{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "Pretty-printed", "source2": "Pretty-printed", "comments": ["Similarity: 0.9120714962121212%", "Differences: {\"'components'\": \"{4: {'scope': 'required', 'hashes': {delete: [7, 6, 5]}}, 6: {'scope': \"", " \"'required', 'description': 'Metrics is a Java library which gives you \"", " 'unparalleled insight into what your code does in production. Metrics provides a '", " 'powerful toolkit of ways to measure the behavior of critical components in your '", " \"production environment.', 'hashes': [OrderedDict({'alg': 'MD5', 'content': \"", " \"'d8478a3baf1126b69 [\u2026]"], "unified_diff": "@@ -67,57 +67,90 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"MIT\",\n \"url\": \"https://opensource.org/licenses/MIT\"\n }\n }\n ],\n \"name\": \"slf4j-api\",\n \"publisher\": \"QOS.ch\",\n \"purl\": \"pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.7.36\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-benchmarks@4.1.32?type=jar\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-benchmarks\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-benchmarks@4.1.32?type=jar\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar\",\n+ \"description\": \"Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"d8478a3baf1126b69c570675314f8fcc\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"b4cc49a3d76cbb33b9b3475b6f0cec15f83973d8\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"86a24f91851f666acc4fcbc8889d90570d319c22c8fb947e9498d1fa60afd3d5\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"8cb03a30494fdc0adf6b1f04c04ea02cdf8212d2a9995020c5b33ee1929a3cdc908c2a6097e4e759db0dee9c3a1c2a53\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"ac3997643d49e551f80b4c1c638c5c6a2249db279571163ddb022d4b4548e0cedcfc3d56f3fab63b5ad00039b9e471279560d92a539d3da1f4a7655e5a2c5a52\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-core\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-core@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.openjdk.jmh/jmh-core@1.35?type=jar\",\n \"description\": \"The jmh is a Java harness for building, running, and analysing nano/micro/macro benchmarks written in Java and other languages targeting the JVM.\",\n \"externalReferences\": [\n@@ -147,40 +180,28 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"4bec62702513e9a75f586d36633583567fdd9a3842d74395d6afbac874165388d73ffd235f2a48ec806cf779a4e847c3\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"8a615a56e34cda5d566c160de3572b64f0aeebdf56f6ec885766c6f4bb2dd927af2d16fc2dcd69b74e89679da6cdc5fc314761e3331ea38cbcc6ef4f32816097\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"67e6ed0a315e19ccf7ead8f6019fb6354abfb6628aa592610977246cf679a315\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"7adffa9c7a2d8e8e5353364eed1168a7b59a0e55877b830f53590048405ac21696a5245cd438dd52179668b27ce03b82\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"f43b20642055c528c34f61803831b04583ebad6b1b7dcd43ccb168ea17ac3a458af547afc1be3db213ff5b96f4a4137148087aee1566bb124750eec5b4ba4f41\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"name\": \"GNU General Public License (GPL), version 2, with the Classpath exception\",\n \"url\": \"http://openjdk.java.net/legal/gplv2+ce.html\"\n }\n }\n ],\n \"name\": \"jmh-core\",\n \"publisher\": \"Oracle\",\n \"purl\": \"pkg:maven/org.openjdk.jmh/jmh-core@1.35?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.35\"\n },\n {\n \"bom-ref\": \"pkg:maven/net.sf.jopt-simple/jopt-simple@5.0.4?type=jar\",\n \"description\": \"A Java library for parsing command line options\",\n \"externalReferences\": [\n@@ -214,26 +235,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"5911a03e11958951abf8450de13598f617471e53554ba79e203d6e7af1241022592cc97ad656650415d78c66d6882cfa\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"cbc27e0b6da6ae4b6245353d6626d2e3c171c3026a555fa21e8ef61b30714e286db85086d1a57c167016e8a7f07be2a243e34b3ab504b1877806f3bcec5df986\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"9fa8e57de87f425cab9e7e6dbf68c70268c9c3de29fa54b9f2be9e1b164ab368\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"a9233bbb74d1dcf613f5c55a3239a9c465bca6422c44d25eb77e08d12cdcbb60d98af78f28071b04f6a3963dcdc67bb3\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"ea3d9c8469b3e3cbfd70616bde82c62685fd54b1970f324e44d58e48d8d60344abd59c06b1f43e8df1e8fc5bce6ff837eb034e2ba3dce499ffadf42ac4b406cc\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"MIT\"\n }\n@@ -290,26 +299,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"3aea6a3c2bb79e64b96086bc6b7679780594ea1731f24ae7541e294595275150a12bd63bd4dfb3ddff29e1b672f68664\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"80fb66a51688c4247b957f9787921e5acb9144d71a4ab0b03b2c30f46427e50c53e6e31ca5ddb04dab2cf5e7c0eedae168103c719f8074be464918ab2e4d6e6d\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"4e5c701b4c417493bdb70d4c3f3bfb6019a6eec3c5f17dcce028158de624318c\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"6b7fa9eecd9f78db9222438eda47c2f94c7e507c7334b6501ecc7c041e27b084e790956901b3a5a4253510abb9081b28\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"3a19552d33cbe62a0d174efa39054fbe5e23f7cb466c46616c27480381f232daa2c64c868b354ed965c5d84fbfece08e30e59bc672e3891baf2bb8141b5db8c6\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -355,38 +352,26 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"cbc875088f4189ba15d5d6a87ddc1750200b3448b6ef69eb749751fb24e21b10387b849f5b27230c580585afbf957abd\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"9b039f7b9535d5686542a0352e2c39410df3e75f192f02a466a5e46b31f81584c00597a738d36afe05939c00ee8e366fdb1b52c87486bb9718954bb49e247935\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"2874806a06ff66b4013ea5d47bab8cc16ff7784fb18bc340f0f3ab20501aee33\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"e22af10898947271168bb583e079d5318ffcd39fe33bcfe5d3410ebcfe87a36408705b6f9e01b62c189ced0be3bdcf73\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"5c524f5e07aa99639333c1a304568e26ab6406173af35ef7e8cd480c43c240db15aee3748d28f1d5155937c078dd4d769db34832f957535fc4184246bb42d33b\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"caffeine\",\n \"purl\": \"pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.9.3\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar\",\n \"description\": \"Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.\",\n \"externalReferences\": [\n@@ -416,26 +401,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"255f696508f6aa95d99a171cce3ab1b9a3273cb08900d382d211a8eb206e7bbebaf2cc11b34bf7282959cbd4b746a458\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"f44c30261f01e42658a253e8311852a49c29b42547c381c3c4a73f7a124be0ed173d832712c00be6de3a82a58fd9ab5503dec2cba7d30333ddc685c8a331ad31\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"9c8976a37bced6c4a66f9ff2b75b6d048305c5d8b9c62dab2f69f28b1a6ec207\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"a88e397ce7b44b25f586f6b92506bd5e9c3d0b049db6ca1ffa1e71bd119ab3b63a8a3554213ea27e791bdeb1987f22f5\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"e7bc77149ec70e8622572790b0df4266d3dff12561a7d39ad02a7ab1ee2612b44e9902395b4a7cfded6730352f4b9e63c635743857d225480c687c9eeba32354\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -473,38 +446,26 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"1c121858b6c1cb1835baa601d71d887608c256908f94921b3c9064ce34c0f5dfbfbd4f462e58305e473083b917336cbf\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"ea9a72df6d215582282cbe33398697bbc95331b73b22f21200cfa370a9e4af8208e5e6d8465c1c2568b8ea0dc2c045b6f18a74c0a81e9b91550ead0d1b7ecefe\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"dd080930d14e344a5f5110623cf185d2ac2038ecd3348a70241226021da331c5\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"f6664b37e1ca598ac7938e364967ac2d724981464fb2d81fc5bb0baf677e901924833b06151b2bba59076f626da30d51\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"62a4adf0c9f77996d4aef053339783ecafee9041cbf8dd824210414d82ccf29a0133f15a588b2cc6497431e35ab6be1de24c8f6307928d9f8816a011c1806bdb\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"MIT\"\n }\n }\n ],\n \"name\": \"checker-qual\",\n \"purl\": \"pkg:maven/org.checkerframework/checker-qual@3.22.1?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"3.22.1\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-collectd@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-collectd\",\n@@ -558,39 +519,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"ehcache\",\n \"publisher\": \"Terracotta, Inc.\",\n \"purl\": \"pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.10.9.2\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-graphite@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-graphite\",\n@@ -628,26 +577,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"b97190a2dd1fc4c17f7bacfd03099313717dc434f747a1eb3c84bb926f0129fc213f2e272e1792fdcf82003b7d38424c\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"51e72bb558764ea0938b9a0b5f1e99a8fdaa333adddab009f022939fcb1bf16acc9852d973ce820a173a474b0742f4e9cefc35c858ddf2914c24b63253c5928e\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"93e9e285b28146ae4a4b0ce0d221b7af67a8ca4851a3e129729d3039587f5e52\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"170f28bc38c131374a61680c78287675d4718987cd8d10561e8dece334215106b9c647e4a6ff19dcec4ce2d6c8f6b571\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"3217a6d726b78be152680937c23dafeb55b19ea7838c7da53d0e1ed447fd27a3e517361650ca56f7aa9ebe98330c1301b2c280d7e3a4d4f1befb44812eb75b58\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"name\": \"ASL 2.0\",\n \"url\": \"https://www.apache.org/licenses/LICENSE-2.0.html\"\n@@ -664,15 +601,15 @@\n \"id\": \"MPL-2.0\"\n }\n }\n ],\n \"name\": \"amqp-client\",\n \"publisher\": \"VMware, Inc. or its affiliates.\",\n \"purl\": \"pkg:maven/com.rabbitmq/amqp-client@5.14.2?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"5.14.2\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jvm@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-jvm\",\n@@ -686,18 +623,63 @@\n \"name\": \"metrics-healthchecks\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-healthchecks@4.1.32?type=bundle\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jvm@4.1.32?type=jar\",\n+ \"description\": \"A set of classes which allow you to monitor critical aspects of your Java Virtual Machine using Metrics.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"674b951900eef5f25aa654af27180822\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"2ea4b8e55613eab200b17b38ba10c6a264d31bca\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"3200875ec45b31e4fdc5f921d60a0e0d6c04e48ca4cfe073e809cdb96769150b\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"e6540003e78288c604702de73895e031a358e14725699e89b51b02bfc81c82ae4aec549ea07d7e3f257a2e13c971d123\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"9a067c6ad8f541b42f5248f45db959571385d499af474cbf0546baa31ce1733d74fd51f4b3ab5c38e18e248575a82c637a68aae8492df1c88aa45e0ba0fdd3fa\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-jvm\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-jvm@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-httpclient@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-httpclient\",\n@@ -743,39 +725,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"fffa9cd7434271990e20230ef9c3754f4b198958437573cdec2d4e7063147a765cb0cdf0b79a9688e81ff85dc704c25b\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"3290e3547fd3ea688f30ba6a554c779c784bb209642ec4d48b284ca8374191b3\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"0b72d65d0c3a7d74d1baf1a2fc4e9510e64bd34f7b23f52d436621d2043d81b5395c9b05803e7471537964ac42e2fe94\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"230b7196270183aaaf5e89e8d7598a3c65ac6bbede816e222e6d457fe5fca50fbe8ca2cb30ecf161bf4ddf34a08ee3a95d2f559e0aa513e9e730eeb5624b296b\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpcore\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore@4.4.15?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.4.15\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n \"description\": \"Apache HttpComponents Client\",\n \"externalReferences\": [\n@@ -813,39 +783,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpclient\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.5.13\"\n },\n {\n \"bom-ref\": \"pkg:maven/commons-logging/commons-logging@1.2?type=jar\",\n \"description\": \"Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.\",\n \"externalReferences\": [\n@@ -891,26 +849,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -968,26 +914,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -1045,39 +979,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"8e6c7bc00b5e25c564faa6f20d01b26288163de846273943bdc7a043348cbe4a5540dc875ed057054c2af5c6e10f8147\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"4fb38b6bf164103e68320ce430776915a6831923eb3e0b6e6f29ff57647e6bd29efc07d46b107aec23bf9004cfd959fbda8153740ba0060260a54d67ccf8a093\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"29df48d822099ef07e6687f12acdecd8f22dcfe84106667183d6790bbc9ed121\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"ecfe2613d27758859bfadc02b97b073b5ca74c2e983198c949851c2d287de00e85d4c1c822329e63a38617f85ff281fb\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"46cafa187fb940370f545efc73ff7d160d9b54810a9556d13c4e0010b44a0155e0cfad0251fb030f0cbae2d2108a6ef0ac918c32b3ad6d6dc2da1a360815b564\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpclient5\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.1.3?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"5.1.3\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.1.3?type=jar\",\n \"description\": \"Apache HttpComponents HTTP/2 Core Components\",\n \"externalReferences\": [\n@@ -1115,26 +1037,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"cfead6178cd1cc30fcd9da2f8753897a2039e7915eded3278fb74545a49db68a10860ed064e9f52d0f1526e3cd7caa35\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"76a22785285a3c12a98db24d678f1fd695cb4941be438fd80a7c41b4fbf804452694f93947579aba3bcee652671e362ae6d76bfb60a8db75518e52aba4ddad36\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"7114b9fd4612be12d156312568633e13745c8bd3da7c28af60373a70f31875b5\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"d98a2ba3eaf1eb38629e2d02eb6b31e4e4b2290c321bd58c0377ad4427a969b881d6b31cf8afdc8b9e306ef8d7d39439\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"3f32c0564b4af84b886df450df91498523c40ba6bf98354413ff3f4c85f782cd2a3cd9e6ef2f38c18a79ecb8c444326c7b043feb5fc3f8cafe043e9217362255\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -1192,26 +1102,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -1261,56 +1159,89 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"63d37103c0b040ed9f0c70af0bcc9792c68afe8c7da5f445f30458c7c802524f07a1bdb573661e680955a257e0fb6b4c\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"c9b439da0fb0124f37676686c69f8fdb824a30e0d6a3b9ebc0ebca5555727ae18cc5a146d8874b4cfe6fa966d5eb6083a44c379a76017ec79863596a23c571b3\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"0a1d52398f2a13124591cc6fce1fee5f353c29c9726b4f68813b01f077940947\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"5ddd51ea89b40049c0b92bdfd0fc59fd2963c025895bece1b9438166e9e468b8b54694e9e72a8d026f681ec92824f224\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"eecbd33885bb1718a1803951d9217b108e42e39cedfeac99bd0938cec94674b1c67d6f4d6141c8e225061a51a1ac3af07f553501ff2b136e358a3eeffbcd3ea9\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpcore5\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.1.3?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"5.1.3\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-httpasyncclient@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-httpasyncclient\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-httpasyncclient@4.1.32?type=bundle\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-httpclient@4.1.32?type=jar\",\n+ \"description\": \"An Apache HttpClient wrapper providing Metrics instrumentation of connection pools, request durations and rates, and other useful information.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"8736523b95510b90275cba7ae9a8c770\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"d0eee1800299f7842477c1084b5c9246e41aa769\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"9233afbed8665ae0276c93288bb8aa91b81523a0fc19ef6804c9d6b346e5d591\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"bf4a362846cd7f910ec36190e15b7e88968e08610fd4a7afd7e1cc209670e6770b64e8c4dbd0a52211ea9fe39768a299\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"a873b7fe696b1da3ca6f88312d46fcc2162a1b89aa9ab12225cc3ea0ea78a5fbf53c01c30c24d030719d434902d14d4227031a003e5d3402a153e9d0eac3f5bd\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-httpclient\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-httpclient@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar\",\n \"description\": \"Apache HttpComponents AsyncClient\",\n \"externalReferences\": [\n@@ -1352,39 +1283,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"9c4cf09ffeb61bccc3b67375f401c8a96c46bdee7c77f84e3227271a635e109a550526185407869e93ede8f081786977\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"1e33c7fdfa63f377ec4844b7744d2f8ec30dc7867136905ff5a5a6e5f94efa5b8159ba20e81f0048f48430cf63ada7411a3974a418aefa497d2b4fab3501f5ba\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ddb21eeb3e1c3f00ebcf397b58d8d972cc7ab7b140e8939654bf24b8b89382a7\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"25bcc09200af70f5624baf5ddb95ac6bf46daaffb938d141f72f63ef76df8b740ba3b50104da997cfe67c34bd520fa5e\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"f753a8b9607f42417912c3bddeda3f189ab9f469416dafdbcd29b1df7a358aa57deba8a79a5663fdd1a4acbe35b39a48fd24f889a50e05a4726132db85699ebd\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpasyncclient\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.5\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar\",\n \"description\": \"Apache HttpComponents Core (non-blocking I/O)\",\n \"externalReferences\": [\n@@ -1422,39 +1341,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"035c93a9323efa78196aef2c54e7b541ce63752874bf2f4d54db027fdae0f0e50b2e39eece5f1822241503555c87822a\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"58730c69cd14d5ef1fcf39150186dd33077c08051c87c150d39561cce7f5e82dcb2ceceeb64a268b0cbafdbc605b11e1eaddf9e45574d9f010dbebbc6fbf460c\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"10a5e095773305796825d5fb86e1252bcb5e1b52ea10478c0567ed7ee242bba2\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"a913ca42651272aad24860e5815080068eb05a7bec5bc391ca8e2a480d043ceff4d0cb78032c9197be5d849f5b5aabbb\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"561f18b2b03cdfb0e593213c91e43d896e4172a65069ffd8cca80836588e13a2c3d778d1304e6c05309a2bde4446001605d59b8d5fbb4f131f974bf4c9178384\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"httpcore-nio\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.15?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.4.15\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jcache@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-jcache\",\n@@ -1492,38 +1399,26 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"cache-api\",\n \"purl\": \"pkg:maven/javax.cache/cache-api@1.1.1?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.1.1\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jcstress@4.1.32?type=jar\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-jcstress\",\n@@ -1557,39 +1452,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"036f0be52d5b67ba5d9ca72640767c1a9d3b4f93b682110a0439db65fc0e6845baf622ec86d2d835e55a4846c9040eb7\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"f2b2f409ea475ebb3a28f4a7cbb0afe412d7b60b6eba28c09809e69f57ac9da0a28fc440c3b6e6d31265189718f7971bd9c179e65c21cb437ac4121fd98438df\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"8799f1becd13fc037250331962d45d7ea2e47cb665667e0d716cbe3908033f01\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"3b1336c743892542ffa1384c3ff23e5dc2b2c53b7afa2c4db3f79ba3b3a1784d615db87b3dc23dce9d8b47e8a5d93985\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"7e06dad2823d83568177ca5fa6a27a06887f0ee6bc6ab748d0f85b0dac361f8bc0711e47b5a7ad2840114d454accb3fd3629f983d671bb823595f433482c83eb\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"name\": \"GNU General Public License (GPL), version 2, with the Classpath exception\",\n \"url\": \"http://openjdk.java.net/legal/gplv2+ce.html\"\n }\n }\n ],\n \"name\": \"jcstress-core\",\n \"purl\": \"pkg:maven/org.openjdk.jcstress/jcstress-core@0.15?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"0.15\"\n },\n {\n \"bom-ref\": \"pkg:maven/net.sf.jopt-simple/jopt-simple@4.6?type=jar\",\n \"description\": \"A Java library for parsing command line options\",\n \"externalReferences\": [\n@@ -1623,26 +1506,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"501ae288afa2a2cafe2b01e8927d7a31b887c891dc1fb37eafbf525c675161b7af14dba1359db686a104881c3944736e\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"18bf59191d7a456e7675c841df8411ebe425da40532e103db95483be5d2a75510d8a38ad9755cdd4e0be27afe7cfd0b358599388a84fcec1ee27e89caa37f5af\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"e5c7a060e6bd75fb9ef2b7eeac082550bd4f01049c0da929c57ae71fef59b32a\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"e52b264902d2b9350696cc325949e02e2ca451d787958aaebb9f7c9dcc41d6abd4da5a83001f80e659bfd89aeccab509\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"6b35fe9fcb3497a9e3a4b0c55dab300b63155c76bbce88fae9b3dcc1012f2c55d7c70216173299817830328071f5c3af079a67ce9af96c25b6befbcef915b049\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"MIT\"\n }\n@@ -1679,26 +1550,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"09fc43ce13389065481269a1c4cd040d78856786a231ab8f80ebda0151657a55dec12f918f54e36fb8de278017993a96\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"a764620892a03cd07ced50a3257d86980ba454dbd908de506909bd0e8bf40438792a4ef472c19ba3806ded35cbbb96a18729c18d202971695ed0b8b15e0b604f\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"025d66422de954becafaf78dbd86eb332a159d16089106657c604592b634b162\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"15224c10460d65391ee2c3c4172362383d94cc553c88049b9ff97ce3d41dc3f107929acdfb8a1fff816a1effac4e4bbb\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"2605c2bd8974f13554d381024720f7e4d21b8798478273a84fa13797f123be21658877d1ba8ad30c26645ebc9361ccb7c0f3bfbb56822a18d5f176f284856965\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"name\": \"LGPL, version 2.1\",\n \"url\": \"http://www.gnu.org/licenses/licenses.html\"\n@@ -1742,26 +1601,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"25a4648ad0ecd3fd3e4908022cca91daa5995dacca6d4750b0f98b747b56d097322b780020b431260b16294b9fb10967\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"3c67f0e944fd1b4772910c3fa51af622bc4c236948f7a1dee704c713c09271bad8841c172371f541220c1c10c3e5d396458259ae52d9a45ab8c2dd9eba1c3572\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"96cf41f718617babec107219beff67243eb351652356ef022e3ff38b2202d22a\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"ca68a0e7bf93a52dfef5e919399c2f00eb8b7161d2603cee94a407926fb064f40fa1af8cfaed8d7c6bb0875d791121bd\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"bd857febaba22d5161ffac3483fed4024e60bbcc7e09655b23c7b24c579ff80bd69c5e46bd7b3aeb3bb4a2c4cca5d8d9ca1dd6de7a5b1bbdc5f9c33b9f723de2\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"name\": \"LGPL, version 2.1\",\n \"url\": \"http://www.gnu.org/licenses/licenses.html\"\n@@ -1817,56 +1664,89 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"b421df6a4952a9942ea169202bf56527689f187d63c7a1cc604043aac6383086b6710994143bb72637c5a291910d1edb\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"0699d1cee041bbb7f2e9857f0d4265e55af3c93e62c1d10090fa3472a3af4f052c4b6c1431eca53bf2e2ddb1df1358ac29fba6776fb0406a2c3edbe30fe73607\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"85bab22465bd6c4128b3a3805184b780dd41c6984d6e056d7ec22b904b94649b\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"f128930891a9ff6f73ac6cc2493011300bfc9e8e2e3e275b52c6cf91b8f35db7d88ddb390ee3ef28263f5a1a825d7527\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"0d3f050c4f71bfab5404ac1674306bd837ff7710b9b04893dcfe88baa3d0d3f647ee515c3b0a3159d4f6d3791f187927dabed54f05fcfa3b42bd4f0bbae93586\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\",\n \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n }\n }\n ],\n \"name\": \"jdbi\",\n \"purl\": \"pkg:maven/org.jdbi/jdbi@2.78?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.78\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jdbi3@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-jdbi3\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-jdbi3@4.1.32?type=bundle\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-annotation@4.1.32?type=jar\",\n+ \"description\": \"A dependency-less package of just the annotations used by other Metrics modules.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"bc4b091690eb704923f7eee0d3ae3fdc\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"5e2c851e14f9f193fbe5a36dbf4b115b371034c4\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"6db673210cc905d35c7f9fe291d1b4ccb7616e930fd2128cc41bcceb3c129538\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"7cf23a96c66f38589570ba051d1318f189d60e6035ac30fd6f9479bddcd7b834c39e8f2ad071b48ea5bba729f355de32\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"def92cfaa21e02c5ac1acbaa2d54a08b37852c00ca1f4e0d65b73c2c68c4a7e9d32a13dfb6ca8174142da2dfbefeb3b8e3427d49a8c0760f15df7d8284395bee\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-annotation\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-annotation@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.jdbi/jdbi3-core@3.30.0?type=jar\",\n \"description\": \"jdbi is designed to provide convenient tabular data access in Java(tm). It uses the Java collections framework for query results, provides a convenient means of externalizing sql statements, and provides named parameter support for any database being used.\",\n \"externalReferences\": [\n@@ -1896,39 +1776,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"6a99b7500d710ac3a7b976e53b9ba36017d5fa75dded1a931b1bb332a742b5724ff679b5ec16b6e40d9abc09e4b78534\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"68fedf0e5fbf2538686d1c6271c66e999d0046c6565e99925e5d58286c294d665ec6b5bc806fdf65ecacaeeb818767a4c8fa33e786d4017d95f8aaa900af8087\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"355c23eb10f6a0633cd88aa22bdf8cab1d0f3425a87e9741ecc07d97e4df2641\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"e28927968be73341b4f51a2928442c523d6df43c129383251908240ca49882226a1953435f9be5ca6762c518db87675f\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"d1fb405ca122d4cccaee65e4c8d225a4986497561f491666e0e8edc4ff76a12d16ec7364b8944d17a86255c542b92c200e9ed6151a400c783c6f866c8c63cdfc\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\",\n \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n }\n }\n ],\n \"name\": \"jdbi3-core\",\n \"purl\": \"pkg:maven/org.jdbi/jdbi3-core@3.30.0?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"3.30.0\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.leangen.geantyref/geantyref@1.3.13?type=jar\",\n \"description\": \"Generic type reflection library with support for AnnotatedType\",\n \"externalReferences\": [\n@@ -1962,26 +1830,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"2a198cae6fa4b0cfc232c269c503966f75a8437f96fd6857b43821fa69471aaa0d29213d1d9ac236114057154751368b\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"70a30dee9ccb7f981df9dba2dba8c619518d066cba50a6ff8df1ef1c10a296df0c8011157a84826cfec33e33a7940b6a5d75fffe83984482a7758821e71c2e25\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"840c8bb3527b05ee5b844fe058aede802b85e48cbe39e78a5246ea3a4abb6b8c\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"9485fe10963f9659ccb1a1cc4c10511d05e318c22da585cb0c3b0415b39aa111c896c96586b9d87e0407e6b8f3f70622\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"5b30c60f4e31663dc065e25ae4bba6d7716fbb9a8323425c7c5ad8608eaa0c752516f61db070274f37cc4c7e9fa1502d6e25d50573cf907765caaac2a1acf428\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2018,26 +1874,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"3c5a1bcd2964ea763a5f18f996708b42649368364c207c8e5f45f89f79169778bc3b6b5ae61cbaed352e8eca993a96d8\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"0e4fd0d81b38b415b38f8e23872cfacd92f860933187a85bf6617bc0fd6dce0fe359cd363ba5832c371f6e95a1dbc4fb410e8a999a084e7296d90e4a1888d0a3\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"92a69adcd3dc08518831b13eee5a2c7333a21df85797a03b92dace9573a5e10a\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"75851e7af007b602c075359404945810e6822c93c4dcd57a27891ea0f4d310fa23b64b06a39c2972f39d52c846515ff0\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"1c76672d0df664b0a726fe4b7afefa818c4a3d06e354f09c731bb501a7be05bdb0088c4874476fbde2d251d9e08239d281ba82f405500950c702150f41f74093\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2094,26 +1938,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2123,15 +1955,15 @@\n \"id\": \"GPL-2.0-with-classpath-exception\"\n }\n }\n ],\n \"name\": \"jakarta.ws.rs-api\",\n \"publisher\": \"Eclipse Foundation\",\n \"purl\": \"pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.1.6\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.glassfish.jersey.core/jersey-server@2.35?type=jar\",\n \"description\": \"Jersey core server implementation\",\n \"externalReferences\": [\n@@ -2173,26 +2005,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"cdb8d2b77a6c2f2f949815e4d0af24ef19a84a8dfb08e048bdb33b97fc6f7c4d9d9655e8f2c784f0d06fa667e8122422\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"847b201c51c326cfb6fb1a3dbaa5e45bdd93ac24d368ac9145ffaa47e7744d42f33ed68ad072eb38d9d68861843920cea90dd053c68e18ef8114a51085349108\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"8f9c414b9c6ec73dd2a5fa5fd28a1b3b03648309743282c8f7195e40bf92a82f\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"5ad4d4dd08759a84ccc26ee20c09f97abce1706e7b1a5e662df38819ce59b2b22ae79e020badac7a5d68451199eba5aa\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"5586f36e0d813cbec7f5f7863215d4d1bbf9ed1bf63251a3f7685cc3fe03092cd63528d1c70fbddd00a13a13d56512dc878ed9a5295cad4360a40e37aa3c5d24\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2215,15 +2035,15 @@\n \"url\": \"http://asm.objectweb.org/license.html\"\n }\n }\n ],\n \"name\": \"jersey-server\",\n \"publisher\": \"Eclipse Foundation\",\n \"purl\": \"pkg:maven/org.glassfish.jersey.core/jersey-server@2.35?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.35\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.glassfish.jersey.core/jersey-common@2.35?type=jar\",\n \"description\": \"Jersey core common packages\",\n \"externalReferences\": [\n@@ -2265,26 +2085,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"82916252640243bb2f4cc012748ff8f8691a13225b1dbf07276c868cf1d33d346cf17f1ecbb80043db2153208357e6a9\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"d64d7094ccede507f9b0ee95eb32ed3ccf09a0cae0a16366426f2a0d15b0ec3a9d49d984b4b6a9261a7424e7a8f02f1ef5a47618ef9a7755251f5286387b0eac\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"2863338149661645fba5f42cd684f182634d5088cb218c9ba3a7bc93801c3402\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"793f94a5263800aabb4780b957371016774b1df931caf4ef051dc5e4b2bbd5870b132691b641eafef8952b426216409f\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"ac137206b78791d30c5a68a717dc15e8d576a1ea0d5c9eb838c89d130f5da404976def4c248860771620d0d886f9949cf06aa54b2be9533bf122d951603d3805\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2352,26 +2160,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2426,26 +2222,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2500,26 +2284,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"67f3b5a4b3006d07a33ccdbbb70f312c94d2d8cdd32598d471b079470574ab6d\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"b551e00861151233789c03cec07e162d90d1f377fb8f26d413f7015152188183d636e2837ceca131096c43511e618efa\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"a0b6c00df7f5b53f549193a7e6a26d632847957ad296aef2ee75a23a5ebdec970f793511641e6c63677b481c47ca67f4039a5ee5f4bb532a46093a201782198d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-2.0\"\n }\n@@ -2574,26 +2346,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\",\n \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n@@ -2656,26 +2416,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"d00dcd1cf00771e101aa01aa9d88e1e3714b3e8ccfeebdf6466e66278780e39f60a7cfd269c27f31eb6f75a096498d0a\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"7dcfb4a029cb03f6ce6b1a7212ee9fe7948e268bb89d97064700c670614da6b7d22f82dae5f44918aee91dbf88348c4945ecf6ecc67aefc1e9be4858d3199d92\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"e31c0f9af54ece80424651c34fe6e79a34858f1bc46c6a6811686d3b294419bf\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"aa1c6edc40e241448f22ad71f7e47e1ec12277872fe86998e749cabc14a218ebcf1d9db0bf4bb88f8a7b96da6362f8cf\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"1efd7dc03bc2c689d7ce2a60a457af2a50ca4c5004898d8dea2da391f7f11311a4738ac6bbabd3d9ba4d5557c4d2528995dccb1dfd16990d29949efa50ea7f55\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2685,15 +2433,15 @@\n \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"name\": \"jetty-server\",\n \"publisher\": \"Webtide\",\n \"purl\": \"pkg:maven/org.eclipse.jetty/jetty-server@9.4.46.v20220331?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"9.4.46.v20220331\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.eclipse.jetty/jetty-http@9.4.46.v20220331?type=jar\",\n \"description\": \"The Eclipse Jetty Project\",\n \"externalReferences\": [\n@@ -2735,26 +2483,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"e48795709d4b57057601dc90ea320b94c145fe54f9419a16264a8b330163b4528ef1564cf3843b696600a83c1925d808\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"69973b070ba9e78216cfb5d2b42570971764de52709f2c5eb80d020b98422cffe9145dd55fdb9a71bbdf99661c38c016c29188a8a67f4ba15475c87e1ea3e3f4\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"6ce31863ffbd4e4d1fb2b10f56563e8216f0c0013f75cc5ddb2d46a1249a6a55\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"11190743b9030e15e569ad566a2c03164a57146612b286036e055621c5a2313bbdbb3c173854218ff6526acd457711ea\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"2cbf3bd0c81dd03cd1f4949a001b2f0432f0d9a3d2e289c711dd72f43f907b66bcc6998017f0ef2b0f102810ce0b51844b6a4a64ee71cf059d2a99090eb47322\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2764,15 +2500,15 @@\n \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"name\": \"jetty-http\",\n \"publisher\": \"Webtide\",\n \"purl\": \"pkg:maven/org.eclipse.jetty/jetty-http@9.4.46.v20220331?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"9.4.46.v20220331\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.eclipse.jetty/jetty-io@9.4.46.v20220331?type=jar\",\n \"description\": \"The Eclipse Jetty Project\",\n \"externalReferences\": [\n@@ -2814,26 +2550,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"0217baae96272558e7e6f65dbf8ddff971af0e7090dea2601b018b6da9d9d59edec9f229efdc2260a3f7613d774b7a81\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"6446802f1d47d339221fb4d0aa7b05715f33c0898b491c007762a78585f8f94b183a51f93380027f9f4b137ef62187033c0b672bcc8dd1ef59afa0683f3f96d5\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"62aafb160b302719b239e81c6dd623e9bcb46b73ad5c71abb199102c90c3e44b\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"fac651aeb695f72856b7c6751ff9f35e8d7dc513740dfcf5bf564c47cac9eb4240d9a2c4aadbb2b6aac1452f264af5d6\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"d5c9cf09046db465b91604d2d9b034f9de4931620021d23a4c4d2094d114c951a96afcea159b510aba3565aa0216cdc35a7baf94e7eecd604625cd58eb156fa7\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2843,15 +2567,15 @@\n \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"name\": \"jetty-io\",\n \"publisher\": \"Webtide\",\n \"purl\": \"pkg:maven/org.eclipse.jetty/jetty-io@9.4.46.v20220331?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"9.4.46.v20220331\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.eclipse.jetty/jetty-util@9.4.46.v20220331?type=jar\",\n \"description\": \"Utility classes for Jetty\",\n \"externalReferences\": [\n@@ -2893,26 +2617,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"5fbb2c2460abf3d300df8f27fd882e34aba6e462faa716b9f17280b5a39fe9e4a637461279e39cdb667846bbdd719d48\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"ee0ee7c8816039966d259b2b83dad508f6055ee4e4d27dd973304bb17aef5d5debf33c417f93dc7df3524c58bf4cedb08eb2ef9a7eb715b5534889f0fa23ba98\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ff707b44d0ba976c81e73db6f9bdb1e4aa421f3a090b8c0a83247c1f9dd0c488\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"3c92dc4506bc3c8206d17d788ab91eb753670f56dd5583d17431521cfb82d31a0d20911b7d37547089b615067c17b506\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"9e12418623118c04752533ab7d633a51e3272522da718ba58b6c7f08e7a0d78e0d33674979093bd9daa11516efa9d4aa1ce904bec81d465f00c25a0efe57a315\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -2922,15 +2634,15 @@\n \"id\": \"EPL-1.0\"\n }\n }\n ],\n \"name\": \"jetty-util\",\n \"publisher\": \"Webtide\",\n \"purl\": \"pkg:maven/org.eclipse.jetty/jetty-util@9.4.46.v20220331?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"9.4.46.v20220331\"\n },\n {\n \"bom-ref\": \"pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar\",\n \"description\": \"Java.net - The Source for Java Technology Collaboration\",\n \"externalReferences\": [\n@@ -2968,33 +2680,21 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"8acc3481503989e1a78ad619bcbdc005b616c13736522b52e5ae5d782e8a0216\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"e8f3282c08ceeed02947a13e886a3d75a6ea63e4f869a0e0bcbcf622e7cbffc81ed7bc045e82820443b6572c897cc4cc\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"ab5f85d424640ddcf6fc13a41d12ffdee0be9508cd4cdc581168b31cf7917323f6e0d984a0631068e0e01c098098fe0037d1c4176352fd89ba3a4da5d641ca3d\"\n }\n ],\n \"licenses\": [],\n \"name\": \"javax.servlet-api\",\n \"publisher\": \"GlassFish Community\",\n \"purl\": \"pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"3.1.0\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-jmx@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-jmx\",\n@@ -3008,18 +2708,63 @@\n \"name\": \"metrics-json\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-json@4.1.32?type=bundle\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-healthchecks@4.1.32?type=jar\",\n+ \"description\": \"An addition to Metrics which provides the ability to run application-specific health checks, allowing you to check your application's heath in production.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"1ff0c46ea68c23d3dc9dd8377074a76e\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"29bb1c9b89a6387743886726c1839bd747eb9082\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"f26178d9999b76a561f1bcb262c17e660900d585cdedb02cb02679643ee0f959\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"5fe85b221fa962fdbb2587bf99981512bd24b0a0e820795e35c674a3b3961c7e88dbdb564081ae0ddd7b6c92ae13b194\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"b62cb475d6151345c18b815d33b66a1cf3cf9d4cda18f5afd1b3fb7b2cec18dfb8524a075e6f74eb1a1521f7e2c17b0a3a8185bbad88116402ec014ef8f19ba4\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-healthchecks\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-healthchecks@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.10?type=jar\",\n \"description\": \"Core Jackson processing abstractions (aka Streaming API), implementation for JSON\",\n \"externalReferences\": [\n@@ -3053,39 +2798,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"3e4f0849423934d8f997ea3a0276234775122a6a88b0027d9279c6fdeb2a38ce00f3307091e6792dcaec96e04e7f07d6\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"ea053f07b73b087fe81ef49d949ec812bf03e536a8a608d6b7c7ff9f001e6764e86125c5e99d46ba4002d7aab620f57527e246fe8ca754b47cfd812976a3e337\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"0cd87bff64e1569e1ae1fa6023caf005c17d5feb6f75c2bb587546d9e3e43efa\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"ef05bcccc119426c0067beb5dabcea8b8f6e3dff54240aa3cb232ee4ffe16c63197f71713e3001c96aeda888be6a19c7\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"936d596d972971e8fc02a6adc7ef11b9d3ac302fbc4134982f3bf128f61741b6bc8c34dd0d16d0ef52a7760a2ad5bcc20b26c4d9c6e8345e826b8b2a83f8fb4d\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"jackson-core\",\n \"publisher\": \"FasterXML\",\n \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.10?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.9.10\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.8?type=jar\",\n \"description\": \"General data-binding functionality for Jackson: works on core streaming API\",\n \"externalReferences\": [\n@@ -3119,39 +2852,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"b82ddd51f8cd0c1774624f20f9ed4cd4ee27a03d08f34ce3520d39fee8b44b29fce904660287f2996ee045b5dc5ab0bc\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"3c31cbb55e908a029582d59bf4a4368f46bfeb486a1d8b44259da46d30f98d49fcccba3f983dd10be9d1240bd3003599791579fcac3b8f5057aa243618a6d276\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"1cd82b5dc2b1bfdafdb0f7455e4cb232a7189d7b674458860a7ebb747e2301f1\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"4e6b4a7e848b580d10d8a1a89e286bfb63daa31deb1a3206aa02676462f333b57cfe81aab01e7f5e7f0afce9a22dbb13\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"2d38c6d1871269fbf3132a3faa114448b924d8e3acd9a258a89e231222d72348f75b9e5784fdd7bb3ab028348dd708d593f77c5e17e49ab3028fc03b941ad193\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"jackson-databind\",\n \"publisher\": \"FasterXML\",\n \"purl\": \"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.10.8?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.9.10.8\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.9.10?type=jar\",\n \"description\": \"Core annotations used for value types, used by Jackson data binding package.\",\n \"externalReferences\": [\n@@ -3185,26 +2906,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"558025c95151985777def5221719a2f7db7257db584cef8bc72add4d37ab4b5147c3b529462db2327a885564e0222f3e\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"6b1ae1d7036ce2fff81bf8fc2a3a55e4ea7eb081de806ad05301d2eb126bed1dda487027f3ccfa618c488e680e2f5ff22bc3f106e7c0af27b34d327d83083b46\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"6ebca301e4a201a89630bd7235d27e48a795c7e6fca7727ac08f3cc87e6a5049\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"db6b4116cb7bd4aa3aa641a4238c421320620a04a9472b5bb4685050a7f80292bcb3e15d6b263dc409e801a2228e6954\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"8d33540c9df56541a0dca99ca51432a8d0d9642813377c62f6df5602af1c8d04c3d62cf24a9cde5c79fcd63b287de19cfc84ea475f8dd0ca037a72baed3d50ee\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n@@ -3270,39 +2979,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"log4j-api\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.17.2\"\n },\n {\n \"bom-ref\": \"pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar\",\n \"description\": \"The Apache Log4j Implementation\",\n \"externalReferences\": [\n@@ -3348,39 +3045,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"a8e03c55833df8f96d7066645440281ba212040af247733db6f4debcb38b7fe8e1e9ac79eb9b67105670e82136125e7c\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"c2fc60a1e8c866c09f4787d1edb1bd87a5a5fe114c477d065a3c43f4e513f055d61560b597f06ef6d95c09763b6adb3be17812c8611c00df6f4959311bc9599d\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"ce14c5b6c9c5285db2089e70bd78ade549b6b3109b897aad868a4a2e642489b7\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"f59e8609518ae9be81b30a480bf72a93cbf2b5e25e1465a0124945817a0a98969205147289177631a2a38783d3815af4\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"51f5519f25b534e1d9eb43b9e53d56e93c373b0dd64fa9d80a187e1ede7b5c32823d6fa5a034ec37f2a8c19d8af4dba0827912e7546824320a98af5348e6e83f\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"log4j-core\",\n \"publisher\": \"The Apache Software Foundation\",\n \"purl\": \"pkg:maven/org.apache.logging.log4j/log4j-core@2.17.2?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"2.17.2\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-logback@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-logback\",\n@@ -3422,26 +3107,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"2afd896ebe6333d99e5baa553d80b7851d8ff51c06c725267e061df81bc9a878b74a65394699ae853f9738a08963aa0a\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"86b12a74c2a822a12ba2e9a7b0db5013803f18784a3cb1201c95d5f7872a6aa8cf06d5861a5c35777a7decc7ea26df7b4388fab3b3b71aab7274527d9b339318\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"c23af1733b972e958369a2e14372fd2b306d4f552d7ae5ff6b9dfad3c14611c6\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"43d39acc5608b60d671c000bf6114f4623d3057399142abca01b0fc2381f2191479a2f0dd74f812223b66f57fa48fd9c\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"c7f6357d32a3b9fd82dfbd162c3a6cbe4b4909ef530e956bcd18649b2d3624eb51c5a71fee54533a9786e87cf1ccdc693f563ef6e3c6fbff7beedbd1d670f9bb\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-1.0\"\n }\n@@ -3452,15 +3125,15 @@\n \"url\": \"http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html\"\n }\n }\n ],\n \"name\": \"logback-core\",\n \"publisher\": \"QOS.ch\",\n \"purl\": \"pkg:maven/ch.qos.logback/logback-core@1.2.11?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.2.11\"\n },\n {\n \"bom-ref\": \"pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar\",\n \"description\": \"logback-classic module\",\n \"externalReferences\": [\n@@ -3494,26 +3167,14 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"d480881d1a0d58c94aba0b719d56cd492147bc6481b67370dc7426ea7a81326af5b19f32d6a95fee714f37b90a5eed76\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"6df8b42396c5d3257f11fb19c280533aa28d66e647115816d4ebfd6a58c9b5adf0e098504772261b29435df75b86cb2b9a47f846ed45d770179c9d10f39941de\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"60c1dbe51066ffb3885673255a279e8894c89fe26f079180fa992478c1d9b03e\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"070647c93da744f04cc13ab3f1958c61a8b1e219fe221ed0bf251e4cc97563c64be323bfb3a9e2fd4839e33ded424b21\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"ce16fae69767bca975bec0d7dd0ceeb40c15cf034a4a949721c828a0f2c25cb9d619c4db3f986f6d9805d5b76d27b8926c55be5579522cd5ab3fa5e69bb68aeb\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"EPL-1.0\"\n }\n@@ -3524,15 +3185,15 @@\n \"url\": \"http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html\"\n }\n }\n ],\n \"name\": \"logback-classic\",\n \"publisher\": \"QOS.ch\",\n \"purl\": \"pkg:maven/ch.qos.logback/logback-classic@1.2.11?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.2.11\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-servlet@4.1.32?type=bundle\",\n \"group\": \"io.dropwizard.metrics\",\n \"name\": \"metrics-servlet\",\n@@ -3546,18 +3207,63 @@\n \"name\": \"metrics-servlets\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-servlets@4.1.32?type=bundle\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/io.dropwizard.metrics/metrics-json@4.1.32?type=jar\",\n+ \"description\": \"A set of Jackson modules which provide serializers for most Metrics classes.\",\n+ \"externalReferences\": [\n+ {\n+ \"type\": \"distribution\",\n+ \"url\": \"https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/\"\n+ },\n+ {\n+ \"type\": \"issue-tracker\",\n+ \"url\": \"https://github.com/dropwizard/metrics/issues/\"\n+ },\n+ {\n+ \"type\": \"vcs\",\n+ \"url\": \"https://github.com/dropwizard/metrics/\"\n+ }\n+ ],\n \"group\": \"io.dropwizard.metrics\",\n+ \"hashes\": [\n+ {\n+ \"alg\": \"MD5\",\n+ \"content\": \"b1f351578a907461a670f5358b77358a\"\n+ },\n+ {\n+ \"alg\": \"SHA-1\",\n+ \"content\": \"c311a15dd9114029a860c5fd52420b3e2ca32556\"\n+ },\n+ {\n+ \"alg\": \"SHA-256\",\n+ \"content\": \"680a65e45489f47fee4bb2fe5d3a9f543ae3dc6211a262e9b422c2307271351e\"\n+ },\n+ {\n+ \"alg\": \"SHA-384\",\n+ \"content\": \"c3497a7d50a4c924e1fd6bd28b851ea09805d79a65b092d70711b5f0a0f1df554fc2feb33f882ab45ffb604dded49348\"\n+ },\n+ {\n+ \"alg\": \"SHA-512\",\n+ \"content\": \"faa7b78ffe17c52a4c7ba8eb69b52079ce4a6882449d9e86db806a703c95b983e07091d87b8bf0e5acce5eb325d8eb02d7670b97056f3faa36f3f2ce52f00e0e\"\n+ }\n+ ],\n+ \"licenses\": [\n+ {\n+ \"license\": {\n+ \"id\": \"Apache-2.0\",\n+ \"url\": \"https://www.apache.org/licenses/LICENSE-2.0\"\n+ }\n+ }\n+ ],\n \"name\": \"metrics-json\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-json@4.1.32?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n {\n \"bom-ref\": \"pkg:maven/com.helger/profiler@1.1.1?type=jar\",\n \"description\": \"A pure-java implementation of the twitter/util project's `CpuProfile` and related classes.\",\n \"externalReferences\": [\n@@ -3591,39 +3297,27 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"f7dc0ec966c540d289676e4767f6ef9feca0a811cea36d765ee34970165fc667365049698f88f4d547d9f8423771f36e\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"b2ca65fdd6e9d999062b03507e51b5e4843a35209607d9c134319e4c8b9ca3de9d892d71a2caf97758846a6af432333ade856b43e327835d16b2ca51e68439c5\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"b835a25dcf00ade3922a1712612fb10d4d17a99b2018078cb62e1e01e9c82a73\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"c9bee7f7b0910b5a24915bc306166a9445a3fd6898b8eb3df5ec2967966880a0aeabfa4465b166a55042fa957796d6f5\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"ffbc9c5af35ea18b76061eaa2708eb9399c93677a3dca6fe16c512d5ce3fb957bc1e7baca4f7def0d11cb26fabb427d9a5e3a9ece45adf2fd4d70d153033cc6b\"\n }\n ],\n \"licenses\": [\n {\n \"license\": {\n \"id\": \"Apache-2.0\"\n }\n }\n ],\n \"name\": \"profiler\",\n \"publisher\": \"Philip Helger\",\n \"purl\": \"pkg:maven/com.helger/profiler@1.1.1?type=jar\",\n- \"scope\": \"optional\",\n+ \"scope\": \"required\",\n \"type\": \"library\",\n \"version\": \"1.1.1\"\n }\n ],\n \"dependencies\": [\n {\n \"dependsOn\": [\n@@ -4178,15 +3872,15 @@\n }\n ],\n \"name\": \"metrics-parent\",\n \"purl\": \"pkg:maven/io.dropwizard.metrics/metrics-parent@4.1.32?type=pom\",\n \"type\": \"library\",\n \"version\": \"4.1.32\"\n },\n- \"timestamp\": \"2022-06-07T21:31:25Z\",\n+ \"timestamp\": \"2025-01-31T05:48:24Z\",\n \"tools\": [\n {\n \"hashes\": [\n {\n \"alg\": \"MD5\",\n \"content\": \"c3466195d086bf7c31fdd23f8ffd7a8d\"\n },\n@@ -4201,31 +3895,19 @@\n {\n \"alg\": \"SHA-384\",\n \"content\": \"eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4\"\n },\n {\n \"alg\": \"SHA-512\",\n \"content\": \"a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460\"\n- },\n- {\n- \"alg\": \"SHA3-256\",\n- \"content\": \"048ed1d36f6d94c27c51a2d6f5658181d2678d83d86b544a42fdfcfb400c587b\"\n- },\n- {\n- \"alg\": \"SHA3-384\",\n- \"content\": \"b32fe6eafc71232a7cdd9b624d8b7b2da216a2060b7ce3c3a20acc950b385bb999d662ab1c2ecf37af8308f78b631baf\"\n- },\n- {\n- \"alg\": \"SHA3-512\",\n- \"content\": \"195d25b92dd0c0cfd180318cea84e0ebeb99f6cf593a0e7378dd13a325ded684b45eb96c1ffe4a49293721df57621949c77f0adef406758d848075ba5a17eccd\"\n }\n ],\n \"name\": \"CycloneDX Maven plugin\",\n \"vendor\": \"OWASP Foundation\",\n \"version\": \"2.7.0\"\n }\n ]\n },\n- \"serialNumber\": \"urn:uuid:337b5790-eee0-4bb6-8a71-91ab31f4c443\",\n+ \"serialNumber\": \"urn:uuid:a7652a46-f0ed-4637-89c3-d82fd32991a4\",\n \"specVersion\": \"1.4\",\n \"version\": 1\n }\n"}]}