databases, SMTP servers;
    Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs;
    Filters that can be configured using log event rates, regular expressions, scripts, time, etc.
    It contains several extension points to introduce custom components, if needed.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3f52ab7782fdd1349bd872b5dcf48bed</hash>
        <hash alg="SHA-1">7f6a261243ca767c7f38fd4b542bcde626c8894e</hash>
        <hash alg="SHA-256">7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a</hash>
        <hash alg="SHA-512">61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef</hash>
        <hash alg="SHA-384">fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2</hash>
        <hash alg="SHA3-384">852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822</hash>
        <hash alg="SHA3-256">fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b</hash>
        <hash alg="SHA3-512">c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.24.3</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b2486768ef6049ed7c015622702bf99c</hash>
        <hash alg="SHA-1">880d64cfe147369dae43e7816b608fae2096abd0</hash>
        <hash alg="SHA-256">d541ebd1316f53374991e836ad52f32c11bf465cb6672d397f0444814528ef8b</hash>
        <hash alg="SHA-512">e486a46291842cf60410aa79b7051cd7ea9b14003ca06e8f9fb480729275d0c5b031d917c7a5716d3f80c0fb86a1d77123363200e11c4a330ba30b3479d2d780</hash>
        <hash alg="SHA-384">ce99785db26b5ef2bfdcd95e3c2a513a7b6901cb28bf8bdcbadba0642d941f57ffeacbf536954b0a81c9cfa28246611b</hash>
        <hash alg="SHA3-384">2e156eaaa832f43eb49fa2ae52d99599dafc1d51dd433ae3a004b9b48506fbb6f5a131b2e9ea05ef39160d29d0e6a830</hash>
        <hash alg="SHA3-256">638588e9577734a335e9cac2db690b54854fdf91717b12a5925cff07f9069321</hash>
        <hash alg="SHA3-512">183ab2706cfa270ceff91d58c2cc0f6d09051ffe06a867feddd5e7aca26341c63ce6f5334153ac80dc09f0721ed5ce623206101b3147f32d988afe7a00d46838</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-layout-template-json</name>
      <version>2.24.3</version>
      <description>Apache Log4j Layout for producing JSON output that is structured according to a user-provided template.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e751dbc1813c14097e6f1ecdc77f14d</hash>
        <hash alg="SHA-1">bc0573ca981a2a243cd7a8c9b0562df8bf809d39</hash>
        <hash alg="SHA-256">53e89d35be783d0d47de319dcfeed5b2ea16b0b39929a302f2b7e681efaf18ec</hash>
        <hash alg="SHA-512">165adeb26a6b70219d3ff42cc8aaed77b1a530ebc9a9bdecea8f8cd6d22249963949b9b944449204c1e484360a121d9bfe3d729a570eb87618b1105fba13f7eb</hash>
        <hash alg="SHA-384">22fabb0d4892463b59980a23b60789ad0628eeb6147adbef73ff0d6ffe2db2d458b50c87b5f779cdb298c31465120f58</hash>
        <hash alg="SHA3-384">c0ba5cd02e215f474c621412ceb612413ccb7ce0d232a1a3c99970391dc4ad8cc232070a2a1ba52d33cead1ccfe44591</hash>
        <hash alg="SHA3-256">afddbd8630c9bb75daf8b7655b657c38189cf6b791845dd1962822961356ee06</hash>
        <hash alg="SHA3-512">6f2d8ff863e70e8e048c371d024dda31f86be10497f0d56bb0b16f5aaff5207284bbb6b609a1109a8a27f33c6ca6b5d7b6ce7c836a5a2ba0099f57a9a77022ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-layout-template-json/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/download.html</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-recipes@5.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-recipes</name>
      <version>5.7.1</version>
      <description>All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8f47b0b1d879d20bd831e9ec16da8f3</hash>
        <hash alg="SHA-1">39f8871614f0ed157f87f412bed8fd7b32c457ac</hash>
        <hash alg="SHA-256">8d0cb2638483fc1909e1f60cc66219598477ffcf0434bccfcd4ed65c25395ef7</hash>
        <hash alg="SHA-512">2d915dd65a74f1c69a4c794cfff5bd01eaaed431382e050d67697c6e6d9a0e1c81acbc34bffaca0bb22415e2030ea63e32fa0c5d8596055eeddae6c048bb03ff</hash>
        <hash alg="SHA-384">8ffaa8ecd1c85a7875bb275f2cebcc9444e86acc0154c2fee986a2adc7f66b9e59b9b97a35c967a38d34d143044a3c2c</hash>
        <hash alg="SHA3-384">bd0d5436e51c812e7652d44393162ebc57216ca7e0cc32c80916ec9e72c6fdcd8f7f9abd4813a3df327738631be061aa</hash>
        <hash alg="SHA3-256">182ab8d926c67d31fe5bb0a4ad8c522c5fb7b5f3044f6732341902c4d628612d</hash>
        <hash alg="SHA3-512">523247f89c588215e785f66c470c203ec504b093f3ace05eb6d1ac6510094c02e829eade8c83a9460a90c5824d48541dead1e74bce43b5f90fe4caffe04427a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-recipes@5.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://curator.apache.org/curator-recipes</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-recipes</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@5.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>5.7.1</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b530c393f4e4f72dc509437718d51bd</hash>
        <hash alg="SHA-1">ce5c5be53ec41c9f0a1f5a970e87cdae0f566aa3</hash>
        <hash alg="SHA-256">4f6219d50789db25a78184beb664e11ec63583125692b99faab538f8dae74b87</hash>
        <hash alg="SHA-512">05cdd51b18f96ca3a209ab7408fcdcc43523b57a6927841db9457c162154ee710cfb7d0e6da8e2352f6c80b7e71d2ed82c6515a5023e093f29a7a2eb863d4f89</hash>
        <hash alg="SHA-384">85908aa75b63aa48479ea6041d78e6a0fb013f72b43f16f49f3a96f7ca0d06601da6563ded7890e0c295d79ba1fcd175</hash>
        <hash alg="SHA3-384">1b8381bb7e86539a775cd9466581702572ba7811d6111d0d3f1612e222bac9a1ad88c0fcc9082a7683f4ee9c4d4fcafa</hash>
        <hash alg="SHA3-256">52f681b6b6308567558d0a842e0cd90de9e03faf908c9a986438e6b0628e2e14</hash>
        <hash alg="SHA3-512">211a668997b7fba7ebfc44da7eb30f214cc34e5750cd654c0ed27ddc7e22f9110c64deb60ee716f55a8afd14c243e93604fd4dab433ae44501f2077beab10076</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@5.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://curator.apache.org/curator-framework</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@5.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>5.7.1</version>
      <description>Low-level API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a27879c7a531c2148191bd01a3cb1337</hash>
        <hash alg="SHA-1">a3637b9c1cdc3360e9f266ccaad2ad46f06e1ebb</hash>
        <hash alg="SHA-256">611f7553fe7ed06713edcaae0098914a557cbb9724690c98137d05f1011fd3e9</hash>
        <hash alg="SHA-512">fbef61695f07ea60b61583aca1591d41fec35ef5fc51bd67475c832767bd355bec716055eb0a9bc04521dd782e8af23c601559065fd76343026737c2fde3330c</hash>
        <hash alg="SHA-384">c33a06bfff2c75829e2feb3aa5cb694ef11bf2acf0f3d0eb45a492bea7d1d5dfbcbe21b4d24fb11f976d281d7d54d287</hash>
        <hash alg="SHA3-384">3100c25dc788761bc66aca2983bf820935ed85fb9aeee0588747b3418bfabae87e3d0d79ec3e066fcc7c8cfb539162db</hash>
        <hash alg="SHA3-256">453cb41a8aa1e1d57ac81de8028ba6bc817c1ba9c664c27acc72661aaade5551</hash>
        <hash alg="SHA3-512">80af123862d9a588e9c07057028f0c56b8588744b54d2c8c79b7246021f8207753d494f6c9c305ea5efadd0fcc55810123e81430292864d8cbaa10cb4f686a0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@5.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://curator.apache.org/curator-client</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar">
      <publisher>jsonwebtoken.io</publisher>
      <group>io.jsonwebtoken</group>
      <name>jjwt-api</name>
      <version>0.12.6</version>
      <description>JSON Web Token support for the JVM and Android</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">995d2066feaa206de5e880045c9407d4</hash>
        <hash alg="SHA-1">478886a888f6add04937baf0361144504a024967</hash>
        <hash alg="SHA-256">8fabe0be1dfad1c823dc43137453e017d2c83f376422c83e017d9dd1043e6984</hash>
        <hash alg="SHA-512">d9bb467b64398cf4c28492a23abfcd890c11e3b97a0b43edddef4ddfeec3c2ca38f57d5c2dc28add9b12c51c9740f5469c50023b02d90524f254c2fd6e9a5451</hash>
        <hash alg="SHA-384">064b3fcde340defa8f6f120ccd4771869136dad77db042774c19007bfb278250e2eeb036b903e222bd2c16258d003cef</hash>
        <hash alg="SHA3-384">24d5a4273e7dc7a82ff85325e4968d138db29b5658381869f6020a785a16e29f6b20f327704b3222f44a93a9a136d572</hash>
        <hash alg="SHA3-256">25d801f8651850c5061d940489d0e37f1e612e971031584cab0356248d14628e</hash>
        <hash alg="SHA3-512">51024b085470f6bc966714d7feb188a7068752e10d837c2ec03ea4acf49d60cfeb5cebcb628f0b060f1311a7b53d95f466d66b05ff92b7c1b8d43a8c9f04215d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jwtk/jjwt/jjwt-api</url></reference><reference type="build-system"><url>https://travis-ci.org/jwtk/jjwt</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jwtk/jjwt/issues</url></reference><reference type="vcs"><url>https://github.com/jwtk/jjwt.git/jjwt-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jsonwebtoken/jjwt-impl@0.12.6?type=jar">
      <publisher>jsonwebtoken.io</publisher>
      <group>io.jsonwebtoken</group>
      <name>jjwt-impl</name>
      <version>0.12.6</version>
      <description>JSON Web Token support for the JVM and Android</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e96f699bad6353508953424e82e5de45</hash>
        <hash alg="SHA-1">ac23673a84b6089e0369fb8ab2c69edd91cd6eb0</hash>
        <hash alg="SHA-256">ad80ceda467ddab64f0e729257dd5f72f61487cc3b92e696270e620f0d88168f</hash>
        <hash alg="SHA-512">52aa6dfb38c9caba248010ca9f46a04e7fe3666251bb6ee892c048fab2c9de21a0d6849ea5f08a4dec902a256a6f60a326c04c0f8acc95257ce288344bbf7929</hash>
        <hash alg="SHA-384">b5ec2cd687bb08ad57c9ab39e168bee96294e5fba971b0f0558a1bc1dcb1b10b0a742d76fff7f28b9797d1060860a369</hash>
        <hash alg="SHA3-384">1e718a95ddd029874fba2171696a109b31cd0eadb81aa37bbc12b60cb9b004a22da870076caa97f2a39a1843fe26527e</hash>
        <hash alg="SHA3-256">62a019c591096e7745734e0a3080f8b671a5b7fe12af3946b64e81c7a0706588</hash>
        <hash alg="SHA3-512">ceedfcaf594b9b125857c25f8613538caeb307b391f75873f6236bd0e77822d4d703efd22cddcba4f041332f24c56eeb2f9b1ffb2cbd92f03078a61635b3707f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jsonwebtoken/jjwt-impl@0.12.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jwtk/jjwt/jjwt-impl</url></reference><reference type="build-system"><url>https://travis-ci.org/jwtk/jjwt</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jwtk/jjwt/issues</url></reference><reference type="vcs"><url>https://github.com/jwtk/jjwt.git/jjwt-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.jsonwebtoken/jjwt-jackson@0.12.6?type=jar">
      <publisher>jsonwebtoken.io</publisher>
      <group>io.jsonwebtoken</group>
      <name>jjwt-jackson</name>
      <version>0.12.6</version>
      <description>JSON Web Token support for the JVM and Android</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a6f99a3cc5d2c7fd820f2aad638ca401</hash>
        <hash alg="SHA-1">f141e0c1136ba17f2632858238a31ae05642dbf8</hash>
        <hash alg="SHA-256">8f8c293730fa0241a0f882b6128c3e5b2c07f3ff3e6391126ef71e73ecb24ea0</hash>
        <hash alg="SHA-512">a6aaf9982adcb2e75406c9949f76b228a33fa48843b7615a4cebcff92e62060e302f529f22c6a70347b6c4dffb85534c75da18d0f496959ce5534a38c7d6bfbd</hash>
        <hash alg="SHA-384">ed4931e93e9a1e1919aa1a9464025f32292160c2e515accf885d427236b2e27befa2334ca2d40cfd17ad60a45d32e163</hash>
        <hash alg="SHA3-384">a047a2ddbfca4ed7114d768083e1b9c762a0ebbcb5f9d59ebdb7fce3b5c320fdf8ae4b44502a9ff073bc77d67bdc3952</hash>
        <hash alg="SHA3-256">15ba5e12d0087685f4dcd1d8e16e5c4c83a1ec88bfb1645756cc92d5a5c04735</hash>
        <hash alg="SHA3-512">c8747c5043a57413da5c9335274925bd37cd81bfecf0bdc4aa3b6c5aa6626d3dbc00591d0375351bddd0f0a37741c0cf1e100dfe5180313bbcbddf6618c81826</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.jsonwebtoken/jjwt-jackson@0.12.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jwtk/jjwt/jjwt-jackson</url></reference><reference type="build-system"><url>https://travis-ci.org/jwtk/jjwt</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jwtk/jjwt/issues</url></reference><reference type="vcs"><url>https://github.com/jwtk/jjwt.git/jjwt-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-plus@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-plus</name>
      <version>11.0.24</version>
      <description>Jetty JavaEE style services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">902cdf07d41f2dc376af94e8a896fe0b</hash>
        <hash alg="SHA-1">7988cbacb04fb22f2585af71b02ee9d669e62ef9</hash>
        <hash alg="SHA-256">a234760adc742bef073b0f4aad6f85b72bd3ff647a21fc2dcfa96ea65f7390a2</hash>
        <hash alg="SHA-512">bb23a30280e1f99ab2aae1fd533ffafd77e3ff390167549a45f60956d07cde5619a1ec7d26212cf18e067562922f2c3437a0adbaf1a03d46d6d71358c4aece50</hash>
        <hash alg="SHA-384">d4fbbec24dfa09f695c5cdb347eb938c5d0f59be955b29a3dddf2b1a34ec4f13ee5a40486d205d388a33a2f2a7a6fade</hash>
        <hash alg="SHA3-384">556279590f5df0d79608b149ca1ed1c98cd6140d135cfad4c54085de55b07f6a3f327dff6b702117d8ef33d040fcc0aa</hash>
        <hash alg="SHA3-256">40e29c29689a13195b760a72c866f7f1967fbf823096a653c2c5d4ec4cb652ba</hash>
        <hash alg="SHA3-512">a077e892dd58c99264785f077b1f11e7ecc6c6ca6356dcf5097c9252448b1e1b4c8fd83ab19299fb2c6b37b9301176c6cb787bfd6e42d10ff0dc34feba096937</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-plus@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-plus</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-plus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0?type=jar">
      <publisher>EE4J Community</publisher>
      <group>jakarta.transaction</group>
      <name>jakarta.transaction-api</name>
      <version>2.0.0</version>
      <description>Jakarta Transactions</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cddb47aba40b4bf3f9eb8bb5c0b3e06</hash>
        <hash alg="SHA-1">24a0525b4acfbca4086d2f1278be3a084fe1c67d</hash>
        <hash alg="SHA-256">21474b7ee0ad764c05d5ad0bc430e5e647cdeabc86cb587477a7eca5be6e584b</hash>
        <hash alg="SHA-512">88c76b2da7a8c725e64074e30d1fa5797e36e9cf5bf67280d10c92d99452db89e0325fcf5bbe20052a96d3f73299f0fea699c850493fe0a64cd0e10dc9ce11b7</hash>
        <hash alg="SHA-384">cdac48a45cb496e659a2d262e8e36e3b89dcb822de44e84c1ef0a13919870646aa995eed70515986cd1438a09cb0cd3d</hash>
        <hash alg="SHA3-384">01757bfb62766e984c82e697f682e052ae038419690aa42b3b05ae19a6e8cacebb259b577576f109f8a04ba60e63cfec</hash>
        <hash alg="SHA3-256">6349e4e76de2d9fbb6523235480a38322292a5f292f6c2ec2125b1803d8833be</hash>
        <hash alg="SHA3-512">6ab2efa244f09dc552f35f99abe3dd8111a7ddaf62b3268ad5cad9b23c6993691481c6bec6fffc79c7faca9293fac655a6d12a719030837ff9c9e7a7b2738ad9</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jta</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jta-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jta-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jta-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-jndi@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-jndi</name>
      <version>11.0.24</version>
      <description>JNDI spi impl for java namespace.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e31c874c52a3debcef08e240f1d506a</hash>
        <hash alg="SHA-1">70345273576cd8fd6ab8a6d6bfb8d4fdf5505330</hash>
        <hash alg="SHA-256">3f2e226474dab938d6df6d3ba36d1c5210dd7d627759435c8855f7ad29f853c4</hash>
        <hash alg="SHA-512">48d21ddde6f6edcd10a5929839dc9b149715048ada63c1016aa13148d1a867e2d4a8d076d2f3a97220a81acc3694258b7557d38798cfe72216cb3bd24c6e6bc4</hash>
        <hash alg="SHA-384">64f78e39e918df42ac76751c71c35cddecbc531b2bee503b31d94ea7de21ba77b3c88c2270d1da98492a52cd59a925fc</hash>
        <hash alg="SHA3-384">e6151442f5d3082d3e0c2cc964de451501ceeb6222f40fd94378a9804d0802c18c68a92f726e42c4f2c4bda44018cac8</hash>
        <hash alg="SHA3-256">80ce1b369e15eb7b685451009b44847b2bd298ba8f5f795b8f4492f34fc55e63</hash>
        <hash alg="SHA3-512">f676e15a90d027651439e8a098652f6dfae689975066594a9fc379224c06a63b491de1400b532be037ef8413e7d9afdb5e03d4653e02c16c787c3b23e95896b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-jndi@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-jndi</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-jndi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-webapp</name>
      <version>11.0.24</version>
      <description>Jetty web application support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e24a7268701920e0118faf377a499147</hash>
        <hash alg="SHA-1">66de68e45eb30de12147fa4997169ff04f2bc4de</hash>
        <hash alg="SHA-256">31cb12ac71ea9c8ce58ea0d299f38fdf0eda6ee233a770ae1ea3ce8f74b954fe</hash>
        <hash alg="SHA-512">3f6c2f2133ae3f7ab14f097704ea50ee0148cc0f7923cf1a97d8b0bfd4b70bcb81d23a4681192cb2c39c95311addc2bc87970cdeb4807b70bca1500be1a79efa</hash>
        <hash alg="SHA-384">d739f8af093c9cd00d050b3344d98475ce99a99efa80770ed2f93525e0a185742e7eebbd5dc280493d325ad7b8a6b16d</hash>
        <hash alg="SHA3-384">9b460530140ab18ffc274e80525b01590e77cafb0f1525956952805ba583601de53d0cc5d0d8701e7940d3437907d862</hash>
        <hash alg="SHA3-256">ba7e5bd7871a919c3b79611fdac12d05b049a27f4c8dac02eb51ed474579ea42</hash>
        <hash alg="SHA3-512">9ca0631e94ab7564a81bdca29502a8f7d8d19bf596f00b55e34fb6e1b0d72d82ba7adc6efb434875b57334bdd111bdeb0496275ce5d3faf576ab805e54358845</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-webapp</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-webapp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-xml@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-xml</name>
      <version>11.0.24</version>
      <description>The jetty xml utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f82c139eb406887b8546fc7e8fc6ce52</hash>
        <hash alg="SHA-1">826f684bb30388dea18f568f36265f5f0008a978</hash>
        <hash alg="SHA-256">80e174e96d0620d9c27fd0a4d19a831278f1464c9c56bed9e437cc8a45255fd4</hash>
        <hash alg="SHA-512">058746f7bab087312ed88f6cb88495671274a481845a6f2cff9cfcab695e5248752cbddff02ff74ded548c7d58d1d7a367d221c99ca7e7e41705806d92d04ee3</hash>
        <hash alg="SHA-384">35efd7f954db3cd67da6a6434b997f64a5762ad9d869ceadc402eabe930396a4e9d994234d1114e633cccd17b15a18f0</hash>
        <hash alg="SHA3-384">6294295ef8d258f39d586a524266c6d4db865261e6042c4259e670c73dbbd21d79b5bd34528c4505b6f86d676be601c0</hash>
        <hash alg="SHA3-256">e22ee2f1fcf84eb62762ebcdacae1b5e28fa8409a0db2ea8391e14b7989dbfd8</hash>
        <hash alg="SHA3-512">e3f3e83de7ad5276106254f38759772cac4cffd95feac6b00b3bef28f698d0318cca67bb4da955eb17cd4af71488e36594c6348ff58354695298c95b0425177d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-xml@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-xml</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-security@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-security</name>
      <version>11.0.24</version>
      <description>Jetty security infrastructure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27b8287afde69c58204fcada233533d5</hash>
        <hash alg="SHA-1">b10e8da0c2773b1f5c075b5873d4196077bc903b</hash>
        <hash alg="SHA-256">07f556e34b048c819440b9e99fa6a9c1449e0d10e3c0d8628a446be5ed082b88</hash>
        <hash alg="SHA-512">5979e1d838f60673cb8b34e0de8e3bdf1328c82676ab47e1f93204680e2b123547d34e8ab00e49e8cc264b1ce6ff263c31e0a57accacf1937b3cf790c9a57504</hash>
        <hash alg="SHA-384">9de78dcbd39be8bd9540c77ca9d56a6c53b2b81629f40d527883967523588f1b201d5dfab82cd11718df2165daeb73c2</hash>
        <hash alg="SHA3-384">5823d65150cd380f85cb1255f6df33f7d1628f36ef5e0514da596954c8ea3a2c2e2121e50d3ebe86bba37f4005f9ef41</hash>
        <hash alg="SHA3-256">88b2165007bf859dff1bc37dbcc2c333a20078f3c78f66f3f304afc614648f79</hash>
        <hash alg="SHA3-512">3eec5fae1240e7865bd6bef4bdd5be68e68e955f447f6a988a97655a2c8c8f1351931b3ce606ec17ddf757c534333a60d9f75e124861d48bc6262c11513a1ab0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-security@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-security</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util</name>
      <version>11.0.24</version>
      <description>Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9fc308a86ad625726c92e3dd7b459ad5</hash>
        <hash alg="SHA-1">cbc353bcc1a874f8909d65f1bc0018a976727243</hash>
        <hash alg="SHA-256">1ec701f505056443de134d0e5464e298aa15400981210c10b668a070ffd97bfd</hash>
        <hash alg="SHA-512">13b2651ab9d300ab3a1ab1b6a6209c2a7d0cbc59f4a4600ca69282425fe716b357bf12f58d39e031eded825860ade264792ef69bbdd8e9ddf7de72c2e2ed7a10</hash>
        <hash alg="SHA-384">2f9e01f83e1886eee68b059b689ca3e37178adc16cbdc5d5c5584841b9b057baed47ab1263846d051b6753d4411775b5</hash>
        <hash alg="SHA3-384">0cdbf0d81634f53b9238b7edf7da6e3c9f521f4dfe9eb1f26cabd93dfa5e65ad6769c56582583916cf6360cfbc42e26f</hash>
        <hash alg="SHA3-256">7c2bae4258e072044a274b2cdcaa89027d8232d3a81434d97186d8d8da4af1b8</hash>
        <hash alg="SHA3-512">88899eb086b191ecae3a04a00ef6b8457c6de8b90d2bf6a0388f334dc2802eedd53c1336c0c5f3a1823268d3add83c4758930f5a1ba9af7b55597b8798b30606</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-util</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-server@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-server</name>
      <version>11.0.24</version>
      <description>The core jetty server artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d8e907fa03c6146b69ed64ace3f94c2</hash>
        <hash alg="SHA-1">688f5b139c37094b70c8d706a234afaaacd06fe6</hash>
        <hash alg="SHA-256">1021ca69a4cb56bda466ca9bbb0fcaff3df31629a2ecf7240595f65aebaba34b</hash>
        <hash alg="SHA-512">2d57f2044208f27a03a8b310b3f5726ea041535dfcd871cad2bada89ef40275808aa87053bcb6e5d79e85a884d6383ea22629cc859027308ac397275d84d8930</hash>
        <hash alg="SHA-384">2032d994f9aa110ec571dc6faa08bb4d96c807e94f4fab4f5f61fe28be128c3e56743550194e1b77e0d665693199bac3</hash>
        <hash alg="SHA3-384">a111f451ea891ed3dab5a549b7b36f822ac411fc23adc66d7ab1b5b7556b44f7f07e9cc7e29f84c14ad1a6404a78b336</hash>
        <hash alg="SHA3-256">81d4155587d8d6eaf77e6b3e7796af25b5c3caabbc8b36e8896ede22135d6716</hash>
        <hash alg="SHA3-512">5e05d542024d460d9780885e7dd7d70beabfa9746c18f79463d1343c8adee3c872ab33133e0751eae1f57bcc7551f4d88d07fc75b3d6bee029f32b8d34d7182f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-server@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-server</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-io</name>
      <version>11.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">087b57d286eec61b701f28dc8a48acf5</hash>
        <hash alg="SHA-1">51badc8b9409c4113c1f4b241d2f0c60ddd7080e</hash>
        <hash alg="SHA-256">379a04193b4e666d7900478f602d12bd4e3d91abd3b5f64434d92927b04720f9</hash>
        <hash alg="SHA-512">8d73d5ecf28b948126e436c8e73799795f9545fe7d0d9fcf9348c8b9120ad132961905a71d3ce52d1c16bb63a2543e2175ed335043e7389257304389ad4c52db</hash>
        <hash alg="SHA-384">f7b040accb92847f4fe0950810fa47d3e797a3b4da84b1eb1e1160d6a83292d6343fdb46d0eaebd73a55ef0851d80f64</hash>
        <hash alg="SHA3-384">58daea05b02056d741cd0b4db812b11537fbcacfee4b245e7110787b1065a9820c4ecf9de2d6a37ddda47d9f57a278af</hash>
        <hash alg="SHA3-256">f132822b22d63ac0c91b1efd9cfe2166bad7fbd86646db1bf83993fa9f54bdc5</hash>
        <hash alg="SHA3-512">f814dda3bd85024777c0e3864cfe1611ca2f2ba490e84cfa4ceea8d10b429daf36104b32799d9b2d8fba571d4092fb2ab8b07be3c8e284f0f91ff747c0c45fbb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-io</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.eclipse.jetty.toolchain</group>
      <name>jetty-jakarta-servlet-api</name>
      <version>5.0.2</version>
      <description>The Eclipse Jetty Toolchain Parent</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7de826f76a829dc9dfb41e437ff4bd01</hash>
        <hash alg="SHA-1">027fce6d666a203526236d33d00e202a4136230f</hash>
        <hash alg="SHA-256">efb20997729f32bfa6c8a8319037c353f7ad460d5d49f336bf232998ea2358db</hash>
        <hash alg="SHA-512">44db94070731986ba232aadadad891d44e7013e2de5c9eb5d8195b6cc8c211b8cc10b36f5d38d8e43a1d34e38e7dfb309223aac34ee407546c9b2d30e450de19</hash>
        <hash alg="SHA-384">b4e0af890dd49c349a6f744ed1367ec782f8d11a8bfc8c94fcaa3f807d0512aff5541ed7f58a88e830745b737bc9ce86</hash>
        <hash alg="SHA3-384">3933bc15944ea29ba8e2decf49c0bc427c3f9e26fd57a5c036ad03b59897e4bd4ff463e35e8714ef64dc1c7ab4a6ea90</hash>
        <hash alg="SHA3-256">faa2caa2b27390704cf992cc33d8fc047b65aa3e252c85378e91edc7cd017e20</hash>
        <hash alg="SHA3-512">8c678be5cc90f9ab9cf9ba4ab4fe29e9c91df1e44c74db4641e5778aa15f18beccb28683ca31e160242e40db4a7777acb3f266aa3a4f1c50f7385b41f1b88416</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-jakarta-servlet-api</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.toolchain</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.toolchain/tree/master/jetty-jakarta-servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-http</name>
      <version>11.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cbeb0fb0c62e7c089ed72cffb1f9e113</hash>
        <hash alg="SHA-1">eb6113b806eb606750e79fa0bbead5d95f0fc1ad</hash>
        <hash alg="SHA-256">64e3686347f60fb1aa025013821547995a708e61a89967c0386ad3adc9fad11f</hash>
        <hash alg="SHA-512">b112acbd3765beec0f3fd3a1224d6022ded7fe566259ab60e25b44fc768afd4d2e1eba4a5915a2829e5f35304570dc86c801510f3cbc1863cb2b940ee3b71ddc</hash>
        <hash alg="SHA-384">cb7efaaae19fca4f27b7c291fee7621b224d5af01e5094636185f07212be3a92f3f1148226b0790e7bbdc2f527d43168</hash>
        <hash alg="SHA3-384">874d532c7d141c1b44de7980501c8b9f40d46345a384c9a5eaefb2485c926354a97240f82c23a66ae795e28a3cd3f88b</hash>
        <hash alg="SHA3-256">af6b457936df107127fd0cb203142d54d57cd90adb7833606075fcb4b31904ea</hash>
        <hash alg="SHA3-512">0e0b88e2e3eb1c5824ebaba10c8f82322b9d547fac5a78fe4da0967569fff412a5cd1bd20f1b382dce040fec1aea790ea833316b3b424d80b8897601c9943517</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-http</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-proxy@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-proxy</name>
      <version>11.0.24</version>
      <description>Jetty Proxy</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9726aecf5bd2fe5de232c11f1d3dc211</hash>
        <hash alg="SHA-1">5c3e45db68c20cd95773967f0fff1c8c8eedae2d</hash>
        <hash alg="SHA-256">4a6d863f43cc407d06b2b880814387a20d21a1d229b4d755ef1c7c2e7e103867</hash>
        <hash alg="SHA-512">7265cb5094ea3859442d2e355c4fc761f4e1a47acc6eb122f337077fe387a16bf1b0f0e1cbb570a98bd616d560d2767c411e0ce3481235da805df4f6955ed836</hash>
        <hash alg="SHA-384">a229a70048211fc02b59293c2867589b3f4406c8e64d342ef41afc40da10062cfb439f421f5d324ac0d58c7bedd7f5c2</hash>
        <hash alg="SHA3-384">4fceecc3d5d677e5e431b611a0ff628eb02a684192cc1eba4bd9534edad02c4e39745ee2c1b6c9acf8f1455e52421dec</hash>
        <hash alg="SHA3-256">78ff45a7eaeabd6b2943f8e43e5e866a7c36d46a21bceeb3120a54e3bb759f50</hash>
        <hash alg="SHA3-512">eaaafd8c7df5a6d11d3919ec59f26329ffd4a24d2b502a71e650d20d1e401883d54714e6e6f82ca7a3f58d953f2a414b298e27ab0761612addbedbc5d7a7c801</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-proxy@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-proxy</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-proxy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-client@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-client</name>
      <version>11.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">736d2695b986ae75f747bb12ec5e39cb</hash>
        <hash alg="SHA-1">ec02fca8bc1ab16086387ab30e750ea79470cba5</hash>
        <hash alg="SHA-256">c983aa15374519d8717280e1d84334dbc5ee42278fb109655f6f5a94943f4d2f</hash>
        <hash alg="SHA-512">8a779d9d6ec02dd0e1623ed4664db6987721bf43b902f0d7acaf0d5d68d22fc841798f313820a2338aaf38750cb8103044cd9e0ffce8d1dc78793342ae3c14f6</hash>
        <hash alg="SHA-384">aab46c4e27fee08dcd17deb113258689dda3a1e0aa9f78a77bbc3e0988efc6adca8bc11c5fa277cfd355c685e5fa316d</hash>
        <hash alg="SHA3-384">9a3566e5eaa7d6d54d9735def02f89e67978d1bfca2beea4435cd0f8a84fcc30569eb0b6db573ccb05f890cd89808745</hash>
        <hash alg="SHA3-256">9b9cf6b23867adb56bf6cb8414bc7fee5c2e32b59e7409b8fcbc11397bd6fe38</hash>
        <hash alg="SHA3-512">37aedb4766a9b69ede132b9542e5f84fd0df90f6716685ecff5f03cd46b9affd4d1daabffea09bc21313983e7f76de7e39348dd0badb6b134fe2c88365cecf18</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-client@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-client</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-alpn-client@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-alpn-client</name>
      <version>11.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6a9db12caac9289371864999cfdb8485</hash>
        <hash alg="SHA-1">868ba7557ee9dcc2f22408f0ef1efb6897bbc1f7</hash>
        <hash alg="SHA-256">d3eabf7f0a50ee99e4c2eed3f955997ad7c84e831ef6d99ca65fcdd8691b83bb</hash>
        <hash alg="SHA-512">eb2d868783e966bbba03ffcf1bcf6d1643f7d84435464b2cc4a8a7237d4badc93e1fe6f9a4e933745d56c69bb9819a3d03bdcd7496aa8a719be21ef52ae8b931</hash>
        <hash alg="SHA-384">7d818a66ad93367c7b7f56b6a6ec48d7b6816cbd596422fcbf3fc944c230e6cc4fa3742c9cf6779db841f9bd1b3442af</hash>
        <hash alg="SHA3-384">bd1813e1c59c2aaa66f02763fa03c935144d57907b77e52be2696e8b5df740a4bdda406342ae499e638dba632c6c3a31</hash>
        <hash alg="SHA3-256">9bdb371af1dab7058ca5b62a892ff5d553b3133188bfc2f6c941f1507eff2f1f</hash>
        <hash alg="SHA3-512">64aa9d53617837b9042d7f121424af235bab4221246fadbe72d51493ed790e37d7d7e9c74f6868478f6fc9c9ef027127cc46805fd33c28a028c73923a9a3a375</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-alpn-client@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-alpn-parent/jetty-alpn-client</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-alpn-parent/jetty-alpn-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-servlets@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-servlets</name>
      <version>11.0.24</version>
      <description>Utility Servlets from Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">228ae2126f92357e82999da62f0bbffc</hash>
        <hash alg="SHA-1">ca8981abb09f4920948b53537f7fb38ad4fe96f9</hash>
        <hash alg="SHA-256">c7ae84a1234dc240446ea9e66f22e129105f62f25f113627304f8b3c169ccfb6</hash>
        <hash alg="SHA-512">f3eb410d7bdb3ab3e07bc4d3db740b675f1e39741b68383b772be071fab49fdc53475a23798450abb8898110f9960282558e032617fbdc66be4c6bc25de9d6af</hash>
        <hash alg="SHA-384">b11c5864c56e3430d9e0cb55c26e0581a9f83569448131937130dc123a30da1367655b0a0060cec96f0720c7601fb021</hash>
        <hash alg="SHA3-384">f1b34adec0736e4d2662876fe2d91710002e9b2eb94cf313ffea80842ef8e184c22abb03e44b8e00b2b84e4b3fc890fc</hash>
        <hash alg="SHA3-256">17ef3d5abf07c979d8580bdd446d8d8225babf99c3cdf68c602b160a71d2dedc</hash>
        <hash alg="SHA3-512">dc97be1835c4c97a24d9ab1256c3578c48151678f968f7ac425d933ef9cf516a3260122cc92e71ab5ca175b6d7efc1a6f5c8d77db722a37c60ce2e0ad267d711</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-servlets@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-servlets</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-servlets</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.servlet</group>
      <name>javax.servlet-api</name>
      <version>4.0.1</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b80414033bf3397de334b95e892a2f44</hash>
        <hash alg="SHA-1">a27082684a2ff0bf397666c3943496c44541d1ca</hash>
        <hash alg="SHA-256">83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60</hash>
        <hash alg="SHA-512">763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38</hash>
        <hash alg="SHA-384">9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3</hash>
        <hash alg="SHA3-384">be8a209d1912492e86e611fc42e59512a89c464aa78cea3c5badd3290a6564d8bde55933a7c5d8113d9acc848a382751</hash>
        <hash alg="SHA3-256">f94dd8bf0908ca77e5213d166035a427e658ff4a59d35daa7e281c5fb2fc390a</hash>
        <hash alg="SHA3-512">3abbd3cad570557be24b69f700c217c7c8e1736d4db74f3ac28dd96b80822ac1c7631b3a9a15b9738754a3d68e4e7f13b732820eb8b8e8e329690ec2a23c621c</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://javaee.github.io/servlet-spec/</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/servlet-spec/issues</url></reference><reference type="mailing-list"><url>servlet-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/servlet-spec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>5.0.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b950da93e08cf6d5a2d73dc7a80f9403</hash>
        <hash alg="SHA-1">2e6b8ccde55522c879434ddec3714683ccae6867</hash>
        <hash alg="SHA-256">33d3a5bda82c7d2f1b898685faa954f1fc34f7b0ae5c2f6ccc6d051e8a10973b</hash>
        <hash alg="SHA-512">667578d33b939b606bc38322e5cd8d0be4eacedf86e13f34b6c7c9d8ec6ef719ac7b4d830eba2588a4ea5c924fe3772960e94a99642a039f1781421e7eacb1e6</hash>
        <hash alg="SHA-384">329e54722e5da97d1c8d049c4dd68b0d8e22f72b299c2dd4db7f1bd3b07de4cf891402904760dca4584e30193741b11b</hash>
        <hash alg="SHA3-384">4b41bfe405d59203409fe3a5a5d11f177eabe7cd0eb7994dfe1f907c67c93a766959f703dfee1ef9925d420d0dadf9a0</hash>
        <hash alg="SHA3-256">b73926ebe8f21e0d3f440f9e7f3a229fae7975b34afeaa5c42d4334cb1d86121</hash>
        <hash alg="SHA3-512">a85b76f03626ad4d02779d812190fb4b44fddf132dda92c0c908a7eb182f202b0f02f54eea500d92b3a5667d5288e03269530b63c7f72504f424d3dbf5f8c48e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.servlet</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/servlet-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.17.2</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52e5f2054151cf878744451e6a46b8f0</hash>
        <hash alg="SHA-1">cd6bb9d856db5f61871a94d5801efd0b93b7fcb2</hash>
        <hash alg="SHA-256">4148332728490cef12b29dac4c385f46982f04285132c6fa51ad7267d7dc7a8b</hash>
        <hash alg="SHA-512">a7f9cb90a37bb1e2c80958f6de1baa5a8c82b7f96e5900dba13d7679019a0c2b1cc7b551b338e24b9a782c961112675e02f439498b96f389b1f899945f08071b</hash>
        <hash alg="SHA-384">0f8b3761bac50af319f81e51f077c97958cb4a571f1a78a6e660b97d3b25979a51495f578e643e0145a3c02ebbec2693</hash>
        <hash alg="SHA3-384">2db277092499618e6f621cea68f368167a45415260b36731662b8b9d3bbd28b2b99683cfb93b70b3a427ddb4493221f4</hash>
        <hash alg="SHA3-256">4f3e278f3525050144ca4fe27f097a5c8f9514d47f0e4deb2817f2964fda3130</hash>
        <hash alg="SHA3-512">760e46f5d41a57bf0576ca89c467e8c0f664e09954b16c25d63a9db26a0226f4f15737a2ad776f82e0fe39ff33e9da0729e329e4782f12d8d69be1e1ead60c5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.17.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.27.1</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1db4bd87b0082044c6e7a6af0b977a3e</hash>
        <hash alg="SHA-1">a19151084758e2fbb6b41eddaa88e7b8ff4e6599</hash>
        <hash alg="SHA-256">293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16</hash>
        <hash alg="SHA-512">5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226</hash>
        <hash alg="SHA-384">307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f</hash>
        <hash alg="SHA3-384">b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4</hash>
        <hash alg="SHA3-256">39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621</hash>
        <hash alg="SHA3-512">40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.17.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7730df72b7fdff4a3a32d89a314f826a</hash>
        <hash alg="SHA-1">b17d2136f0460dcc0d2016ceefca8723bdf4ee70</hash>
        <hash alg="SHA-256">6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4</hash>
        <hash alg="SHA-512">dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa</hash>
        <hash alg="SHA-384">c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5</hash>
        <hash alg="SHA3-384">bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b</hash>
        <hash alg="SHA3-256">f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2</hash>
        <hash alg="SHA3-512">4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.13.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b4766452c04316e3ef6ffe3490d6b10</hash>
        <hash alg="SHA-1">ba2ed5521c491cabf7ecdb57f77922561c2e8958</hash>
        <hash alg="SHA-256">1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38</hash>
        <hash alg="SHA-512">d4fdc5b2f1d3cbe1ed4bec867fad4430a38ae7ce7a3a9815c9839c9b16a2af3b67d92bb663854282e71042e3f391fe35a5de0fc9f0fcfb6ae7becaf725f8bfeb</hash>
        <hash alg="SHA-384">8c598624f9b44f23f08a92635bf7e275c1c2b4b007a9738c42c268c977725a003b50c04ca1058d23e541c58bd17cd782</hash>
        <hash alg="SHA3-384">b2d3c238f6e50356d3b9f9647caf15dd43276ed84a3eee2134f9f5f9e26488278bb1634b7a826a29892a7ce88ec97611</hash>
        <hash alg="SHA3-256">d44ae9baca87e428ae1d14e3418d0963086031ac23020312e4a6206b34bbd219</hash>
        <hash alg="SHA3-512">5077ff2b3d167c6f40284e99d6fbf54dd1f7150c49619ab5e3a1da1bdb0f6ee2481d5e3851489ff37be6589a9c8fdc0823f5422f1c78ad38d8a539a9d7d7f82e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.18.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cce74ccf461cd6502ae04c908eca917</hash>
        <hash alg="SHA-1">44084ef756763795b31c578403dd028ff4a22950</hash>
        <hash alg="SHA-256">f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b</hash>
        <hash alg="SHA-512">786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f</hash>
        <hash alg="SHA-384">4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a</hash>
        <hash alg="SHA3-384">d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca</hash>
        <hash alg="SHA3-256">89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9</hash>
        <hash alg="SHA3-512">6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.4</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4a37023740719b391f10030362c86be6</hash>
        <hash alg="SHA-1">62ebe7544cb7164d87e0637a2a6a2bdc981395e8</hash>
        <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
        <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
        <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
        <hash alg="SHA3-384">15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f</hash>
        <hash alg="SHA3-256">1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5</hash>
        <hash alg="SHA3-512">c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-collections/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-collections.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.ning</group>
      <name>compress-lzf</name>
      <version>1.1.2</version>
      <description>Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression.
Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding.
See "http://oldhome.schmorp.de/marc/liblzf.html" for more on original LZF package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f620dc5d92f58cfdb1c51895daf05f58</hash>
        <hash alg="SHA-1">d09d33ffa7bc1d987db92e5ebec926ff92b7cbdf</hash>
        <hash alg="SHA-256">a9a76c85a3cef3a22d4c0e8647a1449b638885f2ceb4d8c9f66df3c677cc228e</hash>
        <hash alg="SHA-512">ec119a239e5dc1a213ae06380cdaa1ab07049430485fd2e5651281ae53705feb4d5dd767ac87aca8e329adcd1e1325585d50b273738e6cb2b94b31c7156828b2</hash>
        <hash alg="SHA-384">f00e771ca4878a82ac6698fef4b8b17474fef2b3602ac850ec352a66d43cd798270a215313b17d98096e2f017eb7095a</hash>
        <hash alg="SHA3-384">2421eaa3ea9bb3aa1d2cedff792950ef197bf3759357e916dc37b27529fc7862aaacd02dc6dffea7819fcaf9ebc2c3c5</hash>
        <hash alg="SHA3-256">706e6da01e6e6c8c31d59f91039937941918269763a5a944fc620666e21b2e15</hash>
        <hash alg="SHA3-512">d3d6bb73de4a09c8f0956881f532167d01480f5359d035e42746e7d04757b9ab7752e9a1107c1aea5afd232f06e31b907dd856873b23a9b681744f32ab520609</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ning/compress-lzf@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ning/compress</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/ning/compress/issues</url></reference><reference type="vcs"><url>https://github.com/ning/compress</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.7</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d74bb2e2857f965683c9de931b71fc86</hash>
        <hash alg="SHA-1">3049f95640f4625a945cfab85715f603fa4c8f80</hash>
        <hash alg="SHA-256">4c766cb3f855415ee734b2392949a0b6f12a60879334a74518deaf6270d32e36</hash>
        <hash alg="SHA-512">22a6ebb8e8ad4d8a149b0c67d8658ac1535d7014857064c4f7ed4999e29c6186de8a80b50dd9b59f631fa1c24970524fdbbb84083c80c59eb0c72d4efb041fef</hash>
        <hash alg="SHA-384">b7ea971de5e286b4bdb8b96063f0ffe611ef82f5887fa6845fc2721bf0e71a88b0c754ba010816596f0b6c178160c0c5</hash>
        <hash alg="SHA3-384">9ef6c5ad194027c8b4be0f756dfeb958ae3daa5ad942b34c4e9e570ce7516ba91fad298929e4d716f6a091d0b274bbc9</hash>
        <hash alg="SHA3-256">83f4ede80f49271566745463652e3cdebbe4e2112174400ddf082bf9b39d09cd</hash>
        <hash alg="SHA3-512">3c1ffb884ac57e812f997357f9501afbffec3aaac2aa2bb87b0dd8ec2e7e43d922c250dfc658920ade2014aa138440d2d9cdfce8e453812d089898d10390a6db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
        <hash alg="SHA3-384">ec0d6a00760d0a4ecba13a41785d6ae57a64552b1687eaa3e292b3054bb1348e49ab8a938197ff126f9218c6cb96ee1c</hash>
        <hash alg="SHA3-256">7be684c102891105f66d378b61ea1297a392c1618b5aebf7e0b281f55217c206</hash>
        <hash alg="SHA3-512">0b2294570ea2bfbb50ced21dfa4bad956467ca447e9ab2dd602a3478371bcd0e9f13d2dff74d06827a28882409612cdde00bd91267be05bd3510c68268bf3166</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-9?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.6-9</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">93c8b62b6f5a4fa74e2259c39b8c0a28</hash>
        <hash alg="SHA-1">69cdf67db2077e677113172f5b9cb30a15cffc05</hash>
        <hash alg="SHA-256">e122143e2abb041b6384e43c9a79980fe3d2ff3d9610ea20b29231ea518772b2</hash>
        <hash alg="SHA-512">dba0a8fa61368ad3263949e00427a2c82caf392977a8a97415b617dc29c7df2a46bed709c9ff3460954bd3dbe5275da91fa36cea53a9aeed27621163ec8ed59f</hash>
        <hash alg="SHA-384">46e27c4a3f8c558ed3c7bcdf3e1cb2c9bb65526590e20f520dc9d6de604507844aaaa00335fdb1e0c4b44e901d361d0f</hash>
        <hash alg="SHA3-384">e030a582a33b7d22ce9076e864aae5a9737739fa21fd8e20b4e189ef756edaaf67a01c74786868f0127b4cacda708fdc</hash>
        <hash alg="SHA3-256">143be6e180a2bcb257874a5b32633f118a86a0464a84b3ff270133d44cf12ba9</hash>
        <hash alg="SHA3-512">6ed31ed81691707cb4e7f032940d2161d5b74f34a4c79eacb2cc62b7386bed8f2af180f3f31b761cb6c56efc2fd3c831b97915c389013a6ee41f704225fa4eab</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.6-9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar">
      <group>org.roaringbitmap</group>
      <name>RoaringBitmap</name>
      <version>1.3.0</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ea65118238dc208252d95ff1868599c</hash>
        <hash alg="SHA-1">a46ce7a2dc494da69700ab421f081b1583857f6d</hash>
        <hash alg="SHA-256">73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0</hash>
        <hash alg="SHA-512">1134d4e3c9bb8ff130583e10d00487131c1aab456b625f9289935b660046b07c9acdee0a1dbe9c1fae145c2b1b9897460b1aa3cc0574fc2be976a9781965d7c1</hash>
        <hash alg="SHA-384">0fe7bd9414e4705c41d8eafbfc2ffaf255230fd3804e0c9b2f0847d3124d9b1677df49cf2cfa880c43c45043353f7d2b</hash>
        <hash alg="SHA3-384">0350386ab16e071e5c17406a2dfbd4290fa841fcf7240b93760553588b90a64df79c21e54202b7f25c310446bd65ae64</hash>
        <hash alg="SHA3-256">eac8bd4158fa85c6158a7cbd6fdeda29401ac80d8272cdf2cd7e7c541d887f91</hash>
        <hash alg="SHA3-512">b3be67fad3ce4fbf4a1a77956d632538b0cb68c92d9ec7fe39799ca21a40491d859422d94686722872596c4a89ca0499622927f65174b9a88f0b3641bc58f5eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference><reference type="issue-tracker"><url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url></reference><reference type="vcs"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.3.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-xml_2.13</name>
      <version>2.3.0</version>
      <description>scala-xml</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7247fdde32cab831601146e045d679d6</hash>
        <hash alg="SHA-1">018538c66b432de17a7b295e56e22a041ea4613e</hash>
        <hash alg="SHA-256">4b4d6698c74bff84a105102bbf58390980dc7bb8c40bdea4bc727040b3f966bd</hash>
        <hash alg="SHA-512">b78dcd17492488f7ddb31f2515bbc07ac473f204d533810857c29c8c5dea9bbc3ca7b23556ab0f3aa232d3ba3e0f507e9611f772cc0dcc699e173be104639a0f</hash>
        <hash alg="SHA-384">8420683a3320d82f957e87a9a10419fa070944ee0150e5a96a226b7e4f3f7d70d879416a616af13f4858f2ddbd35c091</hash>
        <hash alg="SHA3-384">03e12df31f2e0b95ae83c6cea57880a358afc59368c1b000625b4c86c8b0ccf011b13da7cd90e1338a984e44c8bbdb72</hash>
        <hash alg="SHA3-256">4fe15962140b9c1be274d8a86238a5d8a2f25741f382af61294932a2ef3701fd</hash>
        <hash alg="SHA3-512">de6c6007c7edbd62c8c89bb562e98a6956de84b27600163bed0c5a3d5805544b0e531f8818b4de861f92a594a56aacc3ed409f8c078f524f6529daa219854795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-xml/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-library</name>
      <version>2.13.16</version>
      <description>Standard library for the Scala Programming Language</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0794d44b2d6c8e395cc9684ab50d82d7</hash>
        <hash alg="SHA-1">9e064d9304904fd7b6bd2b55a9e601b8c1c9006e</hash>
        <hash alg="SHA-256">1ebb2b6f9e4eb4022497c19b1e1e825019c08514f962aaac197145f88ed730f1</hash>
        <hash alg="SHA-512">31054e41700bdc3c2546083d6dbac2c4e7bb693674d7abed1ed72a0d551bae4b4238d3fa2da8472d5af3b5e7d636326d6b9dc0d8357630ffb9d7c6a434fdb894</hash>
        <hash alg="SHA-384">758c65023454212af7c8507da25e6d9a631420531c7dbf8c74f97ba773721d9f7c498e83bc3d40d34ddbe1ff6b4e8b2a</hash>
        <hash alg="SHA3-384">6d487f5710ad296ddd2cce44c242fe0a4ff73fff19e98d8da97e65b684ef67ce31a5698d7d96a5b3eb4456602326bcbf</hash>
        <hash alg="SHA3-256">b376d8f0dbdbbfaed2ed6d98baa27cc029673762a90cfbe69dce3a95fee7c47c</hash>
        <hash alg="SHA3-512">c6d25774a0d1f417cb3c5f5f5ae34730117f9643890b045b31014bc08afc222f5bb278aaaca623c1e9ba097bd9b3de5198f56339962050f8e8cb4fa9b52ae68f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang/scala-reflect@2.13.16?type=jar">
      <publisher>LAMP/EPFL</publisher>
      <group>org.scala-lang</group>
      <name>scala-reflect</name>
      <version>2.13.16</version>
      <description>Reflection Library for the Scala Programming Language</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d915da4fd6ef8871a471ecb0b7075c2b</hash>
        <hash alg="SHA-1">4958d4e43faf2d6d66f18ce2aa9a3e5ba141f87b</hash>
        <hash alg="SHA-256">fb49ccd9cac7464486ab993cda20a3c1569d8ef26f052e897577ad2a4970fb1d</hash>
        <hash alg="SHA-512">72fa06e4d92fdc35cbb24cb46d3081cbfbd0ac3b73d0b8c7382fe99fb767f7ae4cc903783966e5634b3f14dda8b90cf34b9276d7c776e5580779bd822eff3143</hash>
        <hash alg="SHA-384">d9d30f9e1e6c92aedbfde466e409d22c5c7091a2d1288e2b2e402c7d35dd1c662c7c6a9d6adfe1bc3f93cdf74e049341</hash>
        <hash alg="SHA3-384">1947a9c2b594174d7ac1264e4335f17da376f927b371202555a327cef5fcf39668eb3d6dde70466eeeaacc40abdc1f2d</hash>
        <hash alg="SHA3-256">f3bb3a5ffe593ac35276e9c5a8c4c0540ed18a02b43d27e9c7b4a171c0653ee5</hash>
        <hash alg="SHA3-512">c329ecf42bd45a7a42af52308177cc71ad2f760daa2cd695bd0be6cb8b5ec663ce2ac20cd59ca666dfd7673fc1e072bdb057f6642fbaec40ce3f709b589c6c11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang/scala-reflect@2.13.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/bug/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-jackson_2.13@4.0.7?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-jackson_2.13</name>
      <version>4.0.7</version>
      <description>json4s-jackson</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d6fe67474157a5379b23454ae797f8fb</hash>
        <hash alg="SHA-1">ea98516a3c0001a02ebabdc7dc57a865a609acb2</hash>
        <hash alg="SHA-256">3b76d426241ba14d0b5ed1a073a2e59fc4db1fc54ec55b79eb35efed19ed8d57</hash>
        <hash alg="SHA-512">d85ef8aea00c61d03f4adecb30b5b5d84e09d9e02df89890b5a21892dc0c7867533161038b5b863ccf63d7fb289db525f359fb914cad6c6285042ee8ca30c73a</hash>
        <hash alg="SHA-384">0d9106d3834b1cc8e1db24ef8ecd6663221a7ecda167c4a01c14f7cbacf708aa0f8140b774016f1cca5763b154cd9502</hash>
        <hash alg="SHA3-384">e8ad9ab7afe09a3a434283ddb16bb364f488b65043a15e372bc45f235b7db794921d06eb035383ee943c498725e5ebb7</hash>
        <hash alg="SHA3-256">c7db86a17a4c9ead699bc2ba7cbb62cd4be1302c202b8cceb0440b1b2d8356bc</hash>
        <hash alg="SHA3-512">0a9ebed52ed6ee627b0273f79a17f9be2b8d5436c0a8300945ef97278c70ee4a6faa420dbcd7594c8dd35b76763470fb889d23244e399d733362c7e58540691e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-jackson_2.13@4.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-core_2.13@4.0.7?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-core_2.13</name>
      <version>4.0.7</version>
      <description>json4s-core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">73617948f1e370da33d60a07e5d3d7cf</hash>
        <hash alg="SHA-1">309c43ab95fb94afe085aed2591e47771c78cec9</hash>
        <hash alg="SHA-256">e831e4a676964d3f38a408b464b3ba6d21b76730c01f13d2d0b9995945fa06ce</hash>
        <hash alg="SHA-512">39362fd1fe72a4378931e74d7d1b3fc02302e1cd1ff56833ccc2a8fe243194d73bef8a56cf44472432219504d862218b2e6f8415dbc1886f553e1b1acc8e97f4</hash>
        <hash alg="SHA-384">e956ee162fbbbd033dfb97484ab62a063cc7cbefe3ffbc127e422af29d9cec6f3e8c16306c95f6bd8513f9d7b21b5d64</hash>
        <hash alg="SHA3-384">8983368b8e0511974cdad44c47f0aa20c624a897974faeaa0adca8aa6e8a3a043fdc240a7b6fde1e82ac19869d95efb9</hash>
        <hash alg="SHA3-256">3d1a7f814fadd123d236c2b234aa9fafe17ba830462bf3edb50207237b31560f</hash>
        <hash alg="SHA3-512">649029fb653b8e324284afc2cf451affe02428c9bdf39b6d88e71274e6340860ebd6bc6e106ca2985794a26938310f6be4b68753255c67e77c7c84ac8cf2f6eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-core_2.13@4.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-ast_2.13@4.0.7?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-ast_2.13</name>
      <version>4.0.7</version>
      <description>json4s-ast</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ffaf99b9959d4f42b718afc3ae60072f</hash>
        <hash alg="SHA-1">ed5f5779d939cd30b052adfef049032491bb258c</hash>
        <hash alg="SHA-256">3135eceb95b679ea228e3543267d12bea5f4bdb68e3e8fc55402824d85885e7e</hash>
        <hash alg="SHA-512">6594c1e2c481775138c46a9aa2a8722cbed2203422aec15f84d371750450fdbf69670aea13b1d7e1506fc2770c6d16f5b3188e51b301903ec5c11804ca2984f9</hash>
        <hash alg="SHA-384">57fc8c3090f8f1ee7db3105a7ce626fa44580aeae6a67d33afd2511ff2aa7523997947ae44e1125282b1e9ce6aa87db6</hash>
        <hash alg="SHA3-384">5e1be01389f6ec2614ad21f82d7b9f4f37f7cc9ba7892004866cf6cd3f8bb3da7dbd991094a57dd8f547c8a3c254e77b</hash>
        <hash alg="SHA3-256">bb0c494d5e896836f27aa9034d19e046b4a290c798d16bdb883d900b2e7e5e5e</hash>
        <hash alg="SHA3-512">a66fb976167b38ca0deece3d5304c1d576b9609bebb1b00222c409adfcc950d2d828dcb0466f73112fa64c3d0d88aa3dac165cf74018afb659f4fc433e72d8c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-ast_2.13@4.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-scalap_2.13@4.0.7?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-scalap_2.13</name>
      <version>4.0.7</version>
      <description>json4s-scalap</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">74c2111505af1b500aa6e81195130397</hash>
        <hash alg="SHA-1">2a5f4082412c102cea496250491155ed7c8a56ec</hash>
        <hash alg="SHA-256">69bdf853f04379970939022247495f30f60a3ef7292d6af77ad7bec4cb83ff4b</hash>
        <hash alg="SHA-512">60180242601d2a37fb8cef9c0afcc82b24a351978932ce225ca5b29ffc620b5eca2781ece041f8b12dc7b0a67e0e8177ce1defceab7bb34192d0efe97ce1281d</hash>
        <hash alg="SHA-384">7b234f3daa28aea45e33fc48dfe537bf5e626e17ebb79d4780bd504463d9c3a2439fd22414623c278d185798401e6a1b</hash>
        <hash alg="SHA3-384">6d16d631448ae00d397a4ecddb2d0d60a69f3070911d84c262ca652ff49dca75237c395f6b6a2649d85bc6dbc48f75ee</hash>
        <hash alg="SHA3-256">0e746a2797d1ff08ae83f7ed7391c598f4bf21ff35a503749b23c3621852fbdf</hash>
        <hash alg="SHA3-512">7154f75b528244836a80418e650faef08545228e0450bbbdb5175a31571a3afa72504c96cd7ae49bed74bb5ee962e75edcaca37b2b31099fe27eda6affc156f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-scalap_2.13@4.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.json4s/json4s-jackson-core_2.13@4.0.7?type=jar">
      <publisher>org.json4s</publisher>
      <group>org.json4s</group>
      <name>json4s-jackson-core_2.13</name>
      <version>4.0.7</version>
      <description>json4s-jackson-core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ce091c295c796401e3295508457b075</hash>
        <hash alg="SHA-1">049e54efa393e5be7bbc2294e5a45099a09a88bb</hash>
        <hash alg="SHA-256">c189e11ddb2c8e15544386687d986108584934b06a025c09c334f24b11260528</hash>
        <hash alg="SHA-512">a28cedc3ea6690a78742b074f4b4d7c8887d74e07dffea1b282cecde07ab0547692faaf6691d9e9e04e7942b01e6eeaf6b232069a72512c8bfee7d45ae36cd45</hash>
        <hash alg="SHA-384">8483031254fd542bbd451a0ffd939d80a25adb1a27f07f3e740bb3f19a464f7cdb1ed928d1e186eab5135d884e962377</hash>
        <hash alg="SHA3-384">8dcd53da2d66d8aa69105ba1ff43b01d30a2b03dcea8cb8f4e31e421e96c307542c2cf3c6516fec53f8e5fd18a2330c5</hash>
        <hash alg="SHA3-256">57c372bdecdb64f25443ba7de61c1d01c2495d6c761d01850c9676c70a614041</hash>
        <hash alg="SHA3-512">728877fe748099dab6917f040e6bb31f0ddc3b06df58362ef30b2ef5cca5d4fd6af9a40511fdaa10bf4d7cc5f5ea9ef9593cd4c40d0c5ccb2923321c8ddd24a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.json4s/json4s-jackson-core_2.13@4.0.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/json4s/json4s</url></reference><reference type="vcs"><url>https://github.com/json4s/json4s</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-client@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-client</name>
      <version>3.0.16</version>
      <description>Jersey core client implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a667f4b53ebc18f0d8f8aea751ed4ea</hash>
        <hash alg="SHA-1">60ef571ce0221a5de5a0aa79cc3227622a3f5542</hash>
        <hash alg="SHA-256">f831cf9b7967bd8281b2155cccee2f7d81716ab8c77cdb1ead0bb503ee28190f</hash>
        <hash alg="SHA-512">54f8783a0318f6bf87227ef03ff2df97d21a3c8c8120b991446ffe08ce827aa015e53b672318a06d7664fc9bb44f22ee70f0b4824cdea1b6ca01dd81fad9f395</hash>
        <hash alg="SHA-384">bd696c229eea0029598878dd7f3414bc4d9b5cf6208c93aa3bb95604f12dec4304854e5965e01d7db3cc18fcd9ffe129</hash>
        <hash alg="SHA3-384">c637dde2070c70cf17739b1be30bca69e3249dd715e74f259466924ec09e804d5398c49bec267b53fbbe1bb4cfa62533</hash>
        <hash alg="SHA3-256">14d28ac9a545532c51e6d7713f77763faf456644a760f10e7bb1f81029f4948b</hash>
        <hash alg="SHA3-512">02bdbd94150d2fe588b2ddafe4bbbf867c778e82a845b928df27bbc391257f7a1671f6925ddea73c1e7a717d45d528c5e683a17faf269fa8e42a6664e5665dc3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-client@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-client</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>3.0.0</version>
      <description>Jakarta RESTful Web Services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd98ad2f0edcec6c0f0875695b8647e9</hash>
        <hash alg="SHA-1">5eea182d6651a7257bc8c3614507e1540c766fc2</hash>
        <hash alg="SHA-256">0bcb2cf4522831ad83cc7e936b8db60e2afb2582d19d672eb17d01da2c777322</hash>
        <hash alg="SHA-512">25a57149d3b5b57d21ad7b97d5c293adb549b363fb9c22f5d894adab174cd3019886cfa2b8425b67644b12769075fd891352c5230b66846c9bbcd26bc98dc3a9</hash>
        <hash alg="SHA-384">5602c64b0612e2b6649b2ca2aeae9eab536bb816d41643aa1caace022010b4767cdc9ae3518e2d303476c09260bd3023</hash>
        <hash alg="SHA3-384">ed2e09bb8083474846fa7edb928527d7f37258351aa45e93f46cf40215e89317b6659a829fef3b4837449e347bfb5ca9</hash>
        <hash alg="SHA3-256">67066e127150ca5eec06bb65caaacf3635d5ed856918518932f4d7766725df1c</hash>
        <hash alg="SHA3-512">439072f3869ad8a6128f2b2592328ba604b41111df2938a20b112b7ff8f16d537d8ffc4f83b8fe762c3f8f716fffd73b692a15e90666a1b3fcf97b4e2e9f4388</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/injection-api</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/injection-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-common</name>
      <version>3.0.16</version>
      <description>Jersey core common packages</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcdb5792a3715cb10a1769f64f199d37</hash>
        <hash alg="SHA-1">9437bafbd00f5df00b62e50058b1374021869307</hash>
        <hash alg="SHA-256">82bb81f6f049a7edf677066eaaa27081fcc54ea34e1a2aa2537d50ad9d7fd636</hash>
        <hash alg="SHA-512">8952a1ce6d6483494ef66e6ab14bc2a592394285a727c1013cb232f9105c6a3cb56f2b2b8ba17eb80bcfd90102a0999a97906d70349d27c1a4eac79314db8ce5</hash>
        <hash alg="SHA-384">cbef4a9d243636d4febabf0214ad4540fcc826c5aac4db7cee80bfea06a1b9577657dbd09bedacc9476131cfb2ca96b1</hash>
        <hash alg="SHA3-384">2526e7971d34d2af6f0de67167e33026231ca1af6c32f4b2dfc950f1717043f376645eac1502391c753e5a8cf3d296a5</hash>
        <hash alg="SHA3-256">52972603aa1fad02b79549d32e3a8aba2a614e2420e9d43e0ab929deae9ccc20</hash>
        <hash alg="SHA3-512">f540deb4945f7d847a40fe75dd043be829ff47a2df571d8e0eca4b0feddcd0005106df3f319bf415b05e99aca09a46e71a2b79d2f6c110463ceeb590c38ee497</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-common</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.hk2</group>
      <name>osgi-resource-locator</name>
      <version>1.0.3</version>
      <description>Used by various API providers that rely on META-INF/services mechanism to locate providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7e82b82118c5387ae45f7bf3892909b</hash>
        <hash alg="SHA-1">de3b21279df7e755e38275137539be5e2c80dd58</hash>
        <hash alg="SHA-256">aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74</hash>
        <hash alg="SHA-512">4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3</hash>
        <hash alg="SHA-384">9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2</hash>
        <hash alg="SHA3-384">b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1</hash>
        <hash alg="SHA3-256">cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952</hash>
        <hash alg="SHA3-512">75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/osgi-resource-locator</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2-extra</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.core</group>
      <name>jersey-server</name>
      <version>3.0.16</version>
      <description>Jersey core server implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">349a40a309cf08c1d0dc064668af9f78</hash>
        <hash alg="SHA-1">fe5d313561ae92d0eedbc05acb504aa7e850f7d3</hash>
        <hash alg="SHA-256">5d9b8faf4773fcc159cd4704fcd84ef82457c276408b36828faac4c7d7a13e7c</hash>
        <hash alg="SHA-512">dd6214bd1dd40ec19664f34ce88fe82d71936dc1ab32997a618a09c9ec12638c647780eed23c374d1eded31d341129006c364457f9063420a2f50ebd9b41227e</hash>
        <hash alg="SHA-384">f07f7aa36aeed349ee93c6b4512bec7a94a79daaada7711a37596298413eeff6db561830ba7aa5ab4f67d177dc18dbdf</hash>
        <hash alg="SHA3-384">dc06d8e0782aa0242e32b99b61d08ae7007b53db481d910fc4fa92be7aab108d88d571547c93b571b154129a56d63f7f</hash>
        <hash alg="SHA3-256">75112978b83a37f17c55020ed7c025a27502e01c919ab7c08cc2d3d3d0d10e22</hash>
        <hash alg="SHA3-512">aa788160ce760170261ce2923d53f480ce5e934d28c194a737446ab80e624f5f1da93bca63f9eac48abc184eca96a2fe6e30140cb95180b96426ff411a58adaf</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>The GNU General Public License (GPL), Version 2, With Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/jersey-server</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/jersey-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.validation</group>
      <name>jakarta.validation-api</name>
      <version>3.0.2</version>
      <description>Jakarta Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a1ee6efca3e41e3320599790f54c5eb</hash>
        <hash alg="SHA-1">92b6631659ba35ca09e44874d3eb936edfeee532</hash>
        <hash alg="SHA-256">291c25e6910cc6a7ebd96d4c6baebf6d7c37676c5482c2d96146e901b62c1fc9</hash>
        <hash alg="SHA-512">8ff9a450e13dad49ac8268ab8c591e045e5056f9459efa09fbb3561b5c879526b344e2648602bf65d387620064cf0c3a00e1243c6422c85a21b53dbab8749a40</hash>
        <hash alg="SHA-384">ab594665f5416edc8b42687e4ca17583fdcf886725ed98a88beb42bb5980d3672a5a5b7dd93b73c2282393ef1814d21d</hash>
        <hash alg="SHA3-384">bd43bd51ad4b56fe5bed62d478554a0e2a183b8ce38ed8606adb52d219eefe2efedafdd3d530b1f680824f54a680ab4b</hash>
        <hash alg="SHA3-256">48b53a0b142c3b314427ea2133e54151ed8263c1627527b8bc824784596840d7</hash>
        <hash alg="SHA3-512">3b6ec58f766f0958be2529b66d12bf492dfb78c49bfd41be87d9102e0885144156a693828f201a2a7019774c02824dfcaf717394a8858779fc9b2cd44b74b453</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://beanvalidation.org</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/projects/BVAL/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/beanvalidation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.containers</group>
      <name>jersey-container-servlet</name>
      <version>3.0.16</version>
      <description>Jersey core Servlet 3.x implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b739117acf5d239cf2a94fdadcff79c9</hash>
        <hash alg="SHA-1">0449c5b7c217988722c29aeba7b26c40fc1c8aba</hash>
        <hash alg="SHA-256">24108cf08e81db2a6a845e48fcf2fa8467e346bae262e5ccdac6d7e4c2718ea7</hash>
        <hash alg="SHA-512">884be55793e6d0e486fa3994beb694d940f59cd50a6d1a946a18c75bda9ff7ad73936b8b820f3346db5b5bf22ebc76562a295bc51ef48047b58010744c268bdd</hash>
        <hash alg="SHA-384">923951935b0d997bd4d006b4cb005d66028ab20524f2c9ffc6ec5839c667d3a2ba0f0957e918e7642dff0141aad8c45e</hash>
        <hash alg="SHA3-384">057aeebb0ac7de6e3f09bfaef703944925532cf841a8e4c1889d57cb778cc1e12562a15cf3c207c4024f0fdfee611a41</hash>
        <hash alg="SHA3-256">381d339691ad619a866cb864df241dd23acdcb41c2fa87c72cabb9451145ec32</hash>
        <hash alg="SHA3-512">74472f8e69bc49c1d215d8340456d3dfbde4abcb9bbe9fd5f5c44f0f993e637db9ab4aa4e80c92594e212473a61d70c3f31cb13acaf376699b601402f9820d00</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.containers</group>
      <name>jersey-container-servlet-core</name>
      <version>3.0.16</version>
      <description>Jersey core Servlet 3.x implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e60c96870d93f6b4bb228e4fd6860dc7</hash>
        <hash alg="SHA-1">2a79818bcc9cd509ae1b67744f3654a310d7bef6</hash>
        <hash alg="SHA-256">2b5263de2e0729c2b1015d085160a8e8af682acf8a8ecdcea1f07b681ec7a6dc</hash>
        <hash alg="SHA-512">2ac19821828e086d67a0dd804f87864ffc795f95e65d336b0577dc574f124c67e56fbcbc84e2d40017fefaffdcd8af190053735688d69624a7d88d8255af5b37</hash>
        <hash alg="SHA-384">4040a142513b7f6e2e8050aedcceb993d2dc299985d6b633324ae9f0cd920de22f7634f948167a575dd329a796711e12</hash>
        <hash alg="SHA3-384">62008596a6d5e9e31cf5c1ab09bf4a911f0407afabb1876ab580676daccdc3b6e45c59786664e7164bcd645d7435adb2</hash>
        <hash alg="SHA3-256">24fc586c1d6fd5789e2ab93fedca741d43ad8fa81d2a48281d2fe1a2e7404a64</hash>
        <hash alg="SHA3-512">8aaec9b80ad5b16c4424b5b81cd79e8f1149d012a97cd74b83b6819a738e1823ae470f9474e62c4c3807cfeaa9afb7539ff8f71f1c47a1671692cd2b2835717a</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet-core</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.0.16?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jersey.inject</group>
      <name>jersey-hk2</name>
      <version>3.0.16</version>
      <description>HK2 InjectionManager implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f35471597f04d75d768a96e4dfc8dc85</hash>
        <hash alg="SHA-1">ea6b7590d41edb4f060ae08404a9c61c89015deb</hash>
        <hash alg="SHA-256">ed68367f5d78fbbdfb9085e15376e9af6543246e258c1c65ffb013f7c3205cb7</hash>
        <hash alg="SHA-512">2aef66dfd1982fdd4a5c17a6bc02664e29f180f399a8ce26808de4b4a317fb109e75dcb4547a83a4b5c9730c9c51c8a2f413edec970c18ce9f15934e347ca4f6</hash>
        <hash alg="SHA-384">29cd28d4828c7bdb5014b5be9f074ad8913db574d4f9a9da6165a088b5ed38c5b7631856637817015fb71a0a7a212fac</hash>
        <hash alg="SHA3-384">9b248269bed87a61a5d5439a86d5ed7b2cde90821310eaec29042d9184b89a14248ed136fcf763c4bf0b06fed76e6b92</hash>
        <hash alg="SHA3-256">2d46c9f57a79d634e0543ffb48e3455d138a14f80ae195e3d1f284ea74244688</hash>
        <hash alg="SHA3-512">3b172628e9cbec21bdd3f1acacea991345797fe38fc3e9ea78529ea2bfe6a8450d76811eb74f77411d31517cd54811783b44d5e87f18b2dd3d91e30941455595</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
        </license>
        <license>
          <name>Apache License, 2.0</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
        <license>
          <name>Public Domain</name>
          <url>https://creativecommons.org/publicdomain/zero/1.0/</url>
        </license>
        <license>
          <name>Modified BSD</name>
          <url>https://asm.ow2.io/license.html</url>
        </license>
        <license>
          <name>jQuery license</name>
          <url>jquery.org/license</url>
        </license>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
        <license>
          <name>W3C license</name>
          <url>https://www.w3.org/Consortium/Legal/copyright-documents-19990405</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jersey/issues</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jersey/project/jersey-hk2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-locator</name>
      <version>3.0.6</version>
      <description>ServiceLocator Default Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e976aff53fb156b02317d2b8bc40660d</hash>
        <hash alg="SHA-1">92d5c92c9f23bea4b8681c6f8d6ba3d708619f81</hash>
        <hash alg="SHA-256">e2664d21b017c3aa1518b913264602bea604edc54d356103c10afba99abd04fc</hash>
        <hash alg="SHA-512">bd5393502a4ec94b0f849ae60d5d83f5e3c29fe257d08a4a34a73524fdc172bbf58714ccfaa37e6ba6eaa8b035558c4bf5d26b61f82fb6f9d741d95e62fdb8d4</hash>
        <hash alg="SHA-384">0b6afaedd573654a40fcd628eb987f3fae13f465107e0e57c403751f49fc82bb3c12ce4fc9667fd5c952f1500c80b63b</hash>
        <hash alg="SHA3-384">bf558560ac20d535e3e5c199514ddd480cea1019c0ff37b45f4e526d3b76a8938ee58a8ac0efb0aafcd672de1ada46ca</hash>
        <hash alg="SHA3-256">0dc5dbb60795f75abdb5b2a78e569f943484f6ed5af9f9b6622382e59e3c4542</hash>
        <hash alg="SHA3-512">14e8be65a317c3dad65787f8cdf2d55c09f96a2df577533aa3c062a34e6a811dde8a793380ffd7e5e02597c0e009f91cfe93fe20c6931d856aefc2b4b88a4c3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2.external</group>
      <name>aopalliance-repackaged</name>
      <version>3.0.6</version>
      <description>Dependency Injection Kernel</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e07024ce0f95aa4a8797257c97fa5774</hash>
        <hash alg="SHA-1">e3c3f17b649c97155640616026bd32b1043b3c1d</hash>
        <hash alg="SHA-256">a82b6d1a348324ef88dc807c7cd7aaf633985cbff7b30036fb61a1b86981d840</hash>
        <hash alg="SHA-512">605075fbfa84d426ace71dc40036dd604d969a657d8990996e0910c654354a06de65b52e9b24e0f863cc9196223be5c816e4b655f13e14386396952e785962b1</hash>
        <hash alg="SHA-384">9b9a142c1a9b451a9918b6f70b391821c5bbac24ed0bcd3584e57fed9ab4e2f6cd636b65c762069547703c5bdbb0547f</hash>
        <hash alg="SHA3-384">7ea7aeef9d0dbfda36f75fddb4cb8d63d96db4f3a52e085017c055a082360cd1116e1e01de88dadaaf6d35fe7618cc47</hash>
        <hash alg="SHA3-256">751c96c0799d0c275276aefbec4ac6e8df507c6941aead48d2f46e7547c3b85b</hash>
        <hash alg="SHA3-512">a5b02c7033783d556364e96c8610e3b46cc6bc5b6cf2ed3d929c5008f1caca4f77d3b975f747ea1e1ca3b9a72e54558118ce452f7470f109f0e1a072a693195d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-api</name>
      <version>3.0.6</version>
      <description>HK2 API module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37d753cad17273560c48b745f024cbaa</hash>
        <hash alg="SHA-1">5a5152dea2c43384f5c07985eb27140134074ecb</hash>
        <hash alg="SHA-256">c049a21a9fd9316c7e291a2bc28835f70d25affb623dc1599a83b6b84ec83a4f</hash>
        <hash alg="SHA-512">2ab96cb843cf7fedb97ca308f0877a391cd6da57885949cb5f4ffaade890e42cde5a037709da3e905735aed67b27186603faa4d9ee83ff05b199299311c080c2</hash>
        <hash alg="SHA-384">a0397611dc07fb93b0261281028670ee63f6bf79252ab5d894ce0bba6dd5f0ad255132dae1c5f14bc20c9bdd7397c513</hash>
        <hash alg="SHA3-384">025c0326f05cbc1b757dd3a9f8da2aaf51af3cbb7f1120a5cb9f7a6cd4a1cfea5f635abb91574d1faeaf351efe83f8c8</hash>
        <hash alg="SHA3-256">766c45f469c66adbf6b3a1fcba0b981659884b53592e44fd9e8723381ce09ab3</hash>
        <hash alg="SHA3-512">4e8f754573061d23c56185ab569d307265900dd873a63b30255f1c3c34a1866a2ff49020745e58cafcd19a9b8ba73c4caf00d7377863de59aefe483897db6252</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>org.glassfish.hk2</group>
      <name>hk2-utils</name>
      <version>3.0.6</version>
      <description>HK2 Implementation Utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4f0469e8a5957c5912639f92244a9662</hash>
        <hash alg="SHA-1">b3187d0673c0fd52de197e52c62545c34d4eda29</hash>
        <hash alg="SHA-256">fc84d85a0744b576d9ec7db5845eeb998ed532a9450dd19c8c922c3ee6926206</hash>
        <hash alg="SHA-512">2bdf1872f8401bcf39c6ea1a81475940b53aadaae171a513a2c196dafbfe1c5701e7eeb269a4dfabed5cb08f4284f48106f748946f0cab9958e8381893b65921</hash>
        <hash alg="SHA-384">5b84718eafebd903a295be59d825bdc9cc2722152ff2969c88db0fddfcc79f66de4f2f5a0ef3ff27875888de98af5668</hash>
        <hash alg="SHA3-384">3c487313866fb347fe9b52b90f6df74f830e2c3ed3d43d1dd920c500723cda8287ead009649271a70394ad1aaab958ac</hash>
        <hash alg="SHA3-256">ca99f8375cf00f996191b53737647f16214c7f81384ca6ce3097e448ccb5138a</hash>
        <hash alg="SHA3-512">4e05d078d7a70017235238abf02f7302914e4e00c96c33b91efed2d2815f298525fab3f1bc28bd9eb03581287cab2cc9e291d952cd949748fef3e381fa38c24f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/glassfish-hk2/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.30.2-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5b827b8ddec0629cc7a6d7dafc45999</hash>
        <hash alg="SHA-1">284580b5e42dfa1b8267058566435d9e93fae7f7</hash>
        <hash alg="SHA-256">eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf</hash>
        <hash alg="SHA-512">046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e</hash>
        <hash alg="SHA-384">d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b</hash>
        <hash alg="SHA3-384">f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2</hash>
        <hash alg="SHA3-256">cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367</hash>
        <hash alg="SHA3-512">e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.javassist.org/</url></reference><reference type="distribution-intake"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-all@4.1.118.Final?type=jar">
      <group>io.netty</group>
      <name>netty-all</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">23ce97f894f9dfc54870a6feb5cc1b1a</hash>
        <hash alg="SHA-1">00b5462c05eeb5a0321fded73c28b5fc7833878f</hash>
        <hash alg="SHA-256">44790974f057722b9d9d19dcb7afb91504eeb46d81fa2494db4f0fe01c5b7242</hash>
        <hash alg="SHA-512">8be07b687ed91ecde1f3533ac18068787507451842f5db3b58dbc5f7747c08e10eed632308f2b7a8432f64b8b2bbd6f00c17fea4783998771a7dff9165d25ab9</hash>
        <hash alg="SHA-384">f2f3d993e798a19e4d966e704336e872ec4329650e2fe87463fd901c53cca626fedf8a03037c434d472028acac058381</hash>
        <hash alg="SHA3-384">2fb63d0d047f8a0ba7fc5be456fdd247b547db96e1534ced3bf955194bd98cb43c9392ad490fcf1dd7d6c0982740a83e</hash>
        <hash alg="SHA3-256">d19ca3cea263992eb4845426f960df564559147ec77a8f4004567b02f39c2363</hash>
        <hash alg="SHA3-512">3e651e594e90b333a5d8321463827e5580ea21af5b3fa05f71888ed50502acd9c5782d29a73f984b92b48c387a1174f93bfa41222b6bb276cb8e9741b7ab956e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-all@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-all/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">310a5d0de5b61b3c1aa8aab3635ba60e</hash>
        <hash alg="SHA-1">7022990af1e0d449f9d5322035899745e19735c5</hash>
        <hash alg="SHA-256">0eea4e8666a9636a28722661d8ba5fa8564477e75fec6dd2ff3e324e361f8b3c</hash>
        <hash alg="SHA-512">4c3488a737318781e6d1e84709721be1352a03b575e7f1792e334cf9afa912f7a2d38996e2f91693e7ee2794859c9f12cbf52d27a6ee5ad3a10bb2a00a22f2eb</hash>
        <hash alg="SHA-384">3a2a76cbfc31d16874fa243f9ffdc51702b940a4e5d8cbaff8e8455dbf7f38fb2cb186e7dbb0e4425b6f23d26d3a51e8</hash>
        <hash alg="SHA3-384">41713743404d94d4dd06f9bf7f869d41d83d106cd1fbafad013839f91a2f6c99f585a8186b07be48d57b3d11f838d3bb</hash>
        <hash alg="SHA3-256">2f529ee6a702d253bf83dad70662c239272d4c168845c5c6baa1788af8544e2d</hash>
        <hash alg="SHA3-512">2ac364af5def522885e8968ba580adf6b8e47d75f6755c67247e963a20ad8ce49b230cb97dbda1a236158c74edd1e00bff0095ad22aa9bfcf8f567e87b2f3a05</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">251d3c182cdc0b5e111beb958360c843</hash>
        <hash alg="SHA-1">307f665c08ce57333121de4f460479fc0c3c94d4</hash>
        <hash alg="SHA-256">4abd215fd1ed7ce86509d169cc9cbede5042176c265a79b3b70602b017226c3f</hash>
        <hash alg="SHA-512">e34ccbc3e041130224f81a84253464a3a89a6da9d9f7fcbf42ac628a7184f03e38f125427810325d0a98f7218704750f856adef2b766d9fccb0f49719f7d71e4</hash>
        <hash alg="SHA-384">0089c3b5b3214ddadd0edc2b1865a39a8a7a6e5fee59f95f1e4fc359d1a0e5458bd699590bf47fa81dacd981328e4eeb</hash>
        <hash alg="SHA3-384">56e2c9fffea2c9dbbab792c71e814f846c890f06d633d61c99b01661c018202d30a7c4cd52efddd882f7779abf750960</hash>
        <hash alg="SHA3-256">187225e7c431a63d6bb2659b301916a8dc233a497a4d6cd1561f67450f34b438</hash>
        <hash alg="SHA3-512">5223e17cef199d3889032b69751bf30595c15233bc9cd6aa2755ad87a06d6fb0b7127b0ae781f406a69f8999e75507b8d567f189d2fb41ffb2ef1250f31dce96</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-dns@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-dns</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c251936ca7033effbfaf72bb1d2a7310</hash>
        <hash alg="SHA-1">0e04bf6679ab5e1bedae12047c4e049887476993</hash>
        <hash alg="SHA-256">e115e42ca1e3cc8d85e3a632d8faa102d18c0ebc1fa4511af30bec79f8c147d4</hash>
        <hash alg="SHA-512">705b852704e9201da4f8e0696e656270495b87badbadd182780eaa3019e46267a9eabe7f214fb65a161b156e981d372c04c34dc4aaf6e2262ebe7b268a53b631</hash>
        <hash alg="SHA-384">9b953bb1adfaa0efe4de932e139d242443ea2dc6b0d36e1817d10388029dd826132c27e0a860bd23fd8d6e7769d094cb</hash>
        <hash alg="SHA3-384">98aac2000569a3c7da1c1a5ee9296e8298dcbbef2ebc07d9f47f34063bfa314a144c810b831627873cab09e80052ce60</hash>
        <hash alg="SHA3-256">594477609b81dbb8ee4dff1cedd3d657f939e814b8c32e2c8cdc90a37b6f2bbd</hash>
        <hash alg="SHA3-512">fff871dbbc3d46d1573963971b8cac948812209ffa0c924048589ce30a2a897ccfb8fa39aa02f394585521920b09cb1e7edc6da19f0c1b2596089212e79e31a2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-dns@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-dns/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-dns</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbab9b8f1e3742bd43e697b07f7f57e9</hash>
        <hash alg="SHA-1">eda08a71294afe78c779b85fd696bc13491507a8</hash>
        <hash alg="SHA-256">09822d785e9a794838031ddd5346cf419b30c036a981c2e277a062bea884174b</hash>
        <hash alg="SHA-512">c76d8a8741f55207e996c7c580cd4fec45bf2efc16057e31fa2ac9004f09a00886b45c309f9b397f100b46293862f7cc593d6aba4ad86ed6197292abac7dfee1</hash>
        <hash alg="SHA-384">787eee13eee7a74a8fd244dd48127e31e68350061d5a3b9d83b5a9ea4de73e319126f5d7e17e2ae4a2ca285b050dc563</hash>
        <hash alg="SHA3-384">53f72179210298fbb208fb12d53161cbc2ceddca93684d191e4ee3d2216c54e9c474747d303abd6161d8d7a55c918844</hash>
        <hash alg="SHA3-256">08b723c400a6d0ce37810729aefa66df3d1b2b9e07de7b6e65b036bf7f1ef263</hash>
        <hash alg="SHA3-512">e1584630e5c8f43948a7d85a3c1bf2c506b68089bf81ae111de309fea301944d7e04edd1079ff50ff62702ff5377cb4b814626556f7ffb1af1ca830ad8278dbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-http/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http2@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http2</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">456db7245646020d85f2ee0a286f5dc3</hash>
        <hash alg="SHA-1">e3c35c0685ec9e84c4f84b79feea7c9d185a08d3</hash>
        <hash alg="SHA-256">68da0b1a34dceb00a6f9f6f788fb2f6b7b9e4adba8c70658ac2bd7eb898b97ae</hash>
        <hash alg="SHA-512">249d58bcdb5c9c0f33afc56dfec3fe6d7a97d53fc84c6844f79f5afd81c1345e1109b06914d1a825e69c6f2f4811f616a190b88abcb113792900306da8afe50e</hash>
        <hash alg="SHA-384">ade4956674e3b679364fedf60e3cb21fb16511381a65fad439e8756fc1cb082dfd0ee8da8f7c5de360f6c5009d362ca5</hash>
        <hash alg="SHA3-384">ad93dffefce3b61f46812953e0b565fcd79c8f5d469289775eed0b06407661af17e6f99755c5472c0280db15283cede9</hash>
        <hash alg="SHA3-256">aff9a7ea58ce771e228fecd6521d4bdda2f4d5af9bcb0ff839931ff821aaf26a</hash>
        <hash alg="SHA3-512">63df12d4324a28822d99653035ef6e14b8c007cefcd3fa2fa7a8b5417aac6e358615219cb2c4fd5311da7540342ab52d2e57f619e56773fb38baecb47651ba2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http2@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-http2/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-http2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-socks@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-socks</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb3db881713e4c12cecfff634ef73e2f</hash>
        <hash alg="SHA-1">488a67579f062bba2d2d20ce46f9bb28a68b0875</hash>
        <hash alg="SHA-256">094465e3cfb3aef0fca38ed82b801f53a6c8be7ae1f83ab0c1b2e8ece2586840</hash>
        <hash alg="SHA-512">88498dc0c469e1a426460280b7a3df29e507770435fd64dd3d087f40020f4ea11e22295b19b94e17d31d81007b4d62f4e646a44b47ab79c4dfae2c888bcb72d6</hash>
        <hash alg="SHA-384">e18537f2bf0decdbfeba7a8c6e6aa81fe89eaba3584b898304ea21e4d212dfdd3a47f67733824cd8c253eb43b834c584</hash>
        <hash alg="SHA3-384">0adedb5d9cb0fe6ee01247ced272d529ad824b5bc4345eae97596eed07000fd009206844a490ee52c3a0b8ca35c14e08</hash>
        <hash alg="SHA3-256">a2191471b186afb8d2d61bd34ddea3db23eb5792cae74baaee5c5fcfb3c62b6c</hash>
        <hash alg="SHA3-512">3559c78085fea67bd6ff3b4574b358d27f5dbda42ce4e2801d7322b52bde33d29e768c3cd9b6f749c78d890fbb3900d611f44afcc461b8990c337b126f98fd15</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-socks@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-socks/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-socks</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f44c96d1ffe49b2eb00eef5754391260</hash>
        <hash alg="SHA-1">4bb0f9899146484fa89f7b9bc27389d5b8e2ecde</hash>
        <hash alg="SHA-256">65cce901ecf0f9d6591cc7750772614ab401a84415dc9aec9da4d046f0f9a77c</hash>
        <hash alg="SHA-512">322543f66a74a4725fef6a7940adefb917b4aaa5a271a679cdbba83e6a8a1ce664c901e7efa03fd7ed64c72d6785e4a8f85c21aa82f3cf0c51bf38bbb9be8194</hash>
        <hash alg="SHA-384">348546492346631d6ad19508b7e4000217a8fe4b95a7df225269cab83209a3b216b3d3e4fee2526c7a725d068ca076c2</hash>
        <hash alg="SHA3-384">994cc34b2acad0835a07a3ea540d8c409f3b3c215ab0e4c465e995e158ea9ce6d307439f46d8069a6bc206d76d58bdec</hash>
        <hash alg="SHA3-256">fbf8b6014b22b328e1d51ebdf5496058b359ecd161e094b53d299569e4025cd6</hash>
        <hash alg="SHA3-512">a2766a6fd72ac44c63887e5b6edff30434d10c659935d13a8fe3f04081259ce7fbbd521cc0ffa37ea48bdd37420dbc1edc8a234524e48be895d47f20e2eabdc9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a5d5a6a8024c3a3a4d60054dbaeb138</hash>
        <hash alg="SHA-1">30ebb05b6b0fb071dbfcf713017c4a767a97bb9b</hash>
        <hash alg="SHA-256">26e3f8a5e859fd62cf3c13dc6d75e4e18879f000a5d0ad7f58f8679675d23dae</hash>
        <hash alg="SHA-512">7b47fe6c959886408271cf65d2bba5746d9e06c9934d384a1d00ae7eab006639f64bcb65a9cead4e9da732c8f66aafcb0de208c0f00232504dc10ffcbf759828</hash>
        <hash alg="SHA-384">fde1dd65b07c4f32519c7e10553fb8b71430af11a871dd6bd4765973e494e5a68cc90480f6b5ea0f1f626311a4185c8c</hash>
        <hash alg="SHA3-384">196f9028a9f5079b042c9d690ab4050dac620c9041511e790302c2770e8b9c19ad90934740f80bd6cada81a6641e32b7</hash>
        <hash alg="SHA3-256">edf9c43930bfe8e2ecb268ab59177e517c75cc8a4d52a8b95cb51c94e9001986</hash>
        <hash alg="SHA3-512">f647f85b067a1992f161ea85d2116907f11759a4e5cd4e4db76db313c8595dad86065031ab8f4d15a40cd9716a91f59e6b3c9ab8437b73e95bdc0330b2e29059</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-unix-common</name>
      <version>4.1.118.Final</version>
      <description>Static library which contains common unix utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7a00971b034b515157b9bc34807d9822</hash>
        <hash alg="SHA-1">9da25a94e6a0edac90da0bc7894e5a54efcb866b</hash>
        <hash alg="SHA-256">69b16793d7b41ea76a762bd2bd144fc4f7c39c156a7a59ebf69baeb560fb10b7</hash>
        <hash alg="SHA-512">3b4226f9b8d133e61b73a06bf273adff07fbe73356d18cd81f323ea3480590302c2c0289c9c3a7421767255fc96c99c3ce19dfa38016a39b06fff20ad9b31a91</hash>
        <hash alg="SHA-384">699c0ce0d0be6a678d8983fa4514199a86d9d79856f62aa1d34c4f3062c9e155dcd9e78af3e48a1a85cbb24544e283a0</hash>
        <hash alg="SHA3-384">25f19b56502fd686318635a5d59dd8df5e692f7d89700f78671c13b19ce86d58832d48cde8ad5a232e5839c82aa378f0</hash>
        <hash alg="SHA3-256">580cf9c5d97e93b56c932af7e415fbec3c7f6e7a3162e99d9724f01873c21156</hash>
        <hash alg="SHA3-512">3014e5bdb162cc5fec804615d1211df8c05989e428ac247dc494c0f0054bc5ba368ade73f26bb7745d771bf17c33087f480eee2cd79a6b56abb39a0813654cdc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-unix-common/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-unix-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler-proxy@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler-proxy</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26605cee8af74d1a6937beca3ec62c16</hash>
        <hash alg="SHA-1">28d6c41b72df614e09440ae0bed53a43fbcfbe27</hash>
        <hash alg="SHA-256">fef926126f44c668968dd3e2389c2552981d452e6dfc23b1f9bd03db92c21f96</hash>
        <hash alg="SHA-512">99bb2c944b76b23033c39403cedf3116f28531344b4145754c2423ed098d7ee54fd4a7e91a49ccfdc04d0962274ec7d4f8893e65cb3569dbd463e78e3b7e64d4</hash>
        <hash alg="SHA-384">81a8e843c358cb9530af8ce62a59b6cda539e77aad4f2c0323ecb65e63b8f3b1f12a9ae9e9a8fb539fba04be54dd8222</hash>
        <hash alg="SHA3-384">68d8e97532c1a389cbe03ace3f99829d088ed0ed9ba52e9c7fd8a32887fa0fda5576ed90d315a0d0138295ed575f3309</hash>
        <hash alg="SHA3-256">1329723f24ea023579d59ad1e0bf39bef8bd89b8a35a71aa876daa8492c68d34</hash>
        <hash alg="SHA3-512">5385189f41fce1883ac9d583ba01912573101d8978835529ff97053b8317492bf50a2d057d10b1818f4ce1cc839f6bc575e25ca05fc8e83f58ad5c0dedfba852</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler-proxy@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler-proxy/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler-proxy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd965f84dc2a07042388339237691b35</hash>
        <hash alg="SHA-1">28c378c19c1779eca1104b400452627f3ebc4aea</hash>
        <hash alg="SHA-256">3170c225972c18b6850d28add60db15bb28d83c4e3d5b686ca220e0bd7273c8a</hash>
        <hash alg="SHA-512">83d639dc94276062f13dffdabefa65fc008b028b6bbe9c2f5a037f411233ca4cded60607ed9125699c6e8e107302ee2bf2a6c4b82c927a1aa6bc4a7f14192831</hash>
        <hash alg="SHA-384">a015b4c77b887ad1dc863e10c4e68e7115e5e1d69938661b5e8b68e24254cbed0ee9ea09a032102b74afa8d890b0218d</hash>
        <hash alg="SHA3-384">a913958066947ff69de77e3facad241ac73c5523114673a7f2416ab3bf332233f1d48666c47c555d80aea9c3b19eb318</hash>
        <hash alg="SHA3-256">4467eca099ac612b67f627ecb2f7a6fe679d06d22142b8849d546a739662235c</hash>
        <hash alg="SHA3-512">451f12f2322699d93e53d3dee952a9a538d6103475d229839aca5d073ebaada5ebb75e340eac6155fcb9a8638bc1be0ff7218170ca5f9a9104e9a1faa503835c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-resolver/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-resolver</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver-dns@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver-dns</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bb7988ca128fd290854f5ccd7aaac425</hash>
        <hash alg="SHA-1">ff5bfb643ccc5a809c4c21b10167b8d214ceaeeb</hash>
        <hash alg="SHA-256">c0e0fdaffaba849e3145b2b96288fc8fc6f3b2a623cf72aaba708288348e4938</hash>
        <hash alg="SHA-512">ce5623e831b1bd683d997ea93f18fd9aaff0da4b51a6ef94c1e12b2cc71543f71f5bfe4d25ba5afc5231985ac99fc4ebffc623cd634882fbe3d6a21d89e24a97</hash>
        <hash alg="SHA-384">cd2bd9eff474a62e12e8e459563dbf38937e4e421bc495483432274d14657d856039940a455c43956d7197daaa3bcbb2</hash>
        <hash alg="SHA3-384">2c58ba65597e83edb8b9771c7214774bc91fa9863b7f7edcc7fc05eeea03960fadcfaffb76683145246036505def859a</hash>
        <hash alg="SHA3-256">8be0389950a621a9f5370734c8ba7a10251fb1164bb13f37e1b684ed5aaf7e8d</hash>
        <hash alg="SHA3-512">2a32838e76e6ba596b2d36758eaf04ce59201e08867c7f35cff1b412fe48f2d82eae231751c40dfc5d6b41ffd3256edf9d2bf73422603b3ec21aa7e0ece88360</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver-dns@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-resolver-dns/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-resolver-dns</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">667fefc155c239ca3047e9b1f1e399d0</hash>
        <hash alg="SHA-1">5a27232e5d08218722d94ca14f0b1b4576e7711c</hash>
        <hash alg="SHA-256">ab3751e717daef9c8d91e4d74728a48730bd8530b72e2466b222b2ea3fb07db9</hash>
        <hash alg="SHA-512">7bebb7fe9831be0920cc103342a34348aded91a5165463607f6089b04b51abee738e864c72264dfb1d9ba09d1dd610c972d0d4e53ff854903d33b674a8f577df</hash>
        <hash alg="SHA-384">3418d07ca5b2de464b2ef3cd51050bd7a305c74a9b4085403c0706840daa9a760fd158fa35e4a102cc74a5e835796445</hash>
        <hash alg="SHA3-384">3768e7eed586286786e21a56e14f2a5d9ddbdd887a8c7a88e9596e79b9fb853bd1c07cc3b072e44e1ef8abc44e1d5a7d</hash>
        <hash alg="SHA3-256">30a05b6d543c71f004d83d218ee5ce2a00c2fccfb85733daafa5956653569a95</hash>
        <hash alg="SHA3-512">83d7e50a92c93a3e1f9124abd1109d7f4fba6ac6d54384483250b96bd42590bdc7009cc57defd5c0fd031cde99c5ab9e9a20f4db94c87bec9f6e2b016bfd190a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-epoll</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">63846498ffa70c28db598094f3d3a28c</hash>
        <hash alg="SHA-1">376ce95507066f0e755d97c1c8bcd6c33f657617</hash>
        <hash alg="SHA-256">bd86e6d41e1f6053f9577931655236259778ab045646e1e6ab04150f070864f3</hash>
        <hash alg="SHA-512">be2b34f0d2a117be27a65330ee155eac8b5c063fd1e508054c1066a9d919e9a6f4678fe5848d31bd64569807670685444fa9fd4d5afad23beb2fd491f9a177d0</hash>
        <hash alg="SHA-384">ff15abe7a1e196e33187a1064b855a2740f4c16eacef81132913253bb8ed775346b6fd565b906bae19dd40fd1139485e</hash>
        <hash alg="SHA3-384">2c9a211fe41aa1b056ec1ecbff29744044c9431adef4154a87b5412711f8d8d1a8c3381279294898a8949cf074a58071</hash>
        <hash alg="SHA3-256">480b00e49df704c1d22e4ba46020240a775f0f582cf3b1ea79def07d1a0eba02</hash>
        <hash alg="SHA3-512">054ed3e7ac517f019bb96a88e3d1b5c44ad4bdd11756d1a7c687a6c3825172159a81458c31260d70fb21be3f6d23a8b14981fb31bb4515ecd2a5edc501116c6b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-classes-epoll/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-classes-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-kqueue</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">92de9ea7d3c6ca3339c0f4f2f8e3c5fb</hash>
        <hash alg="SHA-1">c9541019b6ba3d9424ba99d8bcbfbffa96787be7</hash>
        <hash alg="SHA-256">9ac68d26efb78d74a24eeec8309d60bc80265655b60c44920dcac0828db4e8e2</hash>
        <hash alg="SHA-512">92a729ff90ffc2e80a72f9bbbcb0b4c0df5daa7483036949a8cda48933c490e773678cc55cda5bde29156ae25ec5a55d9b580bd238c649ac9841932e37d182e8</hash>
        <hash alg="SHA-384">9bd9020b1c031e1b3149b4ce9adf5bf73b04e584dfcd839e259eaf630860136c12a578a0ddaa2394c823646732cf56a2</hash>
        <hash alg="SHA3-384">cc4b86e594dabc6a45e16c06ce95cdf4211fa1949826bd3bd078f015133e5c9774b394bb47db5daf74f8e02812278e36</hash>
        <hash alg="SHA3-256">3c8c39c9016d099f29d17c5ef1fe96d7695c60715c749e94ed9f1d8245199ddc</hash>
        <hash alg="SHA3-512">536140acaedd833d436d5bfc6dc368536e758429159adc1977d8497a7830038c4a308f2d4b316f80113f50d0567154be9c0d27229daa0406fc16cdc2d0240402</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-classes-kqueue/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-classes-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-riscv64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">247fee7e90c9875e26aed5321b661ed3</hash>
        <hash alg="SHA-1">d7b3ba338148b47c78ef7979237ce4f4750fa031</hash>
        <hash alg="SHA-256">e7b7a5403a580be2f38c99c2559e551ebb563fdddd89d7f6e142fb1b475ba95d</hash>
        <hash alg="SHA-512">51376cfda2daf8bdb7e86fc8ba4b9d734472af4528d9b551288aeae66814012d16244b347fa0fda8183d0fcb67e25262b9b48fd8cc328aec10da4f19013532d6</hash>
        <hash alg="SHA-384">c144d98137fe2e871266f9c82b57e765dad82c3919a463cf16233382d64cf0d4f67d7009b2184addf12e379888871449</hash>
        <hash alg="SHA3-384">8be946eb0428f09735c02b2bbdd862b3292b4b7e46774d0fbe8b89ae5e065090ca38eb1ea5dd5cedfde649d17a1898c9</hash>
        <hash alg="SHA3-256">c9987189d384c8c883b35a0ffef7a58eb87ded8f2156e228aa78aabbe700be29</hash>
        <hash alg="SHA3-512">5d77f2dbda4018d6ed53816826ac720ef110e2442e9b65d7a41afc14f7499f411a43e7389f1a68de9180d40fcdcb591cc6f3540f7b99cc4b377c44ea5aae1a75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-riscv64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">350ef23bda0e315835b0bd64df8012e1</hash>
        <hash alg="SHA-1">7e6b89e3746acb7cf6f0aad993bbd058fc6d912e</hash>
        <hash alg="SHA-256">c95f66b9ab3f7fb6e666a81a5d0120e0c6acddf8fdf440e2ba212bfaf76a7c73</hash>
        <hash alg="SHA-512">a56680c19f2dbb897ceae99aa94a9e61cd956ed255d57c33a2b42d3f75162561dd48e62452677acf83858546a4052e7df7a303d8e191d357b0350ac8ae0cdb2e</hash>
        <hash alg="SHA-384">b2f11930b4ffe2c9f91071dd90d2657d5f6815d9b5ecc1d5d2b093cf9e3e1ef6b85b12a11b2d8498b0fd91eb08f2e27b</hash>
        <hash alg="SHA3-384">c73bda84ed09f80dc2ae45d3e78d774e306ed6281c1b20a3499e838fd61a283cd3ad5b60ee13a4ae30b7e503ad2e5efe</hash>
        <hash alg="SHA3-256">f5579be21c1f88c48532ce7e2e2b584f912ebf5f63d37e8d8ca42cf431eace3e</hash>
        <hash alg="SHA3-512">2a069bbb0bd5c3bfe5ed30df77fd78b5432b9f38340a1a3c9973c1cf1272e3fd188ce985e828b3c218a7e5cd0ff3941be1ba5ee05998caf6fe96912b90a8f8e7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1802b759b9a52555dac8a1199d4797e9</hash>
        <hash alg="SHA-1">82f94d0a9d837f6b6a580379373310ff7288c0f8</hash>
        <hash alg="SHA-256">53b3bec1d019bd3db6eeed30c6a770b49052ddd8fa1566796ae759e62b572425</hash>
        <hash alg="SHA-512">8e05e372292cb55dd463ff6cb570857809536cc962acc773a36c9fd71dfe3710276e13502b1e93bd07b30be045b4b72543030bde394c9a890a409e90e31331fe</hash>
        <hash alg="SHA-384">accb6520aa4df7cbb71a5d4db0ab8a0c730db66944b28f0242f7e3504a446bb5e709e16d99e5f573419d4b65d7d25f65</hash>
        <hash alg="SHA3-384">d84fd4b9d1fff7d791fa3fcbe6fd527dca1ce7786dbe1b74f193592e970ebf029fb369010f88e72adf4506b92b833f06</hash>
        <hash alg="SHA3-256">b8619019e6c4d11a3f491c03421ff433d5f4eca7f84f41908eecd42fd03d1081</hash>
        <hash alg="SHA3-512">be8b3a0d4990ca80ad7bb0751d73dcb6bf2b09e6a536543f959eda2f32c93153cb4cce94714e797a92bd4aec9853b2ab8cd40853ff30b4f98edee7a6c64cbe29</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-kqueue</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d6df0c366d5e40dc10843076a08fef40</hash>
        <hash alg="SHA-1">38b8b2a688ce92fc1d3d66966a319cada15aedc6</hash>
        <hash alg="SHA-256">599f32b702fb515f6fe15064250f525ad7eee13676dd3bcfc4c42704a17c7c7e</hash>
        <hash alg="SHA-512">5f369afaf41963cca0a63bd20853d279f0c6f98a58273a7b36171a738b469bf44e49ad34cd1c97094ec3ebb6de73c10c650119dee9e5ad172f3be8ca2a321306</hash>
        <hash alg="SHA-384">8f4d22a74d4aa4e0a1956c68cc48ebae15212329110140c9eb93de3d5d5d361d6c066db6d9c44f60f5274dd2e7316448</hash>
        <hash alg="SHA3-384">f8f77760e85848cc0af622c2ac498e5cf545ddb17a39b201831d41c49ec64034ef9b735bade25efe66cde7367c94ae47</hash>
        <hash alg="SHA3-256">c2b039bb68b14a3eb17ac14d5a23243e7f4cdf09c8c93d811b8babcb8d3828bf</hash>
        <hash alg="SHA3-512">2c8d89ea9fb7b8c0a12202a85eb6bf164c33ed4a09049734ffa4d4666420eff40e170662ebb0262d2261dc2b3497daf953d6a811f53131dd75ec962f48f3f382</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-kqueue/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-kqueue</name>
      <version>4.1.118.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c019c572cb4a14dea873788423c47d3</hash>
        <hash alg="SHA-1">3040df1087bcda0974a2b07a6f69c36833bb5ba5</hash>
        <hash alg="SHA-256">dc0a100920afadd39c252ba682ea62bfdb139945eaa9efdb6472f20b6bae4ef2</hash>
        <hash alg="SHA-512">c5d3b22d7f3a7f0508b0a26ab9b60432ad0c2ff0758152d455fe9696c1aff303e41937dcd32fa6cfff83b8f69bebbf1895c1b3293b58dbba7d908e602584ad8e</hash>
        <hash alg="SHA-384">8fe3b75dbd4540bf62853ca6a1300ef45bf670aaf9d4c1febdccf170e97d5907ad7ca394193d8a08ed35e37c98229206</hash>
        <hash alg="SHA3-384">2b0e65852f0a0d342dda6405594701580ae887deed32c2f80df17b8bdd5e26697b47808d14058c7c69b123fff5dea2b3</hash>
        <hash alg="SHA3-256">9984535f53848762c357e67c0c3ffbce677e4f4e3ee5f711b8aba17afb4afc57</hash>
        <hash alg="SHA3-512">f4d08ac2dded42b0c435152e063529943edbf68e1e0a772fb8b0de99a939aa5b6f2094e1691bf390f0e16150c4964c25f5fe073df222d56bb5ef080b813a57d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-kqueue/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-kqueue</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.clearspring.analytics/stream@2.9.8?type=jar">
      <publisher>AddThis</publisher>
      <group>com.clearspring.analytics</group>
      <name>stream</name>
      <version>2.9.8</version>
      <description>A library for summarizing data in streams for which it is infeasible to store all events</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ce83343678bdeac3b7bd360cf73c312</hash>
        <hash alg="SHA-1">5ef966e6c758c508c9076928d380108ae3f9843c</hash>
        <hash alg="SHA-256">d18bf0abbc2f84f879172a50efd1e11b4fc0fa0b88e672c43fcc9e5501fd1c8b</hash>
        <hash alg="SHA-512">8114ddf27ef6144682b15878b55aea2c9972da0c46c5c5734e9afe0c6e1a944ea179bbe287f615f124014d8ddada8eb4ff04e07e23c9aaa4607eb510f7266a05</hash>
        <hash alg="SHA-384">dc52ec9bd5ea1b0b95589d1c06d036d76c7bb86d794bc537439e295f09ff75af5a4996bc0be1e63b5cff792ba311eb4f</hash>
        <hash alg="SHA3-384">6777486f5ee408a28c5ab3d9180a248669e5713668556262f151274c269ef0e4d9b363f62e4d929d1893fdd640f4c387</hash>
        <hash alg="SHA3-256">41f2caed538df5f22c00889ca1474d211a7c0cb850c4162abfb39a95053406c6</hash>
        <hash alg="SHA3-512">b89c41b71da0f79fcb8affafbc0e2ecbe22a1b930fffddabe0b68551298bf1eb2be1faf6f5306425d70e3a7fe16f3f1ddf61c3a5c38f5052a378aa3fad3e9405</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.clearspring.analytics/stream@2.9.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/addthis/stream-lib</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>https://github.com/addthis/stream-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.30</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c9f4ffbd528abf35af50038128e2601</hash>
        <hash alg="SHA-1">4c0093ffbe0d6a90253e47277ce6dc4f759aff7b</hash>
        <hash alg="SHA-256">8eeac95450c03378d9d4c1dedff7118bb63508a97613f4df074c924e1b82ccfb</hash>
        <hash alg="SHA-512">05e2bcc9e17b452837d816c90584ffc6841319d33c4cd189fa81914e1bf5ff1c044ed2a7376b0ff06021140bf9708211aec55b704ca30b0a4fb3da00345f3776</hash>
        <hash alg="SHA-384">11f28353eba6ba3c0328f70887ce4e5684bb6ce5603ae4876374ed26922bc56e4d6e00f5be20c49e9b3508488637f83e</hash>
        <hash alg="SHA3-384">3a49ca4db0245ca0bdcd1661dce26b3d1a5b1025d6b69990339f94515857340f3753682a51f8a62e81bcf0a7672392bb</hash>
        <hash alg="SHA3-256">ca937664c4c19d5713663276d115e99670dab7caeebe5f56408a44b4bb7197ca</hash>
        <hash alg="SHA3-512">afd504992a11b4a05e2e0b1f5028f8eb9e65faa3f8d0f0289abc2195edafe8c82c01962b4fee515b271ca7215cd8a07446f2afc9e694ad5e49327bbeea523de3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.30?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jvm</name>
      <version>4.2.30</version>
      <description>A set of classes which allow you to monitor critical aspects of your Java Virtual Machine
        using Metrics.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7b4c9d0b2aab899ae5c9e9c8547cf0e</hash>
        <hash alg="SHA-1">3bf0ef45485074d31c6a82c10ce241b88ef68422</hash>
        <hash alg="SHA-256">de108ed7f95ec2cf23d7102deb09ac5a3ef35ae5ca741db9ec03b00f0880a74e</hash>
        <hash alg="SHA-512">02d5921a67627eae94634c84d9df741faad95139dec7c42e2cf373b4b7b388d035618f4aa0da6750c38d3169681c0178319ac68d2f98cb22df48dd2c9912d5f1</hash>
        <hash alg="SHA-384">1f7869e6d6c0d96b43bb9032d27ef38e3402bcc7d664b5c53ee1983bb1af95cb7cd661b7384b08822fcb7adbd8cbc342</hash>
        <hash alg="SHA3-384">65f3046ebb01042ff7ed51face9706c01247a404a376afb9b0106808e605c2c75fa24d0ac93de374fb65d2ebea04c577</hash>
        <hash alg="SHA3-256">74593a3211283989725f447a77654a451b7c9930ff4dd3073e22c3b182694ed9</hash>
        <hash alg="SHA3-512">54380cbda046263a8d2a44febb05f19f1de031cb142a685c4968ab3540e7851dabca832eaf061bc1e2cb7eef0311be4278708af3548853436b911deadfbc5ffc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-jvm</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-jvm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.30?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-json</name>
      <version>4.2.30</version>
      <description>A set of Jackson modules which provide serializers for most Metrics classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">38b71a231f1e4af6b2e97c2d8ed8db00</hash>
        <hash alg="SHA-1">28551e68336c720e364e9b62a920b3699ebf1e90</hash>
        <hash alg="SHA-256">8fbb08f032fe5c9b85347825ac0f316ded1e2cc0c3300c15012ef0711bfffe10</hash>
        <hash alg="SHA-512">170da2bdfafff942abebb760d2521bf09099670d7254e7be832931a5bb75cd359d8fc224a2eced5144a63aaecd29f2ffc01563fef51c9773d8bb0016d2e2fb97</hash>
        <hash alg="SHA-384">f7a01b3cad73681282ee5347f54bd581970105ee4045a019baf1e16526e1ac20883d3c5e265f4908ace68f298480e8e9</hash>
        <hash alg="SHA3-384">fc03c36d229787925287a1a020f3ea308d85685e6f019cd185df56a79b14738e93d1583cac1e9128a38292a4c75f102a</hash>
        <hash alg="SHA3-256">cadbfe9c3f82b68131cedc391fd6320cccf028924fa417d9077d22df9407d9e2</hash>
        <hash alg="SHA3-512">aa42f975c4bc2adeed15f1980a5792a06560d3ae54b6b710ecd09d029f6cefeb4b33ee1490b3b126f0067c42413239e13ca42c8b6d1bb929c93b49ff2e2d1188</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-json@4.2.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-json</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-json/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.30?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-graphite</name>
      <version>4.2.30</version>
      <description>A reporter for Metrics which announces measurements to a Graphite server.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d08964314cc7ac6fd2356f8b10dba891</hash>
        <hash alg="SHA-1">a3496cf1147482e8974f322296e92e421f0eff13</hash>
        <hash alg="SHA-256">5a000da7e41ec07b69f3fea43fec05e77becdad45e94bd74a4b7755b68f065f0</hash>
        <hash alg="SHA-512">e4f613d59e303f074bbdf70db7699e944973050bc276a383cb8d66c3e24c4a791bd5e213bba91ae2d52b31c53862bef7c8b0be4057739e5e8e86cebf00f173bf</hash>
        <hash alg="SHA-384">915cf761f8966303489663847e71c6c1ea0be7dd720e7d19fac9b74b08f298dc859ee3b78bfdda8879d4e8d305888604</hash>
        <hash alg="SHA3-384">ab98081fef11990d3e8091b6e8a37febc074e205c5d54e5ef66eaaa1da4482b792975618808e865b2884a05d4e445ce3</hash>
        <hash alg="SHA3-256">6df746a85b7829e99db72e8f2105f23248a3c9b347d7eb8dc23dd508990c71b4</hash>
        <hash alg="SHA3-512">d12479997c684a631474436d4c1aed70a207cb1fd164b2406c940c9cfb41934e303dff555825be6bfe52a619075c27b9987aaf3643cb7a344b0645e24bbc0e7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-graphite</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-graphite/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.30?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jmx</name>
      <version>4.2.30</version>
      <description>A set of classes which allow you to report metrics via JMX.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">380a08f6b921999730174d94c26d738e</hash>
        <hash alg="SHA-1">71068f43e2aaca144a04ace266fbf62160ee253b</hash>
        <hash alg="SHA-256">82e73f6e0457facf17e02c5226d514ff8d75680c2cd6fbf2f9bb31898fc34f42</hash>
        <hash alg="SHA-512">7f76b50a92d7345b99b145c6c14baa6c366512488b6e94390946338167ff3d19ef4105b66f1d7a322699977bbc6be4a9f35b83a56564de8e5f2060535778c1cb</hash>
        <hash alg="SHA-384">bae11832d0a8bf2171a074e31cedfcf431222ff87c27461a5a47922bf8731280164f3e74b4abcd5274d927fcab882153</hash>
        <hash alg="SHA3-384">c203bd34153710fa56e5e303bccdd5ac68c575a9afb12d2e9a2e89f16dfcd9403d414a95ad04b9f676be42f101eac073</hash>
        <hash alg="SHA3-256">f27717130f514b2a20c437fc6edcc317703b6566b51ce91c9c9381f189d80c61</hash>
        <hash alg="SHA3-512">d66999b93bba2166725fc08e11bb2be6766f84f91ea125ee12b8bb4d82eef75714939594513a48155b9d6180a06eb355a9bf441f798d0987aaea7c0e3b6551d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-jmx</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-jmx/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.18.2?type=jar">
      <publisher>com.fasterxml.jackson.module</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-scala_2.13</name>
      <version>2.18.2</version>
      <description>jackson-module-scala</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39d7901fd2a388937728ab1cd4cb7ce3</hash>
        <hash alg="SHA-1">84bb533a599a4eaf901aecce5e75d49490a88774</hash>
        <hash alg="SHA-256">1aaa56c3ad7143ceebce57ac09ee15e7e636d3a9308e1e75774b7a2f938bcfe3</hash>
        <hash alg="SHA-512">cdbf806280ad9e49f9b208993c465d3c3f8f53ba8b9e23258af206b3608aab7094ef63039306316ce4ca328c097a05d0db9efea830d98427c79a4289912179f0</hash>
        <hash alg="SHA-384">a24bc813cd6155347b9c43e28aa435601c16fa5a2ea4ba23d506d9a57c6fa876bbfec5906476a183acdb5b38d2f24553</hash>
        <hash alg="SHA3-384">051ce6c510adff5f22b04bb3a8d643cb67983afe69b6241998c15209a94dd79d6d0da20d75260433cc7890cd1a560881</hash>
        <hash alg="SHA3-256">bcb9e1c9cbfdf71043235fa27dfef0ff545a394500d7459ae8a43ad5df85b640</hash>
        <hash alg="SHA3-512">8fdf83a93ff41888d179322ac6dcf81d68133b970f8d3caad9e5bfebc0db88a5003a202f3dfaf3a265623464532768adaf86003fedc5c0d028b317603ffbcd86</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-module-scala</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-module-scala</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar">
      <group>com.thoughtworks.paranamer</group>
      <name>paranamer</name>
      <version>2.8</version>
      <description>Paranamer allows runtime access to constructor and method parameter names for Java classes</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f213c72b67d4850f17a4a3e9064904de</hash>
        <hash alg="SHA-1">619eba74c19ccf1da8ebec97a2d7f8ba05773dd6</hash>
        <hash alg="SHA-256">688cb118a6021d819138e855208c956031688be4b47a24bb615becc63acedf07</hash>
        <hash alg="SHA-512">d774b05135d34bc42d8a7bee6466715bc44837b95bbe618faa8680978c4348652292ea6dd8eeb88dc7fa859bfe685f4d8329032cbf4fce2ea7e555ba3243cc14</hash>
        <hash alg="SHA-384">699148a3f69ae205aa47c82e2cb78d3949afc71b090935579a0363fee8675eec3ba05e0d3127295213b39aad3485690b</hash>
        <hash alg="SHA3-384">d5cc26650871c2aaf8358e752e59f55b7f7ac3015423f7d41735a114f27c31834b2296c096671352a7248ab59bea983f</hash>
        <hash alg="SHA3-256">58c73bc75a09925e0f7bcbfcbbf7d17820b92eb08b1ba31bf230d368d4cf424d</hash>
        <hash alg="SHA3-512">b9f14e1cf5c3701abbbf2d73789ac75d9e7de0d6c7b2e0d7204fbe90acea764adf6585bf64c99743c64fabe016a99982d3c915b0ec61437aede406bca6cd4ec9</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/paul-hammant/paranamer/paranamer</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/paul-hammant/paranamer/paranamer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.razorvine/pickle@1.5?type=jar">
      <group>net.razorvine</group>
      <name>pickle</name>
      <version>1.5</version>
      <description>A feature complete pickle protocol implementation (Python's builtin serialization mechanism)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6187a95b6d982b63992a1f5bc747c9b8</hash>
        <hash alg="SHA-1">40c199d316db0e24bd93d349a35fb425045661e9</hash>
        <hash alg="SHA-256">ec762e69e4a699b544ac68b306d12f1f546d7581f165f3ffea819b703066424b</hash>
        <hash alg="SHA-512">c8830027edeea04289bbf47a330312eabe4b200760aaeb1112d048caef9298542788539a97cd63a369ab3476683d3e82081e0198779413bb047e0a5858b7491f</hash>
        <hash alg="SHA-384">0d7c573708f9629ac7617fcc3f9c11a82dc4e3464e1ceaaa27d09d66055c23ee8d6ffb2d68b7891a016da86215944196</hash>
        <hash alg="SHA3-384">7c28c2a6233e81612d00b8973c14b7986a0a1e385bb0b5748819562fefa4b9c247f58e6173b953cde151b1abd6e31647</hash>
        <hash alg="SHA3-256">480fd5ff9d203b1d2370a1a6e065e8be791fa5fec3b3d4141a7a61880a548e78</hash>
        <hash alg="SHA3-512">d384469619adc405c6d0a2851ec716c2555e2063e2aa141cc72fc6213a09b2b7a8db4ef6a10538690d5869118dfa205e8a7197e47afc50e43ece2366d5fe8509</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.razorvine/pickle@1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/irmen/pickle</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/irmen/pickle/issues</url></reference><reference type="vcs"><url>https://github.com/irmen/pickle</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.py4j/py4j@0.10.9.9?type=jar">
      <group>net.sf.py4j</group>
      <name>py4j</name>
      <version>0.10.9.9</version>
      <description>Py4J enables Python programs running in a Python interpreter to dynamically access Java objects in a Java Virtual Machine. Methods are called as if the Java objects resided in the Python interpreter and Java collections can be accessed through standard Python collection methods. Py4J also enables Java programs to call back Python objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">82241e9bdc71cb59a05ad153f1feca7f</hash>
        <hash alg="SHA-1">801fc9ed56ae8052805b86cb9c459257a633e75e</hash>
        <hash alg="SHA-256">bc4c4b1e731ab18496cc6eab31e7353701b32fc5c3047764a0656acf5344a54b</hash>
        <hash alg="SHA-512">63b2bdaebd853bccb96f176898e53b2040a733a73afde2bf92b5a3c1057c083d291f95f0938f84b82782889ce9e06538227140326b3569101bc578d55cd0b579</hash>
        <hash alg="SHA-384">e7a55cb93df90bd6a12ab2efb8db564827cea4b281b2959432ddeb36637f66583215a358ab577ad65cc339ea813d2999</hash>
        <hash alg="SHA3-384">549e9ff58862841c0a027ae37606edc5d130dcf521993b61f7d47434790c228088c42e6b8f3d570f0aa4bad387f0c385</hash>
        <hash alg="SHA3-256">d9a6a5fc9622de23b4392cee741115af3222526032bf35baa38dfc18160666cb</hash>
        <hash alg="SHA3-512">85371a86a34a8bd359f0311bf1b0ee06bf99fec5ee97649727fe518eeb8a605a35b230a4c4c3c02e0ae62f6b2986f9d6c3d4e18396d48fa125ec74c14bc80f0c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.py4j/py4j@0.10.9.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/py4j</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-crypto</name>
      <version>1.1.0</version>
      <description>Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption
Standard New Instructions). It provides Java API for both cipher level and Java stream level.
Developers can use it to implement high performance AES encryption/decryption with the minimum
code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as
AES directly. It wraps to Openssl or JCE which implement the algorithms.

Features
--------

1. Cipher API for low level cryptographic operations.
2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption.
3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors).
4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl.
5. Portable across various operating systems (currently only Linux/MacOSX/Windows);
   Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`).
6. Simple usage. Add the commons-crypto-(version).jar file to your classpath.


Export restrictions
-------------------

This distribution includes cryptographic software.
The country in which you currently reside may have restrictions
on the import, possession, use, and/or re-export to another country,
of encryption software. BEFORE using any encryption software,
please check your country's laws, regulations and policies
concerning the import, possession, or use, and re-export of
encryption software, to see if this is permitted.
See &lt;http://www.wassenaar.org/> for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS),
has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1,
which includes information security software using or performing
cryptographic functions with asymmetric algorithms.
The form and manner of this Apache Software Foundation distribution makes
it eligible for export under the License Exception
ENC Technology Software Unrestricted (TSU) exception
(see the BIS Export Administration Regulations, Section 740.13)
for both object code and source code.

The following provides more details on the included cryptographic software:

* Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java
* Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c71451f3c4737ba6d84f9bd9e8f2400d</hash>
        <hash alg="SHA-1">4a8b4caa84032a0f1f1dad16875820a4f37524b7</hash>
        <hash alg="SHA-256">44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f</hash>
        <hash alg="SHA-512">62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d</hash>
        <hash alg="SHA-384">0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486</hash>
        <hash alg="SHA3-384">a86cd2c434475336d6258dbccae98575888b910a935517ddb832bbefd944b0427ebb7742e5ef65e5e7e2046f94a4fc27</hash>
        <hash alg="SHA3-256">aea2f3e041185d2f7ede524ebdc76f76708db74da5023dc34d2d75c0fe2ec6c2</hash>
        <hash alg="SHA3-512">313cd4870c67daf90157f6567e969cfe8845f0cf4b90f7667dfbadd4cb35a526109a59b60e1bb677a9938471c15ebdfe973038e0cdfba2f06db98fdbf88e8710</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-crypto/</url></reference><reference type="build-system"><url>https://builds.apache.org/search/?q=Commons-CRYPTO</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CRYPTO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-crypto.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-sql-api_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-sql-api_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e4637a667027885bb1460b8e6aa8b9e</hash>
        <hash alg="SHA-1">a14a9cb05a815a596b57593a16552ab7f42eb49b</hash>
        <hash alg="SHA-256">c37b34ca306f3caf6a874511119bf37586acc5421d785b0ea797ec4c37b66faa</hash>
        <hash alg="SHA-512">63b4744c565d871629d6f263ff8fb33634671fdd02f525da6aa10c094b0200fde1c160adde3fbb6c5584be8f8ce7d63f5de064e0b7e6c4a98b14f0a3b8f50ea6</hash>
        <hash alg="SHA-384">6634e3f48cb6adc2e2385d488294fc941b7129f1dc45bc379650d6a82e2dbea02dd367cda1e7cc7a695f7987d95dd51d</hash>
        <hash alg="SHA3-384">1b2c205b31f5a100ff621b500f00ceec7b8b90625f5d723886d977264ddba1bdfb7eceaeda46a3062c7935f8e08afb61</hash>
        <hash alg="SHA3-256">ce76e1397f8fd91eb0fc62e6a926abb7b62e4b1a3995ab667f0371344905721b</hash>
        <hash alg="SHA3-512">b4ad3787b6ee2298348177101769522d8cfe01048eb6b75225455fcb44e87b3964fbd070ff5c5acc9ca84e89c8cae783606579e23305e124a8153f77fd477b88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-sql-api_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/sql/spark-sql-api_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.4.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-parser-combinators_2.13</name>
      <version>2.4.0</version>
      <description>scala-parser-combinators</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e722e68df2f86977cfcc71c9a50b64f</hash>
        <hash alg="SHA-1">4c21da00e1416078ba0bf4a2be63aa86de92753c</hash>
        <hash alg="SHA-256">e36dccdc21fd4bc770907a9e126d7e3901e71a191eb9ea8e93a0227774e0945d</hash>
        <hash alg="SHA-512">b413c755b1980c6c01dbc61199eb8f5f0231273a3a48ed58cf437fc7b6c34b4bf0a533fe8163b357671e6bffb61fabee92def220434a26e900c70af81558c8bd</hash>
        <hash alg="SHA-384">a3a29bc9161bba67fee068df2387107b0da2aeb784f28d82ebc7dd0eb86548ea65ce8395ae5f8230c75e3f82cda77216</hash>
        <hash alg="SHA3-384">a9013001acaa4d51756e51990945fbead6eb2d3c1251faf726367c131732914a6c1e908a9aa85f9b715cd860fe87f0d2</hash>
        <hash alg="SHA3-256">73a21689748b42397efd7013e479bb754d3f21ab58a4907fa210fc1fd8c9b9cc</hash>
        <hash alg="SHA3-512">44c9513f18aed4e9482b211fdce8bf7f29a2704de71f8fbef5ab4a136af8ae064dfdc7c625f5abb5ff95aa1088b290e7d34cc510cfa4dd674e631b84a57a9932</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-parser-combinators/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-parser-combinators</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.13.1</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd465ddb2a8dbf69eb6c94e69a0d5f0f</hash>
        <hash alg="SHA-1">17125bae1d965624e265ef49552f6465a2bfa307</hash>
        <hash alg="SHA-256">54665d2838cc66458343468efc539e454fc95b46a8a04b13c6ac43fc9be63505</hash>
        <hash alg="SHA-512">63eb51bfcee49c52848d8b7c3c46d8b4d367d85fb3c3db7175eaacba94e4d0c227b78e5955a0e86e575e1c6206fc2a43e5fa96fb04ad7c16e24ec94015cfc18b</hash>
        <hash alg="SHA-384">9e5e022d1eff5870f53e0e17d09d737eebb5b859c3403e78308af4616a86cde0830842b81a389ac4a0df871fb1032124</hash>
        <hash alg="SHA3-384">20f3a927369f6bfd94bd8b244e0e9330d4438736414c403b712098f6aad9a1140bc17333cacf194f1b9e99c0f62ffdfa</hash>
        <hash alg="SHA3-256">5696b3e757e6135c1aa56452b86ff0456425d13b97b33ace3f4d3dc6c752c4b6</hash>
        <hash alg="SHA3-512">33251a06eaeaa56f274548e47b405cce279a9e54e34d65bc382d2482887bd470e5080da4f75c221658c3e70aea79e748bd0a3f47e49e37805174e23f71747b92</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.antlr.org/antlr4-runtime/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-vector@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-vector</name>
      <version>18.1.0</version>
      <description>An off-heap reference implementation for Arrow columnar data format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a975677ffdf4d8e9c5b01169dd2aed66</hash>
        <hash alg="SHA-1">b1fb77f4ef36fd52afe480ba12b7da77367eb88c</hash>
        <hash alg="SHA-256">abfef148779957f34430c14e9b9a98872ea8064336bc82998d53668a0ded7d2a</hash>
        <hash alg="SHA-512">05a0b6720d8c3eca31b57b9353e700350e91714a10f6f5e480160b5b738236b79f09e48d2d2161b771ec01f7022586eb4c1ac5359a9106ab4558780d67885a01</hash>
        <hash alg="SHA-384">2e5350fdb3124bb7c2af2a0082ac5dc27f0bf938db6436d394ba76957916b37be4a0c84fb913cef7ee399eb4cddef30c</hash>
        <hash alg="SHA3-384">5616514b3d93cc57d99482f86c2c55034148167e60787cab09d8c98578e50d8cedbc03eed3bdcfa9287782748d66a0b7</hash>
        <hash alg="SHA3-256">870cd4646c80928518a0494a192ba13a9897bafc3ab325f1c8280ecbc94417be</hash>
        <hash alg="SHA3-512">d19fabd6f15e7c31f012ac201401bcde79c1e160c146f62bfe57e8ff159d410b9b7ccbd5cc63cac4e4397f4b7493ee08d3585b372d90b0a7afde20b40663ac20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-vector@18.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/arrow/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@arrow.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-format</name>
      <version>18.1.0</version>
      <description>Generated Java files from the IPC Flatbuffer definitions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">068d2e9429de23fd00373b6c01b228b6</hash>
        <hash alg="SHA-1">9d356b6f20620f5619ff85b174f97ae507df4997</hash>
        <hash alg="SHA-256">004181b3877d8dabb2cb3bc00a9d1f535c1aab750cc8b6050d16bd2dc9ed29dd</hash>
        <hash alg="SHA-512">27124524d6262fa54a3a430d4946e749f6ec516c136a07aed8a1bbd380efa29e34a46865ff9d76656f3a0331344a7c5ecb81140cd51895943b86208e6c9ec87c</hash>
        <hash alg="SHA-384">da5a1e47800559e842e6a3e26fc8f6b83fd71497e18e520e4a3c3b7b57f62883d152517dae87a259b0826fd1e89e7af2</hash>
        <hash alg="SHA3-384">4c85b92e1f229603233e8c1b84ce1d715b375e5de8941ac1842ab850fb749cafa24d66f3a33c33bf071ab60e551f4a6f</hash>
        <hash alg="SHA3-256">713788f4d72e00bb01e9ff2179c03361c00e9b945c1f175fd29e7b37fff07897</hash>
        <hash alg="SHA3-512">9b04e1c357a739d12d78a0e255347448d2102831a61ddf83db41dfc8ccc4d705436547deba24d48400fe91d2a46601c24cda20c81d1107af0d16b7028f52786b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/arrow/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@arrow.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-core</name>
      <version>18.1.0</version>
      <description>Core off-heap memory management libraries for Arrow ValueVectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b623f3c2b3c747c0e79fef6ec1486993</hash>
        <hash alg="SHA-1">35f4853d512f06759759b40b53bac850867886f8</hash>
        <hash alg="SHA-256">bc42ead76b54879bee621608727b19c24bc58dc1eb5d760eafc8aa8519ec427c</hash>
        <hash alg="SHA-512">819f1fc8d4a555419dbd5cbd0f8821d61cdf971c6c5586f6a0e44464044aa9bf033939344214a17a8994c18a3bfec74f933541b0b23c9c6a0a4b4672400972fc</hash>
        <hash alg="SHA-384">01bad752734bd1f7cd32339c88cf58b13631925799628d16858d283fc63176c1bedf8b6cf79fcca60155a3a8a4d7b122</hash>
        <hash alg="SHA3-384">8dc1ee8d4d2d17b206952724070354e37ec7062d3d5a26b10b56539c632e834ca51fa1f2c65bdc965fc91c604d1ab8ea</hash>
        <hash alg="SHA3-256">5a2f86266fb80afe49ffac6e2b92e3baa12062d49a2cb076d0e29551943ccc1e</hash>
        <hash alg="SHA3-512">2ad3744642effa4f95319b9ab1ed526fc2c3659d327f60c1c7458011086068e70325fdccd54333dedbf3f473bc9575607ac6ad6367de5ec49dcaa218a740f10f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/arrow/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@arrow.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.18.2</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">aaf3adb28aa9de74b3bb87118f93113f</hash>
        <hash alg="SHA-1">7b6ff96adf421f4c6edbd694e797dd8fe434510a</hash>
        <hash alg="SHA-256">e2d202d4606e23aeaf8a5a9632db06f5fefd5b63d251c3f503f9faaa78530e5c</hash>
        <hash alg="SHA-512">bc1cb3e193996ba0b876baefa99122672bbe617f2de582f5208609efb1bb5886832857406de5b0fd7969fce8c07dba0a672b3f077bac2f7efbc3d0cc252c1ee9</hash>
        <hash alg="SHA-384">cabe852eef9298f16699feecd3ddd9589712be714c4cf8d0a581edc84d40ec4e72c5ecdb676c5f7a6a8d4aa994295a31</hash>
        <hash alg="SHA3-384">0564445841652897541e3ff99accacc4fb57887b97189938e6a5759de1d9a79685229b255b798f3e34cc098bb966807e</hash>
        <hash alg="SHA3-256">9941830e2ad393b33e3999095cab945f4e768b1022310d13f9c57beb8817e429</hash>
        <hash alg="SHA3-512">bb85164ff9331af6c8d872712e6f3b1757855ef73ab81e24b4c8631f3eae1bc187aa8e6fd68b60f44808b2691eb364edbf55423eff1be3040b3658d9f656a3d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar">
      <group>com.google.flatbuffers</group>
      <name>flatbuffers-java</name>
      <version>24.3.25</version>
      <description>Memory Efficient Serialization Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a690a022070ce829ba8efb923c0cab4</hash>
        <hash alg="SHA-1">edc46436b645a12126322d02608dd21aba5ac433</hash>
        <hash alg="SHA-256">f5b50034a53debda980aca803b8b06949f93a40163bc1db6cd69581d3718e355</hash>
        <hash alg="SHA-512">6b487047753e1b5686fb100e3261b6a01b327a9a83ae9f3ac6a9b40a68fe4550dcd2c2c0442d55d76d9e5ab4fbe3c9894da2f76071fc69d571c3da5d2a2dcc0f</hash>
        <hash alg="SHA-384">3eea7bfbc2b252c10bf31db3c56b61a5e335bb3b90ca25e8905709804fe0b11e28e7dde5c8432632373912f4a06465cb</hash>
        <hash alg="SHA3-384">98e581edd7501ba3905533ef6139ce3d233dcccae72a6ae7d3a4015fe91643cf92144f512536090036e66814f93afc52</hash>
        <hash alg="SHA3-256">6b3bb68eb6679b88aeee103930c29c3f1e5136ecd1edb472f0bbbc89a3076dcf</hash>
        <hash alg="SHA3-512">3c022ec58dca97a395d111029b1a2a88db757dc496f6c99a288be0b57e92a9405219765323cce4492d532ad06c640dda1931f1215de086e5e5f141094ed23fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/flatbuffers</url></reference><reference type="vcs"><url>https://github.com/google/flatbuffers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty</name>
      <version>18.1.0</version>
      <description>Netty allocator and utils for allocating memory in Arrow</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ef9dcaa4296d81a692aee17b0202896</hash>
        <hash alg="SHA-1">9e9e08d0b548d2c02c632e5daaf176e588810d22</hash>
        <hash alg="SHA-256">17448652b4bba123b6e901d1d7ddf63b776387c98295de93247c9461605da6f7</hash>
        <hash alg="SHA-512">0a5ecec83eb76dbcf6294bfe0335b0dbd02fa9871a6a3bf44663edcd5a2c7c5907aa33127c239048aaffda6ce01adbfa8500f7e714d14db1173b63e9702fe91b</hash>
        <hash alg="SHA-384">973e07bffe29f93dc6df5a83daad96821c49cae3eefaeffcb461d6b0ed9b73fb58e551ec1e004d0697bfcc7a7e8ea0ef</hash>
        <hash alg="SHA3-384">c86620ea0b8b23fb86953523830ef80d4c006143f6ef1377ef50f92deb9838573a38cbf6697a46c08442528e9a7d7619</hash>
        <hash alg="SHA3-256">e378aa1d9c04a3448c4fb791b7878f30e6e90a34a5c0c0d565f757442583b81d</hash>
        <hash alg="SHA3-512">fb7665e1db2c3b06343b7787f9d8f7a7c1a83747e38f9a288a614fb9ddf379d5c8f6d3c1ea176b79f12c071a7c882d8eacc64cd800256adbf142e58fe444f3c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty@18.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/arrow/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@arrow.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.arrow</group>
      <name>arrow-memory-netty-buffer-patch</name>
      <version>18.1.0</version>
      <description>Netty Buffer needed to patch that is consumed by Arrow Memory Netty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d0c71f421b221c9a02a0809f69cf7df2</hash>
        <hash alg="SHA-1">86c8fbdb6ab220603ea3a215f48a7f793ac6a08d</hash>
        <hash alg="SHA-256">472e5621551278de99cab9bd1b929c8db053fe603a732c259e42d48df3c77911</hash>
        <hash alg="SHA-512">311f579aeb90bc6f22c45017ad6406b5d4320d7157f4d942280de5333847e0e8e613b56201a14288533ba11db5ea041ed966063c5ce2935333b18b92638cc609</hash>
        <hash alg="SHA-384">af451013771bd89070a2e6a5cd74c40f83cec522b9e2526f20db12e4047de7369c178c8d4c2f661547ece2bb6ddb0cd0</hash>
        <hash alg="SHA3-384">61e70a5bef4f1b1a08cc6b25e75a82e4aff8bcc065d5cfffa1674641f848339ad3eb4a003e11e5d48516d3223f90740f</hash>
        <hash alg="SHA3-256">14e43343782860e62603927cf385640eab70ae939889a5a1ae21b288fce18da9</hash>
        <hash alg="SHA3-512">525f1921d71523aeb07f83c4276fa0cb651eb0685fff11831fbbae2c97e2e1f0c93c470535eac9d2740fe1dd313da6f64a02b42d9fb75769146e8018f42a0625</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://arrow.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/arrow/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@arrow.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/arrow/tree/apache-arrow-18.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-variant_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-variant_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69a3260cfec53caa06924b0726ab584c</hash>
        <hash alg="SHA-1">34abd58ba6dc86e6895cfc7365d15383eade652d</hash>
        <hash alg="SHA-256">f83d8ca70575efd6bb9bdfbe3e2fdcdba9cebc580366baafb56780f524055dbf</hash>
        <hash alg="SHA-512">65c76613ecb76b8c3d8c2d750f7fdf3f80a147bd67ef14a053ed17396e5885d45c46a7b400c1d186653616219f0f87734578070f2a51dc6d2fd1579cf962c2d9</hash>
        <hash alg="SHA-384">0f25f47d9cc32267440206394aac151254e9fc873742584b34a7cde0fb29cb2f27541d3765fb8a2dbce7d4220ef736ed</hash>
        <hash alg="SHA3-384">9f7f589333537cb34625b52f80d2469cb1656cf77aa33eae1869f9f9ce3a164df112242bfebf4b16d9fdccc46a8353ca</hash>
        <hash alg="SHA3-256">aa6219bf9fc21da4b43b4dbea01885274a4d6afa00fa06d8e5570d6b83c56327</hash>
        <hash alg="SHA3-512">c4e2c8e58b60d31cf63e4d0e977a124f6b0c4dbd60e97b5fef18785eb4bbf58c4ef9795dd73ecbf3dd19d6ac64e5c6ab9cc9af18bffc5e4c3e73cab404ca9bcb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-variant_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-variant_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar">
      <group>org.codehaus.janino</group>
      <name>janino</name>
      <version>3.1.9</version>
      <description>The "JANINO" implementation of the "commons-compiler" API: Super-small, super-fast, independent from the JDK's "tools.jar".</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">597cbcd4d0b8273552758c50bf423926</hash>
        <hash alg="SHA-1">536fb0c44627faae32ca7a8a24734f4aab38c878</hash>
        <hash alg="SHA-256">7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d</hash>
        <hash alg="SHA-512">840dba1621f06322d6ede76c941665e4e119f26ca1b7cb1a510a2bd9d692d3a5d75ac79477055824c2af37958e1c330daf6e1fbb9fd5bbba82db3a3f6077ff11</hash>
        <hash alg="SHA-384">85599d163bfe4c2d66e526d549c5bd26bc4137c4bb80099130782e42cfb9d5a55d34b11d98877cf11436536d3f1f9aa3</hash>
        <hash alg="SHA3-384">022e052fab4609e939df1a251e5c1283635bdf6ec24047e095a0d8a557a0323ade1a4380f277235561bd36a608700056</hash>
        <hash alg="SHA3-256">0d215b105b0bd362604dc9e14c8af2e7f77d5f39891c0127c97397667be386d4</hash>
        <hash alg="SHA3-512">f7a77aabd5a1b1c5237b321995bfe9725c217d3beb94ac2bb49bce3e238c4ddac4fd6752ee14a6aff1d01a09bacf915fe06ace351d654fa52fd98621cb828681</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/janino/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/janino</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar">
      <group>org.codehaus.janino</group>
      <name>commons-compiler</name>
      <version>3.1.9</version>
      <description>The "commons-compiler" API, including the "IExpressionEvaluator", "IScriptEvaluator", "IClassBodyEvaluator" and "ISimpleCompiler" interfaces.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e14b760178e0c2105e2951c2f452a1d1</hash>
        <hash alg="SHA-1">f0d70bb319e9339aea90a8665693e69848acc598</hash>
        <hash alg="SHA-256">d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25</hash>
        <hash alg="SHA-512">0d290612b69ddece1c58ae0a60c6a544893800f588a424afb7bc12215a9e3bfe775ff6bac749f16c7b4e32e186ad29bceb80112df4082f16ce1f749685135e80</hash>
        <hash alg="SHA-384">ab1394175f2509bcdc5aa1c76294ba146ba09bae259401932f08bb9b5debd11049d2c751e503e4255d4efd4a4f199107</hash>
        <hash alg="SHA3-384">fe833869d4e4743df14004cb57cdc1812d9e920a5e04f286f3cb9192b34c605cc12288624f5608c00f232139efa1514c</hash>
        <hash alg="SHA3-256">4677b5bcefdccd7cf4293bfaa4700af7fbe9bc1d17e857c8a9a7405fe1b03f58</hash>
        <hash alg="SHA3-512">d81c4c9562e7c8a7761e2c787e91fc6f0fa8a75ea016800d1ee87e0bbd4b278d6f52077d1a40b16d16dd5714f561dd93cf06662b046f33794782a2d728042fca</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/commons-compiler/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/commons-compiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-java@6.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.datasketches</group>
      <name>datasketches-java</name>
      <version>6.1.1</version>
      <description>Core sketch algorithms used alone and by other Java repositories in the DataSketches library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a41c185c4b4895992bde7adacfd1914b</hash>
        <hash alg="SHA-1">adb4ad78248fc47bfe8ba564c430eb479b8c18a3</hash>
        <hash alg="SHA-256">f801288deff11e744d87c0058a4676626275bce57cd766da5cc52c440c32e9a9</hash>
        <hash alg="SHA-512">d671454ac492c2fc27ff6feb2c1c40db1d89f1394cbab2ae50b01a07b3f8557c88c749bc890620bb1b95676cf7a5844adfe3b7436e22ef15f61d81ecd66c6e28</hash>
        <hash alg="SHA-384">046a49f63e2263ac0f5554454831401ebb92d6e59fc375bab7927ec26a42bbfc4dbedeaadb84f6a61ccdbeca9bb301c3</hash>
        <hash alg="SHA3-384">a89f46696b881dded22c11b787cca586c1a58bf76ac6ad17b276adc369a2c52654c25df8a4e74a1ee03135400dd61959</hash>
        <hash alg="SHA3-256">4d573905a7ecc907824d2bc0cd5f227950eb15e714a4c0b0ecf0d63c64acf120</hash>
        <hash alg="SHA3-512">c959e567c52d56ae5f031e7225de250006379129533ede1c68cb458153cdb88a78bf64b9d14be8a7e20aa899152ae0e633205c7ad00f1cc3a703f7df0ab2a833</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.datasketches/datasketches-java@6.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-java/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-memory@3.0.2?type=jar">
      <group>org.apache.datasketches</group>
      <name>datasketches-memory</name>
      <version>3.0.2</version>
      <description>High-performance native memory access.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">43aab521416080f2ec0447b830c5d535</hash>
        <hash alg="SHA-1">af230826edc1f83e2fd058a94342e49dcc13941f</hash>
        <hash alg="SHA-256">a3dbdec4de16bf2b0a4c9b1b253bd4064d587675fc76063f8972cdfa104c66cb</hash>
        <hash alg="SHA-512">1e149da646773e046b9cb9e555319fca328a02de106cd981f7f4b27c078b96f5c57dd355d03b29c8af4885b957ab6981a62c23cd4c69293951aced5299ecace3</hash>
        <hash alg="SHA-384">b9cdad5feba4a0ce9981e120d9ad32888cbff62af9dfaf917bf1eb23131275bb8f14eafa40ad119ab027929d6e49fa86</hash>
        <hash alg="SHA3-384">ebb576f5d67274052e82a4563d40f514a7bfc3117c0e8dd9881837725460d7d5fb2f193b874a8d04aa002dbf7a642add</hash>
        <hash alg="SHA3-256">4b3906252408d76891d0111daccd737434197a6f869fbcdac97a4d493854e3aa</hash>
        <hash alg="SHA3-512">0a6fd12e89dd581bf87a026316873b1cc8d5d85d4b96b8d37c534645fe13c4d5b10cdcc183a6cc3f81c1864696181ecbb156d663f1fa9b08ba21a09eab95985b</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.apache.datasketches/datasketches-memory@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-memory/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-memory</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar">
      <publisher>org.scala-lang.modules</publisher>
      <group>org.scala-lang.modules</group>
      <name>scala-parallel-collections_2.13</name>
      <version>1.2.0</version>
      <description>scala-parallel-collections</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2e890c378c7acabdb46c6723ff584dc5</hash>
        <hash alg="SHA-1">ef79a2a89674427d67fa5912038b262abe7b40da</hash>
        <hash alg="SHA-256">4eae6e68cf44e9f709970355590ae981883edf6484608d747376a56cbb285432</hash>
        <hash alg="SHA-512">8bc0ac14198032e1e163e0faafd6ef1ce8ac384e2286b058546f01b540e7105f3f3392426171022aa586854babf4912c54734222ba6a40d4a08f0cd2f28b4bdc</hash>
        <hash alg="SHA-384">2a0ee0b78adefca05fe8ee5e530dd29323eec0568fcdf1248a86062fb42691f893d9c289be24bfbbeed2b731bda60bd0</hash>
        <hash alg="SHA3-384">54a7191426fb8ebd5aedb2c14706d02724b9213468db70fd27801d95b98f217b302e56aeaa59ce7c31189e0b555e73a4</hash>
        <hash alg="SHA3-256">058884cbace235e31084f8fc1c2f0047d1468f674697ca198a4ae333e48c293e</hash>
        <hash alg="SHA3-512">1f164933883ae6c9bdea67b0cda11414996e7aa1d4cff25a7bf0e20d4e51a0d66f7abc8a0992baa2a0b9fe5796c0e1785ba4e7efe0ae8c8eadd7c5f36dac2f6e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.scala-lang.org/</url></reference><reference type="issue-tracker"><url>https://github.com/scala/scala-parallel-collections/issues</url></reference><reference type="vcs"><url>https://github.com/scala/scala-parallel-collections</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar">
      <group>org.apache.kafka</group>
      <name>kafka-clients</name>
      <version>3.9.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39c5a4286e6cae1e6f852dbe067e7e81</hash>
        <hash alg="SHA-1">86ca079953ed5606257ff298c24666b26da6985b</hash>
        <hash alg="SHA-256">7568b998572d256f0b7bc0afdc1b7a2588b8b08415c62ce314c864a6851ae9d9</hash>
        <hash alg="SHA-512">0b95bb53006888a5409f6fced2d0e03875a4ce19dcccb8b635ba3a67482475236cf8a33c40709641222dd7556fc0ebbff682a046929134383b1a064e78ab12eb</hash>
        <hash alg="SHA-384">749f8354b2ac6759d906dc9cd54e9e2eac6ef00c24ad4b36918ab152d76088cbd283ee54b89ae4e2fdcff32afe1eeca8</hash>
        <hash alg="SHA3-384">bad490d6a96e6424c94c1fbb3d4f5cf81a0c76163ff54c70be33db4664caa9d833b3a3f05b9312573dd5e5fbbc21c32a</hash>
        <hash alg="SHA3-256">06ed272afa30e4a2e247d94c5f96f71e26ee9a73f68b4c203f07763ad4f6fa08</hash>
        <hash alg="SHA3-512">ff8bac983733489d1cffdd2387440ffb05aca214b77aab8f9b124c7c29b77611ae917af2a92243b45c4f519ebe6f6710e38a6f6ad4fa1300f2dfb3e1d3e80398</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://kafka.apache.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.16</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8de8f5d740584cb24b5652cfba8b3c4</hash>
        <hash alg="SHA-1">0172931663a09a1fa515567af5fbef00897d3c04</hash>
        <hash alg="SHA-256">a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a</hash>
        <hash alg="SHA-512">91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb</hash>
        <hash alg="SHA-384">ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d</hash>
        <hash alg="SHA3-384">331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb</hash>
        <hash alg="SHA3-256">3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb</hash>
        <hash alg="SHA3-512">d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.0</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">195d5db8981fbec5fa18d5df9fad95ed</hash>
        <hash alg="SHA-1">5871fb60dc68d67da54a663c3fd636a10a532948</hash>
        <hash alg="SHA-256">bec0b24dcb23f9670172724826584802b80ae6cbdaba03bdebdef9327b962f6a</hash>
        <hash alg="SHA-512">399510f759fb48255c6298f3545c9b644372fbc9d7245e80e6b51f49da0ac9275d104092c537ac047d5a1312c7d191dee8d655ca8d760b59ce1452bf4370a6e0</hash>
        <hash alg="SHA-384">a7fa7a0b69f41518fdb70e847148e17d0909fb657cee127308fb6cd14f913c63c82608aeae3955f10b48d358a8addfee</hash>
        <hash alg="SHA3-384">e55c3626a26119f465822e95c33266304bd87755e5e5865833dc10f4e2c1105c6c3ddc9efd889b1e43b346663627745b</hash>
        <hash alg="SHA3-256">dbd709e4edb2fe0ebd9b0d993e35f9fbf8bdb21cce13139bc6986c829c03aed6</hash>
        <hash alg="SHA3-512">a7cd693c969c8f9f6417030e987a4dda020c6a35d2b4174935baacf91619fc239fdf15a0af9a64d05855c872600c9744ee2755ad705b6d59fe099deea1e439bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>https://code.google.com/p/findbugs/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-pool2</name>
      <version>2.12.0</version>
      <description>The Apache Commons Object Pooling Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0516bf5ac1549e8ba78f6b7c49d09ed2</hash>
        <hash alg="SHA-1">458563f69fbdaebf7daadfe10dc3a22e42a7de50</hash>
        <hash alg="SHA-256">6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b</hash>
        <hash alg="SHA-512">08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2</hash>
        <hash alg="SHA-384">5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48</hash>
        <hash alg="SHA3-384">a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6</hash>
        <hash alg="SHA3-256">36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f</hash>
        <hash alg="SHA3-512">8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-pool/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-pool/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-pool.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.9.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.9.3</version>
      <description>ZooKeeper server</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72951c1b4e8b099441584a8cef69bb29</hash>
        <hash alg="SHA-1">ff45a23c97494c4a12cf75bbf9b0838f282da28b</hash>
        <hash alg="SHA-256">ad6570105768d18382a762325b4460368b7089a5a77c053e682b17942e0e72b5</hash>
        <hash alg="SHA-512">3e247ea73bafd5180feafc31af91cd396f6b3b82612f76590eee684285bac756fecfa164d3aebc22521bfbb46f19d52d4d209a214722f4293caee4118474b88f</hash>
        <hash alg="SHA-384">f6100acaa14dc5bc81a398e38da7c1647a6f5387da73824f2e1a2fc3bb090042b57aa17aaeca2789520d9f33195fa039</hash>
        <hash alg="SHA3-384">a1e714c548e1f733193fb4813d65899ec684c3c39e7617d2271f07aa56b17913984799c3819bf0547edc7601ed8f1592</hash>
        <hash alg="SHA3-256">07d4eb939330c72bcb70fcc6bf24196fdbc882f06cab59473ea05444c4fb2281</hash>
        <hash alg="SHA3-512">b5e77b499d2ab2ccd11f61ac330c3888daa119963bd098f9bd656edbd896e903964debec7458399a82a62e3ff24b7a534c45b751df9a083d0f1a146635d0f249</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.9.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.9.3</version>
      <description>ZooKeeper jute</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">71c06846ecc654a8885675a0cfc69643</hash>
        <hash alg="SHA-1">535e4b4e4780f1042ea93d838daa3a4c8e3884dd</hash>
        <hash alg="SHA-256">be72e2c9099413a9878ce830b65bb22e0be755dc2a22b290550ab9e03b5b4cfa</hash>
        <hash alg="SHA-512">c63f2ef2b6917d58264f82997dbf114624e1bbd34424e28027cf1fd10cf586da63ea1db717449e3ede0e3c3ddf8d7fdda4e54dbd47ec65b4be68396bec3e4d35</hash>
        <hash alg="SHA-384">0bb5621f9bacc3f853b9fec136f396493b08304d83c6a5564c4dbaf5fcc779592efee48e6c729515c56a2915f5a7020b</hash>
        <hash alg="SHA3-384">ebb8122118a36d81827ceffab204c07650b627f2f8232d54cf962c9cc387e60d799daab8c0717c504a31a5b6ae3a637b</hash>
        <hash alg="SHA3-256">28c3d7077d8ad96e3c8a6ac455cf684e7fdf371011f7545a34c6affc17c8cc9a</hash>
        <hash alg="SHA3-512">a63be7c120e842b1fe3ca5596113ac14840c00fd10d81f4c76bb956cfc73751c5f011aa00c1e97b6d0c916e98fa22e4bae9c5323697e066395a9cc488b446f58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.12.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76ba71bbe18c4724d96bec68bbe12ff1</hash>
        <hash alg="SHA-1">e0efa60318229590103e31c69ebdaae56d903644</hash>
        <hash alg="SHA-256">ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efc</hash>
        <hash alg="SHA-512">264a5251272ec55eca1fae5a8fb9336d1eca1ee3bfb586d1ebc382fcfd37077c21cbfa9e198daf4e1eebe9f6fa90487bec2f85bc1c55cf5666cbbfc4d18b1715</hash>
        <hash alg="SHA-384">f936d92b5c3b3c88428fc7452871e4df112935dd25356396d15deb73dd39790f45909a3d14f038e9f585cee79622ad47</hash>
        <hash alg="SHA3-384">67ca97a525d98c3dab9ffda40e11d6c683f6f4208ae4a5b28dbd3e2b8b37187dfdcd1d9b89222dc69e5b84ac212f4428</hash>
        <hash alg="SHA3-256">fd99b55afe40884b5f6cfd9ffbdcd07fa32833443dead288390ca8e737dd3337</hash>
        <hash alg="SHA3-512">4aaece7bdadc2c2d9660b16345218cfc68a2ea344374d0ffbcdcc3722ff6be5f06c92231ae68ec3884f1aa9b99956cb5135b4060c5457f463251f3767003ad20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-servlet@11.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-servlet</name>
      <version>11.0.24</version>
      <description>Jetty Servlet Container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ca72711c6ab6dc56ea6a6b053fa343d</hash>
        <hash alg="SHA-1">321a0376ead21685fa3edb69649cc3970262e2dd</hash>
        <hash alg="SHA-256">178c8dc7e98515ba2874c87b360c1915fe774ec6e0011c651e639ea32719be63</hash>
        <hash alg="SHA-512">34037fa9825f1a4a21d8397459ec660fca79389a430753919cea76ab67b4ea74cb6a8b870d732b6b47a8027e8754257c8857d8ec3af9ea7c14bd4b245f1d3142</hash>
        <hash alg="SHA-384">0221be7215f515c45e4250f103995936fc1cbfa1b72ebecf33fbc4e032c5ced8293400495c429cacd14c9c5939d7417e</hash>
        <hash alg="SHA3-384">3d6903d1b269ba832de18adfe1937eff361c1fe5fd521462f697683746bd9cfbd2391ddecb1986ba7deb22b1131ec68c</hash>
        <hash alg="SHA3-256">3d3fb27a8bfcfc62004b716e3344eb75487028c5de97233ca1719913ef39e1e3</hash>
        <hash alg="SHA3-512">658fd62064509c33a27bb8ecf5372da673e2f836d5f083351fbe39124631ea52ea626a4c0c384759061e6cb04c6cd6ab3307030ef7f364e4c8feacfe1143b70f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-servlet@11.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jetty.org/jetty-servlet</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jetty/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://www.eclipse.org/lists/jetty-dev/</url></reference><reference type="vcs"><url>https://github.com/jetty/jetty.project/jetty-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.spark</group>
      <name>spark-tags_2.13</name>
      <version>4.0.1</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0828699b19e3c2beace2b402eb9b87e8</hash>
        <hash alg="SHA-1">eaa089c5135271df49c81c2ec2ce64ee62651379</hash>
        <hash alg="SHA-256">422df5feabd133e8c770fee9d538beb9bfadb6604ec71a7a93dd1841663861f8</hash>
        <hash alg="SHA-512">61981e5824361af9c4f172edde0b67d30d08c061081edd0d69c0e95aa1276abf04fa7816fa5b08d6e9d992cfde573c9d062fa41304d8249b3beda56655c6ba5d</hash>
        <hash alg="SHA-384">99978ec393651ebf9231f17df98cec6d2b301d815196ee6f8a00f79f8c0c96388ff4383678fb6b078927d16cce771b67</hash>
        <hash alg="SHA3-384">1842ebbaf17bd21ecf5c3a72d2b500c5477827303b5505f5c860e254be093728e4ed99922bc22765304bdf7eca8d9b86</hash>
        <hash alg="SHA3-256">48ef7102ab98ea98f5f0246c55e59743da6a4fb7b426287e0af136c576901601</hash>
        <hash alg="SHA3-512">ccc611a2d972b58cdef3f16c2aba3313b026ef182989a30f580b9e44c11b6eb65a485ad05702d4af5bdd3681d5d3a6faf30111611e740ea5fb7d5df5184b0fbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spark.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SPARK</url></reference><reference type="mailing-list"><url>dev-subscribe@spark.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/spark.git/common/spark-tags_2.13</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar">
      <group>org.spark-project.spark</group>
      <name>unused</name>
      <version>1.0.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">763373ce9fe48581d4f2b8ffca35bb82</hash>
        <hash alg="SHA-1">205fe37a2fade6ce6dfcf8eff57ed21a4a1c22af</hash>
        <hash alg="SHA-256">00fd27fc9bde701581e7dcf5b95981d9e749a1c176bb8bfcd49f675768ff6bf0</hash>
        <hash alg="SHA-512">08a6ac8d2dc9d89ff557c7e96096c76e687efe3ce166aa6dbb76865bbef64dc8b6ecb5561ef03c2451a688ccdb3876b8f16b9137d02c290a698e917a5656b6fa</hash>
        <hash alg="SHA-384">c8c51d0d851835107db273d7ce522f026587d922c9d1d34739c3dedf9b7737c1c491e961dc7931f46c476d28acbc91f6</hash>
        <hash alg="SHA3-384">49f87e8e11e7a4d9da068d33185a89bb8e7eef339a0e2932246acbaa8ad90a30ec353e9e71147a78a8b74dfe4bdd3a3b</hash>
        <hash alg="SHA3-256">a943ae35f4d584810323330b6ef241a869b0187e4d3dfd79f8e504ebb0882cf2</hash>
        <hash alg="SHA3-512">1e7845ca316f39bc5ffc75afe0dcb437fe13b8c2133a396824dec8f3a5bd56243086989264f8f40df4cb2ba749709e3a90cdceb39c05727cbd82d86570e4f57d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/unused</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.spark/spark-sql-kafka-0-10_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sql_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-token-provider-kafka-0-10_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.kafka/kafka-clients@3.9.1?type=jar">
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar">
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-sql_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar"/>
      <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-core_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-catalyst_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-format@1.1.1?classifier=shaded-protobuf&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-core@2.1.3?classifier=shaded-protobuf&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-mapreduce@2.1.3?classifier=shaded-protobuf&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.26?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@76.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar"/>
    <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-core_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro-mapred@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-launcher_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-kvstore_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-recipes@5.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.9.3?type=jar"/>
      <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar"/>
      <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-impl@0.12.6?type=jar"/>
      <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-jackson@0.12.6?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-proxy@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlets@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-9?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.13@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-all@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/com.clearspring.analytics/stream@2.9.8?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/net.razorvine/pickle@1.5?type=jar"/>
      <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.12.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.avro/avro-mapred@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro-ipc@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro-ipc@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.avro/avro@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.10?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tukaani/xz@1.10?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.10.0?type=jar"/>
    <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.3?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware/minlog@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-launcher_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-kvstore_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.26?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ivy/ivy@2.5.3?type=jar"/>
      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.xbean/xbean-asm9-shaded@4.26?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-scala_2.13@2.18.2?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ivy/ivy@2.5.3?type=jar"/>
    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-layout-template-json@2.24.3?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-all@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
      <dependency ref="pkg:maven/org.rocksdb/rocksdbjni@9.8.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-all@4.1.118.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-dns@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver-dns@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-riscv64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-dns@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-handler@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-resolver-dns@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-aarch_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.118.Final?classifier=linux-riscv64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.118.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.118.Final?classifier=osx-aarch_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.118.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-kqueue@4.1.118.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.70.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=windows-x86_64&amp;type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-classes@2.0.70.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=linux-aarch_64&amp;type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-x86_64&amp;type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=osx-aarch_64&amp;type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.70.Final?classifier=windows-x86_64&amp;type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.43.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.36.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.crypto.tink/tink@1.16.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar"/>
    <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-network-shuffle_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-network-common_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-variant_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@76.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill_2.13@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware/kryo-shaded@4.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-variant_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@76.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.curator/curator-recipes@5.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@5.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@5.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@5.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@5.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.9.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.4.0-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.9.3?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.9.3?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.12.0?type=jar"/>
    <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar"/>
    <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-impl@0.12.6?type=jar">
      <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-jackson@0.12.6?type=jar">
      <dependency ref="pkg:maven/io.jsonwebtoken/jjwt-api@0.12.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@11.0.24?type=jar">
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-jakarta-servlet-api@5.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-proxy@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-client@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-alpn-client@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-alpn-client@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlets@11.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@11.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@5.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
    <dependency ref="pkg:maven/com.ning/compress-lzf@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.6-9?type=jar"/>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-xml_2.13@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.16?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.13@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-core_2.13@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-jackson-core_2.13@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-core_2.13@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-ast_2.13@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-scalap_2.13@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-ast_2.13@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-scalap_2.13@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.json4s/json4s-jackson-core_2.13@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-ast_2.13@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@3.0.16?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar">
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-client@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@3.0.16?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@3.0.16?type=jar">
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-server@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jersey.inject/jersey-hk2@3.0.16?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jersey.core/jersey-common@3.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-locator@3.0.6?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-api@3.0.6?type=jar">
      <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@3.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.hk2/hk2-utils@3.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
    <dependency ref="pkg:maven/com.clearspring.analytics/stream@2.9.8?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@4.2.30?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@4.2.30?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-graphite@4.2.30?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.30?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.30?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.razorvine/pickle@1.5?type=jar"/>
    <dependency ref="pkg:maven/net.sf.py4j/py4j@0.10.9.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.spark/spark-catalyst_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.spark/spark-core_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sql-api_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-tags_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-variant_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parallel-collections_2.13@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.univocity/univocity-parsers@2.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@6.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.spark/spark-sql-api_2.13@4.0.1?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-reflect@2.13.16?type=jar"/>
      <dependency ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-common-utils_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-unsafe_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.spark/spark-sketch_2.13@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.json4s/json4s-jackson_2.13@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.spark-project.spark/unused@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.scala-lang.modules/scala-parser-combinators_2.13@2.4.0?type=jar">
      <dependency ref="pkg:maven/org.scala-lang/scala-library@2.13.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-vector@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-format@18.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.flatbuffers/flatbuffers-java@24.3.25?type=jar"/>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.18.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.18.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-netty-buffer-patch@18.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.arrow/arrow-memory-core@18.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@6.1.1?type=jar">
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.orc/orc-format@1.1.1?classifier=shaded-protobuf&amp;type=jar"/>
    <dependency ref="pkg:maven/org.apache.orc/orc-core@2.1.3?classifier=shaded-protobuf&amp;type=jar">
      <dependency ref="pkg:maven/org.apache.orc/orc-shims@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
      <dependency ref="pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-shims@2.1.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.jetbrains/annotations@17.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.threeten/threeten-extra@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.orc/orc-mapreduce@2.1.3?classifier=shaded-protobuf&amp;type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-api@3.4.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-client-runtime@3.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.8.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.15.2?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.7?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.15.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
  </dependencies>
</bom>
