<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:3c95fdf5-774e-3ed2-bda5-2861f0ce72af" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.0</version>
        <hashes>
          <hash alg="MD5">76ffec6a7ddd46b2b24517411874eb99</hash>
          <hash alg="SHA-1">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>
          <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
          <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
          <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-tika-searchprovider@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-tika-searchprovider</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki Tika Search provider</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-tika-searchprovider@2.12.2?type=jar</purl>
      <externalReferences><reference type="vulnerability-assertion"><url>https://jspwiki.apache.org/cyclonedx/vdr.xml</url></reference><reference type="website"><url>https://jspwiki.apache.org/jspwiki-tika-searchprovider/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-tika-searchprovider</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-main</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29c77cda6aadc59e02a46408a7453383</hash>
        <hash alg="SHA-1">95d7cab69444b7d77ee4cdfc5709639a57339e1b</hash>
        <hash alg="SHA-256">99084d55342de11474eecc63c3cf29c6dad41f2e5d1d0e231a93c1e62f6e24ec</hash>
        <hash alg="SHA-512">c159ed34aa3d3dfa238478ff61a6928ef8c0f31e0e58a6a2a710a163fd5fc32b7fba466278dbf50d3df7ec03c97599475e60947418b004d3bbe9d68fdb1de0e0</hash>
        <hash alg="SHA-384">c0c6b7b58576226dea7d7f1a172abe39310dc7f45054c8b5e550722c99abf206c51e4cffb25b2111611dec341f8b5c4c</hash>
        <hash alg="SHA3-384">6d59a7db788abc0423005db7792b4e909c4f57583bf29eebad1f264e6ba297895c3aaa2d6750c3f5ecb0e3ca277cffb3</hash>
        <hash alg="SHA3-256">3a4b8a05b6748570e68c53fbb8acda0aa09571ce4760e7fc18a22930e5c87407</hash>
        <hash alg="SHA3-512">80ca67e7dd348a95275c40fd5f87569fe75541479a86863c04caba3a1faa76be7bbf679b8f6c34c5c2ea00d780335eccdeee027a161999a16e1f2497479a73cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-main@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-main/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-main</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-util</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27f299f04e9747eae7e611c31f3fb9fa</hash>
        <hash alg="SHA-1">5ba9ef3ee769d2ea0e65a027406223ac2c97cf2f</hash>
        <hash alg="SHA-256">b8c0d6af0dcc162e86f53fe56b800ef56e73840ec3db810fbe53f829233b908e</hash>
        <hash alg="SHA-512">c7e555638e9f56f979b636d5065102d049711644250ba28337e08f50e7b23cbdbbf69bc84e7237fce1d4929659afa984ed171c289bc7ef24e189d887a94118cc</hash>
        <hash alg="SHA-384">b658263482c7f6bc60725d7d374fa2dd1e4baf6fea403757d79ae1d657bc0d8d36301eaf106d862422819a780ba0e0e8</hash>
        <hash alg="SHA3-384">f602bc7a1eba718de59e82a43b299e1b6bb156ee86c66e8a729904f04fe0d374c374b0095e2a2a33150f3269dbfa8c64</hash>
        <hash alg="SHA3-256">f2152f46d319d29d6901f6446b9e55df766704ae8bcd10427955c2f49f057ba0</hash>
        <hash alg="SHA3-512">7e56c37e79dacfc315026dd34c8fadaf90d8ce516febf67a939e4299f8ae0bf2d36acad4decf26bc4a2912d33a96ce3c053023df13100cf68ebd63bae6fd963e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-util/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>logging-mailhandler</name>
      <version>1.6.2</version>
      <description>JavaMail API logging handler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">31be5a050f3efedfd9d3b1320e665cc2</hash>
        <hash alg="SHA-1">3cd9498fbdb160b5f1a364a5548f7844879855ee</hash>
        <hash alg="SHA-256">990e91388821481eb7fb6df2a394184b8b65d673c39add37a100c3a753450f52</hash>
        <hash alg="SHA-512">ced2ebb9175ad9aceee1aa1f5ca50f052896a1cc77a9e808e12af6b9db4b68cb2c2171b71d78141999c3adf3b4301812566ea16a3462e0c2d608b938470ea53e</hash>
        <hash alg="SHA-384">37dc0f3ade04f4d615e79ff137c4d4d027853c6e1b825ea1b85b35e2e3339c3828c9cb03381f1876f7470133fb8a76c3</hash>
        <hash alg="SHA3-384">097d3b4623058c0318ee0c42585d6f1e83a731c68c0959fb948037ae9895f0d0e961beece88999ca6b3cb8198db26f8a</hash>
        <hash alg="SHA3-256">7d49d9bb11243bfce9c3f5042646fb9dba480e8e56dd19fc332094a2ece0e20d</hash>
        <hash alg="SHA3-512">ac16e7987b71301fd64146f499e78fc8f340fb3896c18d1de6946c0a7bdb7416edfa8410bd2361365f77898b974d3f08f14dc7d3f4328e309e7531518f611e47</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/parent-distrib/logging-mailhandler</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/parent-distrib/logging-mailhandler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>mailapi</name>
      <version>1.6.2</version>
      <description>JavaMail API (no providers)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b89a9ff8ac681f01dfd06798a008f0af</hash>
        <hash alg="SHA-1">208b6439dfbe6713c384ebf54ecd62cd4423cc50</hash>
        <hash alg="SHA-256">d37c0f88efa5973ccb4100f4cc49aee3510cd01ab25012d1f085b1b798ae2ebb</hash>
        <hash alg="SHA-512">72f2e7f843ae92986d384166835588e5b4299b271e4b26158248418843e4a9c885ab50fc4284e2504807c59b0af1d59a6b27b7543784ca746377ae815edd1143</hash>
        <hash alg="SHA-384">8478e628b400d624664f044219a74cb12962968fc96333ad58884c975fe39305b045f89c9a7518eda19d2031000e4c26</hash>
        <hash alg="SHA3-384">6162cc9a369e47ab98e72c660e90c1b97c09b01dc438b3dd889a401c4db366f4b1ddac7d1a9641aad9f1f8dcd5f22ccf</hash>
        <hash alg="SHA3-256">c10a54013a9177e258830240eb9c58ab9971db10b602a0be6eaaa0e0a6354333</hash>
        <hash alg="SHA3-512">4994293cb0dfec961a807eae29fc206d14873942ca0f2e5a379cd95a0ee4271dee20b8162974a98fe091a124d9387f4fe1251defa4b568b755a30ecf399e0697</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/mailapi</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/mailapi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>javax.mail</name>
      <version>1.6.2</version>
      <description>JavaMail API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b81d022797740d72d21620781841374</hash>
        <hash alg="SHA-1">935151eb71beff17a2ffac15dd80184a99a0514f</hash>
        <hash alg="SHA-256">45b515e7104944c09e45b9c7bb1ce5dff640486374852dd2b2e80cc3752dfa11</hash>
        <hash alg="SHA-512">d76243093d93c556ae399ce9b65ea35bc5a7e12703110108cf8eaa314d8f9b094034dd530438189775f61f0994727cac6f68efb8eab2f13349922b08eb00d4ec</hash>
        <hash alg="SHA-384">44300db745c6a065b5ca907e04d06bc42e42d4bf59470b24d2c40f889cf8fc79f0793997321874b2c25bc269900f9c51</hash>
        <hash alg="SHA3-384">4884616293856fe9d2ed2c6bb838f32d645ccab65a05b949351e6d93d6ed9ea408c8666ef17e19bd033c25545bafb490</hash>
        <hash alg="SHA3-256">905d9b5869f8ee5ad4b1027293beb5af5051aa2b929f52500611beedd2d5c992</hash>
        <hash alg="SHA3-512">bec15cc6423179fb27e01c149e9c761a5cc98844e47f2182101d69f84736a85390da487eef7cc2dca94992c14d6ba7fe3d5833d2ad554731bec439ef11d547d8</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://javaee.github.io/javamail/javax.mail</url></reference><reference type="distribution-intake"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javamail/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/javamail/javax.mail</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
        <hash alg="SHA3-384">de0777d2d1d7aad105defb12aed17ef38abfe89db2449c5243fa3c69304ea24dd8df0881330351d0733313e8f7252814</hash>
        <hash alg="SHA3-256">5fb94d2742cc3d44abad42c5d61b9c7464a2ef33bc58b4b5b121d49799123460</hash>
        <hash alg="SHA3-512">c5e37fe3d9c420a9035f1160eb1d396e94f01851c01c6e2f19f19a221bfc484e63f9660c7377f58aa65246b95a9eb799ac4e6798c0b20f658edf00a4435e1efa</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-event</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cd6eaa8e78344170969056ee1cdaaa27</hash>
        <hash alg="SHA-1">97c73ad29d60ab1075160ab088a782fc20811638</hash>
        <hash alg="SHA-256">fd1317d628253627d623d4c2456d7f122084a3baf8fbe93317c3d370b3382351</hash>
        <hash alg="SHA-512">394390a537dda36b5aff3c0f122b03253e9dee4eeebe4201e9d3c951dfe1dbd3c3e235d0d7fc4191bad1f56667599e9811d9ee1068cefb853f0bb8dcd0bfcfa3</hash>
        <hash alg="SHA-384">d61fa5fb1150da183336e73eb09a25e68dd7cb6a2dc9c48b71613cfc7eb77335500336216c459f3f20ac566e79c62d1c</hash>
        <hash alg="SHA3-384">c28572f7fe94f26a54df5570b4bdb535ec1cde191d975e26dbac8871e2e730ab7ab1c3c853c8ef50ce0a5b8dc198213b</hash>
        <hash alg="SHA3-256">704f3b1f970e7f338666a70ce707ee78a7dcb08530925ef650ace6285b9ee30d</hash>
        <hash alg="SHA3-512">c91ebaa9ef7bd3f4a4d285bb6c4bbecd17fc1c403f1a115dabfabcc7d247ffc6cd88ab194ea99ba884c9c2f72341972dc3aee060f70805f737c0ec9b69a59fa1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-event/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-event</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-api</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c0888f57de9044029c481c2e9e8d0503</hash>
        <hash alg="SHA-1">de8e631b77f8544d2c153fb6ca39b20d565b6808</hash>
        <hash alg="SHA-256">233de2fa97aa794fc5555b417679b554ffa46092e79a5b50f093b373a2b03bdf</hash>
        <hash alg="SHA-512">8885dc4126ede4d275489050caf371457a212174ca8a1aa23d4634bb79a30674f7d3e4e53d61bdce7dbf5feb996421a9761a09e04a66a5bed64d22e5b2c33929</hash>
        <hash alg="SHA-384">4f3b64730f56df00d5bb0a167bde542822b42af5d99ac9ed9bd7f0576d9019744fbc096f254036371d30a126aeb40052</hash>
        <hash alg="SHA3-384">184934cb4310f55e2dbed60dd06f57b7712e4d31babb9628400c0d6086ed57030ed16d81183a36b6810b19815273dc46</hash>
        <hash alg="SHA3-256">4831cd038d7d2382e6562c48c0246eaeef3e0bd1b01a85eeeec494c125e3ae09</hash>
        <hash alg="SHA3-512">e87670bec3de3f1a2a1eff6a288a57872f2a3df9e2bf8f686e4abdab69330bb92f2011e0568f07848b2e6b688f9a6436d99c7ff9d7abb03263b16b315e58440e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-api/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.23.1</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1f411f575f9a78d132bdc595a581bff9</hash>
        <hash alg="SHA-1">f733b3c818352b0735cb59ca7987e2ce7848ee15</hash>
        <hash alg="SHA-256">4d0433042361e962656250e1568f0008c9fac2e48c74f53ca51563a14363b927</hash>
        <hash alg="SHA-512">609c87f770456b895646820d4ec5345b8d60c696a75228cb60b04d3875e6f3df6fba92f508e44a64f8d490fb1cae8fae28ba799e04a2e8ec6306ab52914d063d</hash>
        <hash alg="SHA-384">dc380d513bdcb460338627f875d97622d700d24967f6548f8bcb4fc52d59c5819bb84237fcce37bc377d426407f8df8b</hash>
        <hash alg="SHA3-384">fc935952e6741eee24ba2a511db25527d017cdfde58102b16731579fd711a21f45035d8c5873849c7ca12037b324f4bd</hash>
        <hash alg="SHA3-256">8bd798f25b6bcdeec046e5a698c09c7ac409d91f9cf3a22911e1a05d678bb870</hash>
        <hash alg="SHA3-512">ad295be02ebed11401b39deccc23951925cfa49d8dd0e6ff6c20490f9a7290002326a0bdee6b42ae10f79e9667c10aeddb0225faaa5091c7f16f3de7a1273b06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-cache</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b5102db0a789e9cf2d2ba7ec4211c7cc</hash>
        <hash alg="SHA-1">731222ab6f2e480d36b9b05446f957ca9998c2e7</hash>
        <hash alg="SHA-256">9c02d9f99559817d468094fc301cca12773c031c1d6ce13b900c4c3b4da3698c</hash>
        <hash alg="SHA-512">084950a45a05a7327cd535642c7e7cc9ea1e569b4163479a914114f6ba8507c89d055812ba76b2539039b14aa56a358851c3a064c53bfd60d50a64037ce329d3</hash>
        <hash alg="SHA-384">98bfb97fa230e3d9b1f5220c214e2f21b4f70889b34ec0438bd96ac277815973733f233bf9dc91c717ac2145fc51fc48</hash>
        <hash alg="SHA3-384">8e3f3e94a40dbd3653fc40d2a134a44582aeea354af6d2cc580e9067164fc86770fe43324170b60da0dabeeb38d8d880</hash>
        <hash alg="SHA3-256">220b2dfbeff71b3d1cd6e5f764b53208c618a744ae72044f2c3c59723894f28a</hash>
        <hash alg="SHA3-512">e58143138e7faf207a4b814b83511bbd7296dcca01a8eac0c890b0c100a2971e3e0c4415f954dd304f2eb72677ba83a6abd0433dc1e4153893ea005533284ea9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-cache/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-cache</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.23.1</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c5a27e08e18600d379d0ca72d71838b8</hash>
        <hash alg="SHA-1">9ef67909a1b4eae999af4c7a211ab2379e4b86c2</hash>
        <hash alg="SHA-256">210742c8fb85b0dcc26a9d74a32fbc828e0429087dee3d2920d4a76b1eb96d91</hash>
        <hash alg="SHA-512">deb506f6c13ce8aa11fc9759eebdd80b4eadf77b96f14da13988c9051e702e83597737597ea8999d85f7617e88b60ac753dc6a1a6f73b27c450133e64dbbc859</hash>
        <hash alg="SHA-384">0449be649f0e05da8f902e6f97ce78f15721e6de873231f3492ab4248f2c81ce9be5bcd9a5f740bb32099253a8114ce3</hash>
        <hash alg="SHA3-384">b2dc813f97560f222938baa9aefeacfd6ce5d42bd90636d614fd6856835f14149dc562e26ce5cd9ab3b66be200880b55</hash>
        <hash alg="SHA3-256">846840fa738cecbbaa879bfc105225a75f0399fe4694ac1c1327a9ead100f778</hash>
        <hash alg="SHA3-512">077f8d31a23e621aadf123e4df73436831c570b6f0555c67a6b1afc18e596961bbac9746e413ebdb0232b8ebd22fc9096c5f90e0664df0b62dacc8f63a564350</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
      <publisher>Terracotta, Inc.</publisher>
      <group>net.sf.ehcache</group>
      <name>ehcache</name>
      <version>2.10.9.2</version>
      <description>Ehcache is an open source, standards-based cache used to boost performance,
  offload the database and simplify scalability. Ehcache is robust, proven and full-featured and
  this has made it the most widely-used Java-based cache.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">863e690aaec2467d27d391b154d3151d</hash>
        <hash alg="SHA-1">642832b8def8968295e9eedb41cd8fd625786561</hash>
        <hash alg="SHA-256">43cdfeecb986364c55a840eff0a9242e5b3e6f69d89bd0d1db2d89ad2db33509</hash>
        <hash alg="SHA-512">8d2fe9a755241cd576ad94e2c1b873dc813163d5bb993e3f677d01926b3d725596e78ac4d3108136ff5f845be276068bda04abebd447bf381e0b16fc10c9890f</hash>
        <hash alg="SHA-384">19bf43b2619ba9fcdfbe914d00182c8498355e86e4fbfa5a29ead4c7f3dd3282a3e2c5c8afab9eafb8fa60121e223361</hash>
        <hash alg="SHA3-384">efd367cfec2445686c3bd24e37701abff4276dbb845439bbc74044f063158e998151b9d40c68682b9504dc90c52344c9</hash>
        <hash alg="SHA3-256">6e72d773a57762a50d2aa44e01903c75d72f856d3b910b25be4d34fac414b4ee</hash>
        <hash alg="SHA3-512">1204e5483e3538ecad7ba36d5ee38e2338e9d77043d0ce3f2bbc39546fe87fd30e876bfd85dfddfb520eb9afe591d34b90549bf9722b4896d22189c8d1ce7593</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="distribution-intake"><url>http://nexus.terracotta.eur.ad.sag/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://jira.terracotta.org/jira/browse/EHC</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/ehcache-users</url></reference><reference type="vcs"><url>http://svn.terracotta.org/svn/ehcache/tags/ehcache-parent-2.25/ehcache-root/ehcache</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-http@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-http</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dcf333fe3525757e88450305b2cd7498</hash>
        <hash alg="SHA-1">8ba4d2169eca5aa5e76f154bd23717a03d6fdfe8</hash>
        <hash alg="SHA-256">8dcf93c8432441a323da49d131cbf1df743f9ed866daa702ce58f14e6eafac69</hash>
        <hash alg="SHA-512">4993d9689c00c4bb09695932c362f8a9c080ddfc01fa46cf23e9a459aa34f1751b134f225944cd7d7a6ae783df2d7cf87729b7151e5ed977100f580ffce7740e</hash>
        <hash alg="SHA-384">bed3ffd6a871f63decd9b10b0be302b5bafafab5ef68dd493e2f32f9b64817e19d5215b0c6b8a836cab8627401e3b900</hash>
        <hash alg="SHA3-384">f5420c712fbd9a74c3eeb6540e4211b74382ba463e172a437063500b85121111e3bbe49db9ab1f8b631204443dd5c871</hash>
        <hash alg="SHA3-256">68dab695608ce0476f92cd6e55eda9e8dc4b800314c59bfa8f5c5a4a8690432b</hash>
        <hash alg="SHA3-512">ae8ce5f62944160eca2e17fe636d2c52ea734e6d61f3841b15c286841c67f1b253799f58013402649644cb4eb8e081f1bc56417c39132556367c1629494da4de</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-http@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-http/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.jspwiki/jspwiki-wysiwyg@2.12.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.jspwiki</group>
      <name>jspwiki-wysiwyg</name>
      <version>2.12.2</version>
      <description>Apache JSPWiki is a leading open source WikiWiki engine, feature-rich
    and built around standard JEE components (Java, servlets, JSP).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57b31de0c942b3d6a82bfb4ee4a43819</hash>
        <hash alg="SHA-1">f9c5138ae3e8808f6ee4ad6dedd57fb83136bdcc</hash>
        <hash alg="SHA-256">d8277c8ba1da5fbe33a0b420b32b9247f6456756802eb4679358e85d311f0201</hash>
        <hash alg="SHA-512">891c5878ca47b63da15db923bea3f6d473fc24969c5989cbd8ad2de6e390fab06f6ca7cd16f171adb3a5590dcfaf5ea4e0b335da925b07589249604240243e5c</hash>
        <hash alg="SHA-384">a017cbfb233a90f0a0bd053c868da344c9f7c0d3f562bc6e4a518c2ac2bf0b9ec5915c829e698372c8582d0d86a3be50</hash>
        <hash alg="SHA3-384">3a6ed87904376e0f38d027c3af39df1ea3f5ed028c4c74e308debaf203a168dd2bcb8e81c44e75f75819d9d7a9f1c60b</hash>
        <hash alg="SHA3-256">fda9c431f97cf993819fa1606b8b05e67549c8a69550f9bb1bc3bc58a80bb824</hash>
        <hash alg="SHA3-512">aac22bb4454a065b5b76f8dead5925385ff65515613fdd707f81f0a4255d77f9d01a7bc752a6ca6abe80e1cd16cea7bf1df5236a8e21f037a813d179ffec4cd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.jspwiki/jspwiki-wysiwyg@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jspwiki.apache.org/jspwiki-wysiwyg/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/JSPWiki</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JSPWIKI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jspwiki-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/jspwiki/jspwiki-wysiwyg</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.11.0</version>
      <description>Gson JSON library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c69b9199d3a4e6c34dc03619ff7feee</hash>
        <hash alg="SHA-1">527175ca6d81050b53bdd4c457a6d6e017626b0e</hash>
        <hash alg="SHA-256">57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b</hash>
        <hash alg="SHA-512">b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a</hash>
        <hash alg="SHA-384">8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf</hash>
        <hash alg="SHA3-384">e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280</hash>
        <hash alg="SHA3-256">aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094</hash>
        <hash alg="SHA3-512">31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/gson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/gson/issues</url></reference><reference type="vcs"><url>https://github.com/google/gson/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.27.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb183180666ce3d0a24ef7ba02d7193c</hash>
        <hash alg="SHA-1">91b2c29d8a6148b5e2e4930f070d4840e2e48e34</hash>
        <hash alg="SHA-256">24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5</hash>
        <hash alg="SHA-512">479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35</hash>
        <hash alg="SHA-384">b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7</hash>
        <hash alg="SHA3-384">94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630</hash>
        <hash alg="SHA3-256">faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84</hash>
        <hash alg="SHA3-512">18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-fileupload</group>
      <name>commons-fileupload</name>
      <version>1.5</version>
      <description>The Apache Commons FileUpload component provides a simple yet flexible means of adding support for multipart
    file upload functionality to servlets and web applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e57ac8a1a6412886a133a2fa08b89735</hash>
        <hash alg="SHA-1">ad4ad2ab2961b4e1891472bd1a33fabefb0385f3</hash>
        <hash alg="SHA-256">51f7b3dcb4e50c7662994da2f47231519ff99707a5c7fb7b05f4c4d3a1728c14</hash>
        <hash alg="SHA-512">ab91778b2601ea0b0006248f436ab57a88df3102b3545b45eec675fadaf3d240590d08559cb78139f01ae63087afdcb3dd23af060a8ed27446e9a25f7b308318</hash>
        <hash alg="SHA-384">0ea300576637bede06e531c02fc8278880f459fc5feea250cba34129f9c3bd893b548b6821e97e027342f94ab15c0bdc</hash>
        <hash alg="SHA3-384">29716862a2f030932b20b8d4ffc2d8fff3d48624cd1349cdf8cc54d6c8fba9b7dc8a76d60a56961d1afbc4e534b3e874</hash>
        <hash alg="SHA3-256">5f768eb8f979200ade2ea2da90d5f4240d339314394ae6f35bea35b42430cd27</hash>
        <hash alg="SHA3-512">779451e67a209039af7f08f61b88cfd96448b8232b3ca3e475fc7c2f103b1bd10eedccb348f45e53ddd7bea02a19ea669557b8eef060e11e1c3adf5e88647795</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-fileupload/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/FILEUPLOAD</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-fileupload.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
      <group>net.sourceforge</group>
      <name>akismet-java</name>
      <version>1.02</version>
      <description>Akismet Java is an API for interacting with Akismet.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc99cfdb9f3216460eaac499c823c55d</hash>
        <hash alg="SHA-1">7e7852477c268517a07f85595d84bdc8a0153a16</hash>
        <hash alg="SHA-256">fc7fe4cf36028f92bc8035ccb1b2bac8d102eb1a61ff93df19e99eeaa1eda6f5</hash>
        <hash alg="SHA-512">1ac636d154fcedb3d46e2dcc12709b915b5c35d38b8a2fc8a21d1b0e59502515642d73ace7a7bc7327eda07ec4184176919e5b797b7375a08993e4f2c2fc2f69</hash>
        <hash alg="SHA-384">261ac6dc1d501ddb837871b1f32a6a39d79157cc3a678e3152d3cdc05a94e0395e7fd0e6d927f5e47e079a51d2b986ce</hash>
        <hash alg="SHA3-384">c36d636889ca0e8194062f2b7346f1e3ea04dfd163ffc6b6798ed381dbe8887064112a036b8b7e563b95a40b5621e620</hash>
        <hash alg="SHA3-256">a43e27be30b6cb3410885af56bb0128c98bcdbc3a73002ed5cb59f5b8a2446f6</hash>
        <hash alg="SHA3-512">8216e582dd1430869b007982467b9fbcb930d4ccca16c059c446ef8868eadf314fe80dad675379d44ccda40438c5a4e53e5a1f01cc665fa7713c6dc8e64a6ee6</hash>
      </hashes>
      <licenses>
        <license>
          <name>Akismet License</name>
          <url>http://akismet-java.cvs.sourceforge.net/viewvc/akismet-java/akismet-java/LICENSE?view=markup</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge/akismet-java@1.02?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/akismet-java/</url></reference><reference type="vcs"><url>http://akismet-java.cvs.sourceforge.net/akismet-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.3</version>
      <description>The codec package contains simple encoder and decoders for
   various formats such as Base64 and Hexadecimal.  In addition to these
   widely used encoders and decoders, the codec package also maintains a
   collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8e149c1053741c03736a52df83974dcc</hash>
        <hash alg="SHA-1">fd32786786e2adb664d5ecc965da47629dca14ba</hash>
        <hash alg="SHA-256">1bafd2ece2e88db4cdf835a7f8f0de65fab5b1147977a5dcc59b7c1b8c6f5080</hash>
        <hash alg="SHA-512">acea0a510bb701c7bae3cb41b5c61a93e72b99c8441e5081269856df906fcc6de1977984f229eb78d0dc1601492a36d9992611c1ff5b8ed3f7b96294d67ecc29</hash>
        <hash alg="SHA-384">c3d189986c881351eb8ace4f92d8a3889c20d1310c95605696227d29c4932c19d9e47dbe017a5fa6351a0753ec7306f5</hash>
        <hash alg="SHA3-384">f998c54d6e563203b7a8fabc559cf04d377d9f1cc60ff53ba7ba9f2db4e60d6b65a49b481e637f29d71605df02055492</hash>
        <hash alg="SHA3-256">53139a29865d70b5b0d2843e77d2314cb3ab9f1ac386da80b2792acb2c98caa4</hash>
        <hash alg="SHA3-512">faecc8258d20a65cfcffecb5b3968a032c74b6306f5ae0fe65e714b38aa31302e154dd532a1c502a5e6204632aecfbe978f2254c43e0ce09dd25d516eb48298c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/codec/</url></reference><reference type="distribution-intake"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/codec/</url></reference><reference type="issue-tracker"><url>http://nagoya.apache.org/bugzilla/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;email1=&amp;emailtype1=substring&amp;emailassigned_to1=1&amp;email2=&amp;emailtype2=substring&amp;emailreporter2=1&amp;bugidtype=include&amp;bug_id=&amp;changedin=&amp;votes=&amp;chfieldfrom=&amp;chfieldto=Now&amp;chfieldvalue=&amp;product=Commons&amp;component=Codec&amp;short_desc=&amp;short_desc_type=allwordssubstr&amp;long_desc=&amp;long_desc_type=allwordssubstr&amp;bug_file_loc=&amp;bug_file_loc_type=allwordssubstr&amp;keywords=&amp;keywords_type=anywords&amp;field0-0-0=noop&amp;type0-0-0=noop&amp;value0-0-0=&amp;cmdtype=doit&amp;newqueryname=&amp;order=Reuse+same+sort+as+last+time</url></reference><reference type="mailing-list"><url>http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://cvs.apache.org/viewcvs/jakarta-commons/codec/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>commons-httpclient</group>
      <name>commons-httpclient</name>
      <version>3.1</version>
      <description>The HttpClient  component supports the client-side of RFC 1945 (HTTP/1.0)  and RFC 2616 (HTTP/1.1) , several related specifications (RFC 2109 (Cookies) , RFC 2617 (HTTP Authentication) , etc.), and provides a framework by which new request types (methods) or HTTP extensions can be created easily.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8ad8c9229ef2d59ab9f59f7050e846a5</hash>
        <hash alg="SHA-1">964cd74171f427720480efdec40a7c7f6e58426a</hash>
        <hash alg="SHA-256">dbd4953d013e10e7c1cc3701a3e6ccd8c950c892f08d804fabfac21705930443</hash>
        <hash alg="SHA-512">85e79d4fdb266861910ef95bcd6e82a7f091c9bfbc63dbe2112383ea4d53a5b7a378b54e7c472fbdfde923f30c72d9cad626f8fabb0b9c70d1dfb095add73359</hash>
        <hash alg="SHA-384">973e966839aaaddea4af4dd43c6dea59eeeca88b8e452af0a35efeb3c920592b110c5a366fc46f75c404d1c7fa4a7443</hash>
        <hash alg="SHA3-384">0c77f4cf3c1d38d7de2cf42a7ff98a0be313ed739d20b62354278bbb7ac12f5c8be656d38e297689ddb8c7ff707f9cc4</hash>
        <hash alg="SHA3-256">00c433b1cdaa88af6b91f41a5f1030c95beee1044de84880862f329d1af5821a</hash>
        <hash alg="SHA3-512">2fdd42541ff607906620cca573c4ce0ddaac10eb90ce6d755ba4c4e41a6166869748ff79937ebface698407a42aa47abf931ab4ecf996e672344d1a992b39025</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/httpcomponents/httpclient-3.x/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-httpcomponents-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/httpcomponents/oac.hc3x/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
      <group>net.sourceforge</group>
      <name>sandler</name>
      <version>0.5</version>
      <description>A java tookit for generating and processing Atom messages</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">358e2a8cce3d78864a456c11469a749f</hash>
        <hash alg="SHA-1">467223e1b773a433140f70b88ec07799f05332f1</hash>
        <hash alg="SHA-256">1810804e501b62b63dcf06f12984c06b716c9924847138413eb1a61c85e7d475</hash>
        <hash alg="SHA-512">b6d98069e14601d73e7f988c0dece34cf02faa5d87cdf4031db704b944f54b096759f4e248631efe30e43f78d51a4530a785d927b64886c939f66f7697989800</hash>
        <hash alg="SHA-384">7ea4ffb453b6eee76b602e837d9a5117182a0ffc9d0cdfaff4c59381809168bea86fbd76a6349064c3adc6ebfcb32111</hash>
        <hash alg="SHA3-384">bd6e8f07918993983aad74d88818eb8305d1594936029458223064c20d90ea4f01304fe8d69ca047ada9c3422c914103</hash>
        <hash alg="SHA3-256">772c18aeefd4ad553f00d1dbd82e3e661d421e4ec8b0e58b9dad70d1ff5aeee0</hash>
        <hash alg="SHA3-512">48c14288da10e38849a5fda7f688e79b72f5da44f658f4c34f955dca944f56b94d9e4dc9ad6cf25a3a9c80925746289aa8110834b3fc24541951909d03252105</hash>
      </hashes>
      <licenses>
        <license>
          <name>Sandler License</name>
          <url>http://sandler.cvs.sourceforge.net/viewvc/sandler/sandler/LICENSE?view=markup</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.sourceforge/sandler@0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sourceforge.net/projects/sandler</url></reference><reference type="vcs"><url>http://sandler.cvs.sourceforge.net/sandler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar">
      <group>xpp3</group>
      <name>xpp3</name>
      <version>1.1.3.4-RC3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b04068ac657ab49b7434c9760065a108</hash>
        <hash alg="SHA-1">f63aa962f306d04f9c9683b72bee53a9362954f8</hash>
        <hash alg="SHA-256">7e00f4d6838d95e7598638c4a9de38435ad1d22128b8d96318b25b3698c685cf</hash>
        <hash alg="SHA-512">53d0f8578c920aaac084b1f326dec735799ae2021a9a9cda8f69cef007b6329e4d1766b56e897dc7d47bc40b8fc5c6a311fa20e81898ff72e40b93d62a0d3341</hash>
        <hash alg="SHA-384">6f9ff2ddc211b9daed59f5957b3b1cba4155105915daf500eb0614a94a3d4dc67b4a39b4507dc8b9aa388cc581bbd794</hash>
        <hash alg="SHA3-384">dbdc4096f0d411d2b3c3bf86cd61586498e86914d9ea79aff1f0b3ff6da757c148cdd42845ec7808fd6927e0c9d080eb</hash>
        <hash alg="SHA3-256">54f5ccc82adf0c453ac1b85d0b098787e361bb730903d24f32deed1c8b934a10</hash>
        <hash alg="SHA3-512">2b5090a2d0e0b72e730b82f9cc68bdd3420529d7ec5cf4559f52b830367ad8bce48a10355fde8a8cc8bc37680f86c9b3aa18953aefbf4d560ff8bf09780bdcd3</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/jstl@1.2?type=jar">
      <group>javax.servlet</group>
      <name>jstl</name>
      <version>1.2</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51e15f798e69358cb893e38c50596b9b</hash>
        <hash alg="SHA-1">74aca283cd4f4b4f3e425f5820cda58f44409547</hash>
        <hash alg="SHA-256">c6273119354a41522877e663582041012b22f8204fe72bba337ed84c7e649b0a</hash>
        <hash alg="SHA-512">fb6fe33922631bba21b606cb5d53c4457071e695ec5632205185281e7db3e2d63d95248b43b9c7fb2cb5042d14a267b87d2c5da742c989174c3526dccf23aeec</hash>
        <hash alg="SHA-384">750771b79ef083a19d20a7b384c166893c9045ebbb9428b641d0bafd8101615652d50b095e3647d2d849fb79b822b109</hash>
        <hash alg="SHA3-384">98a520ca2dfd326e210fee9dac631e6fc21315ae6f8eb93c1a29bf4cd7b7a5fe880aaeafb73d14d5e6638ea72ead222c</hash>
        <hash alg="SHA3-256">6f412b6fb48e4eafde516fc2803e0f40b09e2b6b090a798094430c0a126da654</hash>
        <hash alg="SHA3-512">d67e63b347426c3e547e5fa6d6d8285dc5b2f9ba212355d1d909ffae336f1475b18133e30ee0bf84acaac9f8007c52f1c94fb2cda1e1e339ba5db5715f981927</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.servlet/jstl@1.2?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar">
      <publisher>The Jaxen Project</publisher>
      <group>jaxen</group>
      <name>jaxen</name>
      <version>2.0.0</version>
      <description>Jaxen is a universal XPath engine for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">674d5bd86b7838fe431b0277856e97ae</hash>
        <hash alg="SHA-1">bd6a33b0fda054a5678010df843cc999f288dc6c</hash>
        <hash alg="SHA-256">9499e487a66268f47b8307d130cd1e13a58392105e98a51f6a525db79c615cc5</hash>
        <hash alg="SHA-512">dc4d2686c65bfb0c2936e8c0eb4d517152aa284ed28a7880165a4247564823f34e1e9f06785a9dbad7b4cbe90486d3e9aed4c32c75d485d29bd15b8d7642b6f9</hash>
        <hash alg="SHA-384">fdbb322d3af5f63a3aa39419734de3cae39daa4b1b01b43b97c2074502e9f737dc4031a159438a9bf75d7dadfabd56ae</hash>
        <hash alg="SHA3-384">ecc8beb677e957adba96ed6cffbf343388713ccac411193c20bf5b919e0db9e1dabe1a7725130cc75eeb9640844b6c19</hash>
        <hash alg="SHA3-256">572fdde162d406c7221fb5ae3d885f6c0f5d6c3d56140a2a31152e487439c58b</hash>
        <hash alg="SHA3-512">1ed5f4959ffb6fe24748e582dd1d0efddd5ac79aec3db09c1faf7ed246e9e2674ea40103d24ce954b02d660379cec4a2c1042dac3b81f6c7e63152e99be18b5e</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD License 2.0</name>
          <url>https://raw.githubusercontent.com/jaxen-xpath/jaxen/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/jaxen/jaxen@2.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.cafeconleche.org/jaxen/jaxen</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jaxen-xpath/jaxen/issues</url></reference><reference type="mailing-list"><url>https://markmail.org/search/?q=list%3Aorg.codehaus.jaxen.user</url></reference><reference type="vcs"><url>https://github.com/jaxen-xpath/jaxen/jaxen</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.4</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4a37023740719b391f10030362c86be6</hash>
        <hash alg="SHA-1">62ebe7544cb7164d87e0637a2a6a2bdc981395e8</hash>
        <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
        <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
        <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
        <hash alg="SHA3-384">15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f</hash>
        <hash alg="SHA3-256">1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5</hash>
        <hash alg="SHA3-512">c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-collections/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-collections.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.12.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.23.1</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bee2e2dcbeeb983bdb6b71c9c3476b6a</hash>
        <hash alg="SHA-1">9c15c29c526d9c6783049c0a77722693c66706e1</hash>
        <hash alg="SHA-256">92ec1fd36ab3bc09de6198d2d7c0914685c0f7127ea931acc32fd2ecdd82ea89</hash>
        <hash alg="SHA-512">2a296246b0059ff5fe5c26e2ba3f48aa99e38d7658d613fbd02f32c6d4262f93a67525e6cc4d767fa5c2ab0e39e70bb3c0d3966d38ea4f01608588c084af3162</hash>
        <hash alg="SHA-384">3937cb646009763a94b199a0d6c0065441b9914e2b25e3d58db523874ea760276b445ff300015948d3a813217e0ee404</hash>
        <hash alg="SHA3-384">16ea3301ca37fbede2927399209b403066621789c4f1bee531b5153f27b652458900697fb828170d541a5f3b82e77fb7</hash>
        <hash alg="SHA3-256">0a3dfffc0f362b0a86ad0cd8b36da313c7500a8bdecb0ad7e628c2637d933548</hash>
        <hash alg="SHA3-512">2e230994b8cb7442a2073d60f89c27703ffc78b613dec7891bbfa42e91c95ed684b387ed65df3ee48559ccc06e6877462748f7e2ef985082c8db0741feb576a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.23.1</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">34fad2df975cf874a2fdf4b797122f16</hash>
        <hash alg="SHA-1">905802940e2c78042d75b837c136ac477d2b4e4d</hash>
        <hash alg="SHA-256">7079368005fc34f56248f57f8a8a53361c3a53e9007d556dbc66fc669df081b5</hash>
        <hash alg="SHA-512">0862144475f4a5ed67c8ab4bf163e02a89c1cdde18cd3dd3811075bd7a4cd33bab5cb824c3dac8d16afa74e9e267a1120b6c18bbf3d586f37d740e06a1af1b15</hash>
        <hash alg="SHA-384">d2608dd33e2dd3e50a663d942660db80bb62c39afa3fe4155de6bad235b4ee637f97488cb21e9d22750bdd279a44634a</hash>
        <hash alg="SHA3-384">a4d3ebc98bba16601879fe05ca40c4ca442e8d8177795d286c19ac14040b750f1a9adbffbea982e4636bdd8798918883</hash>
        <hash alg="SHA3-256">80fc801f0be9b360024407409c8eae4d5fdfbfb520ec968500a9196446d77817</hash>
        <hash alg="SHA3-512">1d7923e1bf2bf28f9e5f0990b36cff5c5e8b3409ae848ee903c970a0af22da3d4ae81dfb335d2ecfb3cdf3f09dec08bf2d2f1f8dd2702c766fa373975f551205</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-analysis-common</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: common)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e17dcf90e25f3c34daf4367012ead851</hash>
        <hash alg="SHA-1">75a0a333cf1e043102743066c929e65fe51cbcda</hash>
        <hash alg="SHA-256">b66571a2f4bf0607704a8dc05d18bc2857c36b4cfa62c4f6356ee88a5be95280</hash>
        <hash alg="SHA-512">0bb6cf4d41572fb0c4331f3e7fd302125206a5e7b6a72d91965a1bbf21b9a1fe3674aa34c65f77b7b70a151015e97ab2bb6f27785655256ce27f45e145336dea</hash>
        <hash alg="SHA-384">53efef78b256ba3f34f96ac5844938e0479d2e411263906e623ee8c71e1e8fb0e4ee8014d424eee0147e59c24ddfa29a</hash>
        <hash alg="SHA3-384">589bd195641f159fe784c396154b7bc266b52b12eeda328a9085e4cf0a0bca8af4e8943c7ebb3a64c86e95599918ac39</hash>
        <hash alg="SHA3-256">b585d5da3839453e674f036562348b3b0f23ef778f752320f3b4d90dfef35749</hash>
        <hash alg="SHA3-512">bb2bc38d63d4f1b4564bcd7dc5c518f3f96a0ded40f39ccbe18e952226390e401ecb5d741c3ec10ffb4baa9f991910e9aeb7867bad2a8409533c723b585082b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-core</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: core)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d5e91f59ac8e0aa8ee7fc8134d00a596</hash>
        <hash alg="SHA-1">2e487755a6814b2a1bc770c26569dcba86873dcf</hash>
        <hash alg="SHA-256">c8d7bbdac42edc8f82749001de734db482901802f3e4899fb5b115922013aa7d</hash>
        <hash alg="SHA-512">6cf84f60f868a5bebef603ad15608ce47b186eff9578b8d0fc916cdc2b23bfe7aaa1b8fb1dbfee0c3fe56ed8f2f56dfbc2c91f7b832232504b15119c56daf8f9</hash>
        <hash alg="SHA-384">02e8b6c5d014959e6a60091b7cf15a8ece84675768612300c2bb6bc275cf3cb64799f99bb709deb1716a31238237109b</hash>
        <hash alg="SHA3-384">953e7c7598e522d4c45f28da430f69dd37bcd3d8601a861548e0faf6cc094560d6a9b13077ddd74811fda958bc63c273</hash>
        <hash alg="SHA3-256">30ed2d170a299d7c0e16e265c66c33ce4fa51d5473fb895941801848e6fd756b</hash>
        <hash alg="SHA3-512">0d9c1aae92cabbe939728693381a2a982b5dd181a2ccd42db6e3c0ebe41d2e08ddd83b642cadf704e4eed37c1fd7ffdb38eacfed3147365f56500fe605498a80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-backward-codecs@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-backward-codecs</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: backward-codecs)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9f938f5a2a7f432cdd198cc86eba4359</hash>
        <hash alg="SHA-1">db385446bc3fd70e7c6a744276c0a157bd60ee0a</hash>
        <hash alg="SHA-256">c00347144b4eb30d462de6de73bc77524a208b778592a8890f6590c726b0c6ec</hash>
        <hash alg="SHA-512">bf5d0147e6e08452e25190b2097c58615c9f04d7e5e9bb70cdb22e3a9fc8a97a1b06e3f9f8d496b7c704a0189e3effe1ee57bbf3eb1e46720b85ed5da40ddde5</hash>
        <hash alg="SHA-384">ef887a88f11a29714896bd51cdbf2f2c206e703cf77d073fe322d3b0d57ad6ddebb58f7767628196199652c8e4a7bf37</hash>
        <hash alg="SHA3-384">850350ae5f46cfed9d1d1e6b17aa34cf08767405053077de4019cb150e37a1c290680c675401f841c0cc300928372d68</hash>
        <hash alg="SHA3-256">bdc49039e9c448b2833209087a02dfdb332344074994fc66b233a38a0ea93cfc</hash>
        <hash alg="SHA3-512">8290b9b01ba8e701f5a1f5347c0ad9e9f290481c169859769119d30ee657f508e6e8167785403b27151ebe11fe62236e8123e34e779d3f04e43339fe01cbc2ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-backward-codecs@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-highlighter</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: highlighter)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4285255bfba4f6286e90097738e0ee8</hash>
        <hash alg="SHA-1">44accdc03c5482e602718f7bf91e5940ba4e4870</hash>
        <hash alg="SHA-256">eb83205bfbdf94af2519a7e3b206c5e92a116ef204ecaeed6a9c6f07966ffac0</hash>
        <hash alg="SHA-512">50adcff4d994c478ba5896a2492cfdc1a680fee87ed6e0fe0488cabeeec24c7b5512ff35cf20f7eb23900f769fb51e6280ac2d5a7060eca57d7a4adaacb5dc5e</hash>
        <hash alg="SHA-384">73e6356e035e9d5c09956c82bf7cb2d1f792385c647ca7ee171b34b0f2e4fc7aae2222a3b9923a631a8d0585c5a1ec7e</hash>
        <hash alg="SHA3-384">4f7377412d6e116c97049e9a286692f7eb8a15277c969c8b99fa692d1dd21d51d66105f4d6c14e3fd9d4223531d591d0</hash>
        <hash alg="SHA3-256">ce9391f823a81a6c456da173322712b0667ad504a33d9134524b0b814b72f263</hash>
        <hash alg="SHA3-512">d8da061a8027a2d95631e0935426c5971c8e4764de9dcb3d2c51620cdb9ba5565978b94390c4a5bf4f3f8eaa2387cadc73b282758b1a777e63be8eda63599130</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-queries</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: queries)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cf3adc0fe4e1f2e83b5da7b176e1312</hash>
        <hash alg="SHA-1">987d1286949ddf514b8405fd453ed47bebdfb12d</hash>
        <hash alg="SHA-256">a8a0aaa41159ad0be990a0017b6196fce75c925192693c6b5282ec42804c0ac3</hash>
        <hash alg="SHA-512">fdc5e07394b1b7bf808722f2b74f418e97c2ef2e5123812735f6275a927df347cd13fc208cf2fff4abec83effb6115d0220b7b3ccaeb9ee08d9b43e9b531fc13</hash>
        <hash alg="SHA-384">94f97f549fa330bd33941e1acb25004df58d6a5708023adadabf0322217a30ae2011935a793c3f265f3b0401828990ce</hash>
        <hash alg="SHA3-384">56418d263f7b5602840779d43c8eaaf7f52e521764582804bf86eb30ba0985d90efc9361e2ecdc434597f31896eab883</hash>
        <hash alg="SHA3-256">3ab9d368653666fc19a62eb1d8eef2d5aa8fd3adc21f56d0609e54d39defd736</hash>
        <hash alg="SHA3-512">0cb540baabfce90e25fb30ff44966b242f4ee744ef229cac51fb085b1842bc38049d33b586aed4ae93556048c2a50498efbe46ed81a6d0fd4d0dc4a7f6cdb5ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-memory</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: memory)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f34f567912f656f114371bcce06b3743</hash>
        <hash alg="SHA-1">b3e80aa6aa3299118e76a23edc23b58f3ba5a515</hash>
        <hash alg="SHA-256">a20f08b5d466eda114ac5cd8ea4017125c85e9bc9e0a1ca7c630d15382d99b2a</hash>
        <hash alg="SHA-512">d8f701121cfe70869e3985b79249ae6c2a7e004709cfc8ab9f8e9615fc3c473ea665adb87f6aefb516e0036150cd8be6bfaad39d8b2f8d2359586cbcdb18fdf7</hash>
        <hash alg="SHA-384">d312265a155728be4d1de7885a0098653caf780db1f1c438affc5c556a6c096320f4080ebfb9939f42532a0950032db6</hash>
        <hash alg="SHA3-384">da9476e7d940d6d7c7687d1f8caf037b76eb7a84bd4baf9795f010d78f2c5ba910b0aa01ab108177142eeb5e0b17fd83</hash>
        <hash alg="SHA3-256">6a6ef211dd91a91a60936657028b7a8954b140cefa508d07ca7677d0760dbe43</hash>
        <hash alg="SHA3-512">15c4c191ad02eecac5dbc489bd1e3854a6fee207cf4de8722f84e059b8b31a35967a7da988e6f6f75b11ed2f3c1b9e96e2e9201906fb7687808b875676903b88</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-queryparser</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: queryparser)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f436ed8c7d3adf5f76081149d746381a</hash>
        <hash alg="SHA-1">e97fe1c0d102edb8d6e1c01454992fd2b8d80ae0</hash>
        <hash alg="SHA-256">145f2396201bac06fd8d97085c0fd09f86f78baae1de5156a20848bbfbff7877</hash>
        <hash alg="SHA-512">ce6d158fd3bf177e285d73af06d72782676618e89b62f5a264fde9579414f3b16ec92287d4db159391e623889a600c309a622547dc47c9609fac7c8f5f5a70d9</hash>
        <hash alg="SHA-384">e79017bad971b41061ce879d716f5e652a146a0eccbf6bf6ffb95bae891ebdd78509c3a64b11bb2827f91a62e6ad534a</hash>
        <hash alg="SHA3-384">d9fc89d62c63970098f486141fa4be521cfc31cf1b63bf95601e3e9e22de7987c23c1dfd13684e604b7ef08de8da27a7</hash>
        <hash alg="SHA3-256">94fdb55c8eac75d428c23bfe654604c3b3c782b95e181a8724fe8ad7163f30b0</hash>
        <hash alg="SHA3-512">17329c24e0acaca4c52ff03ba07b4aff6caae8ff1183f558715f6929b89e66bc0cced5659a04861bed4c4e1264e5e05f8896a11c24e5cdd32db136bfa8d31373</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-sandbox</name>
      <version>9.11.0</version>
      <description>Apache Lucene (module: sandbox)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5cd15f59e052d34ed39c5d98bd481131</hash>
        <hash alg="SHA-1">5e46b790744bd9118ccc053f70235364213312a5</hash>
        <hash alg="SHA-256">163a3c4e50bb27b014d5ea6e25e96189d68f563b39745a086b3d720b343be21b</hash>
        <hash alg="SHA-512">6e6e74da7f10239882b62252837fd3edfd357a2adb9aaf3ce8b09c26f07d3e4096233cbd1c6f5200ca26d64904f94fbfeab364f6399ee45669eaedf5f838c378</hash>
        <hash alg="SHA-384">78710762c189865df11361cdcd3aceb777a7c0a0ff30ac7ee24b366514f76b104d8da7411249b055c9e7df5056e61c5e</hash>
        <hash alg="SHA3-384">f4a94a2c9cec9c48157564dc002b88ddba498d459db2874e00a149f6f9ba02ec285871eddf392d336f1ad42d40af1748</hash>
        <hash alg="SHA3-256">360f35b7ebe31294b3e5b92e78353dcbc19ddb8aeccc6ba97f902c278567eb13</hash>
        <hash alg="SHA3-512">2e003e8839c9c7610f093e6bb999eab8ac998cab520d7d9615f70a5e3d7e29293f86a6e64ea0858a39fc8a57e708fc7bf7ba8f120cc478ac536201f8f3817afb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://lucene.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Lucene/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LUCENE</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=lucene.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codelibs/nekohtml@2.1.2?type=jar">
      <publisher>CodeLibs Project</publisher>
      <group>org.codelibs</group>
      <name>nekohtml</name>
      <version>2.1.2</version>
      <description>An HTML parser and tag balancer.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">959925ced96f3c1d5c67a5d97aedc6c9</hash>
        <hash alg="SHA-1">6cc02d875c22be3bc43e0ec0933d1df73a83fe28</hash>
        <hash alg="SHA-256">353d9bb884ab6b7c0555f7339946cd365a5b8c30e16052a8c7cb9c20bc5f3b8f</hash>
        <hash alg="SHA-512">87706365af1af4f22f6fdd42a7a14c088816a837c86c512d6e07beba500d76d145d4dec221498321e9a57587cab70cc97af1d23b01748a0b7d7e36313825548c</hash>
        <hash alg="SHA-384">70afe2612018cd121a72be47fa32464689d68d0e089c0fda2d629cf6f9c448437f231f647dcb766a3a579425110c5f8a</hash>
        <hash alg="SHA3-384">80519dfb59ade7209638e7be3fa90426cfa828db1c99b1ccb22623b75aecaba401d53c81c9494f60cd269b224df19cf6</hash>
        <hash alg="SHA3-256">f8f84291a3d0a72bc1c11ef2a8e88e7327e1c2fcec1bb08a1d140cd06eb8485c</hash>
        <hash alg="SHA3-512">e823263cfe1c2ff848efa30e3956bc0c48db6256a79953f7dd4db3447a5beb070b9196b2d958b8d381aa88a802397e4410a540379af255aa27fc1984ae341e89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codelibs/nekohtml@2.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/codelibs/nekohtml</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>scm:git:git@github.com:codelibs/nekohtml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar">
      <group>org.freshcookies</group>
      <name>freshcookies-security</name>
      <version>0.60</version>
      <description>Freshcookies security utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d6bc54b9e9e76dc646f5198ce7c2c5d8</hash>
        <hash alg="SHA-1">c6b4f2fecc8d560dcde60de8578b8ac6df829996</hash>
        <hash alg="SHA-256">e6c673dd9d2f4331a6d66b8db2e01cb3b9a98b4a4c8cc5e1cbc6888ff0b710c6</hash>
        <hash alg="SHA-512">6344c7a9eda21595c1c0690b9ff7ed14f77a4858983158e8915f8e802aa8fa4d7a80224a60a06d3eb6ba9bb3fcb1d207e5cc5e848fa9b3e101ff480bc96a0bf3</hash>
        <hash alg="SHA-384">8518b9440ed2e1b1b85666e55fca617747b1ef85d1f1264e99ffd33103879c5487957ff40935bf6a4c401ae2192434ce</hash>
        <hash alg="SHA3-384">c1097a80822a73350365d53536b308c83ba6337d54a93efa776d4cc7cb438d393f110640b80cc5d59a28a6ab2b985ae5</hash>
        <hash alg="SHA3-256">87ce57e812793ee9bc5ce1aa7a9521181156afe201bb2f4a44d94d8664596f7a</hash>
        <hash alg="SHA3-512">c1d93e01f40adbe6288500737ad8c252130ee348285c296f25ecaffd96cc5036c5e1d9139381f749a66293d3c4d8c33322e4011c7ecfd10811cf675476d443fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.freshcookies.org</url></reference><reference type="vcs"><url>http://sisyphus.ru/en/srpm/Sisyphus/freshcookies-security/get</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
      <publisher>JDOM</publisher>
      <group>org.jdom</group>
      <name>jdom2</name>
      <version>2.0.6</version>
      <description>A complete, Java-based solution for accessing, manipulating, 
		and outputting XML data</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
        <hash alg="SHA3-384">5905840ddfa1bdad2bf8cc3b61a0509c438de94585473b5e4a4dccd8c653fe0a97b094b6703b502605b1141ad6b83d23</hash>
        <hash alg="SHA3-256">e46ea1f3ddd97c9e6a5714ed0e4f981962f4c11c28ec96f63edff801c202921a</hash>
        <hash alg="SHA3-512">4db8ae655765f69ffd94f4cfbf1d637a9159bb015af198902449ad0f9654b41aa3ec8695e36c358ce36ec7d3ebb67feafd955be6eefdb5d72f308e95a97ab8a9</hash>
      </hashes>
      <licenses>
        <license>
          <name>Similar to Apache License but with the acknowledgment clause removed</name>
          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar">
      <group>org.jvnet.hudson</group>
      <name>org.suigeneris.jrcs.diff</name>
      <version>0.4.2</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a05e71b59b7099da7844fd3b5f38e299</hash>
        <hash alg="SHA-1">6e8eea2281426cd791a64b348c0932c88b966f39</hash>
        <hash alg="SHA-256">5fd35ce177154ef55dd474e8bef7c89f109132107ac14b5b876c3b5c4d20536d</hash>
        <hash alg="SHA-512">de73e0ab9c534e23ea5a54c5694f2fc29ee785934fe5c9515afc198d2c3da3a7ce93be2d7ecfe9588076fd9da1a89fd39d79c6d9bf3707bdb7dc6622ba12fe49</hash>
        <hash alg="SHA-384">5558ac9968b60f82c9bbb9a8ea641b929ec9aaf3f198e39f2f2920f04f584e52ef5f2ab436bc88089bcbbc0aff5e6948</hash>
        <hash alg="SHA3-384">6f4597e1311797bb9f0b8fa2c26c32a47a33fd57d043ea6701dc906201ce97dd8f0bdcd1c221a8aadd1a8a9d2d2483fc</hash>
        <hash alg="SHA3-256">8858665d346833df5812acfd18b32fc69486f1a0fc39deab84a3f825645c2c4b</hash>
        <hash alg="SHA3-512">e4bfaf5a7d447452587455ed27b67b9fcebc6efdad665aec18fe2b40e091f3e4186c5b55565f03cb449d378adb1344e0837931c7adcd965334e263fbdc70a6ba</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/oro/oro@2.0.8?type=jar">
      <group>oro</group>
      <name>oro</name>
      <version>2.0.8</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42e940d5d2d822f4dc04c65053e630ab</hash>
        <hash alg="SHA-1">5592374f834645c4ae250f4c9fbb314c9369d698</hash>
        <hash alg="SHA-256">e00ccdad5df7eb43fdee44232ef64602bf63807c2d133a7be83ba09fd49af26e</hash>
        <hash alg="SHA-512">9a98e493c4d771322b1331ec05ab0e363a83d8ac2af8018d96a44df2bf5bfc97d33ebe6f6f93e46ab10bf1536f0c29e9d9569318ed49bc18b4e96b1a8b476d37</hash>
        <hash alg="SHA-384">f542e92b7a86bcb20cc21f0c4b29778428944391344ca11df432f9ce36a96ce8e8f65da67e450e52c0e8ba441d2a7332</hash>
        <hash alg="SHA3-384">e483eec12e463136ea4163a280dc17d62e48f5d49f0f0ad2ab672c4c5366b1f4e5fd460e880caaa4b39666106ac98ca1</hash>
        <hash alg="SHA3-256">e558c00adc56713dc57cebed64b966e3ca0d8f096056d8843fa8bb11c7c96017</hash>
        <hash alg="SHA3-512">f6e02d2cd83014e4a4d5ca0f24b189ec944c3b1e306c5eb04fac7e148b47ad2432256ef6b05292cf6d34a31c72420637702cc0fff4b38edcfae21bc0ffda98aa</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/oro/oro@2.0.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar">
      <group>xmlrpc</group>
      <name>xmlrpc</name>
      <version>2.0.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">668ddd7347f75fbf18a4de6b39d01708</hash>
        <hash alg="SHA-1">ab3c3503846a8f3e09b00c69d44026f224f08e3e</hash>
        <hash alg="SHA-256">36efda6efee96e83602c9ba246db19bf4c5e733324390d2fa8213417d6b681e7</hash>
        <hash alg="SHA-512">cb4cd92d7cc4320d645413008186282ed6a94d4a12817efcc678cf22fdc6d2c1c03df7e1220568a11a314ef31ec04c445faa8753a19c8b40376a70991603f20b</hash>
        <hash alg="SHA-384">d6a1acb1e7a9402936fbf165ca82a2e0c85ca9c8b0542315b486dc4b7f45dfd16efc9927da83e484efcde8a8df0061aa</hash>
        <hash alg="SHA3-384">1fb71cdd4fcd090197b7d17f943a94ac2135a9a809c1b2253b368804c29247efd3b765a8e263115a3345f5e2d858a1d7</hash>
        <hash alg="SHA3-256">63bc8c6c381c9c1588814f76d333ee238d8a95b4f800b63c7b29eda12a8559fe</hash>
        <hash alg="SHA3-512">30cb4f509c73c523bdbcaa337fd7bd37a6509ddc573c8a9f46e6251f2eda8f5430a343a4600748c27a866227fed3a46ab2413787dedc39082a123dbd71d15bfb</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-core</name>
      <version>2.9.2</version>
      <description>This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It
    also
    includes the core facades for the Tika API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">186f9dd1e15cb4fedf9ac65d5e44e8ac</hash>
        <hash alg="SHA-1">796a21391780339e3d4862626339b49df170024e</hash>
        <hash alg="SHA-256">8c43f48ab8a784f2cda8a386d5f425060d57e3232dc6b49f9915029ac1f0b783</hash>
        <hash alg="SHA-512">887f32c4d21e0b37f4effc24b352e7b7dc76ce5141035c503528135dcb7deabaffa8bc6cb52cd12c019f9b62f760fb8b3b55a77d0d48bff9a259f872434916fc</hash>
        <hash alg="SHA-384">7358d365d6d6736aecba31bfcda5e08e3b692cf04dd4a72403cb9540a8121117263fbae4b4c9fed302f185f3fceb7b80</hash>
        <hash alg="SHA3-384">99cc10c6dd8e788e488b6e196b246c3879296e3c3d3fa8a6b695f8406098b2163527b56c6a781dc264286c4296b0062c</hash>
        <hash alg="SHA3-256">9599683acb02fb9458d5c9799e9381cfe33516c8e46d361ea9235853b658e4ff</hash>
        <hash alg="SHA3-512">6489864d6ffb43c7b62ceac0beb024800ad3e5b097e1d041e5521e7d10925adf2b0acd57d3821b6457dee2ca42c1db896387bb46dccd193b703b6ad2ecd54b15</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-core@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Tika-trunk/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.16.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parsers-standard-package@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parsers-standard-package</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">028636b7c0b11847a335cbcacc874bd9</hash>
        <hash alg="SHA-1">c8408deb51fa617ef4e912b4d161712e695d3a29</hash>
        <hash alg="SHA-256">3819b3efacc62f299dac7ef4592c7c3866e2c640dec9b603406f743db1d1562c</hash>
        <hash alg="SHA-512">12312102ed2dab5e0d552260e8afbeae7224721b150bc3958c1313aec90df16cc07846c7c8bb1bb13d0b808cd912b92b91f22576f258ea2edcf9e6dac6b363c9</hash>
        <hash alg="SHA-384">2ff743db52aa94b221744dd095dc39a1c865f523e092e74e749f27e537cd046fbb6afe249295470dad1ca5fde11037f2</hash>
        <hash alg="SHA3-384">98824e10fdf0761cfc31c591353c4ea8a52f762748327a0d5deb1fa02307cd70be469b0f9756dc785d93c6159ec19a15</hash>
        <hash alg="SHA3-256">1404159424382e6ca93685cd35da8bf0b92083e3b23217849b76e1e546dbb29e</hash>
        <hash alg="SHA3-512">58244f07603433a9a2981333c70a3c329455b427b80d39b9057eb0be6b1c4a19ae760afdab09315bc143bfe53e2612f09bd2911f72b487214d75ff0fe097eed6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parsers-standard-package@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parsers/tika-parsers-standard/tika-parsers-standard-package/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-package</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-apple-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-apple-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c9cf70cc48bc9bf37d48cd96fd6c0db8</hash>
        <hash alg="SHA-1">758dac27c246c51b019562bab7e266d2da6a6e01</hash>
        <hash alg="SHA-256">b6d594bf779055bacf5cef40380fddbda1bf08d4da1225428f559640cea83e0f</hash>
        <hash alg="SHA-512">a8485fed9a8a8d2f805ec640298a5dcf7006397f1e93b0d6ee86dabd0a5dd198579afae671f109d26f5ba6cf94232c2df73abfe3cce711839c4242b7b68df49e</hash>
        <hash alg="SHA-384">0e29bf40244e9a8a2ed3083a33e71f7c3b99fe03b1cd3980d2db347f5f0d0bb4ba9161da281429b6240c7dfac4b7b0fa</hash>
        <hash alg="SHA3-384">1b023b303eb3a46131f6d15985f383ae9ac187f023af19a39d2e73f2fea69a51334b4abfdc784414fba54bf767d1ade4</hash>
        <hash alg="SHA3-256">b22e62907dbb866766f9257ff1ee6c4219361c95aaa20501fbb7944440689916</hash>
        <hash alg="SHA3-512">e416104c5ccba001645dfcc76cc6ba693f697d4e728363495037c95d61d2af3fca8ffb26c4bd32ce53dca5a6bec05d6cea0ac1d6960a04d0acaa215db4901143</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-apple-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-apple-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-apple-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-zip-commons</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5f9b2e4c4e84d69c9740b478c0e4f778</hash>
        <hash alg="SHA-1">2fcea85a56f93a5c0cb81f3d6dd8673f3d81c598</hash>
        <hash alg="SHA-256">2542778293f331358bb37e32e008831031c0b75d4d27d7b65416829d28ff91c0</hash>
        <hash alg="SHA-512">c15131585a86a6a5cd682517fd2600fd11fb10a54928151028f3fbf702fce1dca4c3e2be1bd6dac36946ed28ce70d613fb85d32a13a414198c3e44528c3f166a</hash>
        <hash alg="SHA-384">33dd9e4438a05ef171842e662ce1774f2b25c7819b6c34be3d6ea9946d279b650bd6078282935b517a860fe11fe081af</hash>
        <hash alg="SHA3-384">ab762987f6ec620c6b03539fc9e325efe94c4e1b17591e7fc42412bab418dbdc9e2884d84b9ab504b12f84dfffdadacd</hash>
        <hash alg="SHA3-256">5811857e3b294731684a5176b66525bc5645d34840ab62ef5b3758da489d955b</hash>
        <hash alg="SHA3-512">ee9477175eb8eb3ca4b2354b55245b9ede1d113dae68c4b0b709fdbf375bde6e932b4e4686ba674ecbb586248f3ae55f2f8e5b687b35ab3b4803c680dd816b0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-zip-commons/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-zip-commons</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.googlecode.plist/dd-plist@1.28?type=jar">
      <group>com.googlecode.plist</group>
      <name>dd-plist</name>
      <version>1.28</version>
      <description>This library enables Java applications to work with property lists in various formats.
        Supported formats for reading and writing are OS X/iOS binary and XML property lists.
        ASCII property lists are also supported.
        The library also provides access to basic functions of NeXTSTEP/Cocoa classes like
        NSDictionary, NSArray, etc.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">52c4c979d4eee6f8be0c82ce78af3505</hash>
        <hash alg="SHA-1">617d08cc6e9c800e4b77266087cc9294b6d87e11</hash>
        <hash alg="SHA-256">88ed8e730f7386297485176c4387146c6914a38c0e58fc296e8a01cdc3b621e1</hash>
        <hash alg="SHA-512">859ead9ed3608c93cae4563d9d07b04247c70907c5f43bb821de04b30a6465ac2f292ff6d884388cfcc206735c922b50db7526b333624acaddea4ecafc387ffe</hash>
        <hash alg="SHA-384">358eea190637591038be3628f23e566c2be01b7fd8b1740451fc0253c79a08b32993496427cefc67df3ef34bc5b4639d</hash>
        <hash alg="SHA3-384">20817b656e7a68437ddbf0a41f35fb97053836f80bd117e35e858b108bd28a285445a6c450b56612508dda55bce1411f</hash>
        <hash alg="SHA3-256">4672b2a9e20d1c394da2c3f69c21e3e30a3a563bd906e05644d33b588740f711</hash>
        <hash alg="SHA3-512">08aea463d73420a04fc34f48310ef3c3e55ce5b96480291c03e02cd623de35c191b31fb4322c21e909b5a214f0576b24bd84905a45f33f5f3147b4bf40919176</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.googlecode.plist/dd-plist@1.28?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.github.com/3breadt/dd-plist</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/3breadt/dd-plist/issues</url></reference><reference type="vcs"><url>https://github.com/3breadt/dd-plist/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-audiovideo-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-audiovideo-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f152cfbb508e50ba7c416072a1b7122d</hash>
        <hash alg="SHA-1">8e7a152fc7998de8cede9896ede3fd3aaf75e475</hash>
        <hash alg="SHA-256">3d011eca94e00cf7e5b93adc3aa1767f0765ed6a382bdd082cd9f0aadeac3f9c</hash>
        <hash alg="SHA-512">d885281bc81871bd7c73d0c90049c4c32e8c9bdf4b276be91cd10437ea7afe80c8aae82b09f32657c48be71ea6b7661c7ae4c374904143443189a88e0d8019c3</hash>
        <hash alg="SHA-384">6ec3bab1edc8e932ffe31a3ce5640668918b462c80a8569ad00e58cfb1a942245b22bdf8c6da7edac2b42ea984df49ff</hash>
        <hash alg="SHA3-384">b95d789a051206ed6ba6b78142eeb0adfd3d1a3b36abb40ffb74d11639d7c4e847281bfa29746734d8e8bd43215dc694</hash>
        <hash alg="SHA3-256">3e85fbd77614b72b6b91347d371232c3755f6e6b232ce3f496e8a1988a1e541f</hash>
        <hash alg="SHA3-512">d2db15e3271838e572cfd2df5802e26b53560c6e94e2ccfd5fbb1fef3548152fb819f74f4a4155fd6824115a9309a57c9bdaab4cf05de5f1d317ebef6a4b3f80</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-audiovideo-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-audiovideo-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-audiovideo-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.drewnoakes/metadata-extractor@2.19.0?type=jar">
      <group>com.drewnoakes</group>
      <name>metadata-extractor</name>
      <version>2.19.0</version>
      <description>Java library for extracting EXIF, IPTC, XMP, ICC and other metadata from image and video files.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f280457011b9ee8bdc34248418fcaea6</hash>
        <hash alg="SHA-1">4d3ab42dd9965b8f2b8bd1b7572e028d6f90a34f</hash>
        <hash alg="SHA-256">e51bb454ed08ea2bfcc3ad147d088ad1aa73a999e0072563f8ae50021a2fcadb</hash>
        <hash alg="SHA-512">80605486d06c2e6c536fb1ad5b5aac262b7b9189ec36e7646e8130a48f59d75d4029ef8b8c94c5aac4de62e7cef8748f17e3a8a4918aad28f372edef123bb965</hash>
        <hash alg="SHA-384">ae12752a30d7629f13399030c6707e1eb456043a4883fb7eb45878d92eac6b3343ddaebaa77c05acf747c27508fd023e</hash>
        <hash alg="SHA3-384">513ddc94e8b01b815b31cc9f459e844217210dd4c2605c21bb5b92f5f4554c9e78e321a47f633c59bc342c76829be845</hash>
        <hash alg="SHA3-256">cac55eda537bd63868f4053209a3ad9d0b54587223d714b8991a242703f5d9ea</hash>
        <hash alg="SHA3-512">a5db063a1870b0bf5e1d124df969c8f8da484d71da4c0f266a02c05ac78e900fc5563dc8463927ff04a680a2ab067cd0078675bc3d1f2139cab9285fb0359fae</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.drewnoakes/metadata-extractor@2.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://drewnoakes.com/code/exif/</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/drewnoakes/metadata-extractor/issues</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/metadata-extractor-announce</url></reference><reference type="vcs"><url>https://github.com/drewnoakes/metadata-extractor</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.adobe.xmp/xmpcore@6.1.11?type=jar">
      <group>com.adobe.xmp</group>
      <name>xmpcore</name>
      <version>6.1.11</version>
      <description>The Adobe XMP Core library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37892425fcfeffe88554b3d66dd084ca</hash>
        <hash alg="SHA-1">852f14101381e527e6d43339d7db1698c970436c</hash>
        <hash alg="SHA-256">8f7033c579b99fa0d9d6ddcb9448875b5e4b577c350002278ce46997d678b737</hash>
        <hash alg="SHA-512">772311927a7ec76639c758e9ab13948f636c36d5bcac52cec5f8a7bc2993176bbbf94634a66d86191fe83458609c27626eca4aa9d660070b39cc23ab344f9499</hash>
        <hash alg="SHA-384">6a7a01b439f8caa682325d5eb30a499e297f5180cb934a19fd143d707da06421f92b31390640dd960b3b026e57f319a4</hash>
        <hash alg="SHA3-384">b0296c304a163d30c74853643b9db193ff9c232b1c7cff1fcee8af4ef07b59510c2011c6a2112cc1185be729aefb6cff</hash>
        <hash alg="SHA3-256">dc5ea0bf952f9d3176e2f52558064c631e05ef31aa1d6405643e650a2f74667c</hash>
        <hash alg="SHA3-512">4509d28efafe45fde92951f29c98ea2512b812f8579086bb796ded5676d6449f6b713784a28f358c8d3b6f9121b2801e8fda6ffac73f3f85d69b665156f3ef20</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.adobe.xmp/xmpcore@6.1.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.adobe.com/devnet/xmp/library/eula-xmp-library-java.html</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://git.corp.adobe.com/coretech/xmp-java/tree/mvncentral/core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-cad-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-cad-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">01c10b116663551f35f1395a297acc21</hash>
        <hash alg="SHA-1">c3f94d48713ea692658a4e2f02f95c0d961e52c1</hash>
        <hash alg="SHA-256">c3555c70c3559ead2224562e2e8ff7df452cfed155395327446f0f8f267d7f2f</hash>
        <hash alg="SHA-512">b5eee4c09e1b8b3e7303099f3f8dae2ab02d10270f88500ee7583baf5041b690da8a8064d27be1635f41870706769873614e8c530e8d75c3b187952fb6ffe2e2</hash>
        <hash alg="SHA-384">0309b1e086be71dd2f9f6e956a431eba583cbfc03744a084111c4502546ea94b8854618a2bc289fe8ffed177bfdd2357</hash>
        <hash alg="SHA3-384">6330ada83e3bb6899ed8b662c889ebc6368ed0d43a7f0680a42f18a74b11d3f0d3fe1a4719e2f9c246d8e8d9292b4ee5</hash>
        <hash alg="SHA3-256">80aea4ac3d4fa0715ed075aec1755fe209323f8848dbe347b354356fa6b87075</hash>
        <hash alg="SHA3-512">1539abc1b529b9072463a67ff2762ce392fbd7d58378fd3862b92d74509d415d76c39bfd10faa7d1ec29a2de823a0ac734e9c7cef1cfe0268890c8a9ca2151f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-cad-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-cad-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-cad-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.17.0</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3e4b82b6e29693927dd289a344c35e46</hash>
        <hash alg="SHA-1">a6e5058ef9720623c517252d17162f845306ff3a</hash>
        <hash alg="SHA-256">55be130f6a68038088a261856c4e383ce79957a0fc1a29ecb213a9efd6ef4389</hash>
        <hash alg="SHA-512">85611fb7687450eb6078855c46d94dabf1cebcf179e23455cd1069aaded3b169112ec5d3d8d8510a7076166dc146e2f684f8527c5ef5b9ed99a7ec91f0825523</hash>
        <hash alg="SHA-384">12bbfe5721ecd374a77ede24cca8a39f1415fd50dd95938c5e3365c703a02b5f6c0e7b10c7b44b7c9c5a874dd0b971c7</hash>
        <hash alg="SHA3-384">d1b1f9c3e53603ccc690d76ac1a90dd1ddf07723f4eb53f58acfa266f17a675b311b0f29b94d9f1bb0ab32ad1a8aea4a</hash>
        <hash alg="SHA3-256">62a76265cdc48c8a7f80c9d5566a179bd796c646b25c5cb937fd0a10cfffff1f</hash>
        <hash alg="SHA3-512">87c42bea365905e9d877bda162c9d79d962a969a53a46861c350b9a9a87d09f4986c6ff67c4f00eba6df8c86f0621cfb52359a91321ace7eec3bb5d7c82feeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.17.0</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">09dd83868b44c6a3dc48911f4b3bbbc1</hash>
        <hash alg="SHA-1">7173e9e1d4bc6d7ca03bc4eeedcd548b8b580b34</hash>
        <hash alg="SHA-256">d0ed5b54cb1b0bbb0828e24ce752a43a006dc188b34e3a4ae3238acc7b637418</hash>
        <hash alg="SHA-512">c6b06d4b20941d9e32b462552031e6c98378e5edce57693e55adcc73cf7d5088af5b3a666a59e94a7f0b57066ac694863919f398f28ee0d7ceb362c8c05f7491</hash>
        <hash alg="SHA-384">02875865ef42573114755ab7147d64f8e5a791f2a2b8debe51dda22886370ef34af8c159d8efa8b90735f33f90089187</hash>
        <hash alg="SHA3-384">ee93411dc73337c11d48609fbf79ae606ccd0ab712e3d2c12c91103964182910a810b9fa062a0afc47d19c720c97c5e7</hash>
        <hash alg="SHA3-256">eb5b5dfb8afb2538a2c31caab47d909970bb647763a0eccabaae8e6f0a9ad988</hash>
        <hash alg="SHA3-512">09ce7a8d928d42b221e0f6151653248f78eb68b6228cfc36fabd48ae48a3890f235fb33b82cc2faa24069efdf5a14d7433014e3bfb0d5173047d1911e5a55fe4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.17.0</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7529e022796db72bc17288e950c24b3f</hash>
        <hash alg="SHA-1">880a742337010da4c851f843d8cac150e22dff9f</hash>
        <hash alg="SHA-256">8562569a001d46e84ea23802257e33c8f68b24eb47c1e0efd133a0372c512959</hash>
        <hash alg="SHA-512">20104840da168653b27ffcbef6600d29d04b7f315934531f6521b30cfc0438893ac5e3b2476ba03a6a47f3aed8882cc7d5a57b66163ad19aac217a258826e51b</hash>
        <hash alg="SHA-384">c597370368f411e8f63500537a94f503f44f3bbd653c77d39871eb65745ee2a3d8d83bb8c303790c1e26f30e76219000</hash>
        <hash alg="SHA3-384">6c446264fac7209fc435be283dbb6d578ed7328e84756d7e987a0871a9119bf9bffbfe40827e84324ea7924f83aad770</hash>
        <hash alg="SHA3-256">437fa185a964c155377819fed79558491f31a7ee20a60c4624d252f6c6bf75bc</hash>
        <hash alg="SHA3-512">ad18bc120cfafe0ee6c961c5422242361de7b3154d3252a2ffaecf5d981865c141a25fa8706709eabc351d42f3593dd2832219657671f21d9672c2488e5d1bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.9?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.14.9</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48280c1c2676e942863de9b01e9cb03b</hash>
        <hash alg="SHA-1">b69e7fff6c473d3ed2b489cdfd673a091fd94226</hash>
        <hash alg="SHA-256">377352e253282bf86f731ac90ed88348e8f40a63ce033c00a85982de7e790e6f</hash>
        <hash alg="SHA-512">4d9f08b79dbd4a0e1ff27e4c12490b6b41e1f796b19217e6d2f8b7bf35a3545aef4e0e711b3396c32c23a8dba0412e9ebf29de21b234d29ee57741043e4ef191</hash>
        <hash alg="SHA-384">e22adb52c0dcf4f3d6027d7026daa9796ad193142e8d6c078497221b267bb68c06d2c303601d90cc6def1c95ef205ee5</hash>
        <hash alg="SHA3-384">1978130040f2529e3057c25b0d54272da60ef2183b2f2f79e6ddfe526c0f511524abb8cc098a3f5fb7e7065d295bf233</hash>
        <hash alg="SHA3-256">5ab8f6531cc3177fe46e8e9414912655ea02b353d6a632da3c6a97857cda7377</hash>
        <hash alg="SHA3-512">921cdd84cdb7035434104ed7cb54044a8c9b3606ca3af33e480366377195abfd892767970cedda1f8537d612ae649f01a5f8ab3527c7a15097d4c1cb2b4c1e58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.14.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bytebuddy.net/byte-buddy</url></reference><reference type="distribution-intake"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/raphw/byte-buddy/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-code-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-code-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7a35aaf327660b8f05736b8fb838c792</hash>
        <hash alg="SHA-1">1d30c1f80ba25e19a1d78a01312fcd6f598c3d2d</hash>
        <hash alg="SHA-256">c9dd4a4ee07bfd919e2a8d9de999163b4b4956ab9f75ae74d7a3c0174356e408</hash>
        <hash alg="SHA-512">7d899156859462c2eba7da3e43a229d3afda40b55e4f7973a658dc8b11c1169d65516ade3dd4c768542dda2bcce4e5a33c0783b544c3b15b9d681c221e49eb97</hash>
        <hash alg="SHA-384">09e3fdb792f4e57b2eaf3cd0eb20612874485907f2aa0e54430dd33810ec5fab58435e298343314601cc0e8036bbc888</hash>
        <hash alg="SHA3-384">8ed2ef765ab83866b3449e889661c9b0f6aa237f421f44ba4754e697dcbc05324d81980c7cf0a64c7f45023aa159c89b</hash>
        <hash alg="SHA3-256">09079e4c848f00530f7692ea57bb0bcb2b0ffd3cadd093fc15787fadfa46e06d</hash>
        <hash alg="SHA3-512">45aaa30bbd4158ee6c1f2980ab5e201397ea51f7388b0dfdb5a2f2fe7fe502b5f900abc317461774827e1273a534ab7acc4cfe45105efc365ad0a99c71379fc5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-code-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-code-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-code-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codelibs/jhighlight@1.1.0?type=jar">
      <group>org.codelibs</group>
      <name>jhighlight</name>
      <version>1.1.0</version>
      <description>JHighlight is an embeddable pure Java syntax highlighting
    library that supports Java, HTML, XHTML, XML and LZX
    languages and outputs to XHTML.
    
    It also supports RIFE templates tags and highlights them
    clearly so that you can easily identify the difference
    between your RIFE markup and the actual marked up source.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">849a2714c0bcd777a51c79ecf333e4f0</hash>
        <hash alg="SHA-1">8ae20cc1eadb26bbc721611d509b808bf41d1a14</hash>
        <hash alg="SHA-256">2f7d5c92db46e76a7564dd98d4d00b822d808e21b01a2c9b60e8249c41351ed1</hash>
        <hash alg="SHA-512">74913a50a903913030531664348c0f2d2893bfc45a1c7ca9c1e0bb81ea1b78891dffda98faac76252ba5f3a98104c10e5e3577a038bf81cd8cc484bb834b6337</hash>
        <hash alg="SHA-384">78ce58565e44a2bc34ecb621afbc29cd7225d3290881eb36c5f5ae68d58962cf5f5f2643781b2130adfb797c3a155b22</hash>
        <hash alg="SHA3-384">f6e669fc5a87ec367318a6d083bfdf5e3facd278253c2c819fb857d0bbb5754b86fc05b3108cabec48ccc7e8512bac3b</hash>
        <hash alg="SHA3-256">9faac648c5b6fac73216dd77e8a602d3e1a68e5bff3d71eadb5ef744b70e2d50</hash>
        <hash alg="SHA3-512">4bf732c811e9546b50c925434be71127bda7d77ba6a03e2c6d4025d0b8ebcf0df5d4c07b928d2d4b6838b8a5882d21d5acf5c9e51a3db8538b1fb7ef02a8768f</hash>
      </hashes>
      <licenses>
        <license>
          <name>CDDL, v1.0</name>
          <url>http://www.opensource.org/licenses/cddl1.php</url>
        </license>
        <license>
          <id>LGPL-2.1-or-later</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codelibs/jhighlight@1.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/codelibs/jhighlight</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ccil.cowan.tagsoup/tagsoup@1.2.1?type=jar">
      <group>org.ccil.cowan.tagsoup</group>
      <name>tagsoup</name>
      <version>1.2.1</version>
      <description>TagSoup is a SAX-compliant parser written in Java that, instead of parsing well-formed or valid XML, parses HTML as it is found in the wild: poor, nasty and brutish, though quite often far from short. TagSoup is designed for people who have to process this stuff using some semblance of a rational application design. By providing a SAX interface, it allows standard XML tools to be applied to even the worst HTML. TagSoup also includes a command-line processor that reads HTML files and can generate either clean HTML or well-formed XML that is a close approximation to XHTML.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae73a52cdcbec10cd61d9ef22fab5936</hash>
        <hash alg="SHA-1">5584627487e984c03456266d3f8802eb85a9ce97</hash>
        <hash alg="SHA-256">ac97f7b4b1d8e9337edfa0e34044f8d0efe7223f6ad8f3a85d54cc1018ea2e04</hash>
        <hash alg="SHA-512">1fb11d19d8c63640b4c40907a80384b4176924f60e47d87b4c6cf611a062cba4220d990c08b8536b0340fd32985c08f969650afd3360a5bd288ecd89124f19a3</hash>
        <hash alg="SHA-384">4755bd309e259cb66d2c55e62ea07238f75c4c2c7905cbe22dc0cf8c6ff89f1bd82f7bcbf54cacabb985b7c45e849b8c</hash>
        <hash alg="SHA3-384">b9803dd035e2a09072a5ca1a9ab7018c8fb75d31a7bfa6d34fd02b5015a14c8ae0502290ce74a8b5963842a8e46cebf2</hash>
        <hash alg="SHA3-256">46ce536c02ecd51e5c9648eb1a6a7564fb6e9b0b97bb8de1056aacc590095b2f</hash>
        <hash alg="SHA3-512">b0bc502a5ecfa8a1d2690e7e1d36d34f59d8968575540c854d0ca763f0b4af6142fef2dab45de4acc17c2163617c6c7e094ce51dc90dda2a72bff2e75f31c141</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ccil.cowan.tagsoup/tagsoup@1.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://home.ccil.org/~cowan/XML/tagsoup/</url></reference><reference type="vcs"><url>http://home.ccil.org/~cowan/tagsoup/tagsoup-1.2.1-src.zip</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.7?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.7</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3957b18bf02a62edcb6726d074b90b08</hash>
        <hash alg="SHA-1">073d7b3086e14beb604ced229c302feff6449723</hash>
        <hash alg="SHA-256">adf46d5e34940bdf148ecdd26a9ee8eea94496a72034ff7141066b3eea5c4e9d</hash>
        <hash alg="SHA-512">ada37fcc95884a4d2cbc64495f5f67556c847e7724e26ccfbb15cc42a476436fa54b5d4fd4d9ed340241d848999d415e1cff07045d9e97d451c16aeed4911045</hash>
        <hash alg="SHA-384">b34c6230cd1c46e34067ae8429f72c7e031a1c0fc75b93ef6accf18fd5fe6a74c3659160b3199652d88bd916cbd63d4a</hash>
        <hash alg="SHA3-384">9a89b843fededac03bb2448087468814e1214c3de8e754a3456b8b6f518fff1db41b2e787a0a255b6d2a99906f3d2890</hash>
        <hash alg="SHA3-256">a8377efe9c0ccba595a223feb3a90bbfcb0a3f9b1ac30975abf1f2493d864f50</hash>
        <hash alg="SHA3-512">aeb8e1002420c8998b59c44c27574205a55730e7f8e299b88e730bb187d9fff3723347441f0e1adebb12839e1bd7c418ea1275b81c12a2cdb510faac76fc5369</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution-intake"><url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.epam/parso@2.0.14?type=jar">
      <group>com.epam</group>
      <name>parso</name>
      <version>2.0.14</version>
      <description>Parso is a lightweight Java library designed to read SAS7BDAT datasets. The Parso interfaces
        are analogous to libraries designed to read table-storing files, for example, CSVReader library.
        Despite its small size, the Parso library is the only full-featured open-source solution to process SAS7BDAT
        datasets, both uncompressed, CHAR-compressed and BIN-compressed. It is effective in processing clinical and
        statistical data often stored in SAS7BDAT format. Parso allows converting data into CSV format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcc5179208e31ecddd8ec1cd2f5fca10</hash>
        <hash alg="SHA-1">a02ea1b198c410a105d261efd2d7043739aecd8e</hash>
        <hash alg="SHA-256">3b7e7a32915e04caed5dba31be1430aa57b4f9fa2b3d0ab0ed29067510d16575</hash>
        <hash alg="SHA-512">c7aae9c61123efd9e2837800ba0ee8ce2304aaef5cd886397f226f3a39cf5c9deabc455a1e264877fe8cf59619a190be2658261f2f38dec026561d426592edb0</hash>
        <hash alg="SHA-384">21730243302236813c40b1e92d90370e3a094d025c3f824f6b9f1ddd1360719e9945fecfaaef7cb6704b8c04555a16eb</hash>
        <hash alg="SHA3-384">f9bf5d776b13bb030705979dbed329e7bd2e9a42c732c8a4f5eefc1580c6701ef65926f2a47c693aa0e30ab8b2ead0e5</hash>
        <hash alg="SHA3-256">a65a7c22e131f6b89427f5ad2c88334356bc961dea7117533a0a590955a2bdd0</hash>
        <hash alg="SHA3-512">5411a5807712a877570f9683f2e05f9eb09846446ff0017a67db6d47ee92fcb2f92ef1e0f213acf66590f173c0166b811b70445279d759fa60fa1dfecfded14f</hash>
      </hashes>
      <licenses>
        <license>
          <name>Apache License v2</name>
          <url>http://www.apache.org/licenses/LICENSE-2.0.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.epam/parso@2.0.14?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/epam/parso</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tallison/jmatio@1.5?type=jar">
      <group>org.tallison</group>
      <name>jmatio</name>
      <version>1.5</version>
      <description>Matlab's MAT-file I/O API in JAVA. Supports Matlab 5 MAT-flie format reading and writing. Written in pure JAVA.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6eccf45b3a4bb3dd0518afcf37b8ed35</hash>
        <hash alg="SHA-1">517d932cc87a3b564f3f7a07ac347b725b619ab4</hash>
        <hash alg="SHA-256">70db8cf9a1818072f290fd464f14a8369c9c58993e6640128a6e8a6379d67ac7</hash>
        <hash alg="SHA-512">11954b2ff5babb2596527a2b185b8de7e81877670d2e21093309039f54f9b5707d670b99e02aff9ee12a21321c562e64a71df7cca0f29edd157951d9734f7b78</hash>
        <hash alg="SHA-384">5fd8d73413bb7fdd99de3118fa0c6930098bed169550aaaf6d14e3103f01145983eb863ff1440fd1e3e9990619b39740</hash>
        <hash alg="SHA3-384">880425c89f782366671ba81473eac2cc0dcbbfa44ca09fd641e0396f405ba69599b076136010fe28bc530ea7d06300e4</hash>
        <hash alg="SHA3-256">c824d41403ec2b38504cc86f31b78f85215640c1fa8543c1f3557fe8155b1049</hash>
        <hash alg="SHA3-512">6239ce5101d3953c53cc03c4cddb84ed7e3bb595a6875fe1e11eba571f2f6e98b5ba7a99ea8e0f6f62dc481ee98d92b00a8857630fb564fc163f73fb5185beed</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.tallison/jmatio@1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/tballison/jmatio</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/tballison/jmatio/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-crypto-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-crypto-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7ada51914fddda1f71eb40409cfd2ad2</hash>
        <hash alg="SHA-1">dcee3a8c51e025bc43d2f735b49d04a27b04a221</hash>
        <hash alg="SHA-256">ccc76b4a563494fce5ecea084dc073690134a2ecfa1dacf40b0c33935f0eb499</hash>
        <hash alg="SHA-512">28c19f2f3843fcf2b68c876e53e312bdf59e93593d598b5eabcd736d7eabb12f3cec47d48917f06043f83c6cb4c7cf9d6d3cbdee9aca66a9a13a0686677b57ca</hash>
        <hash alg="SHA-384">295ebbdc0688023f78b6ff763f1d033c29774f70ef213fa0e21ff0d0283f2b4604ccfa19bd9fe2bfee4502e452a2b37d</hash>
        <hash alg="SHA3-384">11ede3a0e7679d7b56a414889fd268dd47a90b3cda9fda5535237c8030b82f91f8da74ef18acf84befadbad72f1153a6</hash>
        <hash alg="SHA3-256">b5296ac63520edde4c6039f5936d25f6e1e1ed9f2a2d8673c38897a5ff461813</hash>
        <hash alg="SHA3-512">e551b335821521813e9df2b762953dca841414434d9b43bb1c6334175cf19f534b87e6f482c508230200f1851899a8af50282e182c4a2e9bd043c6d168e1c8fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-crypto-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-crypto-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-crypto-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar">
      <group>org.bouncycastle</group>
      <name>bcmail-jdk18on</name>
      <version>1.77</version>
      <description>The Bouncy Castle Java S/MIME APIs for handling S/MIME protocols. This jar contains S/MIME APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. The JavaMail API and the Java activation framework will also be needed.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1e3e689feb09e088dd3219e4a0727289</hash>
        <hash alg="SHA-1">f2bb8aa55dc901ee8b8aae7d1007c03592d65e03</hash>
        <hash alg="SHA-256">659ea523fc58ccd142e9e74c5c6cf9a4dcf4288915a73dbaa5eb3edf1d5b0283</hash>
        <hash alg="SHA-512">368351848385f2b73598d2b8c5ee901428cf3c85c539790b21ba7b102f32494f5660e0479b1098af115314a8dd712723407065e3bfd8dff757d06ec4d6d900ca</hash>
        <hash alg="SHA-384">2454bcc4fb3999731c44c537d701c6237dfe5b3e89bd5b13b3cd3fc1058e126e359f37ccb78c166eea2e7df4fac26d59</hash>
        <hash alg="SHA3-384">f19cf8c4a86648907e9996cfa9c429245f640403a65cac311d5bae8f751c095507725dece68583c54740ded6fbac4de6</hash>
        <hash alg="SHA3-256">4c2947ee366015db48501871e644248f050b136782c50ce6f15a76c8ce841152</hash>
        <hash alg="SHA3-512">3b3ae0f336790254bce7bac15c01c700c68dadd8b91bdd5f61463f5cc929fe009b4f1704e328e1c8c92eaf5e9b28001c46bfe612a81b3a5eef0e643616b6775e</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar">
      <group>org.bouncycastle</group>
      <name>bcutil-jdk18on</name>
      <version>1.77</version>
      <description>The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b2c48e0e0feda8e2aa200a41243c4e9a</hash>
        <hash alg="SHA-1">de3eaef351545fe8562cf29ddff4a403a45b49b7</hash>
        <hash alg="SHA-256">947673bcbc5a8dde2d2fa688a5b7598d0ca6e2a74a7ea30cd93f04f6b3ad68f8</hash>
        <hash alg="SHA-512">95f424556934618a280688475245ccfb279d8896c0b63014706dc5645a37b5de34f1f9d6479f45bf56410b9fefbf47abd47e9b0f51e90d100f15f66d72207aaa</hash>
        <hash alg="SHA-384">965563a0c1688bb0097da3bf7a317b56e80d0441341633a71d8ace0eba770504f5f03e1c81834897211c6305612017e2</hash>
        <hash alg="SHA3-384">a04d0e3d51ecbd1a4d557377087296b05aec93afec2cabeb3faa10a195e95aacb35d26934f5f965618cad8edd8a732c6</hash>
        <hash alg="SHA3-256">0cdb9263370944a013089eb65d2433bc6ebac63c82d21af7ef5b6b55ab32d0dc</hash>
        <hash alg="SHA3-512">73cd5a440af8ad4e94f4a4dc3c057a9939ee1d14c254e9152ca3622ad27eb4d4395e0f97bae94cd4b3caaf234dff2a5efbbd18356bc328f8683c300eedc2ca9a</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpkix-jdk18on</name>
      <version>1.77</version>
      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0921c60f2c9acc8d1066e01efab546f2</hash>
        <hash alg="SHA-1">ed953791ba0229747dd0fd9911e3d76a462acfd3</hash>
        <hash alg="SHA-256">1ac7fe8efd5b2f38cdc165be5a0675734fe44808dab92707201f03a535d6f1b8</hash>
        <hash alg="SHA-512">ac5c081b5b11ceba1857cfb9a5060497d3a2b666d99e9ff47ded73cafd749a5a63cdf422a1bdb29e976471b96937c2f7d0c606bcb631150d31977a37e3540dba</hash>
        <hash alg="SHA-384">3afee55d4db121ba0ff3bbfbfae8cbfea9b58adec0eb06b9ebfc333b28c7e163db7280c91ec62b716f9fedef9a83758d</hash>
        <hash alg="SHA3-384">1239484b917324f6ea52b6b8a40bfaa9f89ad3defb842499f2d8d049b28d0514961ce3470c3b21a66e12435b86b71740</hash>
        <hash alg="SHA3-256">0e0c889ad3b77fcf6d912741b51a74c7d20fdf255bed1885de7c44d9ce434fbd</hash>
        <hash alg="SHA3-512">ed9540f589209650d9e3172a034c84cef5a4d8e77392bcd6c42ec40a929de6397e5cec412c5f60dca0db8decba6ce21408d3f1c7a9b8b78ab5a5f6e178113dd6</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.77</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca01387064e08db12e1345b474521ff1</hash>
        <hash alg="SHA-1">2cc971b6c20949c1ff98d1a4bc741ee848a09523</hash>
        <hash alg="SHA-256">dabb98c24d72c9b9f585633d1df9c5cd58d9ad373d0cd681367e6a603a495d58</hash>
        <hash alg="SHA-512">56c359f1370131f91eaeae3ec1d44884358f4296defd8d7516c7b81b9b66158454a667eb1c859d8ad919faee074ae3ecb4ceba2a39a3dd799bef9ada2d8c3da3</hash>
        <hash alg="SHA-384">2951d9bb941e960287cc4a8947a0239ccfb9bd5058002bd5b9fe045b0bb22e4b23f31357f65211c191384cedf3ef3555</hash>
        <hash alg="SHA3-384">b02af7de4704cf8f93fcd876055595bd9d117afd5eecf0fa883c43e30a285cbbd71473dd9197d6bb41f2b7702bc2620f</hash>
        <hash alg="SHA3-256">6e69119cc95e642da12dcb0043589137bc7b36ba11ff3299598aaa510b8f0c03</hash>
        <hash alg="SHA3-512">da87498233675c659ed554261a641aeb2eecc83df76864f199fee9d5c63564c2fe9465baf86d9ac9e409bba74a4de1e7197eda8736852f4f4a729301ea8c9233</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-digest-commons</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f66f60d84ef01d6cdb591d659afbc3ee</hash>
        <hash alg="SHA-1">daf36bbdc98783ddea045e994f38263b76ed651a</hash>
        <hash alg="SHA-256">d6f6b490790c48ba84660936ae44cdcaa406a53a2a45f37018fa5e4c2ca85af3</hash>
        <hash alg="SHA-512">27d6c84d1f2a74a06a4d9d5ceb06d88e406187dd4ca1e8d9b7486fcd6c40bfbf0336e23c4efaaee4e7a63d9def595b814aae753b95e54aff02c134bd39a6c071</hash>
        <hash alg="SHA-384">feb46207572d10ac4685051b5b2999f93e2b67f313a823b8cad71a4eb7f96619e6be078cecfdabac84e98f5bbc203f06</hash>
        <hash alg="SHA3-384">9a0247fc5f13859f2d6c9b23656a9f40702cd110e9bf5d1c862fdfeda2c1d87733d8ab2253c98f8001c4238062f418d6</hash>
        <hash alg="SHA3-256">9c147dcec485f4b7fdd80cd32e3734063be1140a4a6f6136cfaa4efa1bba4d6c</hash>
        <hash alg="SHA3-512">3d6da1bdf408fa2c3298f10a75899b1ea7c9327858366e4e8d2a7beea05d87d3189db0439fe80dc16896efac84e81f0a2c349162fffaa9683aaba9378737ef3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-digest-commons/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-digest-commons</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-font-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-font-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a8d627d8d18e08df1d18a7239d1c8f84</hash>
        <hash alg="SHA-1">b57d91785f40a8578d9befd7ae7b8d84d9da42d5</hash>
        <hash alg="SHA-256">593c22d0fbc957886f1f3f45a617b8ade273c3d6e5276ab102e2a41861818738</hash>
        <hash alg="SHA-512">b59bd74551804d481f81d730ea8f4668dcb04b241b2b409b4f10854d0e28c7764194cf5e9a147a439d9430326da5edb693ac0ccc30fb5043564646cd96624c67</hash>
        <hash alg="SHA-384">95a3ea862c9935defeaa3b860e01ff3e31e51c89dad183c6e9185a067fadd1801b47552f40f34ef0b87c23102efea2f5</hash>
        <hash alg="SHA3-384">a2016fcffe9346d0c3cda27c13ccb5814181618c11e8c34255fe43139e323d89cf4fa7bbd2b75cab6470bd6651857037</hash>
        <hash alg="SHA3-256">7c6c80887f4d03c62ea3c1379f4b09202a7b506bc08a4c6ae57c6a2230b0cf79</hash>
        <hash alg="SHA3-512">8c9a6219a30399b7307895390444ef1d0b235180dbbdc0b39727e3e396066afcec27ee31796ee7103c2496b8b2166ee77c6158be2dcb04da81cd65e739fcaa99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-font-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-font-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-font-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/fontbox@2.0.31?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>fontbox</name>
      <version>2.0.31</version>
      <description>The Apache FontBox library is an open source Java tool to obtain low level information
    from font files. FontBox is a subproject of Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f36b37cbc1d0916656c51ef8ac3116a3</hash>
        <hash alg="SHA-1">96999ecdb7324bf718b88724818fa62f81286c36</hash>
        <hash alg="SHA-256">0d36d14d3a43fd7a7d8d84d317ed8201b9d16fcba75b27e54f6f39775348c032</hash>
        <hash alg="SHA-512">67fb05fc1ebe5e6823ca68b583974dc353b05c4a81a529e62dda66c85469889a3cbd0a25a588a0e7e4cda2740345b9f99baf25281fdc976ddeef5ee82e98e6af</hash>
        <hash alg="SHA-384">4f49cfa746108a9839a17a6639c5340050a9809f511cbce6cb173db5449cf8e5a0ce96344ccc456f9efcfbb8431651a7</hash>
        <hash alg="SHA3-384">f4430c1abb3ae9d919a50b4efeead40086c08585f2527e68b91adef0865cc531ad9e13ab932d6f0cc3907fb139d696ba</hash>
        <hash alg="SHA3-256">cb504f7132b69c058194bd4c6f636fe3fa9a6878ef7dad092b9666e6c2e28a33</hash>
        <hash alg="SHA3-512">2927ffeb217aad5d2b18dfa586c1382c132de5b4c2424e8bb7803fd7a99f6881117abad846e8dcd4a2982f446e658173ddde0b55ea65011528e1873ebb008c4d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/fontbox@2.0.31?type=jar</purl>
      <externalReferences><reference type="website"><url>http://pdfbox.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/pdfbox/tags/2.0.31/fontbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-html-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">691a7858af0db5116e1abb633a852757</hash>
        <hash alg="SHA-1">47f6a4c46b92616d14e82cd7ad4d05cb43077b83</hash>
        <hash alg="SHA-256">bbaad920536b6bbd66e5ae80fd50d08681fa655fa226f84ccf88dc0a83cc5ab4</hash>
        <hash alg="SHA-512">c6082e1587cde3790a809c090416bacc72cac2b684e82011234e8bdd6dd158e21d9965b1074d979433631616872610ae8376024fc3cd918bb9daae8939dc106e</hash>
        <hash alg="SHA-384">f05f81473bee2862976a238e879446bf65b77622ef15b22003842081d0dfa8839ea6eadcbfa7bfcc4aff8bf3d14b7d89</hash>
        <hash alg="SHA3-384">2026b68bf864d61848a3b84c949e2288f02c8b9fa7cfacd2c676aaccfa28eb09f71b6926b1272aa3186385118334920d</hash>
        <hash alg="SHA3-256">4e76ee9a200baa763fa273395408abc8a290da9b9d5763d61a4a6f053611f942</hash>
        <hash alg="SHA3-512">76d2acb50cda489aeb2016858c087c702225e0f056c7d7fdbc32f5cdda215d1033e86ceb95c089f3fd0a3ed564dcadbd9d2bd93c11374df7d1c028f5191ec244</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-html-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-html-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-image-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-image-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">416732e0d5d213a7001b1b36d097fbe5</hash>
        <hash alg="SHA-1">8b14bd30c115349f64e5c8a363f158432dc71952</hash>
        <hash alg="SHA-256">df83dfc51f0dd7112fb50f512526c779cf76bc47011f4d228c173e9a041b1c10</hash>
        <hash alg="SHA-512">5fdb0346dc64c57794446317a09412f45e64b36c0930dfa10ec3f7b0eec55769c29f0bd018f23f035782a0bd763a768021f308ad7a279c6122141f99f7398652</hash>
        <hash alg="SHA-384">11a41b4ab011e4528b531bd4c55ae04fa283fd6bf4c24e3dbf6d116b5ff6d13056f820561ded42eee6063be27633ee53</hash>
        <hash alg="SHA3-384">d179bf510602aa1a4c3cb26ae5775ccd1932925e3fac20c4281cf5ac2bd0cd3cf8d8db83a44c1900e133abc2ecd5e910</hash>
        <hash alg="SHA3-256">0f1b3357f334383ff35fa28e9bc1d234eee40ed9a5c7a98f7f406b5504b91148</hash>
        <hash alg="SHA3-512">f00a49a68a339b9a407ee0d66ddb0bb2f0cf06ba3d8bcd762ba1cf117da1ca1d3a625d4993efff870e2c691a012ed1db2e0cd59ecd3442309a5e6a012b97959a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-image-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-image-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-image-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar">
      <publisher>jai-imageio GitHub group</publisher>
      <group>com.github.jai-imageio</group>
      <name>jai-imageio-core</name>
      <version>1.4.0</version>
      <description>Java Advanced Imaging Image I/O Tools API core, but without the classes 
    involved with javax.media.jai dependencies, JPEG2000 or 
    codecLibJIIO, meaning that this library can be distributed under the 
    modified BSD license and should be GPL compatible.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6978d733bfb55c0a82639f724fe5f3bb</hash>
        <hash alg="SHA-1">fb6d79b929556362a241b2f65a04e538062f0077</hash>
        <hash alg="SHA-256">8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a</hash>
        <hash alg="SHA-512">5fb01617717fdc6db514fe6da2b253c3d925326190a8ba101941f29bff6e3c147e6216c501ca66b4d4051d213b1c05fadb3707563782bfcc5674357338786c01</hash>
        <hash alg="SHA-384">abfb07fec06128894a0b8f59f9c98acde24721d776c82609c587f3ae1a4a124a0ac88e532244241edacd6fc7fc44b4e4</hash>
        <hash alg="SHA3-384">d1f54a3a9c259dfc8d724365bc7a26a03512b8585dfce02d3a3c8d47a1b23e9c495862846c896eb1202fe2611a3cb989</hash>
        <hash alg="SHA3-256">bfa5a77a8af9e45843dff421e3fba2b433966675ad00fed54958bc3abdfef1d8</hash>
        <hash alg="SHA3-512">b7a52696c362e73dba1aa0e82437f1b15a5463b887e18866d0925b0360a56a0980fc4b538e5c85767bc3bd4afc3d642c5355b6d681aaccea5837d5b726409d3f</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD 3-clause License w/nuclear disclaimer</name>
          <url>LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jai-imageio/jai-imageio-core</url></reference><reference type="distribution-intake"><url>https://api.bintray.com/maven/jai-imageio/maven/jai-imageio-core-standalone</url></reference><reference type="issue-tracker"><url>https://github.com/jai-imageio/jai-imageio-core/issues</url></reference><reference type="vcs"><url>https://github.com/jai-imageio/jai-imageio-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>jbig2-imageio</name>
      <version>3.0.4</version>
      <description>Java Image I/O plugin for reading JBIG2-compressed image data. 
	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c51f45dc3d29bbf716774f9ff9e95ad6</hash>
        <hash alg="SHA-1">ad09a9bb94ea791ea81fb6c5bc2b13dd77872598</hash>
        <hash alg="SHA-256">29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb</hash>
        <hash alg="SHA-512">1fb8888a091a9b94ec39a2bdf5068bdb54ecadcbe84f8cc14f4eb31088d46c1a6e92c4cc183666d65192d15d30b1dbf6b6f35dd60937e2a84a553a59777c133f</hash>
        <hash alg="SHA-384">96d93f21b35a50c14812cb749a4ec46e8dcc7808726c823c911855d4389ea481cce2a81917d6357790c612b7a3e0d3b5</hash>
        <hash alg="SHA3-384">73190c273525c93b4c4428781f38c9df992eb73238f644909580e5006208f5d187b95d2d3c942b5baad62d14e5a2787e</hash>
        <hash alg="SHA3-256">5e538efaeac27914936e57a5875fdc5f3116f971bb420c628f5217b0bbe37724</hash>
        <hash alg="SHA3-512">7263b4a8399ba499d7f01fa898744ef5e4500fd7ef70185a9c5ed66fbea5839a0b8d41954a032e5454b46b12d222a9b5654e33ba20a39724a239a09f3515d692</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/jbig2-imageio/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=pdfbox-jbig2.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-mail-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-mail-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b983906ad665803e6650d0b90bc182fc</hash>
        <hash alg="SHA-1">b1af32e8befb8e6ad4d2ca333e53e8002e81aa24</hash>
        <hash alg="SHA-256">47aada967a8d1c59ba3afd2955f24624abbd9e5e3954be5636e0be7d5e5db03e</hash>
        <hash alg="SHA-512">d1b0d7c17ca4f7d189abdd8bdb5b9a538e66c3344060e9fa4e8493f024f58c9b4322720ad5009c8c0cf4c32d4a4849f2a5fb08b680880f03171ba202d7dcc4e2</hash>
        <hash alg="SHA-384">074c907898d2984ecf019c203c22feb02aa964af6fd827aee3b956f3e8540e94d820720a0ccfc020a8e45e61b9792c81</hash>
        <hash alg="SHA3-384">8aa03e4acddf5220ff908aa575185cc61acfd253703abab37c5eb15096dc78b6252dc8fc5b30b088ccb121126d26ee38</hash>
        <hash alg="SHA3-256">cb6412efed363294ab94ae87e18ed0d5a440f174e23dcdf8e7aff671259d5fea</hash>
        <hash alg="SHA3-512">d9e64d04c274c2ebacac603b41000b20aacc5aac8ded7c4284344e8b036449f1be1fcf36a3b17843b434b33b27a0f6abea593bd3b8d4eb3a58e391d980d2608c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-mail-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-mail-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-mail-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-mail-commons@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-mail-commons</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">142e74ae94858e486efd68189b62fcf0</hash>
        <hash alg="SHA-1">f7b7110e5a2bfa254066902b5363e08150db0c8d</hash>
        <hash alg="SHA-256">5f55629b360bdb13be85bc67ab25124208cd23f76e8d817331d70c1bca9cf1e2</hash>
        <hash alg="SHA-512">ef1f026bde9820d815924a55bfd4cadeaf3f736a3e835467210dd90260d3cc7f2a5d4065e9cab584cf8c800d130d0f4441c58adf92a5114646022c124b4b3402</hash>
        <hash alg="SHA-384">593ada28fb681c991284e8fe3a5427c392f43859a5fe7b3c9c306b9bb4eea6f15e40facdb13c6853b3a6231f7312de86</hash>
        <hash alg="SHA3-384">5de335f6ef88bc6fdc518be8f8f907d51f1a8ee0f9fa9713dc5c4309f2140d313b39b5a3865410becb246f4ea9223c5e</hash>
        <hash alg="SHA3-256">44bfb8b3e6cd112b054d1a0f81e2b8c593459a6fc81558a2600d7cc0a5fc151c</hash>
        <hash alg="SHA3-512">0baf5e0119518dccbbf407cc0ac0a970fe5d49b38e9a64614be66930856de9c38ea6d8d178027a5283d3a1a026398bf3a854d6373a698108f2dab0a702c19270</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-mail-commons@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-mail-commons/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-mail-commons</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.james/apache-mime4j-core@0.8.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.james</group>
      <name>apache-mime4j-core</name>
      <version>0.8.11</version>
      <description>Java stream based MIME message parser</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83990269ea1fdba6f423c26963a0440a</hash>
        <hash alg="SHA-1">6d1eb5f7b84eaa9d38fca13b761f01c693aef3da</hash>
        <hash alg="SHA-256">62a7853523dff0c382065df82fa280c1bf59bcd9b329180d707b0f6f15ceb903</hash>
        <hash alg="SHA-512">71f231452d3a8e64107633afd9bacb2fae260e380da6297fcdab90d1b0a63da66c32eb2d35759037c3fe5ff1b9307e0304a6ead4602f3943581aac6aa5508285</hash>
        <hash alg="SHA-384">ba105a36ebc9a44dd8cb4de6de72943263e094471546a58406c7ffcc48d0aee27d08ff83aa91c4a3061939d88d99b357</hash>
        <hash alg="SHA3-384">70ff11a3b568b63e843d2416a7f38d3d5c114a8a3fe8c137d30047697c694c4dbe2cf358a745325e5b1f6e6eaff7da5e</hash>
        <hash alg="SHA3-256">7747bf3e939e0fcd8f5a414419ecf486979cdcc59910b8331294589238d9b547</hash>
        <hash alg="SHA3-512">e6b7aa4ddb6d439485ef32b29e6d97767516c4ae4680a567b10fc8a366d15db05e8e00c2ae1ef35f9eb976f01a345e2b5f986282902444ae525b37dfc187c418</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.james/apache-mime4j-core@0.8.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://james.apache.org/mime4j/apache-mime4j-core</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MIME4J</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf/james-mime4j.git/apache-mime4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.james/apache-mime4j-dom@0.8.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.james</group>
      <name>apache-mime4j-dom</name>
      <version>0.8.11</version>
      <description>Java MIME Document Object Model</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">99a0d8c9c024464be1cae9eb5c96757b</hash>
        <hash alg="SHA-1">f0d42ab9a5832b5f5d05afc004b31245b838e0fc</hash>
        <hash alg="SHA-256">80b301f08e21a6de6d941bb98ef1361ad816c057b7aa61c95cf6249e90d87183</hash>
        <hash alg="SHA-512">36f364785fd97ae7d09867ab82f73cedf252c5226acaf36cbad9e756495dff10adad7efd0ae44812fb2ef5489a6b4368cb67f8bffa2cae0f3fb49dacf0b250ce</hash>
        <hash alg="SHA-384">924882db0507edcb01230ca7dc12a5c03b538b5cd0916c4ff7b3f6ecb4381fd66501d600db60648baec305fc5e3b8e35</hash>
        <hash alg="SHA3-384">b95e5290987f3fddcd7f991fee267ef61c68284e8849b540e69cc691813d6732366adcca63e45ab229d8f46fa3d622a3</hash>
        <hash alg="SHA3-256">4bd171adaa1660e8b889139dc1699543f97a44f41ac6e9cf122b3dd9d38c2889</hash>
        <hash alg="SHA3-512">8bae7fa9b91d4db72f912aa793159be0acfe2fda5b4f6ef07ffd94c165382a5225dd9fdae9f5b08133908215b5daa12d293b49883c51771105ef45abd9957fec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.james/apache-mime4j-dom@0.8.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://james.apache.org/mime4j/apache-mime4j-dom</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MIME4J</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf/james-mime4j.git/apache-mime4j-dom</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-microsoft-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-microsoft-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">039df35a701303f66733e597d957a65c</hash>
        <hash alg="SHA-1">235a20823c02c699ce3d57f3d6b9550db05d91a9</hash>
        <hash alg="SHA-256">4ecc4a54049cb82ebb57dd7220243a50dd1fae9673f9cfd0751b12405d352f76</hash>
        <hash alg="SHA-512">0cd421c7911d761fabec30e6c730d9ccb46559866719c1ae138e0ffea86ebd9b027de19cae405a83a3d8f4efa5f1deb1937107816ba9e00d779b56cc6608ae23</hash>
        <hash alg="SHA-384">4f6e21009a17e40b9281165803115a97325db0fd133810ad9688b3e2f8a1a728eb3fe330b765f960852dd220fdf45c6c</hash>
        <hash alg="SHA3-384">1810a5dd5da9bc2102e85c13cbee1384daf3dc7e1a2bd29e3e0c3413f1cfeb5f945b23d1f2f01f173e15f85098abec9c</hash>
        <hash alg="SHA3-256">12b08c6c74f0b1ebe3a29d4e82fcdd1620e877ff2beaf2d6a2145cc9aae0dcd0</hash>
        <hash alg="SHA3-512">c2d45950af0fc4413657334a2deae8ba7ad90e9421db2fe664596c0c69be2291fd71532b8d4d8dfad130b28c530c6c69833ee60a9817ca9a27434eb36b6cebc6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-microsoft-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-microsoft-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-microsoft-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.pff/java-libpst@0.9.3?type=jar">
      <group>com.pff</group>
      <name>java-libpst</name>
      <version>0.9.3</version>
      <description>A library to read PST files with java, without need for external libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26a2227892a5859875c3bf2bdf88bc9e</hash>
        <hash alg="SHA-1">928a6698850cd89577d28201ff1ac443bb339d2b</hash>
        <hash alg="SHA-256">039cd61635ded94dba67f909d3b1763e13f9c23d02f9750eb6259af10e1dabdb</hash>
        <hash alg="SHA-512">5152d327928df29c06d63c0465675c88f0f0fef7911b26da168824650275aceda9742a2fdc7ea383a7bd1906c9c088641694220314ff0b0cc62f3189f863e9f5</hash>
        <hash alg="SHA-384">361c666d48e09092eec9ee06ccdf3e04d2c77cdcdb53a9a5642f47cfbbaa2828019d598235277935d37377cfd6ea9b63</hash>
        <hash alg="SHA3-384">25007fb81db8ee9c6c1823f56183e741456d2c118880b5567d77591894fdfdc6f2b0906fee68e5c7c6ca4310ff9e66d1</hash>
        <hash alg="SHA3-256">88fb6ff44e11f17c5e90de23601452b9444c2158316bcad9410965b73d411845</hash>
        <hash alg="SHA3-512">5191d8a2d5544e1b830dc38c685666cd442d3a6de813f8cfbda8e18e57b6fc13993e0f4e19682073e73956989039b8cddfe77c241ec2d1d558f0f4c2f3614820</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.pff/java-libpst@0.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rjohnsondev/java-libpst</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/rjohnsondev/java-libpst/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.poi</group>
      <name>poi</name>
      <version>5.2.5</version>
      <description>Apache POI - Java API To Access Microsoft Format Files</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7725f44e62223d1f37e7a4883f01425</hash>
        <hash alg="SHA-1">7e00f6b2f76375fe89022d5a7db8acb71cbd55f5</hash>
        <hash alg="SHA-256">352e1b44a5777af2df3d7dc408cda9f75f932d0e0125fa1a7d336a13c0a663a7</hash>
        <hash alg="SHA-512">32eeaff6e8fcd587bcf5b2e1a7d10745bad66d3def9f228c4df124dd401193dc5df34c1304448ac8d9b019adb8ee321f09bf5d00e14c7665ddf0c33de5570c85</hash>
        <hash alg="SHA-384">c886f4c610f06eb39b85ce2636a47f8f26fffba19766704715682704ed80b762553b46e87bc5b4018d82a203176b0778</hash>
        <hash alg="SHA3-384">72eb448c9f16ca240b042b995993511ec46326f583bcc1d3b8cbe92073688b787ac5d3942fc48d84526555f51ea37a1e</hash>
        <hash alg="SHA3-256">c92f71cfd416fd0db31ae3b0dd86c4375b16bc6a8e019ac2429bb930d1c8c84b</hash>
        <hash alg="SHA3-512">c7f63fc46d89eed6042125c551d4fa97f03f088bbe220694a19bd846655331fa8f0e620d63d5ae7e48248dfa61b9851980bb54bf2f7bc145b9f52239a41fd564</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.poi/poi@5.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://poi.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/poi-user/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
        <hash alg="SHA3-384">f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e</hash>
        <hash alg="SHA3-256">919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c</hash>
        <hash alg="SHA3-512">dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar">
      <publisher>Zaxxer.com</publisher>
      <group>com.zaxxer</group>
      <name>SparseBitSet</name>
      <version>1.3</version>
      <description>An efficient sparse bitset implementation for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fbe27bb4c05e8719b7fff5aa71a57364</hash>
        <hash alg="SHA-1">533eac055afe3d5f614ea95e333afd6c2bde8f26</hash>
        <hash alg="SHA-256">f76b85adb0c00721ae267b7cfde4da7f71d3121cc2160c9fc00c0c89f8c53c8a</hash>
        <hash alg="SHA-512">c5609f2fdd72ab2e7461a03c85004a47941b883926f84665302bfff35aba5fa48d4ce47ac24314a3bc2dd7c70e1f8d824567e5026fd17485b06c44999942af5f</hash>
        <hash alg="SHA-384">bb6204a7383b1ad02f5f314c65ad50e264d4f7818e1aeaf7b45b28124dc740eebee3ff74fb07f09787dcd3985fe6de17</hash>
        <hash alg="SHA3-384">ea39ffd286957150adcc1fd5aa392a8f02a5a7b7efd95d0dbbaa6d359f3a376f0adb4b953f9c54087670bbab6625d653</hash>
        <hash alg="SHA3-256">361ed8bdf596a2f4ea61b0ed452ceabddbf3ff581f8dafa203e27e537c558f75</hash>
        <hash alg="SHA3-512">5ea52aee7b1f6e44996cff11fcb11c72c63c1558fd90824eb65e758cd375d038c9c441f7e52a8b234d8dbac26d9891146de2c5d6008c71bae7566c771abae418</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/brettwooldridge/SparseBitSet</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/brettwooldridge/SparseBitSet.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.poi/poi-scratchpad@5.2.5?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.poi</group>
      <name>poi-scratchpad</name>
      <version>5.2.5</version>
      <description>Apache POI - Java API To Access Microsoft Format Files (Scratchpad)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">931e2029cb119bff90aea01207e20ea4</hash>
        <hash alg="SHA-1">fc600cf765a49d73935a6e48a5b84f4abcdd0518</hash>
        <hash alg="SHA-256">233b279830c8c68ce57b3202164d5bcee53850a770883c4674cfb8d3dd52fc56</hash>
        <hash alg="SHA-512">ddcad7287cd94a8c36e288f63495d6e44c3a99b08009f8e357c0a2c261fe9fb863b236a69764bf389cb645c682183dd45624b21887bc52d30d5012d9899c4a39</hash>
        <hash alg="SHA-384">af447bcfc528e7e98f904d0f2917399d083e2c2aa7c6cb374a69436bb75aca3eeb204b53b2c448325cd38444ac90a422</hash>
        <hash alg="SHA3-384">af075e2f7d99a233abd329b0ac06050736cfd4b7f7a9bcec53d244c39ef0cd1a3ea6c8fb0317e18131a3f086a21e2fcb</hash>
        <hash alg="SHA3-256">14341f9774adc0d5253395d1626fc18fe916f4b7b87d64995530769667d65c28</hash>
        <hash alg="SHA3-512">34c51a72b23d5680f51080e60d1c162b1602683200b1d3f6aa40f025682979a488ab016ec17f9fcb89dc58b590961215d21b4ee23b966e3651ec7ae4c2c78b1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.poi/poi-scratchpad@5.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://poi.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/poi-user/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.poi</group>
      <name>poi-ooxml</name>
      <version>5.2.5</version>
      <description>Apache POI - Java API To Access Microsoft Format Files</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53651e835a9dbb5c2eafcb540ed76fd6</hash>
        <hash alg="SHA-1">df9f2c52371eeba24db8ea8cafa77285c3cc0742</hash>
        <hash alg="SHA-256">c6ad01a10cefa1d2a9c1b552bd4293a3eca29b513353f1ec814041d38da9ec5b</hash>
        <hash alg="SHA-512">212c26c3e4c30b9b6a66d9e1f26170eb52068831b0c7ce1d0e46ef18eb98a52753158343ec203d927cdfd4822a214b752c8e60de20c343956996100cf3812785</hash>
        <hash alg="SHA-384">4ba7e7c54536228ce043e67e3d25cd6bb7b06827e5147f39f8fcd011a7159e83212a203826bfc4f1055531a388c1a37c</hash>
        <hash alg="SHA3-384">9a72843e8220ab8edc1902bf415fafebdef3e1172f9c3bc80bc5730dbfc8dd7045d18c253baa53bada831098431c1c54</hash>
        <hash alg="SHA3-256">2c0a9346cc2aa74cc5fc8dd80dd00937cd60bcd467a3402f011b4691dff038d8</hash>
        <hash alg="SHA3-512">8f11f1d7c53dab552cbf5760a1b2faf2e63e9912ea6f09f942ba3a6600cfafa2d508b38c11afcf9f6489063a6826a9f2cf110ff5f9c8dff2eff8832e14a561ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://poi.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/poi-user/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.poi</group>
      <name>poi-ooxml-lite</name>
      <version>5.2.5</version>
      <description>Apache POI - Java API To Access Microsoft Format Files</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5cfc5c5f7132a00ad580e899dc71e7a4</hash>
        <hash alg="SHA-1">eaa61452d8f0d13080fbb4757a392f09f90e4c49</hash>
        <hash alg="SHA-256">6d4ce6736c422c52e47ffbfa08c784e1b8c188efb69583ac001a0ab16022d774</hash>
        <hash alg="SHA-512">b27dc9632eabbb17f92b877049af06e03a0423bfe66605601ef7998ac60d9c3569745e82123cc1c2492081e280860f9c1eb987b51095edd95a822c635ec73e5f</hash>
        <hash alg="SHA-384">3779718d67b3fdcdb8099aa04fda3967bbb88aafc69833fa1a28363bb89a56566d7765b4a7bff9e05cf16944d7bbf156</hash>
        <hash alg="SHA3-384">90f8b56efd464bf813f09465e94aafe84a516f5d810abf392bbb1f077dc78b9d255feeb83ec9dd682ea586f7299dda5c</hash>
        <hash alg="SHA3-256">971eb07ed43d2f997cea912792917454228d8f383fed2c3ee7b58e1d1e50e8a2</hash>
        <hash alg="SHA3-512">6cbe68a24112fef6b78de7d896ab8a9d1a93402e93cdede029e242dfba14cab51fc79c2eebff19bf8a261373133921db485cbb288ea09bfc7d7aeea9a3d3691b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://poi.apache.org/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/poi-user/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.0?type=jar">
      <publisher>XmlBeans</publisher>
      <group>org.apache.xmlbeans</group>
      <name>xmlbeans</name>
      <version>5.2.0</version>
      <description>XmlBeans main jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">723ab70862ae085e3c4018b0dd8c19f9</hash>
        <hash alg="SHA-1">6198ac997b3f234f2b5393fa415f78fac2e06510</hash>
        <hash alg="SHA-256">5a344f323c049b7024edd39bbd58a38e77eb44218aad2794879e7f4ac3ca1de1</hash>
        <hash alg="SHA-512">83ff05ff419acacedf8dc5ba166a1241b2211ff6839e865f405adcad7b2903eac2042d1acb713c5492f2561c1a260ccc2b4af6b000142ab9ab973b2a7d21bc6f</hash>
        <hash alg="SHA-384">f2e581adfb067e4bd90394bb58524920a8454eb8060d324019d78ade821dfe4ddc607066cad6d11246df95e4a89fc8ea</hash>
        <hash alg="SHA3-384">1bb38b0d38f819520d45ad3118277bdf480a7757b9bf38b304147c52b54200dff4bf9dc210342a2e146107a1d16af520</hash>
        <hash alg="SHA3-256">ca850952c7cfbd349e7ab1e3a5c355a6e268266a4a3674a513a43dcb1fef2997</hash>
        <hash alg="SHA3-512">f23e3db1f6625a2e6228bd90b11c0323b7c2543cf76c5e5df9d52deb3d8077dccec5fc7a8559375a23c8e61df6e48e87781ecad7c2cbd32ba9d993299b9c9005</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://xmlbeans.apache.org/</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/XMLBEANS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@poi.apache.org</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/xmlbeans/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar">
      <group>com.github.virtuald</group>
      <name>curvesapi</name>
      <version>1.08</version>
      <description>Implementation of various mathematical curves that define themselves over a set of control points. The API is written in Java. The curves supported are: Bezier, B-Spline, Cardinal Spline, Catmull-Rom Spline, Lagrange, Natural Cubic Spline, and NURBS.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc3aed90346691e7c79da06bb6606beb</hash>
        <hash alg="SHA-1">3d3d36568154059825089b289dcfca481fe44e2c</hash>
        <hash alg="SHA-256">ad95b08b8bbf9d7d17e5e00814898fa23324f32bc5b62f1a37801e6a56ce0079</hash>
        <hash alg="SHA-512">772b06dbd310a8a06a0c2d3639ad2d16c54a78bcb845274b303d140699ebb15c641d4e078f28a75467fc05b5b3d35bc2c05f7fc44324dcb1c96f76f90378822e</hash>
        <hash alg="SHA-384">48d790121d66e144173b87ae4c91158157b1bc93e6a36ffe4f97d42bf669e26c27b6604de1ecda2e52c8b03dcf2910fb</hash>
        <hash alg="SHA3-384">4a3836dfde7ac4f58e3a6b19f85a4ba7278d1283f50bb77e13459065b78ddf6935ecdfb4d7fba4ce480f684db588fbc9</hash>
        <hash alg="SHA3-256">f60e3def4ffb7d6cd36ab667ae9339ca21b4459c88999c906b0afd0090fb5eab</hash>
        <hash alg="SHA3-512">fafdbb6f260d9934fd3b9344c409dde3b59ca887e80a60f0146c18684816a093ca9cf79bda87a412cbdc1a9e36eabe8619673e28b3a946881a8eccc46568596e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/virtuald/curvesapi</url></reference><reference type="vcs"><url>https://github.com/virtuald/curvesapi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.healthmarketscience.jackcess/jackcess@4.0.5?type=jar">
      <publisher>OpenHMS</publisher>
      <group>com.healthmarketscience.jackcess</group>
      <name>jackcess</name>
      <version>4.0.5</version>
      <description>A pure Java library for reading from and writing to MS Access databases.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eadf0d092b2958de153901d0fe70eb61</hash>
        <hash alg="SHA-1">78e71fb55d742715b7a2dc8e0a6c2dce218c8e17</hash>
        <hash alg="SHA-256">909289f4c955378449685bd3e8468837dd751bd8d9338bf830ae1741c6a4afb2</hash>
        <hash alg="SHA-512">78a926f556ce305076d006d0888693fdad2f35bafdd5fa9168f191d925b7c3ac2958775f20983c49d3d0289caa94ce711ef7f229ee43701263fd11c150b94b62</hash>
        <hash alg="SHA-384">898c114440b86dc23a48a20ac0e89f7a8a8837e46fda9e0b4edd3fb32da5a750ddd1203123b2135e89e7f732cd111d08</hash>
        <hash alg="SHA3-384">f3aac7fc4dcd102869b2cf949be443c8fb7bac727370b0b47cf0920282318d2df69ac418b6821a8974636ce48fc94362</hash>
        <hash alg="SHA3-256">1aaca1d22b0dce8683d93fc3683160bd4897347e63981d342636bb792c3d88a2</hash>
        <hash alg="SHA3-512">9386a95baa0cd58a57e3de8746d15257c9180a02b830f522294cdada2d3eba5a1dbf40dedbd7e91c8fd5ce4c65b70e9ccdf3660dd1e3e12d61ae0b596b4adb0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.healthmarketscience.jackcess/jackcess@4.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jackcess.sourceforge.io</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://sourceforge.net/p/jackcess/bugs/</url></reference><reference type="vcs"><url>http://svn.code.sf.net/p/jackcess/code/jackcess/tags/jackcess-4.0.5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.healthmarketscience.jackcess/jackcess-encrypt@4.0.2?type=jar">
      <publisher>OpenHMS</publisher>
      <group>com.healthmarketscience.jackcess</group>
      <name>jackcess-encrypt</name>
      <version>4.0.2</version>
      <description>An add-on to the Jackcess library for handling encryption in MS Access files.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17f18ad7b3779c672e0178afacee1acd</hash>
        <hash alg="SHA-1">e8efcbe171ac131ec32b20478d8381227e3e8d17</hash>
        <hash alg="SHA-256">7fdf5f09895038b1b2acb44294d0c1ffbcd0b9454964f6dc7171b6930bb085c4</hash>
        <hash alg="SHA-512">d32d92d35fdb4d3c2b7c069726652a25e2754fd7aff384faf5c49511aaa36a6e930cfcf8e4c37237f295351ce9a725ab82123a1dea237ff26fe0fa33da797554</hash>
        <hash alg="SHA-384">ecff567527b560557c06ffee4e9d52a87d7b875abe5bcfca26e978b9d3aac0cefb8d1e53446a1dce0d430163fd36c35f</hash>
        <hash alg="SHA3-384">8543f73ca2506faf98604ec981f030e8943db480b7b577305951c2bd8bf75c26c37fe61ce04891cc20544f26d2e7b194</hash>
        <hash alg="SHA3-256">994bd963fa5f5e3c45c77a25657579adac7f0f59cdb12f730a51eab618b38976</hash>
        <hash alg="SHA3-512">1155205ad09f9a2e5991dffc14d9538b0d492c7ae89263e9650aa952e8495225d0c62a2a5a0fffbabbe0cc14a5f4d9a023dcb1321f5cf094abfa5168bd569f8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.healthmarketscience.jackcess/jackcess-encrypt@4.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackcessencrypt.sf.net</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://sourceforge.net/p/jackcessencrypt/bugs/</url></reference><reference type="vcs"><url>http://svn.code.sf.net/p/jackcessencrypt/code/tags/jackcess-encrypt-4.0.2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.10?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>2.0.10</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2c60ee6d96c4ac54ba3887cb859f2ed1</hash>
        <hash alg="SHA-1">eaba008b272c3f630df51282bfd4d15d4f779ce1</hash>
        <hash alg="SHA-256">5dc8cec38fdc9b70df4fae9779894c1487c782502a934eaa273c31237bb42d62</hash>
        <hash alg="SHA-512">bf80f087283862f9f2ab1d9a97280e847882d67fd0206efb06b1519cfee3f99acaeda3f25858d4fdbf52d38142f3a6b7d07e663fbba6728f2ef1dd3186418119</hash>
        <hash alg="SHA-384">609156a151262aa79a2d4aee77286872b592c81c828733c172e721cd6ce487c56ca3098e48fa2446e1136474a4b45394</hash>
        <hash alg="SHA3-384">e133dcd51a750c67200d2d2a4a4b1b30e49ce8c6b2ef991c2736f5dcd38bec45c0e284e93f0adf4d6e5f26cf0396caef</hash>
        <hash alg="SHA3-256">9d243170e30a4456972a1d675f54704027d1009bd93e4695906518495062e93f</hash>
        <hash alg="SHA3-512">30c7bced31258a34ad80072545369c58d640454b288d27f2d75c10b540612be42a2b618c1cbacffa7244b31e719fa10c1c5bb10fff47f5d0f52cc58126b161ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@2.0.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-miscoffice-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-miscoffice-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7483b36b7b55224f2d5672962959c11d</hash>
        <hash alg="SHA-1">7688a4220d07c32b505230479f957cd495c0bef2</hash>
        <hash alg="SHA-256">8847fba5aa0dda13fa7ed6e6ca9079ba94df6a73be990540361744c9e0ae6b74</hash>
        <hash alg="SHA-512">bbdf2fc61c61ee547e4e68f5a6ab59646c4acf2c0f1d73e3c5f32c7d84a3479daf14c1d3e93b3be551a1ce87c9b3e2a57642ae75a4d486ad7023ac8fb65f7c89</hash>
        <hash alg="SHA-384">48dda47d573c33ff3b04884d00f1cac2a92c40f22bbf1d315ca8f4e6130c6845e8f4bed1b1ac61297ad153ec5354e9f4</hash>
        <hash alg="SHA3-384">b937bc38bbd7956c39a3bbad49191713104d9a1b3b71fbb1eb5907d6dc8f8a879783a8490245712e973fadb2f893ffdd</hash>
        <hash alg="SHA3-256">acbd013f427017a57dcececb0783193a65651ffc888502235f6d7b9b26672c62</hash>
        <hash alg="SHA3-512">107fd617f3961b94f1972b0e1812566c8387bf097f51b79b0a70009d79cba4810ad8ffda39932af97b5f4a43114dbb8468dd4884b7b2ffeca14a078a04842d07</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-miscoffice-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-miscoffice-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-miscoffice-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.6</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29acad12b7cdd22b2a5ab66cd7439d48</hash>
        <hash alg="SHA-1">1e6cd0e5d9f9919c8c8824fb4d310b09a978a60e</hash>
        <hash alg="SHA-256">cd87d4b98a8bec1d237aed61472ef4adb6a8bb0515cbde1fd62fdd9781c16770</hash>
        <hash alg="SHA-512">8e8042f4a2a45f3520ce6376d826c0445a54509a728f9f61b274c2e2d92d242bfabfba112994d0df56f59f58c48e4069fb2dabf0fcc67208e651597de5eeaa98</hash>
        <hash alg="SHA-384">6c3cfac49412ee125c0183e39ef751b8a7db04f02133ca6e039259708d2bd36df88bca3163672c8ab809cca9824e8d7e</hash>
        <hash alg="SHA3-384">3a0e2fbe2231fb39ae58afc52ad6dabf3cb932d4b56116f5ed3697b57bd0970c915e1f2b14df48576277c50ebb055a3b</hash>
        <hash alg="SHA3-256">00c4b10fb5581894c010618d4af73b821fbc262d883e5e1089438efa72243668</hash>
        <hash alg="SHA3-512">f5657b09370ecd381e76148b52fd8aa8e904f09424f2c7df5307b11ac0403db885d8a82e50002047c5be4c532c8f5778bd11833beebef3ddfe02fbf2fd35b464</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
        <hash alg="SHA3-384">8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33</hash>
        <hash alg="SHA3-256">a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4</hash>
        <hash alg="SHA3-512">9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.6</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd02e61e4662e6461f0c21b08e721021</hash>
        <hash alg="SHA-1">45db7b69a8f1ec2c21eb7d4fc0ee729f53c1addc</hash>
        <hash alg="SHA-256">f8bc249d22ad950257c373aea80c2f16f18f5eb4d557bdb2660bf5e1f1e84776</hash>
        <hash alg="SHA-512">468cd89821480364a49f73f1774383fd483fd8273d373601a4867b37267f125c3fdf3ffd8a73a114408699137c469c02e47f94b80c7d21df236b4a187d12680d</hash>
        <hash alg="SHA-384">02c99a070c038081922bdae47cd9e739045342b223c55204716bba9f81eca971ed1313eab8bb103dc596bfd7b84a6b72</hash>
        <hash alg="SHA3-384">e63ebe6d86a51506c45b430c8a71d80ac0fa95f99692a30697468b242ccd5c818f5d4aaf967e049797fee704a92307db</hash>
        <hash alg="SHA3-256">585be97a69d2a94b6647330ac36b3d5b2389eadfb92138f2b80a3e8c3bcc4b63</hash>
        <hash alg="SHA3-512">2e7ed6f7267f7e4eb0c0b0e89f845fcd253eec4ab1fa66fd915b7a4bd738e881c9e8f801af17dbbbfbc4311409f0fad9737780693a1018582e307a3293d27405</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
        <hash alg="SHA3-384">2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d</hash>
        <hash alg="SHA3-256">50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e</hash>
        <hash alg="SHA3-512">286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
        <hash alg="SHA3-384">83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590</hash>
        <hash alg="SHA3-256">5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d</hash>
        <hash alg="SHA3-512">0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-news-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-news-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72ab4f283b12cd78c349149a3f74d608</hash>
        <hash alg="SHA-1">9c7c2a67fa5761ebfad644228ef6e143ab5d0f72</hash>
        <hash alg="SHA-256">41238c51fd6a769ca9d2f48bc44d177d68791962ffb058656800811c4d8a9048</hash>
        <hash alg="SHA-512">9701a5ebf6474e4a2a3b1c92f9cc722f8d6e080401f384d3e662ae54bb3257b2f6a296a2d6b3b1ad6a782d9899973fb7908460024db375b504ead65ac446eb12</hash>
        <hash alg="SHA-384">b242c55f811c0301faa7d7396ef254d55a15f0978c0c9a96324116d4d4459b228452da413754738732097778db238274</hash>
        <hash alg="SHA3-384">49470b20ef8fea5fa862f9e206fbacef06016f026aea706e5bd93ae1d6b8c019cd5b764cd4dd6de64ca8064a4f175386</hash>
        <hash alg="SHA3-256">274cb7ec0bd64e54786298ec69a73183e1c1541c2dfea611267df2accd90ba06</hash>
        <hash alg="SHA3-512">a17e18da56f432a1e27533141e3b8c82cd3632d9c4d62fa4ac5067560de4d6e47e60e05c7a05ea3d110628932d5b0618736384ab20df1e7210344b49953e97e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-news-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-news-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-news-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.rometools/rome@2.1.0?type=jar">
      <group>com.rometools</group>
      <name>rome</name>
      <version>2.1.0</version>
      <description>All Roads Lead to ROME. ROME is a set of Atom/RSS Java utilities that make it
        easy to work in Java with most syndication formats. Today it accepts all flavors of RSS
        (0.90, 0.91, 0.92, 0.93, 0.94, 1.0 and 2.0), Atom 0.3 and Atom 1.0 feeds. Rome includes
        a set of parsers and generators for the various flavors of feeds, as well as converters
        to convert from one format to another. The parsers can give you back Java objects that
        are either specific for the format you want to work with, or a generic normalized
        SyndFeed object that lets you work on with the data without bothering about the
        underlying format.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6d9c631b3729c4bb309c9eefea38e691</hash>
        <hash alg="SHA-1">be1642a0d29daef84db51344151877161e22b07e</hash>
        <hash alg="SHA-256">d4e0bb6857a25ee15e2082be6e83e1da897cfbabb025bfe01ae00346d7db7c78</hash>
        <hash alg="SHA-512">7c34f65adf2361608707dc6524a61dd65685e7901684ebd9d01d635aa1ad2be4ffb591db10760e1f6f51bcff1c2982312ec24fd995df8d53dbb37e5f104b59cd</hash>
        <hash alg="SHA-384">40424d8a2b1aef867add3ad8ce9277315acbe4becb0c5c5395de4138bac2d4ba526bcf0be44f8450b56bd82ba45425e4</hash>
        <hash alg="SHA3-384">4e48ccf0ca3c7f3f1d2cc55997790d799cea9beb4a7b016b427bfc0b789321533ffb0b4ee1091837eae432a3bf71a481</hash>
        <hash alg="SHA3-256">12824b1233a9e402bc8b86113c40ea91ab057b3131507726d038f2cd17aefc3c</hash>
        <hash alg="SHA3-512">9b73c9bd0cc5dcb455418269b96e1574ff9e48adea2c050111a1edd02ce5b6dbb91fb2b74d756946bda2a878c3ecf8814edb52e46f80ccd26488f2b155fb9983</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.rometools/rome@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://rometools.com/rome</url></reference><reference type="vcs"><url>https://github.com/rometools/rome/rome</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar">
      <group>com.rometools</group>
      <name>rome-utils</name>
      <version>2.1.0</version>
      <description>Utility classes for ROME projects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98bb6706317f34b20e53fb375f938739</hash>
        <hash alg="SHA-1">970519368c1406108191ac19e6bf7939a9018df1</hash>
        <hash alg="SHA-256">6e1c3b022dff4cf7492acddbba22356f424ade3d869a42a2a4d74a28454334a4</hash>
        <hash alg="SHA-512">ce37793af2eaab5c0c545b5b7ba272b2b937dc8db48b8a73bc6820db1624ca9ad640180f34dfdb3b05726249c3c05e987bc018986145d18e5edf64ae9db98703</hash>
        <hash alg="SHA-384">481e013450d2bc1785260dab0bd29a3e65f24e444e1382db037b8d953c2ab7f4da7d86b43e0d28c5aa8a741cfeb02cc3</hash>
        <hash alg="SHA3-384">7f7a210e3ee1bb6b0787e5f3d3e5ad423ac70cd7c8739e710558743fbf278963759c384a6037ba972d961e6f2d84a4b3</hash>
        <hash alg="SHA3-256">5e33b2c66d6336267c78867fb85943b3d8fdfbf3778c7dd075ca0cfa852ba8d2</hash>
        <hash alg="SHA3-512">7452a299e082dd9abdc744252353b801a3c740f86183910c50b828b986315b110c8d063e3138e2a7d3411ec56c2ef195e32174cf704bca4f0459a84efe3daa31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.rometools/rome-utils@2.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://rometools.com/rome-utils</url></reference><reference type="vcs"><url>https://github.com/rometools/rome/rome-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-ocr-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a0df99069224a43fce16faf9d347b70a</hash>
        <hash alg="SHA-1">a6199d33eb6aeba6ab658ed8c51b2d2b8eae3072</hash>
        <hash alg="SHA-256">f869111fe54e06eebb9d8bdbca052542eb3109beb556816d3104f24a2b7ddb53</hash>
        <hash alg="SHA-512">6fc12ff1153c221606d4d9eb518541823e6d4ef7f9467ceb516e532392492e74d780d5fc979a77520a19d01f6451e18cf415917d29d071b8096bc758aaa5a10a</hash>
        <hash alg="SHA-384">c482f55f990e94c05e74f1555c47b718cb8dbc165e4c6d65ecd0f9799515a850a45d0c3cff589f9d7ee2c92214db4366</hash>
        <hash alg="SHA3-384">4e1b2dd456dec8cc0dd066582450474e300316899e44581581a89dd65ef51d4d06571326af23beff38f2f5fbef897ed9</hash>
        <hash alg="SHA3-256">401b698774c90f549e7fc14d75719ee0397a218f7a438f510a9c9456989ed9a3</hash>
        <hash alg="SHA3-512">cb32e9cdd98cd4e28441a3b5051eecec2e52363d9ec2e3ed0f300d770cce5a2d296730baefacdd3be11247e65295ec37c9ea661b3ec6cf8b4603ace44bc7660f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-ocr-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-ocr-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-exec@1.4.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-exec</name>
      <version>1.4.0</version>
      <description>Apache Commons Exec is a library to reliably execute external processes from within the JVM.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ddc906894944e78cf21ee57e5b26903</hash>
        <hash alg="SHA-1">0e9061b21958bfaf1cb736eb22e36cbf02d8fe9f</hash>
        <hash alg="SHA-256">f51cf8bee467efe2be76e46fc08078d96afa280a794283364291beda892a67ef</hash>
        <hash alg="SHA-512">9982cd7bd4322d5101ad2337c6280c0a4b4657fad3c77092237484a956d807b94e2573f6ce8a5cc90f44522aeccbcc8204d7f03034fc3c377804c3cf9e79b107</hash>
        <hash alg="SHA-384">2b74deaa395fbb5698eef2f393ac6bfbf74eebeddae236ceda191adf0a88c9a43eb7b81780aa0f9f41f8088787664cd1</hash>
        <hash alg="SHA3-384">ae6a90cfeb6df4f16dda69925a0edea46165622cf58bb575472b5c314a7ba1501e5e531525c1ed1b128988968ac294fc</hash>
        <hash alg="SHA3-256">a9bf564ce82f9bb248882816c3a8fae44a7906da163f5517e2954b0e90ebe540</hash>
        <hash alg="SHA3-512">66095f03c4a87fffb26d52fe53e51b29e6d306577ecae41a7d8556a631999fda1525f3fe12bc8b2d6b0057b8d5feec0e070e8dda3d3faae77e002666ef070cb4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-exec@1.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-exec/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/EXEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-exec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-pdf-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-pdf-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e22f0f0cdc6dc59cc6b1878a634d1e4f</hash>
        <hash alg="SHA-1">4d0f0e3f6eff184040402094f4fabbb3c5c7d09f</hash>
        <hash alg="SHA-256">c436d561f9645c3a6814b62ad93c46864197bc726d43f1d055269f290c631230</hash>
        <hash alg="SHA-512">eb601b73caadf3f2111bba3abd61b9df3d95abf359765136e09c9a4e965d8d359c68000720662cbcd7086a78d86893fec25a24817668b23924b2d9282fcd3d18</hash>
        <hash alg="SHA-384">90fe3113d97b26eb8cf6160f7c5b368fe51e33e472b2f2103f17e554a0bfa5de9247f861c2aafeabed20f9cfc57ff31f</hash>
        <hash alg="SHA3-384">45bb0629145dcd359a9367465a9c86e6dd5f1b4728c35be284143b90f4ba3c5e6e04a2671ae683c924eec357cb63b712</hash>
        <hash alg="SHA3-256">d547b4ee7473fd19bad83f54f21de2466491247e5f5dbfeb6adc4a2d809374a9</hash>
        <hash alg="SHA3-512">51043c706e8e8e4188bb7f9a594b6040881d1647e4fb98de2cb157eed22cae0784d1364a7cba1590430ce495d5a2c0d2bf95bd58d735f14dc95ecb9209051032</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-pdf-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-pdf-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-pdf-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/pdfbox@2.0.31?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>pdfbox</name>
      <version>2.0.31</version>
      <description>The Apache PDFBox library is an open source Java tool for working with PDF documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d9b906b4d480797517b198aa5583e0a8</hash>
        <hash alg="SHA-1">29b25053099bc30784a766ccb821417e06f4b8a1</hash>
        <hash alg="SHA-256">8a8d10b41961e69ffb8b7f6aa8936d34b96a8854aaf47a8cc081f4289120cef3</hash>
        <hash alg="SHA-512">be78e37f450a947ca82ea4257ef93d0f41a8dffafe291c69b6f9dcfe4f9eccff0340b1d2d956c35634f515139702179862b047e86d2d559fbfebee9024dac3e7</hash>
        <hash alg="SHA-384">06da281afa5bf63c326e0ddc510468df97231637bcec7567096b60cd349a7dd33874a65d7a3ccd74411c267c9f1cbbc8</hash>
        <hash alg="SHA3-384">52458d4412337738a2d4e4fc4ca46532e526232d0f25f030b3e7da1aa8a8c9e5c38352123d96670ae81bc04be87743f5</hash>
        <hash alg="SHA3-256">774b55dc2c2e6c8e02b3562d1dc00e6527089a4147a37fca2fed2a7e7f456b88</hash>
        <hash alg="SHA3-512">cf2cabfffed66ecbd78e437500cf98ab6e9b1064491ef03a4e266417180c15ef50083dda20fdf77acc6c47cfde4cee5ff167003bca5c2a20220ec871469d5a35</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/pdfbox@2.0.31?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/pdfbox-parent/pdfbox/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/pdfbox/tags/2.0.31/pdfbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/pdfbox-tools@2.0.31?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>pdfbox-tools</name>
      <version>2.0.31</version>
      <description>The Apache PDFBox library is an open source Java tool for working with PDF documents. 
    This artefact contains commandline tools using Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c54ee5053a28cca10f7299eac5999975</hash>
        <hash alg="SHA-1">b9d54f86eaef714853acbf8d85f8c91924bcff93</hash>
        <hash alg="SHA-256">d2f186b7cf67b5529cc8a34901b8e8ff1d2f9dabd13da28487196685b5b7d3f8</hash>
        <hash alg="SHA-512">7dc0ca8230454d2f2c0055a4b88c05d7e1a2f96c7b4f4a816425caf235e5e2f75e45c01589ec3d42815498f6a5495440ff371e01947c99b8e3f3aabbaaf80f1e</hash>
        <hash alg="SHA-384">5691233c4a8665b4e9fa2c7c4997b860eb5ac8a07867f8eed5689bc59d5f57568c8defd5f601d67264c4540744d09af2</hash>
        <hash alg="SHA3-384">c097d99f4861de1ea7b062035c949d1dc5202c8984a2403f545610f84f6d3a4a6cc1c610cee98330f8d87d123cc12325</hash>
        <hash alg="SHA3-256">9af5787f5bb928f0658d695ac2c0786ef13f2f1d6e18e2d2e6b384f140b6a3d7</hash>
        <hash alg="SHA3-512">ac63b4b2bd216b7c92e0b4c720711dcbf24e75a7911e3ae62e2686589c84946de2439be14191e307db112918c3ecfbeaaeb21bd97e96c5aa5efe52e6457c86f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/pdfbox-tools@2.0.31?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/pdfbox-parent/pdfbox-tools/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/pdfbox/tags/2.0.31/pdfbox-tools</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/jempbox@1.8.17?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>jempbox</name>
      <version>1.8.17</version>
      <description>The Apache JempBox library is an open source Java tool that implements Adobe's XMP(TM)
    specification. JempBox is a subproject of Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d207dd1ac7a64b3c425a97a9638dd03b</hash>
        <hash alg="SHA-1">388997fbd1b57f8e424c4447e3fc8ce5dd2fc665</hash>
        <hash alg="SHA-256">ded9c81038dd1bbcba18f07e1028d70c9ceaf0b48ac56cea8ab6ec2c255fc1b3</hash>
        <hash alg="SHA-512">54369b0da2e8a531f6972867c21be8ff304fd37f47688d97a18ac77412ca880e41173401184ec94d9ced61137211070eeba079e64f8ff9906b053339b5adb0ce</hash>
        <hash alg="SHA-384">472a6e3ecaa1af1735df473c0ca2b5d0de25018f3beb2eb4396a5fbaf23baf17e20b51626cc6f504fb4b4d727138b3e7</hash>
        <hash alg="SHA3-384">aa9754bd2b6bd111715315a900b18b76ba27c80ebb96e06caccc75589fef9e6144e18f0b9ff1aeb5e4febd907a389854</hash>
        <hash alg="SHA3-256">c9928fe8f8e3cc39ba13c637eccb5c0bffa5ee14e67b9fa044f14adff0ad40a7</hash>
        <hash alg="SHA3-512">8f6d71c1f1c6056ccacbd3188f7a1e03c7a1caff7e16e2e1ca71213e0f2df6734933cf037e82709f0b95b6b795c5a77b716216c7431ab8ccb633df7ed2c4eb93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/jempbox@1.8.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/pdfbox-parent/jempbox/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/1.8.17/pdfbox-parent/jempbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-pkg-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-pkg-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3c4d9b2da1ba293d0339e3fdeb135815</hash>
        <hash alg="SHA-1">b20d84502b4d082170cd5535a0289884476cab2a</hash>
        <hash alg="SHA-256">8e3c8a86e55f8aa5ac8df9941e1f09c93f8a0258eee7a06b94fafa7793def180</hash>
        <hash alg="SHA-512">3256b446755ba8b42ba63c7030da6e7437471b84b1917fd8092089627c6749ec483197435739432d2e68810e8dd7cc10723b327fb604ffdf113e2fc157cf619b</hash>
        <hash alg="SHA-384">55f91ea14ac46792e48db99da695fa13d6bb1898e26fbee4efc25f527c03021e038f6e117dd49ade6939818aeedf1ee3</hash>
        <hash alg="SHA3-384">bf9883a080aaf5d41d4e1ba38dfa15db73a2f6659ff330cf01d241b8248479ae24719a33684541d50d099fe8dcef80bf</hash>
        <hash alg="SHA3-256">b2857c4f5f3f4328b76b80c72f9552d2eb1e9136fbadf233133501c460ef171b</hash>
        <hash alg="SHA3-512">4b1151094e5a7c8f45a8dad930509ae74bfa6747a9f6153c1c8d0278628b4e8a9382a2db24776fd5291d8e49c1bc8113b8c8fe738c84d418ef3c2bc2e40d7495</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-pkg-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-pkg-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-pkg-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.9?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.9</version>
      <description>XZ data compression</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57c2fbfeb55e307ccae52e5322082e02</hash>
        <hash alg="SHA-1">1ea4bec1a921180164852c65006d928617bd2caf</hash>
        <hash alg="SHA-256">211b306cfc44f8f96df3a0a3ddaf75ba8c5289eed77d60d72f889bb855f535e5</hash>
        <hash alg="SHA-512">a4362db234d4e83683e90f5baf90c82107450cc4404acab96e3fab14b8a3d4588a19722171d32f27d18463682a6994cad9af0b1065c954e3a77ea7bdcf586bac</hash>
        <hash alg="SHA-384">aa30349b094723369908369a18e2cb5beb5b7ca0b24b4d56c2f5725fae152220f6526466672b22bfec939e2e0622a01d</hash>
        <hash alg="SHA3-384">b3e1fee7784188df5e1931c9e8137ac0e20e63f66f93e7f938a448fc0b3adb4be5205c7a5f1835007e233fee2696fc2c</hash>
        <hash alg="SHA3-256">92eff603ed0aab557e1a45e17a74e80d8ec656b5f137197b23c429c903fa448f</hash>
        <hash alg="SHA3-512">b290f92958f8cd91705331d8411140c23957ab8b568fbe19a70f4f1dc97eddc13d3a200df28a02ab5911ce18f546c33f720878be0f727edac839a6e63ee66ece</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.brotli/dec@0.1.2?type=jar">
      <group>org.brotli</group>
      <name>dec</name>
      <version>0.1.2</version>
      <description>Brotli is a generic-purpose lossless compression algorithm.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b1cd14cf29733941cc536b27e6aedfa</hash>
        <hash alg="SHA-1">0c26a897ae0d524809eef1c786cc6183b4ddcc3b</hash>
        <hash alg="SHA-256">615c0c3efef990d77831104475fba6a1f7971388691d4bad1471ad84101f6d52</hash>
        <hash alg="SHA-512">d4cd2b33f7c358012ff01db6a13ebfe1e8051a580698bffcd942c47451012cf53ce49a400b1c8bf7502b01e631d79d7c6417202a145622572d79fd145ccde61a</hash>
        <hash alg="SHA-384">d6b8ad9d0ee6baf8c3a29c1dc2911eaf207352e2c7de893a0185e987e7eae87827890c1d4dbf31c46f25846fbcdc08bb</hash>
        <hash alg="SHA3-384">d16c32130bf6b168ff4c8a3dedf1b17787f8d6f0eab9de21e51ed3ab1e7d85925dd02315972f6ca3a4493357aad545cb</hash>
        <hash alg="SHA3-256">962dc76a5c487de8d34308860ab65927bf91f50ccb12f37bffb036a7a05145a4</hash>
        <hash alg="SHA3-512">a82a3f79b57d30613606ca51dc432b097fa75aab5c87fb45eabec6d80ddeff1b329100b325bb07005aebaec166952c4599a863d4bfd5a684bad21103a2046311</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.brotli/dec@0.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://brotli.org/dec</url></reference><reference type="vcs"><url>https://github.com/google/brotli/dec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.junrar/junrar@7.5.5?type=jar">
      <group>com.github.junrar</group>
      <name>junrar</name>
      <version>7.5.5</version>
      <description>property 'description'</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8d3232d2e0b6708cfaa66f376c511b5</hash>
        <hash alg="SHA-1">4b1300aa087b8c4e5e9bbb988e609bbaddfda283</hash>
        <hash alg="SHA-256">e01b949687e2a5b4c68011c1702aa5d2cc8e6c458656ac2c91658b69cebb1bb3</hash>
        <hash alg="SHA-512">8ab9945069cfb865e3319b0aef99a676d71ea287babbfdc8c27f94e098316b8d5e03893f2d27c211f72637f9dd72b212589a8e01010a24997e84d5b5245f0036</hash>
        <hash alg="SHA-384">cd3a2971dd19deeca19d1de25405f348975aa0af809c1b87c179b6877a09c6215400b1ee61fe3b8fae6a3c4d4c0fffe9</hash>
        <hash alg="SHA3-384">232d43938f7cd6bbd88207a672b9162a53be0f345956e65208bfbbf2ca7ba31f7b64d3490c397b2053a715f1649c73a5</hash>
        <hash alg="SHA3-256">a8340f1c1fb48bac66de3c0044494f4042539c94384213baedd6bed74661586d</hash>
        <hash alg="SHA3-512">4380afb9ec913c087e9f18bfcbc7dc4340e20d2bda9b0b6a874955c67648df1e46e9c9d51947f5aa787c0c3105c2d83ba3da14879cf9a2825c800f89efd889b0</hash>
      </hashes>
      <licenses>
        <license>
          <name>UnRar License</name>
          <url>https://github.com/junrar/junrar/blob/master/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.junrar/junrar@7.5.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/junrar/junrar</url></reference><reference type="vcs"><url>https://github.com/junrar/junrar.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-text-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">11abfc4d61adcdae7fc847523c394103</hash>
        <hash alg="SHA-1">b3a93e538ba6cb4066aba96d629febf181ec9f92</hash>
        <hash alg="SHA-256">7c957b3ac019825a83553cfce9c59bbf1161734329a91a334044ed4dde60c41f</hash>
        <hash alg="SHA-512">2407f2580d3b41ffc06a58122b929eb608c96895145b16d3145da8027daa5760e7a36608fcce29a2cefc989511cb2847e755e23ca395c58637b6b1569845ab84</hash>
        <hash alg="SHA-384">b6c0ab213afddb80a9194683f522d66bc8cc0f73b9fc3f40eceb56e37affca04036b3c4e89643feedd2bde12264f8216</hash>
        <hash alg="SHA3-384">8c464a821c0d18641b071a38765ebc41d2552ab6d8e06748ee7b3ba8b0908ab2bc6bd2934efe19755be47a2fe885cc27</hash>
        <hash alg="SHA3-256">70cfddb887934ce9651d1e5fbc4a117702eb527a74f7fbf2ad7f95c44b85bc9c</hash>
        <hash alg="SHA3-512">2dc242e60a176ad450c573931fa15aab138e58fcc8e1eaebf65a8d493e97eceee54ef0da3595c52baa86453cdc87a3676133ca8d6e55b1b0aab05c29d8d767b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-text-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-text-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.albfernandez/juniversalchardet@2.4.0?type=jar">
      <group>com.github.albfernandez</group>
      <name>juniversalchardet</name>
      <version>2.4.0</version>
      <description>JUniversalChardet is a Java encoding detector library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f69e5002bd3d45adcd82fc5c85811779</hash>
        <hash alg="SHA-1">2c4171a0accd36c11c5097ac1fe804dbbbfcd158</hash>
        <hash alg="SHA-256">2e6492c9ce13b0ace01e8d326fb789cbb02f5fd95edea1fc5bd5b922d172764d</hash>
        <hash alg="SHA-512">31df024e665d52a8df69ba2057fc5721955633582f67041c3a26730d152e5744bed9608efdb14e27f41e10077ef9fb708eb57c3dea3d4d973865d48942ab7aae</hash>
        <hash alg="SHA-384">4234d9b6e7a07979133d509b082a7edddd3549025046ab3ee5d38fa7ca634cdeefb29e9b146ee331f52b2331e7c69fd6</hash>
        <hash alg="SHA3-384">03db94c9dd9a8fc3a4378c9a587e69426531c7b2ad295fccd1697ca1d839dc508e1ec9b021a36063880756db88bb283b</hash>
        <hash alg="SHA3-256">b280034bb1bf7b9e4e0094ef790a30415104fb6598a8b76426533062267b6915</hash>
        <hash alg="SHA3-512">f40ebbe410cb37b2ef0dce4dcfe0aefede4397551b3117bff8805fcd3fc42d3159cc0bc1f6a35c98299db9c147b76325bc41a9ad0cf2b4f217244b503988834a</hash>
      </hashes>
      <licenses>
        <license>
          <name>Mozilla Public License Version 1.1</name>
          <url>https://www.mozilla.org/en-US/MPL/1.1/</url>
        </license>
        <license>
          <name>GENERAL PUBLIC LICENSE, version 3 (GPL-3.0)</name>
          <url>http://www.gnu.org/licenses/gpl.txt</url>
        </license>
        <license>
          <name>GNU LESSER GENERAL PUBLIC LICENSE, version 3 (LGPL-3.0)</name>
          <url>http://www.gnu.org/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.albfernandez/juniversalchardet@2.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/albfernandez/juniversalchardet</url></reference><reference type="issue-tracker"><url>https://github.com/albfernandez/juniversalchardet/issues</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-csv</name>
      <version>1.10.0</version>
      <description>The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9b3be74e726a151524bf31ec293ff285</hash>
        <hash alg="SHA-1">8669bee353424c3223c93723291b5c3753260c1c</hash>
        <hash alg="SHA-256">2d06e6a07a636baf777ad8e659256f2119109dde23551c9b80c5422d424b808c</hash>
        <hash alg="SHA-512">4434edc3256ce9a004f9860738fe7fc7b96e964f131aa953b598084bfd60e510796164a27c94b4c0b03041d05261c013e0db664ffd2bdd1cf032011722bc7ac0</hash>
        <hash alg="SHA-384">c50578f3e9a7f6bd7e2badef7e0758eba308f77c0eef17a1d2d7d7620f0a7f5bf414f8847b3a401484466a54c8115370</hash>
        <hash alg="SHA3-384">d13077b7b86c9a8ced54228615f86b7785d84634e5cf757792259b4f110aaa6d1980938ba1c1a65377bdf62c24067e96</hash>
        <hash alg="SHA3-256">eea22e71edfed1e0245104b27fe54fc903362ddad35594bdb3012dc01a0adc63</hash>
        <hash alg="SHA3-512">db8b13b74e78808ea7819bee82851836ac47abaea7eceb6cda06a5506aba7277f3e93fbee4d0a19ef7d77870e8f13c2970a8cdd517487d4a68cfbd138839908c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-csv/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-csv/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CSV</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-csv.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-webarchive-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c6f11e2013e415d336b5beb5cf701a50</hash>
        <hash alg="SHA-1">fe545036dfd2e1ebdc993e23db7fd2e2e082c1f8</hash>
        <hash alg="SHA-256">3b064b1b598941b6dce82db6f8e5efe1cbda9d2ed75485d7bc34009521ef6cb8</hash>
        <hash alg="SHA-512">a134e40910258407cc918d44f1a782b42918f522aba0661f6555109e23fa97fda53a85f7c5ecb57a3ccda747debd147b293a24e2470e41bab05ba1b91872eb1e</hash>
        <hash alg="SHA-384">92712e44e53cf7b5365d682aeae131d7bf5db9d7fbd1b80b1def0f56d79a85f0c77604cdde93a82a63d12c7e4c2fc49d</hash>
        <hash alg="SHA3-384">aef5206aa43dbae08ef07f1b9cabd709180340e727618b6ddc1cabadf2f55956568e755bef0fd3b100a29a01e66118d4</hash>
        <hash alg="SHA3-256">489e4368854197f4c33c17c2f0b39ecb9b354aed71a4a65aee156dd9b494a21a</hash>
        <hash alg="SHA3-512">eb91f557da8e87cb0ae3245d2dc75e89c1de4936650b31cd853dc6b5b2a134990a6f3de4542443f145b0a3627681a8db313975febcd3b2c79741c4aeb66506d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-webarchive-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-webarchive-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.netpreserve/jwarc@0.29.0?type=jar">
      <group>org.netpreserve</group>
      <name>jwarc</name>
      <version>0.29.0</version>
      <description>Java library for reading and writing WARC files with a typed API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61331b68f90d8e1b931d7c6b0856dc6e</hash>
        <hash alg="SHA-1">dbeb07d8a08c706cec01bbc2ff726ae51dac50b9</hash>
        <hash alg="SHA-256">9d7d60c7b7aa85d2c8e49777eedbc1bef7d661cc72c44cb9ad5d5d20aa582cdd</hash>
        <hash alg="SHA-512">188ac810658e49944832d8d7b986f63434b0f7123c417459e0ee5438edfe1f6f12ff3909360a72a14e108323434d49bb3da6198194a3b04f7497a5458c9b54c3</hash>
        <hash alg="SHA-384">e008b277589eb08a2a05c7d64c9d8cd94f7a9c425be97fdbd18d96d273e0af0285641160e6c5ab570c92156cc1046815</hash>
        <hash alg="SHA3-384">8c987f2f6aa814f9eefa8c55c51feec973ce520db8a7fa6d11ed7d3c358f97be1b4df2d9859bd1e9479164cc124a7a07</hash>
        <hash alg="SHA3-256">4f9a281948fffa3869f4e22bc03dbf3f167279e2e26272651ca01f1d05d96ca2</hash>
        <hash alg="SHA3-512">a747221f8a83d7a7829cda4793803312315550713b226c66f670af24269088923692ddbe9b82ecb97b9143de3e41697cc20906245a8b38700ec0a16d0b865768</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.netpreserve/jwarc@0.29.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/iipc/jwarc</url></reference><reference type="vcs"><url>https://github.com/iipc/jwarc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.26.1</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7af7d22a7280508327d809b183114a92</hash>
        <hash alg="SHA-1">44331c1130c370e726a2e1a3e6fba6d2558ef04a</hash>
        <hash alg="SHA-256">27bb5d40f37c3bb7205b4a0540247df057715e9f6cbbd97d626ab8b50318bb04</hash>
        <hash alg="SHA-512">ef18a2e3abbf249b95bc5dc95d276fd66e495a74f8f1ce02e9e388048c5a0684f07bbf6924fcc1fc3943b95f30d908fee8778f1e4c6293431172e31f5ddc5f02</hash>
        <hash alg="SHA-384">c37e35684971b436dc7a6bc428b306804302f99ef46c5df44b6826e267427e6146580b5cda1a96472b65ef12ef7fa6e9</hash>
        <hash alg="SHA3-384">9a6a43bc19652007a0a61c8007dc5e67c98bade39f0c8b567e10ec82dc95f2288fcac53ec7d31ca793f4c3edf8ef9fbe</hash>
        <hash alg="SHA3-256">c2bddb71dcfe84e98754a1e0f0b16ec60a8e4c5761cd4db210477fcd3a3bf595</hash>
        <hash alg="SHA3-512">2636e83c2274019d7c1742477e5c641d0348afe5179e4a8316f28f41c51ca0f609a8e9a41fdaf0b68f7830d2e0fc74268fcee43d9c7cf49b57d74a426295f4ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-xml-module</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">983ffd095057a781fd95124fffe23dd7</hash>
        <hash alg="SHA-1">ff707716c0c4748ffeb21996aefa8d269b3eab5b</hash>
        <hash alg="SHA-256">08112db5662be78fb6ef57485abeaab019df8fff4a559ae552ef205b6600a64e</hash>
        <hash alg="SHA-512">c2df171eb6eec1d2991276985f1bcf368417040662d10bfb57804d0cc945c7780452751b7ab901094aed3be8d23eb6d074833fb8c44c0971716d355b2cc6a142</hash>
        <hash alg="SHA-384">788f58be6ba2ed9a2d45ac3b4d10c07997fdfdecf8d4db16db537bbd93cc530ad52e0f4c422ea01427fcd7aa24d0a2f7</hash>
        <hash alg="SHA3-384">1cd466d51291ce82db5dc337693f0b0336c622e2dc136e2313a0d63b17911713246ba069ac1be068c9e3b6642cfe06c3</hash>
        <hash alg="SHA3-256">0ae281fe1f4284d29fc71d4dd31dbfffc5174cfb96eed2c0a299eb16915b6550</hash>
        <hash alg="SHA3-512">5e00b2ca7b17444f8c34424b35311052a3ef64c2fb43baaaa3492b7bc546f5a2a9f764775e2b62720ce5fe6d133a5ef5621db80a8f011b1287deb05e86ff3bd3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-xml-module/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-xml-module</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar">
      <group>xerces</group>
      <name>xercesImpl</name>
      <version>2.12.2</version>
      <description>Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.

      The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.

      Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the "XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)" is also provided for evaluation. For more information, refer to the XML Schema page.

      Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.

      Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>
        <hash alg="SHA-1">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>
        <hash alg="SHA-256">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>
        <hash alg="SHA-512">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>
        <hash alg="SHA-384">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>
        <hash alg="SHA3-384">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>
        <hash alg="SHA3-256">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>
        <hash alg="SHA3-512">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://xerces.apache.org/xerces2-j/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/xerces/java/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar">
      <group>xml-apis</group>
      <name>xml-apis</name>
      <version>1.4.01</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier. The External Components portion of xml-commons contains 
    interfaces that are defined by external standards organizations. For DOM, 
    that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for 
    JAXP it's Sun.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>
        <hash alg="SHA-1">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>
        <hash alg="SHA-256">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>
        <hash alg="SHA-512">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>
        <hash alg="SHA-384">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>
        <hash alg="SHA3-384">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>
        <hash alg="SHA3-256">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>
        <hash alg="SHA3-512">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>SAX-PD</id>
          <url>http://www.saxproject.org/copying.html</url>
        </license>
        <license>
          <name>The W3C License</name>
          <url>http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip</url>
        </license>
      </licenses>
      <purl>pkg:maven/xml-apis/xml-apis@1.4.01?type=jar</purl>
      <externalReferences><reference type="website"><url>http://xml.apache.org/commons/components/external/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-parser-xmp-commons</name>
      <version>2.9.2</version>
      <description>Apache Tika is a toolkit for detecting and extracting metadata and
    structured text content from various documents using existing parser
    libraries.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">709f9ecbb6532678252a2797595442da</hash>
        <hash alg="SHA-1">69104107ff85194df5acf682178128771863e442</hash>
        <hash alg="SHA-256">859f25e753b30b02f5a352505fcdaf7b39e1b9a46a64aa17bcf239725f579d66</hash>
        <hash alg="SHA-512">89022c6e002e532ad959d97aa8f26bd0addeefe704d352f0116b0a04bd145060b2122b6b47f5455caf23343f62069ce5a3bb4b96f2f846dd93339d4e6c7487dc</hash>
        <hash alg="SHA-384">6160ad8675be0fbf306cb8891cd107ab6430b4bff1c64b405aeb0a330f290255bb49333454a77460f370fd5ca2d7cfc7</hash>
        <hash alg="SHA3-384">01b15be6287edb488342717e4f2adf0ead6460dffa4a81291962f55129778172c7d7ac7ef4f4ae0dad639182fba4c606</hash>
        <hash alg="SHA3-256">d97eae2f8c19a43ea99c68d8fe5a28746091b03971cb4b5e97555940f17a8b88</hash>
        <hash alg="SHA3-512">e637d4f9418d417011d7ccc01f13a26bfa9f3b62daabaeb202649f3864a893885e07abd8be46fdd836e96b366445eece18830d558469cf1b20056122ba2b6734</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tika.apache.org/tika-parser-xmp-commons/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Tika/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TIKA</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@tika.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/tika/tika-parsers/tika-parsers-standard/tika-parsers-standard-modules/tika-parser-xmp-commons</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/xmpbox@2.0.31?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>xmpbox</name>
      <version>2.0.31</version>
      <description>The Apache XmpBox library is an open source Java tool that implements Adobe's XMP(TM)
    specification. It can be used to parse, validate and create xmp contents.
    It is mainly used by subproject preflight of Apache PDFBox. 
    XmpBox is a subproject of Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">892da917ee2fe13113cbfcb74df14e73</hash>
        <hash alg="SHA-1">7520eb8e34abfddb1c49577f01f4e1d1cf5c3e2c</hash>
        <hash alg="SHA-256">1b3edff1818b31804392ef89ff8e184eed55c0dabeaa0f4e20244adf3738b9b8</hash>
        <hash alg="SHA-512">ec7b32ea4e072cbf58f5cf59c0d8724c67bc240fad7539c6741d3f9631dfed65729309c4b90f57aea47a5f356c2f575573deaf74a7bbd1fd9dca4857682b44b9</hash>
        <hash alg="SHA-384">af41cdc8fa0e9042f14510e40afde15d37365713cfd82815bee84f6a2a63b53b63eb3a9925342a8882c296c4e4ff6dd1</hash>
        <hash alg="SHA3-384">19e1047351299d6dfeaabb8b35149674ea8f3d8c22d953b52b621096ee61de72d2e8072e3b9d7c4ab3fc7f4111cb5112</hash>
        <hash alg="SHA3-256">13a97c2ba359d54854f1e9d1c55d5d7c01d43d62bbf25ab8128c5b3bcad47da0</hash>
        <hash alg="SHA3-512">dac4f4cf3495e99f2832264769a0f062eac6b4e970059efda7e739aede7a81f4c0a1b1950da4395b34e6e5442dbdef81390ed0d34cacd18000a05082564471a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/xmpbox@2.0.31?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/pdfbox-parent/xmpbox/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/pdfbox/tags/2.0.31/xmpbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.gagravarr/vorbis-java-tika@0.8?type=jar">
      <group>org.gagravarr</group>
      <name>vorbis-java-tika</name>
      <version>0.8</version>
      <description>Ogg and Vorbis toolkit and tools for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">85c7b34d5f94e66bf0c79f5d673db750</hash>
        <hash alg="SHA-1">4ddbb27ac5884a0f0398a63d46a89d3bc87dc457</hash>
        <hash alg="SHA-256">a1b62281a99aec10dc69db1d2f8250952dca5841eedf1167b6b6f9585e2d0d26</hash>
        <hash alg="SHA-512">8f27a3912f98f254afbf999810fcd8b7662e244bde5d13b14957b2a2f24745e85cccf10bc52d6b0472f757456cad13e23d0f7bbe6a8a7fcf285cee990461a6f7</hash>
        <hash alg="SHA-384">d1d47b3b4b86acccc74cfda9975874102a9e95b2c7c9ba464270d69e23b0b387455889dae2001f88111187a92ec00862</hash>
        <hash alg="SHA3-384">28068c82ccc36122f5e4674bd4ef704f15c8ef58a6acf6d8870447d6e8ada2fe640f32d2e335d6be6a54ebef0e5b7e6d</hash>
        <hash alg="SHA3-256">bb69c6b9a509156db100632f104c023b2c1c632815823840ce33308bc7336eae</hash>
        <hash alg="SHA3-512">5817402ab00d3d31dd4c4490847f94535b97eccf30ef37f54b1493b19bd47a1ac575c1d2692cc8c570a7f377692d4b0b7dced512124e1d3206a1ab3ee8d92749</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.gagravarr/vorbis-java-tika@0.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/Gagravarr/VorbisJava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/Gagravarr/VorbisJava/vorbis-java-tika</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.gagravarr/vorbis-java-core@0.8?type=jar">
      <group>org.gagravarr</group>
      <name>vorbis-java-core</name>
      <version>0.8</version>
      <description>Ogg and Vorbis toolkit and tools for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">71b623b57f56daf112bddb3337ee896d</hash>
        <hash alg="SHA-1">7e9937c2575cda2e3fc116415117c74f23e43fa6</hash>
        <hash alg="SHA-256">879bb0c8923fea686609e207fd9050ab246e001868341c725929405e755cf68e</hash>
        <hash alg="SHA-512">73f0d0b0ecc58eb14c147c607878102551f30e4c623dd3603b7bb5a6b5ba7111cf4587a6cf909113621ec91866a36d70318366d36573f076eb6d5da593c40043</hash>
        <hash alg="SHA-384">b344a41cbd41bdb2b11519613c401abab01d1c64dc4f372222d1fb77932782559dd0d63ed8f794f0b5b79f03dbf996ff</hash>
        <hash alg="SHA3-384">f1ca4ea79e4b54c87cab1ac5d7c6a88026772e49b0fe3ca98d463be76271488583afd649ba277be8eef2c6c212b55e08</hash>
        <hash alg="SHA3-256">b68f330a0267f9f936cd72837eae9650fb79ccc5de6c5a30f36ca986a5727a06</hash>
        <hash alg="SHA3-512">ea9bce136f24ad9780d247276521fb75bf7c69a51c63cd49166b6ef96b7ae3c7141cfe4bcc3a07aab58b09978a06780fd84b8fdf9ce043b88958571a6597b7d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.gagravarr/vorbis-java-core@0.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/Gagravarr/VorbisJava</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/Gagravarr/VorbisJava/vorbis-java-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
        <hash alg="SHA3-384">6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002</hash>
        <hash alg="SHA3-256">c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297</hash>
        <hash alg="SHA3-512">b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-tika-searchprovider@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-core@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parsers-standard-package@2.9.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-main@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-http@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-wysiwyg@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar"/>
      <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar"/>
      <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-backward-codecs@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.codelibs/nekohtml@2.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
      <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
      <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar">
      <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar"/>
      <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/logging-mailhandler@1.6.2?type=jar">
      <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/mailapi@1.6.2?type=jar"/>
    <dependency ref="pkg:maven/com.sun.mail/javax.mail@1.6.2?type=jar">
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    <dependency ref="pkg:maven/jaxen/jaxen@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-event@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-cache@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/net.sf.ehcache/ehcache@2.10.9.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-http@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-util@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-wysiwyg@2.12.2?type=jar">
      <dependency ref="pkg:maven/org.apache.jspwiki/jspwiki-api@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.codelibs/nekohtml@2.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codelibs/nekohtml@2.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.11.0?type=jar">
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"/>
    <dependency ref="pkg:maven/commons-fileupload/commons-fileupload@1.5?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.sourceforge/akismet-java@1.02?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/net.sourceforge/sandler@0.5?type=jar">
      <dependency ref="pkg:maven/commons-httpclient/commons-httpclient@3.1?type=jar"/>
      <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xpp3/xpp3@1.1.3.4-RC3?type=jar"/>
    <dependency ref="pkg:maven/javax.servlet/jstl@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-analysis-common@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-backward-codecs@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-highlighter@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-memory@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-queryparser@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-sandbox@9.11.0?type=jar">
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-queries@9.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.freshcookies/freshcookies-security@0.60?type=jar"/>
    <dependency ref="pkg:maven/org.jvnet.hudson/org.suigeneris.jrcs.diff@0.4.2?type=jar"/>
    <dependency ref="pkg:maven/oro/oro@2.0.8?type=jar"/>
    <dependency ref="pkg:maven/xmlrpc/xmlrpc@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-core@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parsers-standard-package@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-apple-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-audiovideo-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-cad-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-code-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-crypto-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-font-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-image-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-mail-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-microsoft-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-miscoffice-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-news-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-pdf-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-pkg-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.gagravarr/vorbis-java-tika@0.8?type=jar"/>
      <dependency ref="pkg:maven/org.gagravarr/vorbis-java-core@0.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-apple-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.googlecode.plist/dd-plist@1.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.googlecode.plist/dd-plist@1.28?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-audiovideo-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/com.drewnoakes/metadata-extractor@2.19.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.drewnoakes/metadata-extractor@2.19.0?type=jar">
      <dependency ref="pkg:maven/com.adobe.xmp/xmpcore@6.1.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.adobe.xmp/xmpcore@6.1.11?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-cad-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-microsoft-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-microsoft-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-mail-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.pff/java-libpst@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.poi/poi-scratchpad@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/com.healthmarketscience.jackcess/jackcess@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.healthmarketscience.jackcess/jackcess-encrypt@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.ccil.cowan.tagsoup/tagsoup@1.2.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ccil.cowan.tagsoup/tagsoup@1.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/com.github.albfernandez/juniversalchardet@2.4.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.albfernandez/juniversalchardet@2.4.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar">
      <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-mail-commons@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.james/apache-mime4j-core@0.8.11?type=jar"/>
      <dependency ref="pkg:maven/org.apache.james/apache-mime4j-dom@0.8.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.james/apache-mime4j-core@0.8.11?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.james/apache-mime4j-dom@0.8.11?type=jar">
      <dependency ref="pkg:maven/org.apache.james/apache-mime4j-core@0.8.11?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.pff/java-libpst@0.9.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.zaxxer/SparseBitSet@1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.poi/poi-scratchpad@5.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.poi/poi-ooxml@5.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
      <dependency ref="pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.poi/poi-ooxml-lite@5.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.xmlbeans/xmlbeans@5.2.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.virtuald/curvesapi@1.08?type=jar"/>
    <dependency ref="pkg:maven/com.healthmarketscience.jackcess/jackcess@4.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.healthmarketscience.jackcess/jackcess-encrypt@4.0.2?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.77?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.0?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.0?type=jar"/>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-code-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.codelibs/jhighlight@1.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.ccil.cowan.tagsoup/tagsoup@1.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7?type=jar"/>
      <dependency ref="pkg:maven/com.epam/parso@2.0.14?type=jar"/>
      <dependency ref="pkg:maven/org.tallison/jmatio@1.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codelibs/jhighlight@1.1.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.7?type=jar"/>
    <dependency ref="pkg:maven/com.epam/parso@2.0.14?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tallison/jmatio@1.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-crypto-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-digest-commons@2.9.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-font-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@2.0.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@2.0.31?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-image-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/com.drewnoakes/metadata-extractor@2.19.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.pdfbox/jempbox@1.8.17?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/xmpbox@2.0.31?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/jempbox@1.8.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pdfbox/xmpbox@2.0.31?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-mail-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-mail-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-html-module@2.9.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@2.0.10?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-miscoffice-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-text-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xml-module@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.poi/poi@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.6?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-news-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/com.rometools/rome@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.rometools/rome@2.1.0?type=jar">
      <dependency ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.rometools/rome-utils@2.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-ocr-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-exec@1.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-exec@1.4.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-pdf-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-xmp-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox@2.0.31?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox-tools@2.0.31?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/jempbox@1.8.17?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcmail-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox@2.0.31?type=jar">
      <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@2.0.31?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox-tools@2.0.31?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-pkg-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.brotli/dec@0.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-parser-zip-commons@2.9.2?type=jar"/>
      <dependency ref="pkg:maven/com.github.junrar/junrar@7.5.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tukaani/xz@1.9?type=jar"/>
    <dependency ref="pkg:maven/org.brotli/dec@0.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.junrar/junrar@7.5.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tika/tika-parser-webarchive-module@2.9.2?type=jar">
      <dependency ref="pkg:maven/org.netpreserve/jwarc@0.29.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.26.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.netpreserve/jwarc@0.29.0?type=jar"/>
    <dependency ref="pkg:maven/org.gagravarr/vorbis-java-tika@0.8?type=jar"/>
    <dependency ref="pkg:maven/org.gagravarr/vorbis-java-core@0.8?type=jar"/>
  </dependencies>
</bom>
