{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:f774ad56-39a0-39d0-b018-2492965fa520",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-base",
      "version" : "5.3.0",
      "description" : "This module contains non-RDF library code and the common system runtime.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-base/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-base"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.16",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8de8f5d740584cb24b5652cfba8b3c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0172931663a09a1fa515567af5fbef00897d3c04"
        },
        {
          "alg" : "SHA-256",
          "content" : "a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.3",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d89516699543c5c21be87ee1760695f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02c125db8b6d295adf72ae6e71af5d83bce2370"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.3",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f52ab7782fdd1349bd872b5dcf48bed"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6a261243ca767c7f38fd4b542bcde626c8894e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a"
        },
        {
          "alg" : "SHA-512",
          "content" : "61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.13.0",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35f98b40a9c6b81cb09792b944587ff5"
        },
        {
          "alg" : "SHA-1",
          "content" : "3ed1c07b3470d986f584196cfdca45587f06d8ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "648035ab973875787f3a12313cf239e86b51b4d209f91106ba90eba2fbd561cc"
        },
        {
          "alg" : "SHA-512",
          "content" : "c155d65f0df1fa0de256b4ab7df8d46886807bc877c5116d4bfb444f6afff760f189699bcd349669ed7620673a38ea65cd325bb6423df20da69d200136a67b97"
        },
        {
          "alg" : "SHA-384",
          "content" : "a08c79d9b64af58f09d10eb16970f5c004b9f13d44a092c2fc33c9a58c09f8cc2ef5f2762772f33485c1c5d0254f0d87"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46d68d896d5f7b71a9c6d4ef4f80211d89d4a3ae1f7f03b8ae11d5d2158767539f260f1d1a04db65e9dda2729219762f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c12d6c684174089da25cace8422601b2de91a2b49a586d2d7b2716046a395211"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b269db10896cb902f7887841f0e8fedaa1b94c4447e28a091ba8d1667a9d1d15148bdff568fec2f3a25eabaec3ee95ee3b3789833d84b1a26746470a95951bf7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.18.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cce74ccf461cd6502ae04c908eca917"
        },
        {
          "alg" : "SHA-1",
          "content" : "44084ef756763795b31c578403dd028ff4a22950"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.17.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7730df72b7fdff4a3a32d89a314f826a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.2",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52e5f2054151cf878744451e6a46b8f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd6bb9d856db5f61871a94d5801efd0b93b7fcb2"
        },
        {
          "alg" : "SHA-256",
          "content" : "4148332728490cef12b29dac4c385f46982f04285132c6fa51ad7267d7dc7a8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f9cb90a37bb1e2c80958f6de1baa5a8c82b7f96e5900dba13d7679019a0c2b1cc7b551b338e24b9a782c961112675e02f439498b96f389b1f899945f08071b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f8b3761bac50af319f81e51f077c97958cb4a571f1a78a6e660b97d3b25979a51495f578e643e0145a3c02ebbec2693"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2db277092499618e6f621cea68f368167a45415260b36731662b8b9d3bbd28b2b99683cfb93b70b3a427ddb4493221f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f3e278f3525050144ca4fe27f097a5c8f9514d47f0e4deb2817f2964fda3130"
        },
        {
          "alg" : "SHA3-512",
          "content" : "760e46f5d41a57bf0576ca89c467e8c0f664e09954b16c25d63a9db26a0226f4f15737a2ad776f82e0fe39ff33e9da0729e329e4782f12d8d69be1e1ead60c5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.27.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db4bd87b0082044c6e7a6af0b977a3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a19151084758e2fbb6b41eddaa88e7b8ff4e6599"
        },
        {
          "alg" : "SHA-256",
          "content" : "293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226"
        },
        {
          "alg" : "SHA-384",
          "content" : "307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "group" : "com.github.ben-manes.caffeine",
      "name" : "caffeine",
      "version" : "3.1.8",
      "description" : "A high performance caching library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b19301179903e8781776397d9923f7c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "24795585df8afaf70a2cd534786904ea5889c047"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "66195ac8ec62e5425344a51ab671a136618b8658a1e91bb1d1cd1aea5a51fdc12eb7fe5131a00e18ee330d6b0cad14f6743937c23baa50fb21e40eb76d82a777"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb1447801069938c709220002e2489c589f3a12e411a902983d1120785265b5b2716614b0612b6ab732978fdfe492399"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e0455cea493f7d299cc9cb4dafa42b184ddc35927985537ad8119057621f988c3165f1bec62715054bd9de802d91e1eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a197fd5b92f9d15ee3a9efac322eb201b47bd8dc20304a0c6d85986199ec03ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4fb700794e520bb3bc81ef156bedf696894ebf2d2bf0f25efdfd56dde4cd89b76c45b4a80d7eacb2ed0a6220718f1f9552547fecfb7d3fd319fa5145b4f20cab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ben-manes/caffeine"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ben-manes/caffeine"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "group" : "com.github.andrewoma.dexx",
      "name" : "collection",
      "version" : "0.7",
      "description" : "Persistent (immutable) collection library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e1baaccf9e57842c7e944cef39bc680"
        },
        {
          "alg" : "SHA-1",
          "content" : "264efc08bdcd22126bd429aaea9efaf5158b2b90"
        },
        {
          "alg" : "SHA-256",
          "content" : "e50cbc8379325ee17e8127eed7eb88fb70b94ba16e5e3d97e12401a1fc248fb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0708323a51db1dd3b4768ee844be5c83523ebc61c4e2ff07e6f952d8891dbc0f8e499f5d9bfb09bf48c99e492dc1804807a2e518b464d1a986407522e9dfea0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "19f9b9011d7f94d975b14b97aef8df35fb1a5cd215c35f3b3283d5cf0effdd8de3315907bce35bc9c12e006b6fcf8990"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38954676b168659dd560568f62cdd8fedd3a8ef7d54bb430d64311b7b3b21cfb481fb7a16ad1efabc5c586b66b20eed7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3545d1a0d3d9dee1bcfb2c4aac44e013910fd117e6cd6417e26217bad8014a7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc5998ac73b9d795c70690a6a83c633143ca1bb997091fb332134d94f095f89f7e581d20a89afb21455a143f824304c7eeb206d34ce8b8edd43e76606058b71b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/andrewoma/dexx"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/andrewoma/dexx"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.16",
      "description" : "JUL to SLF4J bridge",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "410ad2f2230e0150216d86e12a4af995"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d57da3e961daac65bcca0dd3def6cd11e48a24a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c4c1f62bdaa29e7b6fb41fdd62e398fb92e74e64ab36788be930468947ec94821e97cbc820159ec792f9be4cd3840ce60731be2c7437a734a458cbd2e412184"
        },
        {
          "alg" : "SHA-384",
          "content" : "3216d143cb8efa77b87e54dc4f9e77f256b21d1c9525f45a26177a7ad264c32d229cf65bf67cf4bcab546663f41e95f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c551dfa80d6dc591b6376024362884625f259c8ddc4258190386e90a7b2141b40e2ed42b4ab6be93cbb1d81bbf0ffc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec1e9fbe3de9345a41059a3f45486a24948fc041d86e5455106b06501a6a254e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e5912c03ec7a44feae7aff8d56221572be431a1c1b08407090d4187d64c4c8c2fd25f6d4d441005f95410637377f3c0fdee683c86d83a3c78918b3b84267caaf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
        "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    }
  ]
}