--- results/org.apache.jspwiki/jspwiki-builder/2.12.2/oss-rebuild-improved-2/reference/jspwiki-210-test-adaptees-2.12.2-cyclonedx.xml:bom.xml	2025-04-06 12:50:25.405609998 +0000
+++ results/org.apache.jspwiki/jspwiki-builder/2.12.2/oss-rebuild-improved-2/rebuild/jspwiki-210-test-adaptees-2.12.2-cyclonedx.xml:bom.xml	2025-04-06 12:50:31.169519579 +0000
@@ -1,830 +1,830 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:ded3765e-c3b4-32d1-9003-f46f1bf5c5e8" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
-  <metadata>
-    <lifecycles>
-      <lifecycle>
-        <phase>build</phase>
-      </lifecycle>
-    </lifecycles>
-    <tools>
-      <tool>
-        <vendor>OWASP Foundation</vendor>
-        <name>CycloneDX Maven plugin</name>
-        <version>2.8.0</version>
-        <hashes>
-          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
-          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
-          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
-          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
-          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
-        </hashes>
-      </tool>
-    </tools>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-210-test-adaptees</name>
-      <version>2.12.2</version>
+<?xml version="1.0" encoding="UTF-8"?>
+<bom serialNumber="urn:uuid:ded3765e-c3b4-32d1-9003-f46f1bf5c5e8" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
+  <metadata>
+    <lifecycles>
+      <lifecycle>
+        <phase>build</phase>
+      </lifecycle>
+    </lifecycles>
+    <tools>
+      <tool>
+        <vendor>OWASP Foundation</vendor>
+        <name>CycloneDX Maven plugin</name>
+        <version>2.8.0</version>
+        <hashes>
+          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
+          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
+          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
+          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
+          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
+          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
+          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
+          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
+        </hashes>
+      </tool>
+    </tools>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-210-test-adaptees</name>
+      <version>2.12.2</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar</purl>
-      <externalReferences><reference type="vulnerability-assertion"><url>https://jspwiki.apache.org/cyclonedx/vdr.xml</url></reference><reference type="website"><url>https://jspwiki.apache.org/jspwiki-210-test-adaptees/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-210-test-adaptees</url></reference></externalReferences>
-    </component>
-    <properties>
-      <property name="maven.goal">makeBom</property>
-      <property name="maven.scopes">compile,provided,runtime,system</property>
-      <property name="cdx:reproducible">enabled</property>
-    </properties>
-  </metadata>
-  <components>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-main</name>
-      <version>2.11.0.M6</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar</purl>
+      <externalReferences><reference type="vulnerability-assertion"><url>https://jspwiki.apache.org/cyclonedx/vdr.xml</url></reference><reference type="website"><url>https://jspwiki.apache.org/jspwiki-210-test-adaptees/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-210-test-adaptees</url></reference></externalReferences>
+    </component>
+    <properties>
+      <property name="maven.goal">makeBom</property>
+      <property name="maven.scopes">compile,provided,runtime,system</property>
+      <property name="cdx:reproducible">enabled</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-main</name>
+      <version>2.11.0.M6</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">099efc3f6c3c5da216ec30ed7202cde6</hash>
-        <hash alg="SHA-1">200a9e734f5269f4bc4526182ac6ef7a7100c62f</hash>
-        <hash alg="SHA-256">fa9ab5ca6f56327dddb24bc9a9d5192ae0d8856e9e3ec0caea378388cdfd4c9d</hash>
-        <hash alg="SHA-512">51bb50fff13d234fb41e98ad11bbfcda83a5c5cec5b745cdb44f76fb9de1d639b90d79931ca2641fba2dd6be5d4c72e810914c85c7c679534187a0a923d63281</hash>
-        <hash alg="SHA-384">9be290412a4dde575da6432f515f79122f00603847bc9ecbce2bae0ea9ece9f5879f5c9f370d12781198c2c13b7f4472</hash>
-        <hash alg="SHA3-384">85888fe76ad8fc3498a1368c3b3e0b681deb42ed3b6a923e56c98f61afef007c44f9a3037132bdfb82cddcfd424a8576</hash>
-        <hash alg="SHA3-256">340ad1ff7f51a58b9f9ea0627a0902dbcad20bb5dd7aa344adc899b32cb95f4b</hash>
-        <hash alg="SHA3-512">1d4c50e14d5b76fe359d826bafb51e797f8e0b44d50e88a7298f76f1131ef7cc8899163bbd4be824362dc371f5fc0367acd2e675c296c45bbdc2e51141e6e6fa</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://jspwiki.apache.org/jspwiki-main/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-main</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-util</name>
-      <version>2.11.0.M6</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">099efc3f6c3c5da216ec30ed7202cde6</hash>
+        <hash alg="SHA-1">200a9e734f5269f4bc4526182ac6ef7a7100c62f</hash>
+        <hash alg="SHA-256">fa9ab5ca6f56327dddb24bc9a9d5192ae0d8856e9e3ec0caea378388cdfd4c9d</hash>
+        <hash alg="SHA-512">51bb50fff13d234fb41e98ad11bbfcda83a5c5cec5b745cdb44f76fb9de1d639b90d79931ca2641fba2dd6be5d4c72e810914c85c7c679534187a0a923d63281</hash>
+        <hash alg="SHA-384">9be290412a4dde575da6432f515f79122f00603847bc9ecbce2bae0ea9ece9f5879f5c9f370d12781198c2c13b7f4472</hash>
+        <hash alg="SHA3-384">85888fe76ad8fc3498a1368c3b3e0b681deb42ed3b6a923e56c98f61afef007c44f9a3037132bdfb82cddcfd424a8576</hash>
+        <hash alg="SHA3-256">340ad1ff7f51a58b9f9ea0627a0902dbcad20bb5dd7aa344adc899b32cb95f4b</hash>
+        <hash alg="SHA3-512">1d4c50e14d5b76fe359d826bafb51e797f8e0b44d50e88a7298f76f1131ef7cc8899163bbd4be824362dc371f5fc0367acd2e675c296c45bbdc2e51141e6e6fa</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://jspwiki.apache.org/jspwiki-main/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-main</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-util</name>
+      <version>2.11.0.M6</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">0050e4b055a6c2fd3b4433de5e6e621a</hash>
-        <hash alg="SHA-1">4e31e5ab6702199bc548da753bcc04697c0284fa</hash>
-        <hash alg="SHA-256">4df69f8e765afd03918a5df505c6f6c5c208e7d9a4f1ca82d2d9687d234dc23b</hash>
-        <hash alg="SHA-512">0641a820d1148b1bf1125c1b2520761e2339c21529f5598c36414615dfa743b63b7776f3f29d50e26858c1398f01af4a57969312520f99b3181341885dee5fd2</hash>
-        <hash alg="SHA-384">5032f48d98900930f5fa225b00dffde4a7d2b5b6cfada0576900b5d8edfab6dec0eb3b6b17ae138f357719165753a12d</hash>
-        <hash alg="SHA3-384">dd844e10213bed0fc1673d767c6312ab1faf369a4c1f926fe08bca1027da570d1bb05ddce4660a4a667a862fac60365a</hash>
-        <hash alg="SHA3-256">8ca04fbf49e0bd325a79efe1361b74216dbbf763aa0dfe4d4b03c3c808d80b85</hash>
-        <hash alg="SHA3-512">1beff70d1aec545a33bdd8534ad420b93b3976cfd4b3a286956c010710e97eb6ee656cc3c81c1ff528a8682a613540896d1c9c37bb009718465ddfce461fb844</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://jspwiki.apache.org/jspwiki-util/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-util</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>commons-io</group>
-      <name>commons-io</name>
-      <version>2.16.1</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">0050e4b055a6c2fd3b4433de5e6e621a</hash>
+        <hash alg="SHA-1">4e31e5ab6702199bc548da753bcc04697c0284fa</hash>
+        <hash alg="SHA-256">4df69f8e765afd03918a5df505c6f6c5c208e7d9a4f1ca82d2d9687d234dc23b</hash>
+        <hash alg="SHA-512">0641a820d1148b1bf1125c1b2520761e2339c21529f5598c36414615dfa743b63b7776f3f29d50e26858c1398f01af4a57969312520f99b3181341885dee5fd2</hash>
+        <hash alg="SHA-384">5032f48d98900930f5fa225b00dffde4a7d2b5b6cfada0576900b5d8edfab6dec0eb3b6b17ae138f357719165753a12d</hash>
+        <hash alg="SHA3-384">dd844e10213bed0fc1673d767c6312ab1faf369a4c1f926fe08bca1027da570d1bb05ddce4660a4a667a862fac60365a</hash>
+        <hash alg="SHA3-256">8ca04fbf49e0bd325a79efe1361b74216dbbf763aa0dfe4d4b03c3c808d80b85</hash>
+        <hash alg="SHA3-512">1beff70d1aec545a33bdd8534ad420b93b3976cfd4b3a286956c010710e97eb6ee656cc3c81c1ff528a8682a613540896d1c9c37bb009718465ddfce461fb844</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://jspwiki.apache.org/jspwiki-util/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-util</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>commons-io</group>
+      <name>commons-io</name>
+      <version>2.16.1</version>
       <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
-file comparators, endian transformation classes, and much more.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
-        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
-        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
-        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
-        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
-        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
-        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
-        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar">
-      <group>xmlrpc</group>
-      <name>xmlrpc</name>
-      <version>2.0.1</version>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">668ddd7347f75fbf18a4de6b39d01708</hash>
-        <hash alg="SHA-1">ab3c3503846a8f3e09b00c69d44026f224f08e3e</hash>
-        <hash alg="SHA-256">36efda6efee96e83602c9ba246db19bf4c5e733324390d2fa8213417d6b681e7</hash>
-        <hash alg="SHA-512">cb4cd92d7cc4320d645413008186282ed6a94d4a12817efcc678cf22fdc6d2c1c03df7e1220568a11a314ef31ec04c445faa8753a19c8b40376a70991603f20b</hash>
-        <hash alg="SHA-384">d6a1acb1e7a9402936fbf165ca82a2e0c85ca9c8b0542315b486dc4b7f45dfd16efc9927da83e484efcde8a8df0061aa</hash>
-        <hash alg="SHA3-384">1fb71cdd4fcd090197b7d17f943a94ac2135a9a809c1b2253b368804c29247efd3b765a8e263115a3345f5e2d858a1d7</hash>
-        <hash alg="SHA3-256">63bc8c6c381c9c1588814f76d333ee238d8a95b4f800b63c7b29eda12a8559fe</hash>
-        <hash alg="SHA3-512">30cb4f509c73c523bdbcaa337fd7bd37a6509ddc573c8a9f46e6251f2eda8f5430a343a4600748c27a866227fed3a46ab2413787dedc39082a123dbd71d15bfb</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar</purl>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-queryparser</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: queryparser)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">f436ed8c7d3adf5f76081149d746381a</hash>
-        <hash alg="SHA-1">e97fe1c0d102edb8d6e1c01454992fd2b8d80ae0</hash>
-        <hash alg="SHA-256">145f2396201bac06fd8d97085c0fd09f86f78baae1de5156a20848bbfbff7877</hash>
-        <hash alg="SHA-512">ce6d158fd3bf177e285d73af06d72782676618e89b62f5a264fde9579414f3b16ec92287d4db159391e623889a600c309a622547dc47c9609fac7c8f5f5a70d9</hash>
-        <hash alg="SHA-384">e79017bad971b41061ce879d716f5e652a146a0eccbf6bf6ffb95bae891ebdd78509c3a64b11bb2827f91a62e6ad534a</hash>
-        <hash alg="SHA3-384">d9fc89d62c63970098f486141fa4be521cfc31cf1b63bf95601e3e9e22de7987c23c1dfd13684e604b7ef08de8da27a7</hash>
-        <hash alg="SHA3-256">94fdb55c8eac75d428c23bfe654604c3b3c782b95e181a8724fe8ad7163f30b0</hash>
-        <hash alg="SHA3-512">17329c24e0acaca4c52ff03ba07b4aff6caae8ff1183f558715f6929b89e66bc0cced5659a04861bed4c4e1264e5e05f8896a11c24e5cdd32db136bfa8d31373</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-core</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: core)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">d5e91f59ac8e0aa8ee7fc8134d00a596</hash>
-        <hash alg="SHA-1">2e487755a6814b2a1bc770c26569dcba86873dcf</hash>
-        <hash alg="SHA-256">c8d7bbdac42edc8f82749001de734db482901802f3e4899fb5b115922013aa7d</hash>
-        <hash alg="SHA-512">6cf84f60f868a5bebef603ad15608ce47b186eff9578b8d0fc916cdc2b23bfe7aaa1b8fb1dbfee0c3fe56ed8f2f56dfbc2c91f7b832232504b15119c56daf8f9</hash>
-        <hash alg="SHA-384">02e8b6c5d014959e6a60091b7cf15a8ece84675768612300c2bb6bc275cf3cb64799f99bb709deb1716a31238237109b</hash>
-        <hash alg="SHA3-384">953e7c7598e522d4c45f28da430f69dd37bcd3d8601a861548e0faf6cc094560d6a9b13077ddd74811fda958bc63c273</hash>
-        <hash alg="SHA3-256">30ed2d170a299d7c0e16e265c66c33ce4fa51d5473fb895941801848e6fd756b</hash>
-        <hash alg="SHA3-512">0d9c1aae92cabbe939728693381a2a982b5dd181a2ccd42db6e3c0ebe41d2e08ddd83b642cadf704e4eed37c1fd7ffdb38eacfed3147365f56500fe605498a80</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-queries</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: queries)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">1cf3adc0fe4e1f2e83b5da7b176e1312</hash>
-        <hash alg="SHA-1">987d1286949ddf514b8405fd453ed47bebdfb12d</hash>
-        <hash alg="SHA-256">a8a0aaa41159ad0be990a0017b6196fce75c925192693c6b5282ec42804c0ac3</hash>
-        <hash alg="SHA-512">fdc5e07394b1b7bf808722f2b74f418e97c2ef2e5123812735f6275a927df347cd13fc208cf2fff4abec83effb6115d0220b7b3ccaeb9ee08d9b43e9b531fc13</hash>
-        <hash alg="SHA-384">94f97f549fa330bd33941e1acb25004df58d6a5708023adadabf0322217a30ae2011935a793c3f265f3b0401828990ce</hash>
-        <hash alg="SHA3-384">56418d263f7b5602840779d43c8eaaf7f52e521764582804bf86eb30ba0985d90efc9361e2ecdc434597f31896eab883</hash>
-        <hash alg="SHA3-256">3ab9d368653666fc19a62eb1d8eef2d5aa8fd3adc21f56d0609e54d39defd736</hash>
-        <hash alg="SHA3-512">0cb540baabfce90e25fb30ff44966b242f4ee744ef229cac51fb085b1842bc38049d33b586aed4ae93556048c2a50498efbe46ed81a6d0fd4d0dc4a7f6cdb5ec</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-sandbox</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: sandbox)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">5cd15f59e052d34ed39c5d98bd481131</hash>
-        <hash alg="SHA-1">5e46b790744bd9118ccc053f70235364213312a5</hash>
-        <hash alg="SHA-256">163a3c4e50bb27b014d5ea6e25e96189d68f563b39745a086b3d720b343be21b</hash>
-        <hash alg="SHA-512">6e6e74da7f10239882b62252837fd3edfd357a2adb9aaf3ce8b09c26f07d3e4096233cbd1c6f5200ca26d64904f94fbfeab364f6399ee45669eaedf5f838c378</hash>
-        <hash alg="SHA-384">78710762c189865df11361cdcd3aceb777a7c0a0ff30ac7ee24b366514f76b104d8da7411249b055c9e7df5056e61c5e</hash>
-        <hash alg="SHA3-384">f4a94a2c9cec9c48157564dc002b88ddba498d459db2874e00a149f6f9ba02ec285871eddf392d336f1ad42d40af1748</hash>
-        <hash alg="SHA3-256">360f35b7ebe31294b3e5b92e78353dcbc19ddb8aeccc6ba97f902c278567eb13</hash>
-        <hash alg="SHA3-512">2e003e8839c9c7610f093e6bb999eab8ac998cab520d7d9615f70a5e3d7e29293f86a6e64ea0858a39fc8a57e708fc7bf7ba8f120cc478ac536201f8f3817afb</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-highlighter</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: highlighter)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">b4285255bfba4f6286e90097738e0ee8</hash>
-        <hash alg="SHA-1">44accdc03c5482e602718f7bf91e5940ba4e4870</hash>
-        <hash alg="SHA-256">eb83205bfbdf94af2519a7e3b206c5e92a116ef204ecaeed6a9c6f07966ffac0</hash>
-        <hash alg="SHA-512">50adcff4d994c478ba5896a2492cfdc1a680fee87ed6e0fe0488cabeeec24c7b5512ff35cf20f7eb23900f769fb51e6280ac2d5a7060eca57d7a4adaacb5dc5e</hash>
-        <hash alg="SHA-384">73e6356e035e9d5c09956c82bf7cb2d1f792385c647ca7ee171b34b0f2e4fc7aae2222a3b9923a631a8d0585c5a1ec7e</hash>
-        <hash alg="SHA3-384">4f7377412d6e116c97049e9a286692f7eb8a15277c969c8b99fa692d1dd21d51d66105f4d6c14e3fd9d4223531d591d0</hash>
-        <hash alg="SHA3-256">ce9391f823a81a6c456da173322712b0667ad504a33d9134524b0b814b72f263</hash>
-        <hash alg="SHA3-512">d8da061a8027a2d95631e0935426c5971c8e4764de9dcb3d2c51620cdb9ba5565978b94390c4a5bf4f3f8eaa2387cadc73b282758b1a777e63be8eda63599130</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
-      <group>org.apache.lucene</group>
-      <name>lucene-memory</name>
-      <version>9.11.0</version>
-      <description>Apache Lucene (module: memory)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">f34f567912f656f114371bcce06b3743</hash>
-        <hash alg="SHA-1">b3e80aa6aa3299118e76a23edc23b58f3ba5a515</hash>
-        <hash alg="SHA-256">a20f08b5d466eda114ac5cd8ea4017125c85e9bc9e0a1ca7c630d15382d99b2a</hash>
-        <hash alg="SHA-512">d8f701121cfe70869e3985b79249ae6c2a7e004709cfc8ab9f8e9615fc3c473ea665adb87f6aefb516e0036150cd8be6bfaad39d8b2f8d2359586cbcdb18fdf7</hash>
-        <hash alg="SHA-384">d312265a155728be4d1de7885a0098653caf780db1f1c438affc5c556a6c096320f4080ebfb9939f42532a0950032db6</hash>
-        <hash alg="SHA3-384">da9476e7d940d6d7c7687d1f8caf037b76eb7a84bd4baf9795f010d78f2c5ba910b0aa01ab108177142eeb5e0b17fd83</hash>
-        <hash alg="SHA3-256">6a6ef211dd91a91a60936657028b7a8954b140cefa508d07ca7677d0760dbe43</hash>
-        <hash alg="SHA3-512">15c4c191ad02eecac5dbc489bd1e3854a6fee207cf4de8722f84e059b8b31a35967a7da988e6f6f75b11ed2f3c1b9e96e2e9201906fb7687808b875676903b88</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.lucene</group>
-      <name>lucene-analyzers-common</name>
-      <version>8.3.1</version>
-      <description>Additional Analyzers</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">029a1f1cd8de85204cc37dbd7835e28c</hash>
-        <hash alg="SHA-1">17e79be296a103b31a8e2edb3a6aa65f3422c253</hash>
-        <hash alg="SHA-256">d9f1fc7df1f09018784f949fc00b72d9fc231733e813a6a8cb56323d60138440</hash>
-        <hash alg="SHA-512">ff16e5e2912eed7d577e96b88d720df7e23dc6dab11b6a70be35a6215e787f633e9789813d1ae7f58230372a60dd6cadb21df9bd2a35e36407c6b8037367c828</hash>
-        <hash alg="SHA-384">f5cf3c2eb7ac71869a83cdbcf5245f72e57af9f4edb29999017c34fc30d009a03cda33acb390030d36031c50feb7cd8e</hash>
-        <hash alg="SHA3-384">e2d60a109719a9999584307d60ba908e675624e9149ce4e9f14b2aa8c0fefca4706a7db7dd5abe9334bf6c8d96026f3c</hash>
-        <hash alg="SHA3-256">09e6d8a955c5549a1ab70c55351d4fa7fbe6aab01ce5a41dc5db5351af5ee948</hash>
-        <hash alg="SHA3-512">91fd302427bab16550b5d3b46bdd7e002e82abcc3c958c3b336afede049d8480461596316eb90e487e0d5706c46b2d5cca1bad19bb3a55bcb91612cc31b73817</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://lucene.apache.org/lucene-parent/lucene-analyzers-common</url></reference><reference type="build-system"><url>https://builds.apache.org/computer/lucene/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-general/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/analysis/common</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
-      <group>net.sourceforge</group>
-      <name>sandler</name>
-      <version>0.5</version>
-      <description>A java tookit for generating and processing Atom messages</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">358e2a8cce3d78864a456c11469a749f</hash>
-        <hash alg="SHA-1">467223e1b773a433140f70b88ec07799f05332f1</hash>
-        <hash alg="SHA-256">1810804e501b62b63dcf06f12984c06b716c9924847138413eb1a61c85e7d475</hash>
-        <hash alg="SHA-512">b6d98069e14601d73e7f988c0dece34cf02faa5d87cdf4031db704b944f54b096759f4e248631efe30e43f78d51a4530a785d927b64886c939f66f7697989800</hash>
-        <hash alg="SHA-384">7ea4ffb453b6eee76b602e837d9a5117182a0ffc9d0cdfaff4c59381809168bea86fbd76a6349064c3adc6ebfcb32111</hash>
-        <hash alg="SHA3-384">bd6e8f07918993983aad74d88818eb8305d1594936029458223064c20d90ea4f01304fe8d69ca047ada9c3422c914103</hash>
-        <hash alg="SHA3-256">772c18aeefd4ad553f00d1dbd82e3e661d421e4ec8b0e58b9dad70d1ff5aeee0</hash>
-        <hash alg="SHA3-512">48c14288da10e38849a5fda7f688e79b72f5da44f658f4c34f955dca944f56b94d9e4dc9ad6cf25a3a9c80925746289aa8110834b3fc24541951909d03252105</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>Sandler License</name>
-          <url>http://sandler.cvs.sourceforge.net/viewvc/sandler/sandler/LICENSE?view=markup</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/net.sourceforge/sandler@0.5?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/sandler</url></reference><reference type="vcs"><url>http://sandler.cvs.sourceforge.net/sandler</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar">
-      <group>xpp3</group>
-      <name>xpp3</name>
-      <version>1.1.3.4-RC3</version>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">b04068ac657ab49b7434c9760065a108</hash>
-        <hash alg="SHA-1">f63aa962f306d04f9c9683b72bee53a9362954f8</hash>
-        <hash alg="SHA-256">7e00f4d6838d95e7598638c4a9de38435ad1d22128b8d96318b25b3698c685cf</hash>
-        <hash alg="SHA-512">53d0f8578c920aaac084b1f326dec735799ae2021a9a9cda8f69cef007b6329e4d1766b56e897dc7d47bc40b8fc5c6a311fa20e81898ff72e40b93d62a0d3341</hash>
-        <hash alg="SHA-384">6f9ff2ddc211b9daed59f5957b3b1cba4155105915daf500eb0614a94a3d4dc67b4a39b4507dc8b9aa388cc581bbd794</hash>
-        <hash alg="SHA3-384">dbdc4096f0d411d2b3c3bf86cd61586498e86914d9ea79aff1f0b3ff6da757c148cdd42845ec7808fd6927e0c9d080eb</hash>
-        <hash alg="SHA3-256">54f5ccc82adf0c453ac1b85d0b098787e361bb730903d24f32deed1c8b934a10</hash>
-        <hash alg="SHA3-512">2b5090a2d0e0b72e730b82f9cc68bdd3420529d7ec5cf4559f52b830367ad8bce48a10355fde8a8cc8bc37680f86c9b3aa18953aefbf4d560ff8bf09780bdcd3</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar</purl>
-    </component>
-    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
-      <publisher>Terracotta, Inc.</publisher>
-      <group>net.sf.ehcache</group>
-      <name>ehcache</name>
-      <version>2.10.9.2</version>
+file comparators, endian transformation classes, and much more.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
+        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
+        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
+        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
+        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
+        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
+        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
+        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar">
+      <group>xmlrpc</group>
+      <name>xmlrpc</name>
+      <version>2.0.1</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">668ddd7347f75fbf18a4de6b39d01708</hash>
+        <hash alg="SHA-1">ab3c3503846a8f3e09b00c69d44026f224f08e3e</hash>
+        <hash alg="SHA-256">36efda6efee96e83602c9ba246db19bf4c5e733324390d2fa8213417d6b681e7</hash>
+        <hash alg="SHA-512">cb4cd92d7cc4320d645413008186282ed6a94d4a12817efcc678cf22fdc6d2c1c03df7e1220568a11a314ef31ec04c445faa8753a19c8b40376a70991603f20b</hash>
+        <hash alg="SHA-384">d6a1acb1e7a9402936fbf165ca82a2e0c85ca9c8b0542315b486dc4b7f45dfd16efc9927da83e484efcde8a8df0061aa</hash>
+        <hash alg="SHA3-384">1fb71cdd4fcd090197b7d17f943a94ac2135a9a809c1b2253b368804c29247efd3b765a8e263115a3345f5e2d858a1d7</hash>
+        <hash alg="SHA3-256">63bc8c6c381c9c1588814f76d333ee238d8a95b4f800b63c7b29eda12a8559fe</hash>
+        <hash alg="SHA3-512">30cb4f509c73c523bdbcaa337fd7bd37a6509ddc573c8a9f46e6251f2eda8f5430a343a4600748c27a866227fed3a46ab2413787dedc39082a123dbd71d15bfb</hash>
+      </hashes>
+      <licenses/>
+      <purl>pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar</purl>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-queryparser</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: queryparser)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">f436ed8c7d3adf5f76081149d746381a</hash>
+        <hash alg="SHA-1">e97fe1c0d102edb8d6e1c01454992fd2b8d80ae0</hash>
+        <hash alg="SHA-256">145f2396201bac06fd8d97085c0fd09f86f78baae1de5156a20848bbfbff7877</hash>
+        <hash alg="SHA-512">ce6d158fd3bf177e285d73af06d72782676618e89b62f5a264fde9579414f3b16ec92287d4db159391e623889a600c309a622547dc47c9609fac7c8f5f5a70d9</hash>
+        <hash alg="SHA-384">e79017bad971b41061ce879d716f5e652a146a0eccbf6bf6ffb95bae891ebdd78509c3a64b11bb2827f91a62e6ad534a</hash>
+        <hash alg="SHA3-384">d9fc89d62c63970098f486141fa4be521cfc31cf1b63bf95601e3e9e22de7987c23c1dfd13684e604b7ef08de8da27a7</hash>
+        <hash alg="SHA3-256">94fdb55c8eac75d428c23bfe654604c3b3c782b95e181a8724fe8ad7163f30b0</hash>
+        <hash alg="SHA3-512">17329c24e0acaca4c52ff03ba07b4aff6caae8ff1183f558715f6929b89e66bc0cced5659a04861bed4c4e1264e5e05f8896a11c24e5cdd32db136bfa8d31373</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-core</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: core)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">d5e91f59ac8e0aa8ee7fc8134d00a596</hash>
+        <hash alg="SHA-1">2e487755a6814b2a1bc770c26569dcba86873dcf</hash>
+        <hash alg="SHA-256">c8d7bbdac42edc8f82749001de734db482901802f3e4899fb5b115922013aa7d</hash>
+        <hash alg="SHA-512">6cf84f60f868a5bebef603ad15608ce47b186eff9578b8d0fc916cdc2b23bfe7aaa1b8fb1dbfee0c3fe56ed8f2f56dfbc2c91f7b832232504b15119c56daf8f9</hash>
+        <hash alg="SHA-384">02e8b6c5d014959e6a60091b7cf15a8ece84675768612300c2bb6bc275cf3cb64799f99bb709deb1716a31238237109b</hash>
+        <hash alg="SHA3-384">953e7c7598e522d4c45f28da430f69dd37bcd3d8601a861548e0faf6cc094560d6a9b13077ddd74811fda958bc63c273</hash>
+        <hash alg="SHA3-256">30ed2d170a299d7c0e16e265c66c33ce4fa51d5473fb895941801848e6fd756b</hash>
+        <hash alg="SHA3-512">0d9c1aae92cabbe939728693381a2a982b5dd181a2ccd42db6e3c0ebe41d2e08ddd83b642cadf704e4eed37c1fd7ffdb38eacfed3147365f56500fe605498a80</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-queries</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: queries)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">1cf3adc0fe4e1f2e83b5da7b176e1312</hash>
+        <hash alg="SHA-1">987d1286949ddf514b8405fd453ed47bebdfb12d</hash>
+        <hash alg="SHA-256">a8a0aaa41159ad0be990a0017b6196fce75c925192693c6b5282ec42804c0ac3</hash>
+        <hash alg="SHA-512">fdc5e07394b1b7bf808722f2b74f418e97c2ef2e5123812735f6275a927df347cd13fc208cf2fff4abec83effb6115d0220b7b3ccaeb9ee08d9b43e9b531fc13</hash>
+        <hash alg="SHA-384">94f97f549fa330bd33941e1acb25004df58d6a5708023adadabf0322217a30ae2011935a793c3f265f3b0401828990ce</hash>
+        <hash alg="SHA3-384">56418d263f7b5602840779d43c8eaaf7f52e521764582804bf86eb30ba0985d90efc9361e2ecdc434597f31896eab883</hash>
+        <hash alg="SHA3-256">3ab9d368653666fc19a62eb1d8eef2d5aa8fd3adc21f56d0609e54d39defd736</hash>
+        <hash alg="SHA3-512">0cb540baabfce90e25fb30ff44966b242f4ee744ef229cac51fb085b1842bc38049d33b586aed4ae93556048c2a50498efbe46ed81a6d0fd4d0dc4a7f6cdb5ec</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-sandbox</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: sandbox)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">5cd15f59e052d34ed39c5d98bd481131</hash>
+        <hash alg="SHA-1">5e46b790744bd9118ccc053f70235364213312a5</hash>
+        <hash alg="SHA-256">163a3c4e50bb27b014d5ea6e25e96189d68f563b39745a086b3d720b343be21b</hash>
+        <hash alg="SHA-512">6e6e74da7f10239882b62252837fd3edfd357a2adb9aaf3ce8b09c26f07d3e4096233cbd1c6f5200ca26d64904f94fbfeab364f6399ee45669eaedf5f838c378</hash>
+        <hash alg="SHA-384">78710762c189865df11361cdcd3aceb777a7c0a0ff30ac7ee24b366514f76b104d8da7411249b055c9e7df5056e61c5e</hash>
+        <hash alg="SHA3-384">f4a94a2c9cec9c48157564dc002b88ddba498d459db2874e00a149f6f9ba02ec285871eddf392d336f1ad42d40af1748</hash>
+        <hash alg="SHA3-256">360f35b7ebe31294b3e5b92e78353dcbc19ddb8aeccc6ba97f902c278567eb13</hash>
+        <hash alg="SHA3-512">2e003e8839c9c7610f093e6bb999eab8ac998cab520d7d9615f70a5e3d7e29293f86a6e64ea0858a39fc8a57e708fc7bf7ba8f120cc478ac536201f8f3817afb</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-highlighter</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: highlighter)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">b4285255bfba4f6286e90097738e0ee8</hash>
+        <hash alg="SHA-1">44accdc03c5482e602718f7bf91e5940ba4e4870</hash>
+        <hash alg="SHA-256">eb83205bfbdf94af2519a7e3b206c5e92a116ef204ecaeed6a9c6f07966ffac0</hash>
+        <hash alg="SHA-512">50adcff4d994c478ba5896a2492cfdc1a680fee87ed6e0fe0488cabeeec24c7b5512ff35cf20f7eb23900f769fb51e6280ac2d5a7060eca57d7a4adaacb5dc5e</hash>
+        <hash alg="SHA-384">73e6356e035e9d5c09956c82bf7cb2d1f792385c647ca7ee171b34b0f2e4fc7aae2222a3b9923a631a8d0585c5a1ec7e</hash>
+        <hash alg="SHA3-384">4f7377412d6e116c97049e9a286692f7eb8a15277c969c8b99fa692d1dd21d51d66105f4d6c14e3fd9d4223531d591d0</hash>
+        <hash alg="SHA3-256">ce9391f823a81a6c456da173322712b0667ad504a33d9134524b0b814b72f263</hash>
+        <hash alg="SHA3-512">d8da061a8027a2d95631e0935426c5971c8e4764de9dcb3d2c51620cdb9ba5565978b94390c4a5bf4f3f8eaa2387cadc73b282758b1a777e63be8eda63599130</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
+      <group>org.apache.lucene</group>
+      <name>lucene-memory</name>
+      <version>9.11.0</version>
+      <description>Apache Lucene (module: memory)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">f34f567912f656f114371bcce06b3743</hash>
+        <hash alg="SHA-1">b3e80aa6aa3299118e76a23edc23b58f3ba5a515</hash>
+        <hash alg="SHA-256">a20f08b5d466eda114ac5cd8ea4017125c85e9bc9e0a1ca7c630d15382d99b2a</hash>
+        <hash alg="SHA-512">d8f701121cfe70869e3985b79249ae6c2a7e004709cfc8ab9f8e9615fc3c473ea665adb87f6aefb516e0036150cd8be6bfaad39d8b2f8d2359586cbcdb18fdf7</hash>
+        <hash alg="SHA-384">d312265a155728be4d1de7885a0098653caf780db1f1c438affc5c556a6c096320f4080ebfb9939f42532a0950032db6</hash>
+        <hash alg="SHA3-384">da9476e7d940d6d7c7687d1f8caf037b76eb7a84bd4baf9795f010d78f2c5ba910b0aa01ab108177142eeb5e0b17fd83</hash>
+        <hash alg="SHA3-256">6a6ef211dd91a91a60936657028b7a8954b140cefa508d07ca7677d0760dbe43</hash>
+        <hash alg="SHA3-512">15c4c191ad02eecac5dbc489bd1e3854a6fee207cf4de8722f84e059b8b31a35967a7da988e6f6f75b11ed2f3c1b9e96e2e9201906fb7687808b875676903b88</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.lucene</group>
+      <name>lucene-analyzers-common</name>
+      <version>8.3.1</version>
+      <description>Additional Analyzers</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">029a1f1cd8de85204cc37dbd7835e28c</hash>
+        <hash alg="SHA-1">17e79be296a103b31a8e2edb3a6aa65f3422c253</hash>
+        <hash alg="SHA-256">d9f1fc7df1f09018784f949fc00b72d9fc231733e813a6a8cb56323d60138440</hash>
+        <hash alg="SHA-512">ff16e5e2912eed7d577e96b88d720df7e23dc6dab11b6a70be35a6215e787f633e9789813d1ae7f58230372a60dd6cadb21df9bd2a35e36407c6b8037367c828</hash>
+        <hash alg="SHA-384">f5cf3c2eb7ac71869a83cdbcf5245f72e57af9f4edb29999017c34fc30d009a03cda33acb390030d36031c50feb7cd8e</hash>
+        <hash alg="SHA3-384">e2d60a109719a9999584307d60ba908e675624e9149ce4e9f14b2aa8c0fefca4706a7db7dd5abe9334bf6c8d96026f3c</hash>
+        <hash alg="SHA3-256">09e6d8a955c5549a1ab70c55351d4fa7fbe6aab01ce5a41dc5db5351af5ee948</hash>
+        <hash alg="SHA3-512">91fd302427bab16550b5d3b46bdd7e002e82abcc3c958c3b336afede049d8480461596316eb90e487e0d5706c46b2d5cca1bad19bb3a55bcb91612cc31b73817</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://lucene.apache.org/lucene-parent/lucene-analyzers-common</url></reference><reference type="build-system"><url>https://builds.apache.org/computer/lucene/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-general/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/analysis/common</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
+      <group>net.sourceforge</group>
+      <name>sandler</name>
+      <version>0.5</version>
+      <description>A java tookit for generating and processing Atom messages</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">358e2a8cce3d78864a456c11469a749f</hash>
+        <hash alg="SHA-1">467223e1b773a433140f70b88ec07799f05332f1</hash>
+        <hash alg="SHA-256">1810804e501b62b63dcf06f12984c06b716c9924847138413eb1a61c85e7d475</hash>
+        <hash alg="SHA-512">b6d98069e14601d73e7f988c0dece34cf02faa5d87cdf4031db704b944f54b096759f4e248631efe30e43f78d51a4530a785d927b64886c939f66f7697989800</hash>
+        <hash alg="SHA-384">7ea4ffb453b6eee76b602e837d9a5117182a0ffc9d0cdfaff4c59381809168bea86fbd76a6349064c3adc6ebfcb32111</hash>
+        <hash alg="SHA3-384">bd6e8f07918993983aad74d88818eb8305d1594936029458223064c20d90ea4f01304fe8d69ca047ada9c3422c914103</hash>
+        <hash alg="SHA3-256">772c18aeefd4ad553f00d1dbd82e3e661d421e4ec8b0e58b9dad70d1ff5aeee0</hash>
+        <hash alg="SHA3-512">48c14288da10e38849a5fda7f688e79b72f5da44f658f4c34f955dca944f56b94d9e4dc9ad6cf25a3a9c80925746289aa8110834b3fc24541951909d03252105</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>Sandler License</name>
+          <url>http://sandler.cvs.sourceforge.net/viewvc/sandler/sandler/LICENSE?view=markup</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/net.sourceforge/sandler@0.5?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/sandler</url></reference><reference type="vcs"><url>http://sandler.cvs.sourceforge.net/sandler</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar">
+      <group>xpp3</group>
+      <name>xpp3</name>
+      <version>1.1.3.4-RC3</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">b04068ac657ab49b7434c9760065a108</hash>
+        <hash alg="SHA-1">f63aa962f306d04f9c9683b72bee53a9362954f8</hash>
+        <hash alg="SHA-256">7e00f4d6838d95e7598638c4a9de38435ad1d22128b8d96318b25b3698c685cf</hash>
+        <hash alg="SHA-512">53d0f8578c920aaac084b1f326dec735799ae2021a9a9cda8f69cef007b6329e4d1766b56e897dc7d47bc40b8fc5c6a311fa20e81898ff72e40b93d62a0d3341</hash>
+        <hash alg="SHA-384">6f9ff2ddc211b9daed59f5957b3b1cba4155105915daf500eb0614a94a3d4dc67b4a39b4507dc8b9aa388cc581bbd794</hash>
+        <hash alg="SHA3-384">dbdc4096f0d411d2b3c3bf86cd61586498e86914d9ea79aff1f0b3ff6da757c148cdd42845ec7808fd6927e0c9d080eb</hash>
+        <hash alg="SHA3-256">54f5ccc82adf0c453ac1b85d0b098787e361bb730903d24f32deed1c8b934a10</hash>
+        <hash alg="SHA3-512">2b5090a2d0e0b72e730b82f9cc68bdd3420529d7ec5cf4559f52b830367ad8bce48a10355fde8a8cc8bc37680f86c9b3aa18953aefbf4d560ff8bf09780bdcd3</hash>
+      </hashes>
+      <licenses/>
+      <purl>pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar</purl>
+    </component>
+    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
+      <publisher>Terracotta, Inc.</publisher>
+      <group>net.sf.ehcache</group>
+      <name>ehcache</name>
+      <version>2.10.9.2</version>
       <description>Ehcache is an open source, standards-based cache used to boost performance,
   offload the database and simplify scalability. Ehcache is robust, proven and full-featured and
-  this has made it the most widely-used Java-based cache.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
-        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
-        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
-        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
-        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
-        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
-        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
-        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="distribution-intake"><url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.terracotta.org/jira/browse/EHC</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/ehcache-users</url></reference><reference type="vcs"><url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
-      <publisher>QOS.ch</publisher>
-      <group>org.slf4j</group>
-      <name>slf4j-api</name>
-      <version>1.7.36</version>
-      <description>The slf4j API</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
-        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
-        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
-        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
-        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
-        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
-        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
-        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>MIT</id>
-          <url>https://opensource.org/licenses/MIT</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
-      <group>oro</group>
-      <name>oro</name>
-      <version>2.0.8</version>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
-        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
-        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
-        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
-        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
-        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
-        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
-        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
-    </component>
-    <component type="library" bom-ref="pkg:maven/javax.mail/mail@1.4.7?type=jar">
-      <publisher>Oracle</publisher>
-      <group>javax.mail</group>
-      <name>mail</name>
-      <version>1.4.7</version>
-      <description>JavaMail API (compat)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">77f53ff0c78ba43c4812ecc9f53e20f8</hash>
-        <hash alg="SHA-1">9add058589d5d85adeb625859bf2c5eeaaedf12d</hash>
-        <hash alg="SHA-256">78c33b4f7c7b60f4b680f2d2405b1f063d71929cf1a4fbc328888379f365fcfb</hash>
-        <hash alg="SHA-512">331d2ecda625f4ad8a2c2539b577e9906787e7ef08d47683f45dd6fff18e3b7601071f20970896210bd26498018aa570fe2ab4bfd7f7084068a234a809bbd481</hash>
-        <hash alg="SHA-384">9b2529ac136de86400b6eaa9eb887cdc3de3cd993131caf99ce808bc2ac208b01772018aa38d49ca0bd1bc962e08834a</hash>
-        <hash alg="SHA3-384">4c86276795145265031b3ea63c097106df20076151c8a3a682a7092d68d91f243697286e3f543e8a1ef1e46ed4bb157e</hash>
-        <hash alg="SHA3-256">eef5fbcc453d8f709bc49c5f3d4f02a7cd8437f62cab9eb6b5396713a2098973</hash>
-        <hash alg="SHA3-512">c28159ba68a18d7d57428fcd75a9b019b3e79e573debbeef2859ba522309b9362552c861063a5ab541175bfb0ae69c08e5fa237f3ed3b05160de46e4fd2d8132</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>CDDL</name>
-          <url>http://www.sun.com/cddl</url>
-        </license>
-        <license>
-          <id>GPL-2.0-with-classpath-exception</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/javax.mail/mail@1.4.7?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://kenai.com/projects/javamail/mail</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://kenai.com/bugzilla</url></reference><reference type="vcs"><url>http://kenai.com/hg/javamail~mercurial/mail</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
-      <group>javax.activation</group>
-      <name>activation</name>
-      <version>1.1</version>
-      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
-        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
-        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
-        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
-        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
-        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
-        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
-        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>CDDL-1.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/log4j/log4j@1.2.17?type=jar">
-      <publisher>Apache Software Foundation</publisher>
-      <group>log4j</group>
-      <name>log4j</name>
-      <version>1.2.17</version>
-      <description>Apache Log4j 1.2</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">04a41f0a068986f0f73485cf507c0f40</hash>
-        <hash alg="SHA-1">5af35056b4d257e4b64b9e8069c0746e8b08629f</hash>
-        <hash alg="SHA-256">1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9</hash>
-        <hash alg="SHA-512">3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc</hash>
-        <hash alg="SHA-384">80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1</hash>
-        <hash alg="SHA3-384">0be025582340080ea191c4e2559395fe9957c8d0aeea040239dea8504ce035bd24150162898d18c863092697ef52501b</hash>
-        <hash alg="SHA3-256">f7f31abcf8b57cf6fd18380b5d1a13f999e3d3d1d89bd25a4a3885fc832f4a29</hash>
-        <hash alg="SHA3-512">0e4a21cb87a6b8626aa8f580b307039d2b060a6abc53d35feac9ecb8ffc2e80b627a12a869b5b5bf30a6e9348cd4c5c3edca937859141614f3c1b14bd8d4ef93</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/log4j/log4j@1.2.17?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://logging.apache.org/log4j/1.2/</url></reference><reference type="build-system"><url>http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html</url></reference><reference type="distribution-intake"><url>scp://people.apache.org/www/people.apache.org/builds/logging/repo/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/logging-log4j-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
-      <group>com.google.code.gson</group>
-      <name>gson</name>
-      <version>2.11.0</version>
-      <description>Gson JSON library</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">0c69b9199d3a4e6c34dc03619ff7feee</hash>
-        <hash alg="SHA-1">527175ca6d81050b53bdd4c457a6d6e017626b0e</hash>
-        <hash alg="SHA-256">57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b</hash>
-        <hash alg="SHA-512">b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a</hash>
-        <hash alg="SHA-384">8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf</hash>
-        <hash alg="SHA3-384">e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280</hash>
-        <hash alg="SHA3-256">aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094</hash>
-        <hash alg="SHA3-512">31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/com.google.code.gson/gson@2.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://github.com/google/gson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar">
-      <publisher>Google LLC</publisher>
-      <group>com.google.errorprone</group>
-      <name>error_prone_annotations</name>
-      <version>2.27.0</version>
-      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">fb183180666ce3d0a24ef7ba02d7193c</hash>
-        <hash alg="SHA-1">91b2c29d8a6148b5e2e4930f070d4840e2e48e34</hash>
-        <hash alg="SHA-256">24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5</hash>
-        <hash alg="SHA-512">479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35</hash>
-        <hash alg="SHA-384">b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7</hash>
-        <hash alg="SHA3-384">94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630</hash>
-        <hash alg="SHA3-256">faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84</hash>
-        <hash alg="SHA3-512">18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar">
-      <group>org.jvnet.hudson</group>
-      <name>org.suigeneris.jrcs.diff</name>
-      <version>0.4.2</version>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">a05e71b59b7099da7844fd3b5f38e299</hash>
-        <hash alg="SHA-1">6e8eea2281426cd791a64b348c0932c88b966f39</hash>
-        <hash alg="SHA-256">5fd35ce177154ef55dd474e8bef7c89f109132107ac14b5b876c3b5c4d20536d</hash>
-        <hash alg="SHA-512">de73e0ab9c534e23ea5a54c5694f2fc29ee785934fe5c9515afc198d2c3da3a7ce93be2d7ecfe9588076fd9da1a89fd39d79c6d9bf3707bdb7dc6622ba12fe49</hash>
-        <hash alg="SHA-384">5558ac9968b60f82c9bbb9a8ea641b929ec9aaf3f198e39f2f2920f04f584e52ef5f2ab436bc88089bcbbc0aff5e6948</hash>
-        <hash alg="SHA3-384">6f4597e1311797bb9f0b8fa2c26c32a47a33fd57d043ea6701dc906201ce97dd8f0bdcd1c221a8aadd1a8a9d2d2483fc</hash>
-        <hash alg="SHA3-256">8858665d346833df5812acfd18b32fc69486f1a0fc39deab84a3f825645c2c4b</hash>
-        <hash alg="SHA3-512">e4bfaf5a7d447452587455ed27b67b9fcebc6efdad665aec18fe2b40e091f3e4186c5b55565f03cb449d378adb1344e0837931c7adcd965334e263fbdc70a6ba</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar</purl>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
-      <publisher>JDOM</publisher>
-      <group>org.jdom</group>
-      <name>jdom2</name>
-      <version>2.0.6</version>
+  this has made it the most widely-used Java-based cache.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
+        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
+        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
+        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
+        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
+        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
+        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
+        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="distribution-intake"><url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.terracotta.org/jira/browse/EHC</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/ehcache-users</url></reference><reference type="vcs"><url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
+      <publisher>QOS.ch</publisher>
+      <group>org.slf4j</group>
+      <name>slf4j-api</name>
+      <version>1.7.36</version>
+      <description>The slf4j API</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
+        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
+        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
+        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
+        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
+        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
+        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
+        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+          <url>https://opensource.org/licenses/MIT</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
+      <group>oro</group>
+      <name>oro</name>
+      <version>2.0.8</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
+        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
+        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
+        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
+        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
+        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
+        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
+        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
+      </hashes>
+      <licenses/>
+      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
+    </component>
+    <component type="library" bom-ref="pkg:maven/javax.mail/mail@1.4.7?type=jar">
+      <publisher>Oracle</publisher>
+      <group>javax.mail</group>
+      <name>mail</name>
+      <version>1.4.7</version>
+      <description>JavaMail API (compat)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">77f53ff0c78ba43c4812ecc9f53e20f8</hash>
+        <hash alg="SHA-1">9add058589d5d85adeb625859bf2c5eeaaedf12d</hash>
+        <hash alg="SHA-256">78c33b4f7c7b60f4b680f2d2405b1f063d71929cf1a4fbc328888379f365fcfb</hash>
+        <hash alg="SHA-512">331d2ecda625f4ad8a2c2539b577e9906787e7ef08d47683f45dd6fff18e3b7601071f20970896210bd26498018aa570fe2ab4bfd7f7084068a234a809bbd481</hash>
+        <hash alg="SHA-384">9b2529ac136de86400b6eaa9eb887cdc3de3cd993131caf99ce808bc2ac208b01772018aa38d49ca0bd1bc962e08834a</hash>
+        <hash alg="SHA3-384">4c86276795145265031b3ea63c097106df20076151c8a3a682a7092d68d91f243697286e3f543e8a1ef1e46ed4bb157e</hash>
+        <hash alg="SHA3-256">eef5fbcc453d8f709bc49c5f3d4f02a7cd8437f62cab9eb6b5396713a2098973</hash>
+        <hash alg="SHA3-512">c28159ba68a18d7d57428fcd75a9b019b3e79e573debbeef2859ba522309b9362552c861063a5ab541175bfb0ae69c08e5fa237f3ed3b05160de46e4fd2d8132</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>CDDL</name>
+          <url>http://www.sun.com/cddl</url>
+        </license>
+        <license>
+          <id>GPL-2.0-with-classpath-exception</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/javax.mail/mail@1.4.7?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://kenai.com/projects/javamail/mail</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://kenai.com/bugzilla</url></reference><reference type="vcs"><url>http://kenai.com/hg/javamail~mercurial/mail</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
+      <group>javax.activation</group>
+      <name>activation</name>
+      <version>1.1</version>
+      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
+        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
+        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
+        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
+        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
+        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
+        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
+        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>CDDL-1.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/log4j/log4j@1.2.17?type=jar">
+      <publisher>Apache Software Foundation</publisher>
+      <group>log4j</group>
+      <name>log4j</name>
+      <version>1.2.17</version>
+      <description>Apache Log4j 1.2</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">04a41f0a068986f0f73485cf507c0f40</hash>
+        <hash alg="SHA-1">5af35056b4d257e4b64b9e8069c0746e8b08629f</hash>
+        <hash alg="SHA-256">1d31696445697720527091754369082a6651bd49781b6005deb94e56753406f9</hash>
+        <hash alg="SHA-512">3f12937a69ba60d0f5e86265168d6a0d069ce20d95b99a3ace463987655e7c63053f4d7e36e32f2b53f86992b888ca477bf81253ad04c721896b397f94ee57fc</hash>
+        <hash alg="SHA-384">80b79d5872dec949dff23d221636b5faf312f08fbea2b5e2a8db84a5f5955e13864aff4a288935cb53d4da3d61defbe1</hash>
+        <hash alg="SHA3-384">0be025582340080ea191c4e2559395fe9957c8d0aeea040239dea8504ce035bd24150162898d18c863092697ef52501b</hash>
+        <hash alg="SHA3-256">f7f31abcf8b57cf6fd18380b5d1a13f999e3d3d1d89bd25a4a3885fc832f4a29</hash>
+        <hash alg="SHA3-512">0e4a21cb87a6b8626aa8f580b307039d2b060a6abc53d35feac9ecb8ffc2e80b627a12a869b5b5bf30a6e9348cd4c5c3edca937859141614f3c1b14bd8d4ef93</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/log4j/log4j@1.2.17?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://logging.apache.org/log4j/1.2/</url></reference><reference type="build-system"><url>http://vmgump.apache.org/gump/public/logging-log4j-12/logging-log4j-12/index.html</url></reference><reference type="distribution-intake"><url>scp://people.apache.org/www/people.apache.org/builds/logging/repo/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/bugzilla/describecomponents.cgi?product=Log4j</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/logging-log4j-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/logging/log4j/tags/v1_2_17_rc3</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
+      <group>com.google.code.gson</group>
+      <name>gson</name>
+      <version>2.11.0</version>
+      <description>Gson JSON library</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">0c69b9199d3a4e6c34dc03619ff7feee</hash>
+        <hash alg="SHA-1">527175ca6d81050b53bdd4c457a6d6e017626b0e</hash>
+        <hash alg="SHA-256">57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b</hash>
+        <hash alg="SHA-512">b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a</hash>
+        <hash alg="SHA-384">8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf</hash>
+        <hash alg="SHA3-384">e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280</hash>
+        <hash alg="SHA3-256">aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094</hash>
+        <hash alg="SHA3-512">31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/com.google.code.gson/gson@2.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://github.com/google/gson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar">
+      <publisher>Google LLC</publisher>
+      <group>com.google.errorprone</group>
+      <name>error_prone_annotations</name>
+      <version>2.27.0</version>
+      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">fb183180666ce3d0a24ef7ba02d7193c</hash>
+        <hash alg="SHA-1">91b2c29d8a6148b5e2e4930f070d4840e2e48e34</hash>
+        <hash alg="SHA-256">24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5</hash>
+        <hash alg="SHA-512">479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35</hash>
+        <hash alg="SHA-384">b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7</hash>
+        <hash alg="SHA3-384">94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630</hash>
+        <hash alg="SHA3-256">faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84</hash>
+        <hash alg="SHA3-512">18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar">
+      <group>org.jvnet.hudson</group>
+      <name>org.suigeneris.jrcs.diff</name>
+      <version>0.4.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">a05e71b59b7099da7844fd3b5f38e299</hash>
+        <hash alg="SHA-1">6e8eea2281426cd791a64b348c0932c88b966f39</hash>
+        <hash alg="SHA-256">5fd35ce177154ef55dd474e8bef7c89f109132107ac14b5b876c3b5c4d20536d</hash>
+        <hash alg="SHA-512">de73e0ab9c534e23ea5a54c5694f2fc29ee785934fe5c9515afc198d2c3da3a7ce93be2d7ecfe9588076fd9da1a89fd39d79c6d9bf3707bdb7dc6622ba12fe49</hash>
+        <hash alg="SHA-384">5558ac9968b60f82c9bbb9a8ea641b929ec9aaf3f198e39f2f2920f04f584e52ef5f2ab436bc88089bcbbc0aff5e6948</hash>
+        <hash alg="SHA3-384">6f4597e1311797bb9f0b8fa2c26c32a47a33fd57d043ea6701dc906201ce97dd8f0bdcd1c221a8aadd1a8a9d2d2483fc</hash>
+        <hash alg="SHA3-256">8858665d346833df5812acfd18b32fc69486f1a0fc39deab84a3f825645c2c4b</hash>
+        <hash alg="SHA3-512">e4bfaf5a7d447452587455ed27b67b9fcebc6efdad665aec18fe2b40e091f3e4186c5b55565f03cb449d378adb1344e0837931c7adcd965334e263fbdc70a6ba</hash>
+      </hashes>
+      <licenses/>
+      <purl>pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar</purl>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
+      <publisher>JDOM</publisher>
+      <group>org.jdom</group>
+      <name>jdom2</name>
+      <version>2.0.6</version>
       <description>A complete, Java-based solution for accessing, manipulating, 
-		and outputting XML data</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
-        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
-        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
-        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
-        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
-        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
-        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
-        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>Similar to Apache License but with the acknowledgment clause removed</name>
-          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar">
-      <publisher>The Jaxen Project</publisher>
-      <group>jaxen</group>
-      <name>jaxen</name>
-      <version>2.0.0</version>
-      <description>Jaxen is a universal XPath engine for Java.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">674d5bd86b7838fe431b0277856e97ae</hash>
-        <hash alg="SHA-1">bd6a33b0fda054a5678010df843cc999f288dc6c</hash>
-        <hash alg="SHA-256">9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5</hash>
-        <hash alg="SHA-512">dc4d2686c65bfb0c2936e8c0eb4d517152aa284ed28a7880165a4247564823f34e1e9f06785a9dbad7b4cbe90486d3e9aed4c32c75d485d29bd15b8d7642b6f9</hash>
-        <hash alg="SHA-384">fdbb322d3af5f63a3aa39419734de3cae39daa4b1b01b43b97c2074502e9f737dc4031a159438a9bf75d7dadfabd56ae</hash>
-        <hash alg="SHA3-384">ecc8beb677e957adba96ed6cffbf343388713ccac411193c20bf5b919e0db9e1dabe1a7725130cc75eeb9640844b6c19</hash>
-        <hash alg="SHA3-256">572fdde162d406c7221fb5ae3d885f6c0f5d6c3d56140a2a31152e487439c58b</hash>
-        <hash alg="SHA3-512">1ed5f4959ffb6fe24748e582dd1d0efddd5ac79aec3db09c1faf7ed246e9e2674ea40103d24ce954b02d660379cec4a2c1042dac3b81f6c7e63152e99be18b5e</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>BSD License 2.0</name>
-          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/jaxen/jaxen@2.0.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.cafeconleche.org/jaxen/jaxen</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jaxen-xpath/jaxen/issues</url></reference><reference type="mailing-list"><url>https://markmail.org/search/?q=list%3Aorg.codehaus.jaxen.user</url></reference><reference type="vcs"><url>https://github.com/jaxen-xpath/jaxen/jaxen</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/javax.servlet/jstl@1.2?type=jar">
-      <group>javax.servlet</group>
-      <name>jstl</name>
-      <version>1.2</version>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">51e15f798e69358cb893e38c50596b9b</hash>
-        <hash alg="SHA-1">74aca283cd4f4b4f3e425f5820cda58f44409547</hash>
-        <hash alg="SHA-256">c6273119354a41522877e663582041012b22f8204fe72bba337ed84c7e649b0a</hash>
-        <hash alg="SHA-512">fb6fe33922631bba21b606cb5d53c4457071e695ec5632205185281e7db3e2d63d95248b43b9c7fb2cb5042d14a267b87d2c5da742c989174c3526dccf23aeec</hash>
-        <hash alg="SHA-384">750771b79ef083a19d20a7b384c166893c9045ebbb9428b641d0bafd8101615652d50b095e3647d2d849fb79b822b109</hash>
-        <hash alg="SHA3-384">98a520ca2dfd326e210fee9dac631e6fc21315ae6f8eb93c1a29bf4cd7b7a5fe880aaeafb73d14d5e6638ea72ead222c</hash>
-        <hash alg="SHA3-256">6f412b6fb48e4eafde516fc2803e0f40b09e2b6b090a798094430c0a126da654</hash>
-        <hash alg="SHA3-512">d67e63b347426c3e547e5fa6d6d8285dc5b2f9ba212355d1d909ffae336f1475b18133e30ee0bf84acaac9f8007c52f1c94fb2cda1e1e339ba5db5715f981927</hash>
-      </hashes>
-      <licenses/>
-      <purl>pkg:maven/javax.servlet/jstl@1.2?type=jar</purl>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar">
-      <group>org.freshcookies</group>
-      <name>freshcookies-security</name>
-      <version>0.60</version>
-      <description>Freshcookies security utilities</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">d6bc54b9e9e76dc646f5198ce7c2c5d8</hash>
-        <hash alg="SHA-1">c6b4f2fecc8d560dcde60de8578b8ac6df829996</hash>
-        <hash alg="SHA-256">e6c673dd9d2f4331a6d66b8db2e01cb3b9a98b4a4c8cc5e1cbc6888ff0b710c6</hash>
-        <hash alg="SHA-512">6344c7a9eda21595c1c0690b9ff7ed14f77a4858983158e8915f8e802aa8fa4d7a80224a60a06d3eb6ba9bb3fcb1d207e5cc5e848fa9b3e101ff480bc96a0bf3</hash>
-        <hash alg="SHA-384">8518b9440ed2e1b1b85666e55fca617747b1ef85d1f1264e99ffd33103879c5487957ff40935bf6a4c401ae2192434ce</hash>
-        <hash alg="SHA3-384">c1097a80822a73350365d53536b308c83ba6337d54a93efa776d4cc7cb438d393f110640b80cc5d59a28a6ab2b985ae5</hash>
-        <hash alg="SHA3-256">87ce57e812793ee9bc5ce1aa7a9521181156afe201bb2f4a44d94d8664596f7a</hash>
-        <hash alg="SHA3-512">c1d93e01f40adbe6288500737ad8c252130ee348285c296f25ecaffd96cc5036c5e1d9139381f749a66293d3c4d8c33322e4011c7ecfd10811cf675476d443fc</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.freshcookies.org</url></reference><reference type="vcs"><url>http://sisyphus.ru/en/srpm/Sisyphus/freshcookies-security/get</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>commons-fileupload</group>
-      <name>commons-fileupload</name>
-      <version>1.5</version>
+		and outputting XML data</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
+        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
+        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
+        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
+        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
+        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
+        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
+        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>Similar to Apache License but with the acknowledgment clause removed</name>
+          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar">
+      <publisher>The Jaxen Project</publisher>
+      <group>jaxen</group>
+      <name>jaxen</name>
+      <version>2.0.0</version>
+      <description>Jaxen is a universal XPath engine for Java.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">674d5bd86b7838fe431b0277856e97ae</hash>
+        <hash alg="SHA-1">bd6a33b0fda054a5678010df843cc999f288dc6c</hash>
+        <hash alg="SHA-256">9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5</hash>
+        <hash alg="SHA-512">dc4d2686c65bfb0c2936e8c0eb4d517152aa284ed28a7880165a4247564823f34e1e9f06785a9dbad7b4cbe90486d3e9aed4c32c75d485d29bd15b8d7642b6f9</hash>
+        <hash alg="SHA-384">fdbb322d3af5f63a3aa39419734de3cae39daa4b1b01b43b97c2074502e9f737dc4031a159438a9bf75d7dadfabd56ae</hash>
+        <hash alg="SHA3-384">ecc8beb677e957adba96ed6cffbf343388713ccac411193c20bf5b919e0db9e1dabe1a7725130cc75eeb9640844b6c19</hash>
+        <hash alg="SHA3-256">572fdde162d406c7221fb5ae3d885f6c0f5d6c3d56140a2a31152e487439c58b</hash>
+        <hash alg="SHA3-512">1ed5f4959ffb6fe24748e582dd1d0efddd5ac79aec3db09c1faf7ed246e9e2674ea40103d24ce954b02d660379cec4a2c1042dac3b81f6c7e63152e99be18b5e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>BSD License 2.0</name>
+          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/jaxen/jaxen@2.0.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.cafeconleche.org/jaxen/jaxen</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jaxen-xpath/jaxen/issues</url></reference><reference type="mailing-list"><url>https://markmail.org/search/?q=list%3Aorg.codehaus.jaxen.user</url></reference><reference type="vcs"><url>https://github.com/jaxen-xpath/jaxen/jaxen</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/javax.servlet/jstl@1.2?type=jar">
+      <group>javax.servlet</group>
+      <name>jstl</name>
+      <version>1.2</version>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">51e15f798e69358cb893e38c50596b9b</hash>
+        <hash alg="SHA-1">74aca283cd4f4b4f3e425f5820cda58f44409547</hash>
+        <hash alg="SHA-256">c6273119354a41522877e663582041012b22f8204fe72bba337ed84c7e649b0a</hash>
+        <hash alg="SHA-512">fb6fe33922631bba21b606cb5d53c4457071e695ec5632205185281e7db3e2d63d95248b43b9c7fb2cb5042d14a267b87d2c5da742c989174c3526dccf23aeec</hash>
+        <hash alg="SHA-384">750771b79ef083a19d20a7b384c166893c9045ebbb9428b641d0bafd8101615652d50b095e3647d2d849fb79b822b109</hash>
+        <hash alg="SHA3-384">98a520ca2dfd326e210fee9dac631e6fc21315ae6f8eb93c1a29bf4cd7b7a5fe880aaeafb73d14d5e6638ea72ead222c</hash>
+        <hash alg="SHA3-256">6f412b6fb48e4eafde516fc2803e0f40b09e2b6b090a798094430c0a126da654</hash>
+        <hash alg="SHA3-512">d67e63b347426c3e547e5fa6d6d8285dc5b2f9ba212355d1d909ffae336f1475b18133e30ee0bf84acaac9f8007c52f1c94fb2cda1e1e339ba5db5715f981927</hash>
+      </hashes>
+      <licenses/>
+      <purl>pkg:maven/javax.servlet/jstl@1.2?type=jar</purl>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar">
+      <group>org.freshcookies</group>
+      <name>freshcookies-security</name>
+      <version>0.60</version>
+      <description>Freshcookies security utilities</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">d6bc54b9e9e76dc646f5198ce7c2c5d8</hash>
+        <hash alg="SHA-1">c6b4f2fecc8d560dcde60de8578b8ac6df829996</hash>
+        <hash alg="SHA-256">e6c673dd9d2f4331a6d66b8db2e01cb3b9a98b4a4c8cc5e1cbc6888ff0b710c6</hash>
+        <hash alg="SHA-512">6344c7a9eda21595c1c0690b9ff7ed14f77a4858983158e8915f8e802aa8fa4d7a80224a60a06d3eb6ba9bb3fcb1d207e5cc5e848fa9b3e101ff480bc96a0bf3</hash>
+        <hash alg="SHA-384">8518b9440ed2e1b1b85666e55fca617747b1ef85d1f1264e99ffd33103879c5487957ff40935bf6a4c401ae2192434ce</hash>
+        <hash alg="SHA3-384">c1097a80822a73350365d53536b308c83ba6337d54a93efa776d4cc7cb438d393f110640b80cc5d59a28a6ab2b985ae5</hash>
+        <hash alg="SHA3-256">87ce57e812793ee9bc5ce1aa7a9521181156afe201bb2f4a44d94d8664596f7a</hash>
+        <hash alg="SHA3-512">c1d93e01f40adbe6288500737ad8c252130ee348285c296f25ecaffd96cc5036c5e1d9139381f749a66293d3c4d8c33322e4011c7ecfd10811cf675476d443fc</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.freshcookies.org</url></reference><reference type="vcs"><url>http://sisyphus.ru/en/srpm/Sisyphus/freshcookies-security/get</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>commons-fileupload</group>
+      <name>commons-fileupload</name>
+      <version>1.5</version>
       <description>The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart
-    file upload functionality to servlets and web applications.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">6e4786c0c12d65433d31df883683610a</hash>
-        <hash alg="SHA-1">bdc182c779d79c3cbc2b919030e2db8a81645e54</hash>
-        <hash alg="SHA-256">345eca7c085abde9ec587971f916c48380d12c07b320e4c3f15208d0a14d2384</hash>
-        <hash alg="SHA-512">4ce1f6b80d7417ac446c0931bd63eb30c7e4edec3411422e9b308df74e6d9903df70cb8642493c336f4c52a0e48414584261abf3e3319bcc5a90b730698c0e4d</hash>
-        <hash alg="SHA-384">54a49e9f90200cbda7d98204915e1a5918ab0b30be87354458212e2c201d2e5c61946baec42781fabb7e20034509f31e</hash>
-        <hash alg="SHA3-384">9870604a5c2702edd66cc24ca8c769e0c87c1997c612158c08e194dc30224e25d165f8e1283aa04ceae7d7b5d09dd210</hash>
-        <hash alg="SHA3-256">1139f74e2afb908d5b3df08c677120bdecb08354d4b5b72ec0b34b18a5d36119</hash>
-        <hash alg="SHA3-512">b818f36fb0930c3eef58c07e8c503788ada26339b197db5815f9dd058e1f0ce14847c87682f796843e2b6c804d165c90b262d2013ce64310a53003e963f635c9</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-fileupload/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/FILEUPLOAD</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
-      <group>net.sourceforge</group>
-      <name>akismet-java</name>
-      <version>1.02</version>
-      <description>Akismet Java is an API for interacting with Akismet.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">bc99cfdb9f3216460eaac499c823c55d</hash>
-        <hash alg="SHA-1">7e7852477c268517a07f85595d84bdc8a0153a16</hash>
-        <hash alg="SHA-256">fc7fe4cf36028f92bc8035ccb1b2bac8d102eb1a61ff93df19e99eeaa1eda6f5</hash>
-        <hash alg="SHA-512">1ac636d154fcedb3d46e2dcc12709b915b5c35d38b8a2fc8a21d1b0e59502515642d73ace7a7bc7327eda07ec4184176919e5b797b7375a08993e4f2c2fc2f69</hash>
-        <hash alg="SHA-384">261ac6dc1d501ddb837871b1f32a6a39d79157cc3a678e3152d3cdc05a94e0395e7fd0e6d927f5e47e079a51d2b986ce</hash>
-        <hash alg="SHA3-384">c36d636889ca0e8194062f2b7346f1e3ea04dfd163ffc6b6798ed381dbe8887064112a036b8b7e563b95a40b5621e620</hash>
-        <hash alg="SHA3-256">a43e27be30b6cb3410885af56bb0128c98bcdbc3a73002ed5cb59f5b8a2446f6</hash>
-        <hash alg="SHA3-512">8216e582dd1430869b007982467b9fbcb930d4ccca16c059c446ef8868eadf314fe80dad675379d44ccda40438c5a4e53e5a1f01cc665fa7713c6dc8e64a6ee6</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>Akismet License</name>
-          <url>http://akismet-java.cvs.sourceforge.net/viewvc/akismet-java/akismet-java/LICENSE?view=markup</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/net.sourceforge/akismet-java@1.02?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/akismet-java/</url></reference><reference type="vcs"><url>http://akismet-java.cvs.sourceforge.net/akismet-java</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>commons-codec</group>
-      <name>commons-codec</name>
-      <version>1.3</version>
+    file upload functionality to servlets and web applications.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">e57ac8a1a6412886a133a2fa08b89735</hash>
+        <hash alg="SHA-1">ad4ad2ab2961b4e1891472bd1a33fabefb0385f3</hash>
+        <hash alg="SHA-256">51f7b3dcb4e50c7662994da2f47231519ff99707a5c7fb7b05f4c4d3a1728c14</hash>
+        <hash alg="SHA-512">ab91778b2601ea0b0006248f436ab57a88df3102b3545b45eec675fadaf3d240590d08559cb78139f01ae63087afdcb3dd23af060a8ed27446e9a25f7b308318</hash>
+        <hash alg="SHA-384">0ea300576637bede06e531c02fc8278880f459fc5feea250cba34129f9c3bd893b548b6821e97e027342f94ab15c0bdc</hash>
+        <hash alg="SHA3-384">29716862a2f030932b20b8d4ffc2d8fff3d48624cd1349cdf8cc54d6c8fba9b7dc8a76d60a56961d1afbc4e534b3e874</hash>
+        <hash alg="SHA3-256">5f768eb8f979200ade2ea2da90d5f4240d339314394ae6f35bea35b42430cd27</hash>
+        <hash alg="SHA3-512">779451e67a209039af7f08f61b88cfd96448b8232b3ca3e475fc7c2f103b1bd10eedccb348f45e53ddd7bea02a19ea669557b8eef060e11e1c3adf5e88647795</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-fileupload/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/FILEUPLOAD</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
+      <group>net.sourceforge</group>
+      <name>akismet-java</name>
+      <version>1.02</version>
+      <description>Akismet Java is an API for interacting with Akismet.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">bc99cfdb9f3216460eaac499c823c55d</hash>
+        <hash alg="SHA-1">7e7852477c268517a07f85595d84bdc8a0153a16</hash>
+        <hash alg="SHA-256">fc7fe4cf36028f92bc8035ccb1b2bac8d102eb1a61ff93df19e99eeaa1eda6f5</hash>
+        <hash alg="SHA-512">1ac636d154fcedb3d46e2dcc12709b915b5c35d38b8a2fc8a21d1b0e59502515642d73ace7a7bc7327eda07ec4184176919e5b797b7375a08993e4f2c2fc2f69</hash>
+        <hash alg="SHA-384">261ac6dc1d501ddb837871b1f32a6a39d79157cc3a678e3152d3cdc05a94e0395e7fd0e6d927f5e47e079a51d2b986ce</hash>
+        <hash alg="SHA3-384">c36d636889ca0e8194062f2b7346f1e3ea04dfd163ffc6b6798ed381dbe8887064112a036b8b7e563b95a40b5621e620</hash>
+        <hash alg="SHA3-256">a43e27be30b6cb3410885af56bb0128c98bcdbc3a73002ed5cb59f5b8a2446f6</hash>
+        <hash alg="SHA3-512">8216e582dd1430869b007982467b9fbcb930d4ccca16c059c446ef8868eadf314fe80dad675379d44ccda40438c5a4e53e5a1f01cc665fa7713c6dc8e64a6ee6</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>Akismet License</name>
+          <url>http://akismet-java.cvs.sourceforge.net/viewvc/akismet-java/akismet-java/LICENSE?view=markup</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/net.sourceforge/akismet-java@1.02?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/akismet-java/</url></reference><reference type="vcs"><url>http://akismet-java.cvs.sourceforge.net/akismet-java</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>commons-codec</group>
+      <name>commons-codec</name>
+      <version>1.3</version>
       <description>The codec package contains simple encoder and decoders for
    various formats such as Base64 and Hexadecimal.  In addition to these
    widely used encoders and decoders, the codec package also maintains a
-   collection of phonetic encoding utilities.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">8e149c1053741c03736a52df83974dcc</hash>
-        <hash alg="SHA-1">fd32786786e2adb664d5ecc965da47629dca14ba</hash>
-        <hash alg="SHA-256">1bafd2ece2e88db4cdf835a7f8f0de65fab5b1147977a5dcc59b7c1b8c6f5080</hash>
-        <hash alg="SHA-512">acea0a510bb701c7bae3cb41b5c61a93e72b99c8441e5081269856df906fcc6de1977984f229eb78d0dc1601492a36d9992611c1ff5b8ed3f7b96294d67ecc29</hash>
-        <hash alg="SHA-384">c3d189986c881351eb8ace4f92d8a3889c20d1310c95605696227d29c4932c19d9e47dbe017a5fa6351a0753ec7306f5</hash>
-        <hash alg="SHA3-384">f998c54d6e563203b7a8fabc559cf04d377d9f1cc60ff53ba7ba9f2db4e60d6b65a49b481e637f29d71605df02055492</hash>
-        <hash alg="SHA3-256">53139a29865d70b5b0d2843e77d2314cb3ab9f1ac386da80b2792acb2c98caa4</hash>
-        <hash alg="SHA3-512">faecc8258d20a65cfcffecb5b3968a032c74b6306f5ae0fe65e714b38aa31302e154dd532a1c502a5e6204632aecfbe978f2254c43e0ce09dd25d516eb48298c</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-codec/commons-codec@1.3?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/codec/</url></reference><reference type="distribution-intake"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/codec/</url></reference><reference type="issue-tracker"><url>http://nagoya.apache.org/bugzilla/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;email1=&amp;emailtype1=substring&amp;emailassigned_to1=1&amp;email2=&amp;emailtype2=substring&amp;emailreporter2=1&amp;bugidtype=include&amp;bug_id=&amp;changedin=&amp;votes=&amp;chfieldfrom=&amp;chfieldto=Now&amp;chfieldvalue=&amp;product=Commons&amp;component=Codec&amp;short_desc=&amp;short_desc_type=allwordssubstr&amp;long_desc=&amp;long_desc_type=allwordssubstr&amp;bug_file_loc=&amp;bug_file_loc_type=allwordssubstr&amp;keywords=&amp;keywords_type=anywords&amp;field0-0-0=noop&amp;type0-0-0=noop&amp;value0-0-0=&amp;cmdtype=doit&amp;newqueryname=&amp;order=Reuse+same+sort+as+last+time</url></reference><reference type="mailing-list"><url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://cvs.apache.org/viewcvs/jakarta-commons/codec/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>commons-logging</group>
-      <name>commons-logging</name>
-      <version>1.0.4</version>
+   collection of phonetic encoding utilities.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">8e149c1053741c03736a52df83974dcc</hash>
+        <hash alg="SHA-1">fd32786786e2adb664d5ecc965da47629dca14ba</hash>
+        <hash alg="SHA-256">1bafd2ece2e88db4cdf835a7f8f0de65fab5b1147977a5dcc59b7c1b8c6f5080</hash>
+        <hash alg="SHA-512">acea0a510bb701c7bae3cb41b5c61a93e72b99c8441e5081269856df906fcc6de1977984f229eb78d0dc1601492a36d9992611c1ff5b8ed3f7b96294d67ecc29</hash>
+        <hash alg="SHA-384">c3d189986c881351eb8ace4f92d8a3889c20d1310c95605696227d29c4932c19d9e47dbe017a5fa6351a0753ec7306f5</hash>
+        <hash alg="SHA3-384">f998c54d6e563203b7a8fabc559cf04d377d9f1cc60ff53ba7ba9f2db4e60d6b65a49b481e637f29d71605df02055492</hash>
+        <hash alg="SHA3-256">53139a29865d70b5b0d2843e77d2314cb3ab9f1ac386da80b2792acb2c98caa4</hash>
+        <hash alg="SHA3-512">faecc8258d20a65cfcffecb5b3968a032c74b6306f5ae0fe65e714b38aa31302e154dd532a1c502a5e6204632aecfbe978f2254c43e0ce09dd25d516eb48298c</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-codec/commons-codec@1.3?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/codec/</url></reference><reference type="distribution-intake"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/codec/</url></reference><reference type="issue-tracker"><url>http://nagoya.apache.org/bugzilla/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;email1=&amp;emailtype1=substring&amp;emailassigned_to1=1&amp;email2=&amp;emailtype2=substring&amp;emailreporter2=1&amp;bugidtype=include&amp;bug_id=&amp;changedin=&amp;votes=&amp;chfieldfrom=&amp;chfieldto=Now&amp;chfieldvalue=&amp;product=Commons&amp;component=Codec&amp;short_desc=&amp;short_desc_type=allwordssubstr&amp;long_desc=&amp;long_desc_type=allwordssubstr&amp;bug_file_loc=&amp;bug_file_loc_type=allwordssubstr&amp;keywords=&amp;keywords_type=anywords&amp;field0-0-0=noop&amp;type0-0-0=noop&amp;value0-0-0=&amp;cmdtype=doit&amp;newqueryname=&amp;order=Reuse+same+sort+as+last+time</url></reference><reference type="mailing-list"><url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://cvs.apache.org/viewcvs/jakarta-commons/codec/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>commons-logging</group>
+      <name>commons-logging</name>
+      <version>1.0.4</version>
       <description>Commons Logging is a thin adapter allowing configurable bridging to other,
-    well known logging systems.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">8a507817b28077e0478add944c64586a</hash>
-        <hash alg="SHA-1">f029a2aefe2b3e1517573c580f948caac31b1056</hash>
-        <hash alg="SHA-256">e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e</hash>
-        <hash alg="SHA-512">c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668</hash>
-        <hash alg="SHA-384">a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14</hash>
-        <hash alg="SHA3-384">c7a402c012e7cc62140fee3af3f33cfb71bfd99b9de11995c1d2de0a3be360e35f412bb706aef1bf1490185a7ff1216b</hash>
-        <hash alg="SHA3-256">d5ef6dc6ba69bf752fb4cc1de051125b802cb9460885f8004e5daa70c82e22dd</hash>
-        <hash alg="SHA3-512">e4b85827f87735bf2e94a54fd2db46a7805650aa49c1208a1d12a8b201f42b31acd022bf6386af68c43c6f678430b8232fab3987e31fc003511bf11c93e24a9f</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-logging/commons-logging@1.0.4?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/logging/</url></reference><reference type="distribution-intake"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/logging/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://cvs.apache.org/viewcvs/jakarta-commons/logging/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
-      <publisher>Apache Software Foundation</publisher>
-      <group>commons-httpclient</group>
-      <name>commons-httpclient</name>
-      <version>3.1</version>
-      <description>The HttpClient  component supports the client-side of RFC 1945 (HTTP/1.0)  and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">8ad8c9229ef2d59ab9f59f7050e846a5</hash>
-        <hash alg="SHA-1">964cd74171f427720480efdec40a7c7f6e58426a</hash>
-        <hash alg="SHA-256">dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443</hash>
-        <hash alg="SHA-512">85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359</hash>
-        <hash alg="SHA-384">973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443</hash>
-        <hash alg="SHA3-384">0c77f4cf3c1d38d7de2cf42a7ff98a0be313ed739d20b62354278bbb7ac12f5c8be656d38e297689ddb8c7ff707f9cc4</hash>
-        <hash alg="SHA3-256">00c433b1cdaa88af6b91f41a5f1030c95beee1044de84880862f329d1af5821a</hash>
-        <hash alg="SHA3-512">2fdd42541ff607906620cca573c4ce0ddaac10eb90ce6d755ba4c4e41a6166869748ff79937ebface698407a42aa47abf931ab4ecf996e672344d1a992b39025</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-1.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://jakarta.apache.org/httpcomponents/httpclient-3.x/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar">
-      <group>net.sourceforge.nekohtml</group>
-      <name>nekohtml</name>
-      <version>1.9.22</version>
-      <description>An HTML parser and tag balancer.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">a97dfe2d0ceb81ffbdd15436961b0f23</hash>
-        <hash alg="SHA-1">4f54af68ecb345f2453fb6884672ad08414154e3</hash>
-        <hash alg="SHA-256">452978e8b6667c7b8357fd3f0a2f2f405e4560a7148143a69181735da5d19045</hash>
-        <hash alg="SHA-512">7050af64354bcc0f38692e1858294de01815c1103554a38b206c31d70f493f64ed4a7176f46f1fa76ad4cea36304b682347d1d5a4a2438c0b677b67bc3f5e749</hash>
-        <hash alg="SHA-384">d86652044b39b57cc4824d54d5ad180c3299066cff2d7407e0a377819cf499bb89b846abca94e6b724d0b97df81546f1</hash>
-        <hash alg="SHA3-384">c209de39b674bf858ebc6d09a1c7f111a2a2cb596fa066c5b1b4138d7fb295366a8b5f62fe174de1a182c3797d6dab8e</hash>
-        <hash alg="SHA3-256">2498e45e53012cf213bc1e2ac9e39ec6803f7e87efdeb4fc49ce13cb3b54cc52</hash>
-        <hash alg="SHA3-512">c2f1417791e309a7b9117bdc9fec5d82c6a4650cfc1b855a385766b644b6b89dc529125d24bd9da4f549e503c2c60e1d3de9b915c4d47415208327c1df9a8be7</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://nekohtml.sourceforge.net/</url></reference><reference type="distribution-intake"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://nekohtml.svn.sourceforge.net/viewvc/nekohtml/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar">
-      <group>xerces</group>
-      <name>xercesImpl</name>
-      <version>2.11.0</version>
+    well known logging systems.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">8a507817b28077e0478add944c64586a</hash>
+        <hash alg="SHA-1">f029a2aefe2b3e1517573c580f948caac31b1056</hash>
+        <hash alg="SHA-256">e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e</hash>
+        <hash alg="SHA-512">c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668</hash>
+        <hash alg="SHA-384">a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14</hash>
+        <hash alg="SHA3-384">c7a402c012e7cc62140fee3af3f33cfb71bfd99b9de11995c1d2de0a3be360e35f412bb706aef1bf1490185a7ff1216b</hash>
+        <hash alg="SHA3-256">d5ef6dc6ba69bf752fb4cc1de051125b802cb9460885f8004e5daa70c82e22dd</hash>
+        <hash alg="SHA3-512">e4b85827f87735bf2e94a54fd2db46a7805650aa49c1208a1d12a8b201f42b31acd022bf6386af68c43c6f678430b8232fab3987e31fc003511bf11c93e24a9f</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-logging/commons-logging@1.0.4?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/logging/</url></reference><reference type="distribution-intake"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/logging/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://cvs.apache.org/viewcvs/jakarta-commons/logging/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
+      <publisher>Apache Software Foundation</publisher>
+      <group>commons-httpclient</group>
+      <name>commons-httpclient</name>
+      <version>3.1</version>
+      <description>The HttpClient  component supports the client-side of RFC 1945 (HTTP/1.0)  and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">8ad8c9229ef2d59ab9f59f7050e846a5</hash>
+        <hash alg="SHA-1">964cd74171f427720480efdec40a7c7f6e58426a</hash>
+        <hash alg="SHA-256">dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443</hash>
+        <hash alg="SHA-512">85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359</hash>
+        <hash alg="SHA-384">973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443</hash>
+        <hash alg="SHA3-384">0c77f4cf3c1d38d7de2cf42a7ff98a0be313ed739d20b62354278bbb7ac12f5c8be656d38e297689ddb8c7ff707f9cc4</hash>
+        <hash alg="SHA3-256">00c433b1cdaa88af6b91f41a5f1030c95beee1044de84880862f329d1af5821a</hash>
+        <hash alg="SHA3-512">2fdd42541ff607906620cca573c4ce0ddaac10eb90ce6d755ba4c4e41a6166869748ff79937ebface698407a42aa47abf931ab4ecf996e672344d1a992b39025</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-1.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://jakarta.apache.org/httpcomponents/httpclient-3.x/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar">
+      <group>net.sourceforge.nekohtml</group>
+      <name>nekohtml</name>
+      <version>1.9.22</version>
+      <description>An HTML parser and tag balancer.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">a97dfe2d0ceb81ffbdd15436961b0f23</hash>
+        <hash alg="SHA-1">4f54af68ecb345f2453fb6884672ad08414154e3</hash>
+        <hash alg="SHA-256">452978e8b6667c7b8357fd3f0a2f2f405e4560a7148143a69181735da5d19045</hash>
+        <hash alg="SHA-512">7050af64354bcc0f38692e1858294de01815c1103554a38b206c31d70f493f64ed4a7176f46f1fa76ad4cea36304b682347d1d5a4a2438c0b677b67bc3f5e749</hash>
+        <hash alg="SHA-384">d86652044b39b57cc4824d54d5ad180c3299066cff2d7407e0a377819cf499bb89b846abca94e6b724d0b97df81546f1</hash>
+        <hash alg="SHA3-384">c209de39b674bf858ebc6d09a1c7f111a2a2cb596fa066c5b1b4138d7fb295366a8b5f62fe174de1a182c3797d6dab8e</hash>
+        <hash alg="SHA3-256">2498e45e53012cf213bc1e2ac9e39ec6803f7e87efdeb4fc49ce13cb3b54cc52</hash>
+        <hash alg="SHA3-512">c2f1417791e309a7b9117bdc9fec5d82c6a4650cfc1b855a385766b644b6b89dc529125d24bd9da4f549e503c2c60e1d3de9b915c4d47415208327c1df9a8be7</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://nekohtml.sourceforge.net/</url></reference><reference type="distribution-intake"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://nekohtml.svn.sourceforge.net/viewvc/nekohtml/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar">
+      <group>xerces</group>
+      <name>xercesImpl</name>
+      <version>2.11.0</version>
       <description>Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.
 
     The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.
@@ -833,30 +833,30 @@
 
     Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.
 
-    Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">43584adc1f895628055bad0aa98a1007</hash>
-        <hash alg="SHA-1">9bb329db1cfc4e22462c9d6b43a8432f5850e92c</hash>
-        <hash alg="SHA-256">175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c</hash>
-        <hash alg="SHA-512">3a527c420ed28a4b6aeab2c9f8b456b9b02edacfeebcee4056257bf02341cecadc89d394fce6f9487b457f6b795cdb626882ed4cf39c1049782909ff291494e5</hash>
-        <hash alg="SHA-384">fe0220353e5c77ec26e2265983ca233ac5cd3905910c395955f16fe8764e5c7069ed6ddec439f38b5c9aa07cdeb7e3c0</hash>
-        <hash alg="SHA3-384">63d8b6543c6bbf83fac6dfaea09c9ea4af4f9f9e437a28c760ac5ff6b142dc4d6716dccc35e76bdc4c347d1eaa8efa3e</hash>
-        <hash alg="SHA3-256">1dc4b6b6901136651d36851cedf9f5d1ef1634f9d373dd13fb5bf8f4c63234bd</hash>
-        <hash alg="SHA3-512">efb3c3153145f3d61b98c2104b1054d5b66d2a0098b604365a6fe754c55d345b300e413ead303160488fb3c1afd64c542fe9cf226fe33aac61130f07d394e9fd</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/xerces/xercesImpl@2.11.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://xerces.apache.org/xerces2-j/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/xerces/java/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar">
-      <group>xml-apis</group>
-      <name>xml-apis</name>
-      <version>1.4.01</version>
+    Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">43584adc1f895628055bad0aa98a1007</hash>
+        <hash alg="SHA-1">9bb329db1cfc4e22462c9d6b43a8432f5850e92c</hash>
+        <hash alg="SHA-256">175bbbd9def7a22a30e05f9c8db629c88fa5bdfc57d5658791901b54222abe1c</hash>
+        <hash alg="SHA-512">3a527c420ed28a4b6aeab2c9f8b456b9b02edacfeebcee4056257bf02341cecadc89d394fce6f9487b457f6b795cdb626882ed4cf39c1049782909ff291494e5</hash>
+        <hash alg="SHA-384">fe0220353e5c77ec26e2265983ca233ac5cd3905910c395955f16fe8764e5c7069ed6ddec439f38b5c9aa07cdeb7e3c0</hash>
+        <hash alg="SHA3-384">63d8b6543c6bbf83fac6dfaea09c9ea4af4f9f9e437a28c760ac5ff6b142dc4d6716dccc35e76bdc4c347d1eaa8efa3e</hash>
+        <hash alg="SHA3-256">1dc4b6b6901136651d36851cedf9f5d1ef1634f9d373dd13fb5bf8f4c63234bd</hash>
+        <hash alg="SHA3-512">efb3c3153145f3d61b98c2104b1054d5b66d2a0098b604365a6fe754c55d345b300e413ead303160488fb3c1afd64c542fe9cf226fe33aac61130f07d394e9fd</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/xerces/xercesImpl@2.11.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://xerces.apache.org/xerces2-j/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/xerces/java/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar">
+      <group>xml-apis</group>
+      <name>xml-apis</name>
+      <version>1.4.01</version>
       <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
     JAXP interfaces for use in other xml-based projects. Our hope is that we 
     can standardize on both a common version and packaging scheme for these 
@@ -864,201 +864,201 @@
     and users easier. The External Components portion of xml-commons contains 
     interfaces that are defined by external standards organizations. For DOM, 
     that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
-    JAXP it's Sun.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>
-        <hash alg="SHA-1">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>
-        <hash alg="SHA-256">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>
-        <hash alg="SHA-512">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>
-        <hash alg="SHA-384">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>
-        <hash alg="SHA3-384">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>
-        <hash alg="SHA3-256">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>
-        <hash alg="SHA3-512">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-        <license>
-          <id>SAX-PD</id>
-          <url>http://www.saxproject.org/copying.html</url>
-        </license>
-        <license>
-          <name>The W3C License</name>
-          <url>http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/xml-apis/xml-apis@1.4.01?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://xml.apache.org/commons/components/external/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.commons</group>
-      <name>commons-lang3</name>
-      <version>3.14.0</version>
+    JAXP it's Sun.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>
+        <hash alg="SHA-1">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>
+        <hash alg="SHA-256">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>
+        <hash alg="SHA-512">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>
+        <hash alg="SHA-384">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>
+        <hash alg="SHA3-384">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>
+        <hash alg="SHA3-256">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>
+        <hash alg="SHA3-512">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+        <license>
+          <id>SAX-PD</id>
+          <url>http://www.saxproject.org/copying.html</url>
+        </license>
+        <license>
+          <name>The W3C License</name>
+          <url>http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/xml-apis/xml-apis@1.4.01?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://xml.apache.org/commons/components/external/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.commons</group>
+      <name>commons-lang3</name>
+      <version>3.14.0</version>
       <description>Apache Commons Lang, a package of Java utility classes for the
   classes that are in java.lang's hierarchy, or are considered to be so
-  standard as to justify existence in java.lang.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
-        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
-        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
-        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
-        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
-        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
-        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
-        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.commons</group>
-      <name>commons-text</name>
-      <version>1.12.0</version>
+  standard as to justify existence in java.lang.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
+        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
+        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
+        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
+        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
+        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
+        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
+        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.commons</group>
+      <name>commons-text</name>
+      <version>1.12.0</version>
       <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
-    and manipulating text that should be of use in a Java environment.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
-        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
-        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
-        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
-        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
-        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
-        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
-        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
-    </component>
-  </components>
-  <dependencies>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar">
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar">
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar"/>
-      <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar"/>
-      <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar"/>
-      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
-      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
-      <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar"/>
-      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
-      <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
-      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
-      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
-      <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
-      <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
-      <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar"/>
-      <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar"/>
-      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
-      <dependency ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar">
-      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
-      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
-      <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar"/>
-      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
-      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
-      <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
-      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
-    <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
-    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
-    <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar">
-      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
-    <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
-    <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
-    <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar">
-      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
-      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
-      <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
-    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
-      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
-    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
-    <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
-      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
-    <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
-    <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
-    <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
-    <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
-      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
-      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
-      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
-      <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar">
-      <dependency ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar">
-      <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-    </dependency>
-  </dependencies>
-</bom>
+    and manipulating text that should be of use in a Java environment.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
+        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
+        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
+        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
+        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
+        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
+        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
+        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-210-test-adaptees@2.12.2?type=jar">
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M6?type=jar">
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar"/>
+      <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar"/>
+      <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar"/>
+      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
+      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
+      <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar"/>
+      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
+      <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
+      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
+      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
+      <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
+      <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
+      <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar"/>
+      <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar"/>
+      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
+      <dependency ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.11.0.M6?type=jar">
+      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
+      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
+      <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar"/>
+      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
+      <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
+      <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
+      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
+    <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
+    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
+    <dependency ref="pkg:maven/javax.mail/mail@1.4.7?type=jar">
+      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
+    <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
+    <dependency ref="pkg:maven/log4j/log4j@1.2.17?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
+    <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.lucene/lucene-analyzers-common@8.3.1?type=jar">
+      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
+      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
+      <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
+    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
+      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
+    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
+    <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
+      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
+    <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
+    <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
+    <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
+    <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
+      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
+      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
+      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
+      <dependency ref="pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar">
+      <dependency ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/xerces/xercesImpl@2.11.0?type=jar">
+      <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+    </dependency>
+  </dependencies>
+</bom>
