--- results/org.apache.jspwiki/jspwiki-builder/2.12.2/oss-rebuild-improved-2/reference/jspwiki-cache-2.12.2-cyclonedx.xml:bom.xml	2025-04-06 12:50:01.909978572 +0000
+++ results/org.apache.jspwiki/jspwiki-builder/2.12.2/oss-rebuild-improved-2/rebuild/jspwiki-cache-2.12.2-cyclonedx.xml:bom.xml	2025-04-06 12:50:07.833885645 +0000
@@ -1,545 +1,545 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<bom serialNumber="urn:uuid:574fa461-4ed6-3780-91c4-3b92d2605984" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
-  <metadata>
-    <lifecycles>
-      <lifecycle>
-        <phase>build</phase>
-      </lifecycle>
-    </lifecycles>
-    <tools>
-      <tool>
-        <vendor>OWASP Foundation</vendor>
-        <name>CycloneDX Maven plugin</name>
-        <version>2.8.0</version>
-        <hashes>
-          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
-          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
-          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
-          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
-          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
-        </hashes>
-      </tool>
-    </tools>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-cache</name>
-      <version>2.12.2</version>
+<?xml version="1.0" encoding="UTF-8"?>
+<bom serialNumber="urn:uuid:574fa461-4ed6-3780-91c4-3b92d2605984" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
+  <metadata>
+    <lifecycles>
+      <lifecycle>
+        <phase>build</phase>
+      </lifecycle>
+    </lifecycles>
+    <tools>
+      <tool>
+        <vendor>OWASP Foundation</vendor>
+        <name>CycloneDX Maven plugin</name>
+        <version>2.8.0</version>
+        <hashes>
+          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
+          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
+          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
+          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
+          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
+          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
+          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
+          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
+        </hashes>
+      </tool>
+    </tools>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-cache</name>
+      <version>2.12.2</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar</purl>
-      <externalReferences><reference type="vulnerability-assertion"><url>https://jspwiki.apache.org/cyclonedx/vdr.xml</url></reference><reference type="website"><url>https://jspwiki.apache.org/jspwiki-cache/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-cache</url></reference></externalReferences>
-    </component>
-    <properties>
-      <property name="maven.goal">makeBom</property>
-      <property name="maven.scopes">compile,provided,runtime,system</property>
-      <property name="cdx:reproducible">enabled</property>
-    </properties>
-  </metadata>
-  <components>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-api</name>
-      <version>2.12.2</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar</purl>
+      <externalReferences><reference type="vulnerability-assertion"><url>https://jspwiki.apache.org/cyclonedx/vdr.xml</url></reference><reference type="website"><url>https://jspwiki.apache.org/jspwiki-cache/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-cache</url></reference></externalReferences>
+    </component>
+    <properties>
+      <property name="maven.goal">makeBom</property>
+      <property name="maven.scopes">compile,provided,runtime,system</property>
+      <property name="cdx:reproducible">enabled</property>
+    </properties>
+  </metadata>
+  <components>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-api</name>
+      <version>2.12.2</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">4d59b5a3246a09d7ac290b779e20de73</hash>
-        <hash alg="SHA-1">1439a2bf8ae4bcc59b10edfb2930137e3d10a599</hash>
-        <hash alg="SHA-256">d14d77f8fd4b5b4baadd76a618d85466f44bb39b210e065b2fe60540f84912d4</hash>
-        <hash alg="SHA-512">adae2ab2fcbdc290c5d99c7a75ce378bbd64846a126abe5852abd969b8eab269eedec31346d05b2b4bc446112cd5387e1fb81f61a3cc2d8efcaea6c53092656f</hash>
-        <hash alg="SHA-384">34a61e4f6d94e02fa2eacbb045df845295467df65a4e88b27a364351c20cfca99ce853482703a0e7b801d65db7ee2c06</hash>
-        <hash alg="SHA3-384">bd167cf2379d2bb05a799eb7bbf8e9dd607e7fde7e2edf3048b07a14ad8841ebbe7668e3bb648887db4d881144ace209</hash>
-        <hash alg="SHA3-256">0ed70b001258cb9181ac2647d93f50a0c64e8cd9581508188f3e811053049ed8</hash>
-        <hash alg="SHA3-512">c0269f9a8d59779951ed9a1297b8e2d876629ec008d21bd1665e4a0d6a3e67fea8d2e3b8aa2092078384972831187a5c47c90669e083d827a752a95c3fe22c24</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-api/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-api</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-event</name>
-      <version>2.12.2</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">c0888f57de9044029c481c2e9e8d0503</hash>
+        <hash alg="SHA-1">de8e631b77f8544d2c153fb6ca39b20d565b6808</hash>
+        <hash alg="SHA-256">233de2fa97aa794fc5555b417679b554ffa46092e79a5b50f093b373a2b03bdf</hash>
+        <hash alg="SHA-512">8885dc4126ede4d275489050caf371457a212174ca8a1aa23d4634bb79a30674f7d3e4e53d61bdce7dbf5feb996421a9761a09e04a66a5bed64d22e5b2c33929</hash>
+        <hash alg="SHA-384">4f3b64730f56df00d5bb0a167bde542822b42af5d99ac9ed9bd7f0576d9019744fbc096f254036371d30a126aeb40052</hash>
+        <hash alg="SHA3-384">184934cb4310f55e2dbed60dd06f57b7712e4d31babb9628400c0d6086ed57030ed16d81183a36b6810b19815273dc46</hash>
+        <hash alg="SHA3-256">4831cd038d7d2382e6562c48c0246eaeef3e0bd1b01a85eeeec494c125e3ae09</hash>
+        <hash alg="SHA3-512">e87670bec3de3f1a2a1eff6a288a57872f2a3df9e2bf8f686e4abdab69330bb92f2011e0568f07848b2e6b688f9a6436d99c7ff9d7abb03263b16b315e58440e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-api/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-api</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-event</name>
+      <version>2.12.2</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">34b6cb8866035e58607c8209826c35f5</hash>
-        <hash alg="SHA-1">d5f8f0e66048419a7e638561269554942e89e9af</hash>
-        <hash alg="SHA-256">a4d9fdfb1cd806e5a11bf433c4cc1954ece191b8bc47705d479a9f55dde91800</hash>
-        <hash alg="SHA-512">34a4ccf324956d1457b1f8d185eac5391ad1dfe87d476ad08addb4a4ff7642c46305c930903ab2d2dc0ca9a9b70c75e6e972df1bb08c8d23720fb5ec5e586ce8</hash>
-        <hash alg="SHA-384">d3a02aab279a8a2a81fa9add241acd98ca7790d0982f237e36da63f58753191985b432c7ea4a71e1d0d3995ea7d0388e</hash>
-        <hash alg="SHA3-384">58049b3af8e26062348e76747292bdaf5026e9434575ee99e2568f7a387aab08226983e07fddaa4d387668cfaaf9c253</hash>
-        <hash alg="SHA3-256">2c399a043eea2508244ecae74498f043e0fabc541310fc631486334b8b8d5e8d</hash>
-        <hash alg="SHA3-512">a94f2081a3570a8d1a8eb3e52d250c9ad1815ef2b073fb85b8852d36cae11632501c9f71b960c93961e59f85e009d232bc4f9899dfd7815157b495d156710696</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-event/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-event</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.commons</group>
-      <name>commons-lang3</name>
-      <version>3.14.0</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">cd6eaa8e78344170969056ee1cdaaa27</hash>
+        <hash alg="SHA-1">97c73ad29d60ab1075160ab088a782fc20811638</hash>
+        <hash alg="SHA-256">fd1317d628253627d623d4c2456d7f122084a3baf8fbe93317c3d370b3382351</hash>
+        <hash alg="SHA-512">394390a537dda36b5aff3c0f122b03253e9dee4eeebe4201e9d3c951dfe1dbd3c3e235d0d7fc4191bad1f56667599e9811d9ee1068cefb853f0bb8dcd0bfcfa3</hash>
+        <hash alg="SHA-384">d61fa5fb1150da183336e73eb09a25e68dd7cb6a2dc9c48b71613cfc7eb77335500336216c459f3f20ac566e79c62d1c</hash>
+        <hash alg="SHA3-384">c28572f7fe94f26a54df5570b4bdb535ec1cde191d975e26dbac8871e2e730ab7ab1c3c853c8ef50ce0a5b8dc198213b</hash>
+        <hash alg="SHA3-256">704f3b1f970e7f338666a70ce707ee78a7dcb08530925ef650ace6285b9ee30d</hash>
+        <hash alg="SHA3-512">c91ebaa9ef7bd3f4a4d285bb6c4bbecd17fc1c403f1a115dabfabcc7d247ffc6cd88ab194ea99ba884c9c2f72341972dc3aee060f70805f737c0ec9b69a59fa1</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-event/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-event</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.commons</group>
+      <name>commons-lang3</name>
+      <version>3.14.0</version>
       <description>Apache Commons Lang, a package of Java utility classes for the
   classes that are in java.lang's hierarchy, or are considered to be so
-  standard as to justify existence in java.lang.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
-        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
-        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
-        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
-        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
-        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
-        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
-        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.jspwiki</group>
-      <name>jspwiki-util</name>
-      <version>2.12.2</version>
+  standard as to justify existence in java.lang.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
+        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
+        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
+        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
+        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
+        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
+        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
+        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.jspwiki</group>
+      <name>jspwiki-util</name>
+      <version>2.12.2</version>
       <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
-    and built around standard JEE components (Java, servlets, JSP).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">d8afacab077f83fb1bbf7129c2a6f6f7</hash>
-        <hash alg="SHA-1">9b6f8df1b4dd12a5c31efa879f69e22ae7279abb</hash>
-        <hash alg="SHA-256">eeb0bb74fece833c974b85a71db8f0640fa9482ed62e0e74ce8f622eee0e5ffe</hash>
-        <hash alg="SHA-512">14b63c67807dd2b10bded0b5013d52248e19f960391b5bf3fc6b4bf4912a1a5b53fc79019b2531d376c654c04a38d718ebcf8c3c3a72f15ae523a480c3895341</hash>
-        <hash alg="SHA-384">d06ae09cf2196450f9d10c6550ef9625baff1b875df22db79c94f0e1d7899b7586f1d0192e743c1b2e6536fb9a3a333f</hash>
-        <hash alg="SHA3-384">9351c27ff7e93819765535cd0b1676e73081da07e58d18390a62a3908fcde04ffe1eb9f049a4d5b2cd7192d47509aa99</hash>
-        <hash alg="SHA3-256">fd1359484d9de9cf9eff36680dc7aba59a6489634e19a17099f1d722cae9c932</hash>
-        <hash alg="SHA3-512">5cdb6b773367ed249f0718a07d23de4b92691d5bad123f367264bfc289611c70a3c2b1bceec0af3b51d80c977087307124963f996b501a3c7eabc67eba713ece</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-util/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-util</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
-      <publisher>Oracle</publisher>
-      <group>com.sun.mail</group>
-      <name>logging-mailhandler</name>
-      <version>1.6.2</version>
-      <description>JavaMail API logging handler</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">31be5a050f3efedfd9d3b1320e665cc2</hash>
-        <hash alg="SHA-1">3cd9498fbdb160b5f1a364a5548f7844879855ee</hash>
-        <hash alg="SHA-256">990e91388821481eb7fb6df2a394184b8b65d673c39add37a100c3a753450f52</hash>
-        <hash alg="SHA-512">ced2ebb9175ad9aceee1aa1f5ca50f052896a1cc77a9e808e12af6b9db4b68cb2c2171b71d78141999c3adf3b4301812566ea16a3462e0c2d608b938470ea53e</hash>
-        <hash alg="SHA-384">37dc0f3ade04f4d615e79ff137c4d4d027853c6e1b825ea1b85b35e2e3339c3828c9cb03381f1876f7470133fb8a76c3</hash>
-        <hash alg="SHA3-384">097d3b4623058c0318ee0c42585d6f1e83a731c68c0959fb948037ae9895f0d0e961beece88999ca6b3cb8198db26f8a</hash>
-        <hash alg="SHA3-256">7d49d9bb11243bfce9c3f5042646fb9dba480e8e56dd19fc332094a2ece0e20d</hash>
-        <hash alg="SHA3-512">ac16e7987b71301fd64146f499e78fc8f340fb3896c18d1de6946c0a7bdb7416edfa8410bd2361365f77898b974d3f08f14dc7d3f4328e309e7531518f611e47</hash>
-      </hashes>
-      <licenses>
-        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
-      </licenses>
-      <purl>pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/parent-distrib/logging-mailhandler</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/parent-distrib/logging-mailhandler</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar">
-      <publisher>Oracle</publisher>
-      <group>com.sun.mail</group>
-      <name>mailapi</name>
-      <version>1.6.2</version>
-      <description>JavaMail API (no providers)</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">b89a9ff8ac681f01dfd06798a008f0af</hash>
-        <hash alg="SHA-1">208b6439dfbe6713c384ebf54ecd62cd4423cc50</hash>
-        <hash alg="SHA-256">d37c0f88efa5973ccb4100f4cc49aee3510cd01ab25012d1f085b1b798ae2ebb</hash>
-        <hash alg="SHA-512">72f2e7f843ae92986d384166835588e5b4299b271e4b26158248418843e4a9c885ab50fc4284e2504807c59b0af1d59a6b27b7543784ca746377ae815edd1143</hash>
-        <hash alg="SHA-384">8478e628b400d624664f044219a74cb12962968fc96333ad58884c975fe39305b045f89c9a7518eda19d2031000e4c26</hash>
-        <hash alg="SHA3-384">6162cc9a369e47ab98e72c660e90c1b97c09b01dc438b3dd889a401c4db366f4b1ddac7d1a9641aad9f1f8dcd5f22ccf</hash>
-        <hash alg="SHA3-256">c10a54013a9177e258830240eb9c58ab9971db10b602a0be6eaaa0e0a6354333</hash>
-        <hash alg="SHA3-512">4994293cb0dfec961a807eae29fc206d14873942ca0f2e5a379cd95a0ee4271dee20b8162974a98fe091a124d9387f4fe1251defa4b568b755a30ecf399e0697</hash>
-      </hashes>
-      <licenses>
-        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
-      </licenses>
-      <purl>pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/mailapi</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/mailapi</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
-      <publisher>Oracle</publisher>
-      <group>com.sun.mail</group>
-      <name>javax.mail</name>
-      <version>1.6.2</version>
-      <description>JavaMail API</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">0b81d022797740d72d21620781841374</hash>
-        <hash alg="SHA-1">935151eb71beff17a2ffac15dd80184a99a0514f</hash>
-        <hash alg="SHA-256">45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11</hash>
-        <hash alg="SHA-512">d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec</hash>
-        <hash alg="SHA-384">44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51</hash>
-        <hash alg="SHA3-384">4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490</hash>
-        <hash alg="SHA3-256">905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992</hash>
-        <hash alg="SHA3-512">bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8</hash>
-      </hashes>
-      <licenses>
-        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
-      </licenses>
-      <purl>pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/javax.mail</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/javax.mail</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
-      <group>javax.activation</group>
-      <name>activation</name>
-      <version>1.1</version>
-      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
-        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
-        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
-        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
-        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
-        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
-        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
-        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>CDDL-1.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>commons-io</group>
-      <name>commons-io</name>
-      <version>2.16.1</version>
+    and built around standard JEE components (Java, servlets, JSP).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">27f299f04e9747eae7e611c31f3fb9fa</hash>
+        <hash alg="SHA-1">5ba9ef3ee769d2ea0e65a027406223ac2c97cf2f</hash>
+        <hash alg="SHA-256">b8c0d6af0dcc162e86f53fe56b800ef56e73840ec3db810fbe53f829233b908e</hash>
+        <hash alg="SHA-512">c7e555638e9f56f979b636d5065102d049711644250ba28337e08f50e7b23cbdbbf69bc84e7237fce1d4929659afa984ed171c289bc7ef24e189d887a94118cc</hash>
+        <hash alg="SHA-384">b658263482c7f6bc60725d7d374fa2dd1e4baf6fea403757d79ae1d657bc0d8d36301eaf106d862422819a780ba0e0e8</hash>
+        <hash alg="SHA3-384">f602bc7a1eba718de59e82a43b299e1b6bb156ee86c66e8a729904f04fe0d374c374b0095e2a2a33150f3269dbfa8c64</hash>
+        <hash alg="SHA3-256">f2152f46d319d29d6901f6446b9e55df766704ae8bcd10427955c2f49f057ba0</hash>
+        <hash alg="SHA3-512">7e56c37e79dacfc315026dd34c8fadaf90d8ce516febf67a939e4299f8ae0bf2d36acad4decf26bc4a2912d33a96ce3c053023df13100cf68ebd63bae6fd963e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-util/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-util</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
+      <publisher>Oracle</publisher>
+      <group>com.sun.mail</group>
+      <name>logging-mailhandler</name>
+      <version>1.6.2</version>
+      <description>JavaMail API logging handler</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">31be5a050f3efedfd9d3b1320e665cc2</hash>
+        <hash alg="SHA-1">3cd9498fbdb160b5f1a364a5548f7844879855ee</hash>
+        <hash alg="SHA-256">990e91388821481eb7fb6df2a394184b8b65d673c39add37a100c3a753450f52</hash>
+        <hash alg="SHA-512">ced2ebb9175ad9aceee1aa1f5ca50f052896a1cc77a9e808e12af6b9db4b68cb2c2171b71d78141999c3adf3b4301812566ea16a3462e0c2d608b938470ea53e</hash>
+        <hash alg="SHA-384">37dc0f3ade04f4d615e79ff137c4d4d027853c6e1b825ea1b85b35e2e3339c3828c9cb03381f1876f7470133fb8a76c3</hash>
+        <hash alg="SHA3-384">097d3b4623058c0318ee0c42585d6f1e83a731c68c0959fb948037ae9895f0d0e961beece88999ca6b3cb8198db26f8a</hash>
+        <hash alg="SHA3-256">7d49d9bb11243bfce9c3f5042646fb9dba480e8e56dd19fc332094a2ece0e20d</hash>
+        <hash alg="SHA3-512">ac16e7987b71301fd64146f499e78fc8f340fb3896c18d1de6946c0a7bdb7416edfa8410bd2361365f77898b974d3f08f14dc7d3f4328e309e7531518f611e47</hash>
+      </hashes>
+      <licenses>
+        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
+      </licenses>
+      <purl>pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/parent-distrib/logging-mailhandler</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/parent-distrib/logging-mailhandler</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar">
+      <publisher>Oracle</publisher>
+      <group>com.sun.mail</group>
+      <name>mailapi</name>
+      <version>1.6.2</version>
+      <description>JavaMail API (no providers)</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">b89a9ff8ac681f01dfd06798a008f0af</hash>
+        <hash alg="SHA-1">208b6439dfbe6713c384ebf54ecd62cd4423cc50</hash>
+        <hash alg="SHA-256">d37c0f88efa5973ccb4100f4cc49aee3510cd01ab25012d1f085b1b798ae2ebb</hash>
+        <hash alg="SHA-512">72f2e7f843ae92986d384166835588e5b4299b271e4b26158248418843e4a9c885ab50fc4284e2504807c59b0af1d59a6b27b7543784ca746377ae815edd1143</hash>
+        <hash alg="SHA-384">8478e628b400d624664f044219a74cb12962968fc96333ad58884c975fe39305b045f89c9a7518eda19d2031000e4c26</hash>
+        <hash alg="SHA3-384">6162cc9a369e47ab98e72c660e90c1b97c09b01dc438b3dd889a401c4db366f4b1ddac7d1a9641aad9f1f8dcd5f22ccf</hash>
+        <hash alg="SHA3-256">c10a54013a9177e258830240eb9c58ab9971db10b602a0be6eaaa0e0a6354333</hash>
+        <hash alg="SHA3-512">4994293cb0dfec961a807eae29fc206d14873942ca0f2e5a379cd95a0ee4271dee20b8162974a98fe091a124d9387f4fe1251defa4b568b755a30ecf399e0697</hash>
+      </hashes>
+      <licenses>
+        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
+      </licenses>
+      <purl>pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/mailapi</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/mailapi</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
+      <publisher>Oracle</publisher>
+      <group>com.sun.mail</group>
+      <name>javax.mail</name>
+      <version>1.6.2</version>
+      <description>JavaMail API</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">0b81d022797740d72d21620781841374</hash>
+        <hash alg="SHA-1">935151eb71beff17a2ffac15dd80184a99a0514f</hash>
+        <hash alg="SHA-256">45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11</hash>
+        <hash alg="SHA-512">d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec</hash>
+        <hash alg="SHA-384">44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51</hash>
+        <hash alg="SHA3-384">4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490</hash>
+        <hash alg="SHA3-256">905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992</hash>
+        <hash alg="SHA3-512">bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8</hash>
+      </hashes>
+      <licenses>
+        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
+      </licenses>
+      <purl>pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/javax.mail</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/javax.mail</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
+      <group>javax.activation</group>
+      <name>activation</name>
+      <version>1.1</version>
+      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
+        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
+        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
+        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
+        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
+        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
+        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
+        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>CDDL-1.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>commons-io</group>
+      <name>commons-io</name>
+      <version>2.16.1</version>
       <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
-file comparators, endian transformation classes, and much more.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
-        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
-        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
-        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
-        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
-        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
-        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
-        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar">
-      <publisher>The Jaxen Project</publisher>
-      <group>jaxen</group>
-      <name>jaxen</name>
-      <version>2.0.0</version>
-      <description>Jaxen is a universal XPath engine for Java.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">674d5bd86b7838fe431b0277856e97ae</hash>
-        <hash alg="SHA-1">bd6a33b0fda054a5678010df843cc999f288dc6c</hash>
-        <hash alg="SHA-256">9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5</hash>
-        <hash alg="SHA-512">dc4d2686c65bfb0c2936e8c0eb4d517152aa284ed28a7880165a4247564823f34e1e9f06785a9dbad7b4cbe90486d3e9aed4c32c75d485d29bd15b8d7642b6f9</hash>
-        <hash alg="SHA-384">fdbb322d3af5f63a3aa39419734de3cae39daa4b1b01b43b97c2074502e9f737dc4031a159438a9bf75d7dadfabd56ae</hash>
-        <hash alg="SHA3-384">ecc8beb677e957adba96ed6cffbf343388713ccac411193c20bf5b919e0db9e1dabe1a7725130cc75eeb9640844b6c19</hash>
-        <hash alg="SHA3-256">572fdde162d406c7221fb5ae3d885f6c0f5d6c3d56140a2a31152e487439c58b</hash>
-        <hash alg="SHA3-512">1ed5f4959ffb6fe24748e582dd1d0efddd5ac79aec3db09c1faf7ed246e9e2674ea40103d24ce954b02d660379cec4a2c1042dac3b81f6c7e63152e99be18b5e</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>BSD License 2.0</name>
-          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/jaxen/jaxen@2.0.0?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.cafeconleche.org/jaxen/jaxen</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jaxen-xpath/jaxen/issues</url></reference><reference type="mailing-list"><url>https://markmail.org/search/?q=list%3Aorg.codehaus.jaxen.user</url></reference><reference type="vcs"><url>https://github.com/jaxen-xpath/jaxen/jaxen</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.logging.log4j</group>
-      <name>log4j-core</name>
-      <version>2.23.1</version>
-      <description>The Apache Log4j Implementation</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">34fad2df975cf874a2fdf4b797122f16</hash>
-        <hash alg="SHA-1">905802940e2c78042d75b837c136ac477d2b4e4d</hash>
-        <hash alg="SHA-256">7079368005fc34f56248f57f8a8a53361c3a53e9007d556dbc66fc669df081b5</hash>
-        <hash alg="SHA-512">0862144475f4a5ed67c8ab4bf163e02a89c1cdde18cd3dd3811075bd7a4cd33bab5cb824c3dac8d16afa74e9e267a1120b6c18bbf3d586f37d740e06a1af1b15</hash>
-        <hash alg="SHA-384">d2608dd33e2dd3e50a663d942660db80bb62c39afa3fe4155de6bad235b4ee637f97488cb21e9d22750bdd279a44634a</hash>
-        <hash alg="SHA3-384">a4d3ebc98bba16601879fe05ca40c4ca442e8d8177795d286c19ac14040b750f1a9adbffbea982e4636bdd8798918883</hash>
-        <hash alg="SHA3-256">80fc801f0be9b360024407409c8eae4d5fdfbfb520ec968500a9196446d77817</hash>
-        <hash alg="SHA3-512">1d7923e1bf2bf28f9e5f0990b36cff5c5e8b3409ae848ee903c970a0af22da3d4ae81dfb335d2ecfb3cdf3f09dec08bf2d2f1f8dd2702c766fa373975f551205</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
-      <publisher>JDOM</publisher>
-      <group>org.jdom</group>
-      <name>jdom2</name>
-      <version>2.0.6</version>
+file comparators, endian transformation classes, and much more.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
+        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
+        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
+        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
+        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
+        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
+        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
+        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar">
+      <publisher>The Jaxen Project</publisher>
+      <group>jaxen</group>
+      <name>jaxen</name>
+      <version>2.0.0</version>
+      <description>Jaxen is a universal XPath engine for Java.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">674d5bd86b7838fe431b0277856e97ae</hash>
+        <hash alg="SHA-1">bd6a33b0fda054a5678010df843cc999f288dc6c</hash>
+        <hash alg="SHA-256">9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5</hash>
+        <hash alg="SHA-512">dc4d2686c65bfb0c2936e8c0eb4d517152aa284ed28a7880165a4247564823f34e1e9f06785a9dbad7b4cbe90486d3e9aed4c32c75d485d29bd15b8d7642b6f9</hash>
+        <hash alg="SHA-384">fdbb322d3af5f63a3aa39419734de3cae39daa4b1b01b43b97c2074502e9f737dc4031a159438a9bf75d7dadfabd56ae</hash>
+        <hash alg="SHA3-384">ecc8beb677e957adba96ed6cffbf343388713ccac411193c20bf5b919e0db9e1dabe1a7725130cc75eeb9640844b6c19</hash>
+        <hash alg="SHA3-256">572fdde162d406c7221fb5ae3d885f6c0f5d6c3d56140a2a31152e487439c58b</hash>
+        <hash alg="SHA3-512">1ed5f4959ffb6fe24748e582dd1d0efddd5ac79aec3db09c1faf7ed246e9e2674ea40103d24ce954b02d660379cec4a2c1042dac3b81f6c7e63152e99be18b5e</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>BSD License 2.0</name>
+          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/jaxen/jaxen@2.0.0?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.cafeconleche.org/jaxen/jaxen</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jaxen-xpath/jaxen/issues</url></reference><reference type="mailing-list"><url>https://markmail.org/search/?q=list%3Aorg.codehaus.jaxen.user</url></reference><reference type="vcs"><url>https://github.com/jaxen-xpath/jaxen/jaxen</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.logging.log4j</group>
+      <name>log4j-core</name>
+      <version>2.23.1</version>
+      <description>The Apache Log4j Implementation</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">34fad2df975cf874a2fdf4b797122f16</hash>
+        <hash alg="SHA-1">905802940e2c78042d75b837c136ac477d2b4e4d</hash>
+        <hash alg="SHA-256">7079368005fc34f56248f57f8a8a53361c3a53e9007d556dbc66fc669df081b5</hash>
+        <hash alg="SHA-512">0862144475f4a5ed67c8ab4bf163e02a89c1cdde18cd3dd3811075bd7a4cd33bab5cb824c3dac8d16afa74e9e267a1120b6c18bbf3d586f37d740e06a1af1b15</hash>
+        <hash alg="SHA-384">d2608dd33e2dd3e50a663d942660db80bb62c39afa3fe4155de6bad235b4ee637f97488cb21e9d22750bdd279a44634a</hash>
+        <hash alg="SHA3-384">a4d3ebc98bba16601879fe05ca40c4ca442e8d8177795d286c19ac14040b750f1a9adbffbea982e4636bdd8798918883</hash>
+        <hash alg="SHA3-256">80fc801f0be9b360024407409c8eae4d5fdfbfb520ec968500a9196446d77817</hash>
+        <hash alg="SHA3-512">1d7923e1bf2bf28f9e5f0990b36cff5c5e8b3409ae848ee903c970a0af22da3d4ae81dfb335d2ecfb3cdf3f09dec08bf2d2f1f8dd2702c766fa373975f551205</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
+      <publisher>JDOM</publisher>
+      <group>org.jdom</group>
+      <name>jdom2</name>
+      <version>2.0.6</version>
       <description>A complete, Java-based solution for accessing, manipulating, 
-		and outputting XML data</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
-        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
-        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
-        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
-        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
-        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
-        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
-        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <name>Similar to Apache License but with the acknowledgment clause removed</name>
-          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.logging.log4j</group>
-      <name>log4j-api</name>
-      <version>2.23.1</version>
-      <description>The Apache Log4j API</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">bee2e2dcbeeb983bdb6b71c9c3476b6a</hash>
-        <hash alg="SHA-1">9c15c29c526d9c6783049c0a77722693c66706e1</hash>
-        <hash alg="SHA-256">92ec1fd36ab3bc09de6198d2d7c0914685c0f7127ea931acc32fd2ecdd82ea89</hash>
-        <hash alg="SHA-512">2a296246b0059ff5fe5c26e2ba3f48aa99e38d7658d613fbd02f32c6d4262f93a67525e6cc4d767fa5c2ab0e39e70bb3c0d3966d38ea4f01608588c084af3162</hash>
-        <hash alg="SHA-384">3937cb646009763a94b199a0d6c0065441b9914e2b25e3d58db523874ea760276b445ff300015948d3a813217e0ee404</hash>
-        <hash alg="SHA3-384">16ea3301ca37fbede2927399209b403066621789c4f1bee531b5153f27b652458900697fb828170d541a5f3b82e77fb7</hash>
-        <hash alg="SHA3-256">0a3dfffc0f362b0a86ad0cd8b36da313c7500a8bdecb0ad7e628c2637d933548</hash>
-        <hash alg="SHA3-512">2e230994b8cb7442a2073d60f89c27703ffc78b613dec7891bbfa42e91c95ed684b387ed65df3ee48559ccc06e6877462748f7e2ef985082c8db0741feb576a8</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.logging.log4j</group>
-      <name>log4j-1.2-api</name>
-      <version>2.23.1</version>
-      <description>The Apache Log4j 1.x Compatibility API</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">1f411f575f9a78d132bdc595a581bff9</hash>
-        <hash alg="SHA-1">f733b3c818352b0735cb59ca7987e2ce7848ee15</hash>
-        <hash alg="SHA-256">4d0433042361e962656250e1568f0008c9fac2e48c74f53ca51563a14363b927</hash>
-        <hash alg="SHA-512">609c87f770456b895646820d4ec5345b8d60c696a75228cb60b04d3875e6f3df6fba92f508e44a64f8d490fb1cae8fae28ba799e04a2e8ec6306ab52914d063d</hash>
-        <hash alg="SHA-384">dc380d513bdcb460338627f875d97622d700d24967f6548f8bcb4fc52d59c5819bb84237fcce37bc377d426407f8df8b</hash>
-        <hash alg="SHA3-384">fc935952e6741eee24ba2a511db25527d017cdfde58102b16731579fd711a21f45035d8c5873849c7ca12037b324f4bd</hash>
-        <hash alg="SHA3-256">8bd798f25b6bcdeec046e5a698c09c7ac409d91f9cf3a22911e1a05d678bb870</hash>
-        <hash alg="SHA3-512">ad295be02ebed11401b39deccc23951925cfa49d8dd0e6ff6c20490f9a7290002326a0bdee6b42ae10f79e9667c10aeddb0225faaa5091c7f16f3de7a1273b06</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
-      <publisher>The Apache Software Foundation</publisher>
-      <group>org.apache.logging.log4j</group>
-      <name>log4j-slf4j-impl</name>
-      <version>2.23.1</version>
-      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">c5a27e08e18600d379d0ca72d71838b8</hash>
-        <hash alg="SHA-1">9ef67909a1b4eae999af4c7a211ab2379e4b86c2</hash>
-        <hash alg="SHA-256">210742c8fb85b0dcc26a9d74a32fbc828e0429087dee3d2920d4a76b1eb96d91</hash>
-        <hash alg="SHA-512">deb506f6c13ce8aa11fc9759eebdd80b4eadf77b96f14da13988c9051e702e83597737597ea8999d85f7617e88b60ac753dc6a1a6f73b27c450133e64dbbc859</hash>
-        <hash alg="SHA-384">0449be649f0e05da8f902e6f97ce78f15721e6de873231f3492ab4248f2c81ce9be5bcd9a5f740bb32099253a8114ce3</hash>
-        <hash alg="SHA3-384">b2dc813f97560f222938baa9aefeacfd6ce5d42bd90636d614fd6856835f14149dc562e26ce5cd9ab3b66be200880b55</hash>
-        <hash alg="SHA3-256">846840fa738cecbbaa879bfc105225a75f0399fe4694ac1c1327a9ead100f778</hash>
-        <hash alg="SHA3-512">077f8d31a23e621aadf123e4df73436831c570b6f0555c67a6b1afc18e596961bbac9746e413ebdb0232b8ebd22fc9096c5f90e0664df0b62dacc8f63a564350</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar</purl>
-      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
-      <publisher>QOS.ch</publisher>
-      <group>org.slf4j</group>
-      <name>slf4j-api</name>
-      <version>1.7.36</version>
-      <description>The slf4j API</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
-        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
-        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
-        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
-        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
-        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
-        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
-        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>MIT</id>
-          <url>https://opensource.org/licenses/MIT</url>
-        </license>
-      </licenses>
-      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
-    </component>
-    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
-      <publisher>Terracotta, Inc.</publisher>
-      <group>net.sf.ehcache</group>
-      <name>ehcache</name>
-      <version>2.10.9.2</version>
+		and outputting XML data</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
+        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
+        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
+        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
+        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
+        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
+        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
+        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <name>Similar to Apache License but with the acknowledgment clause removed</name>
+          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.logging.log4j</group>
+      <name>log4j-api</name>
+      <version>2.23.1</version>
+      <description>The Apache Log4j API</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">bee2e2dcbeeb983bdb6b71c9c3476b6a</hash>
+        <hash alg="SHA-1">9c15c29c526d9c6783049c0a77722693c66706e1</hash>
+        <hash alg="SHA-256">92ec1fd36ab3bc09de6198d2d7c0914685c0f7127ea931acc32fd2ecdd82ea89</hash>
+        <hash alg="SHA-512">2a296246b0059ff5fe5c26e2ba3f48aa99e38d7658d613fbd02f32c6d4262f93a67525e6cc4d767fa5c2ab0e39e70bb3c0d3966d38ea4f01608588c084af3162</hash>
+        <hash alg="SHA-384">3937cb646009763a94b199a0d6c0065441b9914e2b25e3d58db523874ea760276b445ff300015948d3a813217e0ee404</hash>
+        <hash alg="SHA3-384">16ea3301ca37fbede2927399209b403066621789c4f1bee531b5153f27b652458900697fb828170d541a5f3b82e77fb7</hash>
+        <hash alg="SHA3-256">0a3dfffc0f362b0a86ad0cd8b36da313c7500a8bdecb0ad7e628c2637d933548</hash>
+        <hash alg="SHA3-512">2e230994b8cb7442a2073d60f89c27703ffc78b613dec7891bbfa42e91c95ed684b387ed65df3ee48559ccc06e6877462748f7e2ef985082c8db0741feb576a8</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.logging.log4j</group>
+      <name>log4j-1.2-api</name>
+      <version>2.23.1</version>
+      <description>The Apache Log4j 1.x Compatibility API</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">1f411f575f9a78d132bdc595a581bff9</hash>
+        <hash alg="SHA-1">f733b3c818352b0735cb59ca7987e2ce7848ee15</hash>
+        <hash alg="SHA-256">4d0433042361e962656250e1568f0008c9fac2e48c74f53ca51563a14363b927</hash>
+        <hash alg="SHA-512">609c87f770456b895646820d4ec5345b8d60c696a75228cb60b04d3875e6f3df6fba92f508e44a64f8d490fb1cae8fae28ba799e04a2e8ec6306ab52914d063d</hash>
+        <hash alg="SHA-384">dc380d513bdcb460338627f875d97622d700d24967f6548f8bcb4fc52d59c5819bb84237fcce37bc377d426407f8df8b</hash>
+        <hash alg="SHA3-384">fc935952e6741eee24ba2a511db25527d017cdfde58102b16731579fd711a21f45035d8c5873849c7ca12037b324f4bd</hash>
+        <hash alg="SHA3-256">8bd798f25b6bcdeec046e5a698c09c7ac409d91f9cf3a22911e1a05d678bb870</hash>
+        <hash alg="SHA3-512">ad295be02ebed11401b39deccc23951925cfa49d8dd0e6ff6c20490f9a7290002326a0bdee6b42ae10f79e9667c10aeddb0225faaa5091c7f16f3de7a1273b06</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
+      <publisher>The Apache Software Foundation</publisher>
+      <group>org.apache.logging.log4j</group>
+      <name>log4j-slf4j-impl</name>
+      <version>2.23.1</version>
+      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">c5a27e08e18600d379d0ca72d71838b8</hash>
+        <hash alg="SHA-1">9ef67909a1b4eae999af4c7a211ab2379e4b86c2</hash>
+        <hash alg="SHA-256">210742c8fb85b0dcc26a9d74a32fbc828e0429087dee3d2920d4a76b1eb96d91</hash>
+        <hash alg="SHA-512">deb506f6c13ce8aa11fc9759eebdd80b4eadf77b96f14da13988c9051e702e83597737597ea8999d85f7617e88b60ac753dc6a1a6f73b27c450133e64dbbc859</hash>
+        <hash alg="SHA-384">0449be649f0e05da8f902e6f97ce78f15721e6de873231f3492ab4248f2c81ce9be5bcd9a5f740bb32099253a8114ce3</hash>
+        <hash alg="SHA3-384">b2dc813f97560f222938baa9aefeacfd6ce5d42bd90636d614fd6856835f14149dc562e26ce5cd9ab3b66be200880b55</hash>
+        <hash alg="SHA3-256">846840fa738cecbbaa879bfc105225a75f0399fe4694ac1c1327a9ead100f778</hash>
+        <hash alg="SHA3-512">077f8d31a23e621aadf123e4df73436831c570b6f0555c67a6b1afc18e596961bbac9746e413ebdb0232b8ebd22fc9096c5f90e0664df0b62dacc8f63a564350</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar</purl>
+      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
+      <publisher>QOS.ch</publisher>
+      <group>org.slf4j</group>
+      <name>slf4j-api</name>
+      <version>1.7.36</version>
+      <description>The slf4j API</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
+        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
+        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
+        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
+        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
+        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
+        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
+        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>MIT</id>
+          <url>https://opensource.org/licenses/MIT</url>
+        </license>
+      </licenses>
+      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
+    </component>
+    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
+      <publisher>Terracotta, Inc.</publisher>
+      <group>net.sf.ehcache</group>
+      <name>ehcache</name>
+      <version>2.10.9.2</version>
       <description>Ehcache is an open source, standards-based cache used to boost performance,
   offload the database and simplify scalability. Ehcache is robust, proven and full-featured and
-  this has made it the most widely-used Java-based cache.</description>
-      <scope>required</scope>
-      <hashes>
-        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
-        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
-        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
-        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
-        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
-        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
-        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
-        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
-      </hashes>
-      <licenses>
-        <license>
-          <id>Apache-2.0</id>
-        </license>
-      </licenses>
-      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
-      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="distribution-intake"><url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.terracotta.org/jira/browse/EHC</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/ehcache-users</url></reference><reference type="vcs"><url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url></reference></externalReferences>
-    </component>
-  </components>
-  <dependencies>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
-      <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar"/>
-      <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"/>
-      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
-      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
-      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
-      <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
-    <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
-      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
-    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
-    <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
-    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
-    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
-      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
-      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
-    </dependency>
-    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
-    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
-      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
-    </dependency>
-  </dependencies>
-</bom>
+  this has made it the most widely-used Java-based cache.</description>
+      <scope>required</scope>
+      <hashes>
+        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
+        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
+        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
+        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
+        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
+        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
+        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
+        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
+      </hashes>
+      <licenses>
+        <license>
+          <id>Apache-2.0</id>
+        </license>
+      </licenses>
+      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
+      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="distribution-intake"><url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.terracotta.org/jira/browse/EHC</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/ehcache-users</url></reference><reference type="vcs"><url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url></reference></externalReferences>
+    </component>
+  </components>
+  <dependencies>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
+      <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar"/>
+      <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"/>
+      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
+      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
+      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
+      <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
+    <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
+      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
+    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
+    <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
+    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
+    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
+      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
+      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
+    </dependency>
+    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
+    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
+      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
+    </dependency>
+  </dependencies>
+</bom>
