<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.5" version="1" serialNumber="urn:uuid:c8dc0aec-7d37-3a32-b8b1-6e1faafba7c4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
          <hash alg="SHA3-384">4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a</hash>
          <hash alg="SHA3-256">ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781</hash>
          <hash alg="SHA3-512">c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core-test@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core-test</name>
      <version>2.23.1</version>
      <description>The Apache Log4j Implementation Tests</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core-test@2.23.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/log4j/2.x/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
        <reference type="vulnerability-assertion">
          <url>https://logging.apache.org/cyclonedx/vdr.xml</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api-test@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api-test</name>
      <version>2.23.1</version>
      <description>The Apache Log4j API Test</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e8318e18bfad50da341cf9360add64f</hash>
        <hash alg="SHA-1">d1ea94a53da7ee66e8e1a574e127320a1834da28</hash>
        <hash alg="SHA-256">0f7d65bb33032731ed2df8936ff255906ff669f475c36a5ffbf840e7be27b598</hash>
        <hash alg="SHA-512">374edd13a8fd436c49980935ef23fc4749f238042bda14435ef8b1689b3b19a9153234e3120b1ff934b07311a10f920d963695b8898662f643ebe1b952825b9c</hash>
        <hash alg="SHA-384">062cc283933b06db5f4753626efb6a10ff284be32857c56fb55a271bed14ee33449816651afd800f0f953429e08bcf05</hash>
        <hash alg="SHA3-384">6450273744fe800e38702b8f798f3d2136d5c17e7c0e3753618cc2c870bf459ba8d005e575726839f1e82f548bb75bb0</hash>
        <hash alg="SHA3-256">3d25b37bb7c2d3a838eeaac6241bdd02f58fae3634466f6c94690aed73a3c257</hash>
        <hash alg="SHA3-512">a7cea36235217608d5d8700122d2c1f340f80df3339588c9153b0c7dae887527b4321860e8c050d32bbdfc422c9a7b2680e134e818ff4c08056b3c6ee2aa242f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api-test@2.23.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/log4j/log4j-api-test/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/logging-parent/latest/#distribution</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
        <reference type="vulnerability-assertion">
          <url>https://logging.apache.org/cyclonedx/vdr.xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.23.1</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bee2e2dcbeeb983bdb6b71c9c3476b6a</hash>
        <hash alg="SHA-1">9c15c29c526d9c6783049c0a77722693c66706e1</hash>
        <hash alg="SHA-256">92ec1fd36ab3bc09de6198d2d7c0914685c0f7127ea931acc32fd2ecdd82ea89</hash>
        <hash alg="SHA-512">2a296246b0059ff5fe5c26e2ba3f48aa99e38d7658d613fbd02f32c6d4262f93a67525e6cc4d767fa5c2ab0e39e70bb3c0d3966d38ea4f01608588c084af3162</hash>
        <hash alg="SHA-384">3937cb646009763a94b199a0d6c0065441b9914e2b25e3d58db523874ea760276b445ff300015948d3a813217e0ee404</hash>
        <hash alg="SHA3-384">16ea3301ca37fbede2927399209b403066621789c4f1bee531b5153f27b652458900697fb828170d541a5f3b82e77fb7</hash>
        <hash alg="SHA3-256">0a3dfffc0f362b0a86ad0cd8b36da313c7500a8bdecb0ad7e628c2637d933548</hash>
        <hash alg="SHA3-512">2e230994b8cb7442a2073d60f89c27703ffc78b613dec7891bbfa42e91c95ed684b387ed65df3ee48559ccc06e6877462748f7e2ef985082c8db0741feb576a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/log4j/log4j-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/logging-parent/latest/#distribution</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
        <reference type="vulnerability-assertion">
          <url>https://logging.apache.org/cyclonedx/vdr.xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.9.6</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ac8747986567850914e2c7f0e85599b3</hash>
        <hash alg="SHA-1">ac9a1c8a8cfa36f3a5489837e653ec0cd530d576</hash>
        <hash alg="SHA-256">4f8f07fdb6b8701fa89a23a2edf830808fd65892d90cce40c0e6df7c8f2fcb62</hash>
        <hash alg="SHA-512">234eaac0bf4b9453321b5a140b2d26ec6ff7cacc02158c8cebe33f470ac66380ffbe088cb3281e371bf41c4f364a00c068971d163691c106077be575b95b89d5</hash>
        <hash alg="SHA-384">96c8c0bac3905579974974076fbbae7e59f3728c32cac73d122bf1fe0449ce36dabedcd39f0bb04f5d8a6d622c60200d</hash>
        <hash alg="SHA3-384">bec8198468b4be72ddc3d420b941ab48407d4915ec6eb4d7c7ab0012c7aaf920d03d0144e32f8894f162e01c48b7ed95</hash>
        <hash alg="SHA3-256">39efb719973a7dbd9fd57485eea2fdeed43477fb73dc91b0cbeca6bf01ee5458</hash>
        <hash alg="SHA3-512">7ac18a53d7b2e93514a0b76024223e33df0377279eb6cf20d1eddeed21c1486c3cd7a3e399c11bfe32a9269e1d53a5713f864527242c620e9f3d7a2335e46964</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-model/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.23.1</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">34fad2df975cf874a2fdf4b797122f16</hash>
        <hash alg="SHA-1">905802940e2c78042d75b837c136ac477d2b4e4d</hash>
        <hash alg="SHA-256">7079368005fc34f56248f57f8a8a53361c3a53e9007d556dbc66fc669df081b5</hash>
        <hash alg="SHA-512">0862144475f4a5ed67c8ab4bf163e02a89c1cdde18cd3dd3811075bd7a4cd33bab5cb824c3dac8d16afa74e9e267a1120b6c18bbf3d586f37d740e06a1af1b15</hash>
        <hash alg="SHA-384">d2608dd33e2dd3e50a663d942660db80bb62c39afa3fe4155de6bad235b4ee637f97488cb21e9d22750bdd279a44634a</hash>
        <hash alg="SHA3-384">a4d3ebc98bba16601879fe05ca40c4ca442e8d8177795d286c19ac14040b750f1a9adbffbea982e4636bdd8798918883</hash>
        <hash alg="SHA3-256">80fc801f0be9b360024407409c8eae4d5fdfbfb520ec968500a9196446d77817</hash>
        <hash alg="SHA3-512">1d7923e1bf2bf28f9e5f0990b36cff5c5e8b3409ae848ee903c970a0af22da3d4ae81dfb335d2ecfb3cdf3f09dec08bf2d2f1f8dd2702c766fa373975f551205</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/log4j/log4j-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/logging-log4j2/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/logging-parent/latest/#distribution</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/apache/logging-log4j2/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/logging-log4j2</url>
        </reference>
        <reference type="vulnerability-assertion">
          <url>https://logging.apache.org/cyclonedx/vdr.xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.assertj/assertj-core@3.25.3?type=jar">
      <group>org.assertj</group>
      <name>assertj-core</name>
      <version>3.25.3</version>
      <description>Rich and fluent assertions for testing in Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">88258246abdcbf7298b7c3401273e15b</hash>
        <hash alg="SHA-1">792b270e73aa1cfc28fa135be0b95e69ea451432</hash>
        <hash alg="SHA-256">7fbdffa1996d43cc08e2576e01008b07e57bbad2b4741aa6c3ab73ce8511130e</hash>
        <hash alg="SHA-512">cff2c0698b85febc49ab84a692db9bcb8e16c02f53ced530b3174c544d3fa24478a33050cf5f900a41ddc9c3cb66fbc20a5967be8d779c4861134017369d1b9e</hash>
        <hash alg="SHA-384">871ea788f105e20105e884b69da65abb1bcc236cde63327a0a56162c547b70e3e71d6bc56d5cd07a54d67587e5e54184</hash>
        <hash alg="SHA3-384">2ccafa0f76ad055b870a840d9ef18ed1c1669cb77d0eba0de926db98d574e48f921a39fe45469938b22943dd3c29fded</hash>
        <hash alg="SHA3-256">c3419982703bde0c4f7b2a43105604463586b4db087326f95f09bf1925855878</hash>
        <hash alg="SHA3-512">8b9611210baa82668495d2eb0fde56cb3376b848b29324e344f9d1d6de6c00bca19f21e0c619b45d5a161ffa26212087be6afa6a76bb9100ce630f505e6c7179</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.assertj/assertj-core@3.25.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://assertj.github.io/doc/#assertj-core</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/assertj/assertj/assertj-parent/assertj-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.11?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy</name>
      <version>1.14.11</version>
      <description>Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c28e36075a114b176953fc10a5370be7</hash>
        <hash alg="SHA-1">725602eb7c8c56b51b9c21f273f9df5c909d9e7d</hash>
        <hash alg="SHA-256">62ae28187ed2b062813da6a9d567bfee733c341582699b62dd980230729a0313</hash>
        <hash alg="SHA-512">984b32c7902a0c46c855faf13857db897f6bea25a116fbaf7b0934bc2787dccdb47470c43d9e74e0506c725271265dd39c74ae197e504d6d8de3cbf0973f6b37</hash>
        <hash alg="SHA-384">cc951ce091b638fb2cd5e482c7b3238317e589e225e75688cf7a1c4d70a995d8a16806d4cd5add2f260b08116a03731c</hash>
        <hash alg="SHA3-384">7dcaea87fab5a5f59789ec2bdd76b59f5233ff653c582c6641fe73071e310c25387f07a8aaf177bb73488c950d0c90e6</hash>
        <hash alg="SHA3-256">69352d198d19a57e9da6495f3500e206d156cf5eb164b8c8117ccdcf7b7117eb</hash>
        <hash alg="SHA3-512">a9c4798b67e929cecaf7a4dd34f920868d46434b954d0fe75d198134e58049e247d06dc88871f4a1bb7a8443300af08b1bb9c66fbd6b21dcc85adb42bff7ce37</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy@1.14.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bytebuddy.net/byte-buddy</url>
        </reference>
        <reference type="distribution">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/raphw/byte-buddy/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.awaitility/awaitility@4.2.0?type=jar">
      <group>org.awaitility</group>
      <name>awaitility</name>
      <version>4.2.0</version>
      <description>A Java DSL for synchronizing asynchronous operations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8f3644827b9e3037de42068c57006260</hash>
        <hash alg="SHA-1">2c39784846001a9cffd6c6b89c78de62c0d80fb8</hash>
        <hash alg="SHA-256">2d23b79211fdd19036f6940cc783543779320aaf86f38d6e385a2ff26da41272</hash>
        <hash alg="SHA-512">4c422b4aef3dfceb040898f45cd1b2efb7bbf213ef9487334a0d0e674e494e120fef61348f8a81ce726f2f66dc426e133917de20c52b5d39d792e2dca7bc82d8</hash>
        <hash alg="SHA-384">11d15d6efb32707cae528eefb8fa4ab7820649ed528c3447660efd984518ee2906421af5ee76ea8181c904d594e8e719</hash>
        <hash alg="SHA3-384">71eff4441379fb1d13bec42264d48dd1ed4817c7a226a4ef1e5255e5afcc8e5e61aa92677ae98fdce2bf4824b4dbe4fc</hash>
        <hash alg="SHA3-256">4fc8b38b34625336be520d2be1edcab4c8dd8e0667fecb2aa6aea83b9bad7f28</hash>
        <hash alg="SHA3-512">074f8629ab499c28155e505513e0a25c83ce722747d196966eac6327de604853503ca5f54b84effe8e2e3ab78d9ce285bdba82bf738ff8bff0f1009549230521</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.awaitility/awaitility@4.2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://awaitility.org</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/awaitility/topics</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/awaitility/awaitility/tree/master/awaitility</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">84351f7991a0e6722f00e96a4ccc376f</hash>
        <hash alg="SHA-1">f11560da189ab563a5c8e351941415430e9304ea</hash>
        <hash alg="SHA-256">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>
        <hash alg="SHA-512">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>
        <hash alg="SHA-384">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>
        <hash alg="SHA3-384">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>
        <hash alg="SHA3-256">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>
        <hash alg="SHA3-512">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest</name>
      <version>2.2</version>
      <description>Core API and libraries of hamcrest matcher framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">10b47e837f271d0662f28780e60388e8</hash>
        <hash alg="SHA-1">1820c0968dba3a11a1b30669bb1f01978a91dedc</hash>
        <hash alg="SHA-256">5e62846a89f05cd78cd9c1a553f340d002458380c320455dd1f8fc5497a8a1c1</hash>
        <hash alg="SHA-512">6b1141329b83224f69f074cb913dbff6921d6b8693ede8d2599acb626481255dae63de42eb123cbd5f59a261ac32faae012be64e8e90406ae9215543fbca5546</hash>
        <hash alg="SHA-384">89bdcfdb28da13eaa09a40f5e3fd5667c3cf789cf43e237b8581d1cd814fee392ada66a79cbe77295950e996f485f887</hash>
        <hash alg="SHA3-384">0d011b75ed22fe456ff683b420875636c4c05b3b837d8819f3f38fd33ec52b3ce2f854acfb7bebffc6659046af8fa204</hash>
        <hash alg="SHA3-256">92d05019d2aec2c45f0464df5bf29a2e41c1af1ee3de05ec9d8ca82e0ee4f0b0</hash>
        <hash alg="SHA3-512">4c5cbbe0dcaa9878e1dc6d3caa523c795a96280cb53843577164e5af458572cde0e82310cf5b52c1ea370c434d5631f02e06980d63126843d9b16e357a5f7483</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest@2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hamcrest.org/JavaHamcrest/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hamcrest/JavaHamcrest</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter@3.3.4?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.code.java-allocation-instrumenter</group>
      <name>java-allocation-instrumenter</name>
      <version>3.3.4</version>
      <description>A Java agent that rewrites bytecode to instrument allocation sites.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b617ba0b4b2e3f41ae6b0bed52c2e898</hash>
        <hash alg="SHA-1">3427f16e551dd619c269536b44714f9601905b5d</hash>
        <hash alg="SHA-256">44f8cddec129520b2532fa9ff25f9572d7566307d660635ba32bf409f06ae336</hash>
        <hash alg="SHA-512">e640a2f247d9b3f8334b5aca37da892a2b0868fea199011160a54ccfd6c84a0089099427ffa79efbcc68d6cc587f24909b84c38055cd60ded4e12ad961b9ce45</hash>
        <hash alg="SHA-384">c401b816b2f86065a669a30829185af61980b3f100b49a8ed76e71fd8d265bdc666cc3af344826b78ff7b6c79c3e37b7</hash>
        <hash alg="SHA3-384">0e1b0ce1a7b8410104ec0c97aa6c976acb958b3abb9d18fbe0afd130c9ab4e65dd65c723ef67c0b03184a9d0e0b17860</hash>
        <hash alg="SHA3-256">bb65f3e8150d076df1f76e18d5b353c83fa9e77f06cfe925db4787ec5590e000</hash>
        <hash alg="SHA3-512">e021599bc99a644c14bf04358b4c78e731ca074d733e199e55da55e22c92032a5167d39ab2e352f3fc490bdb0fd68c3ecd7c96064ede30c48ccaf591be17b620</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter@3.3.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/allocation-instrumenter/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/allocation-instrumenter/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/allocation-instrumenter/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://junit.org</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/junit-team/junit4/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/junit-team/junit4/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hamcrest/hamcrest-core@2.2?type=jar">
      <group>org.hamcrest</group>
      <name>hamcrest-core</name>
      <version>2.2</version>
      <description>Core Hamcrest API - deprecated, please use "hamcrest" instead</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">be43e37f4c7b4f6fadba382933006b15</hash>
        <hash alg="SHA-1">3f2bd07716a31c395e2837254f37f21f0f0ab24b</hash>
        <hash alg="SHA-256">094f5d92b4b7d9c8a2bf53cc69d356243ae89c3499457bcb4b92f7ed3bf95879</hash>
        <hash alg="SHA-512">e6c3f02e25070177f8101f9ca265046f8c9569f82560051dbfb1e6a28c9937b1a7453f68e9a37bfce0eb69bacf45a743d16e78add931e98195d260b8a516557e</hash>
        <hash alg="SHA-384">3d31875d5f5c398db6e29ea4e57ad18c9afb00b0926db20429435e74c1733f0e87189621c1f5edbf443b10bdcf7696c1</hash>
        <hash alg="SHA3-384">435d92c73b0a1d7ec1d1218953e2c382057658aae9bcd71359d2daeee48407ac4c4c539b4fe321e97147f3f568f0a40b</hash>
        <hash alg="SHA3-256">c34903e0e52796dce65958939fd536f475c7cc3733c31ec0e731ea4586daceaa</hash>
        <hash alg="SHA3-512">ce294d68caa56282e800a7d237a008a715c80f4f6f50240e7cba88154c429d30647150e4c53042569e791ddd24634ad7fe8711c0bc0d84c14663a1e5c1fab932</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hamcrest/hamcrest-core@2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hamcrest.org/JavaHamcrest/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hamcrest/JavaHamcrest</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-api</name>
      <version>5.10.2</version>
      <description>Module "junit-jupiter-api" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e691e23a36de8cbda5cbcc9f31461e3</hash>
        <hash alg="SHA-1">fb55d6e2bce173f35fd28422e7975539621055ef</hash>
        <hash alg="SHA-256">afff77c186cd317275803872fa5133aa801fd6ac40bd91c78a6cf8009b4b17cc</hash>
        <hash alg="SHA-512">7dfb74405cc011bf0b9176f2093686680225ef32658ec82b55bad9857eb38999b8ac25c23f920127b426120bfc20938f2d9dc8df111a509d9858d350e5ff7685</hash>
        <hash alg="SHA-384">5ef5590ce923e0e5b33e821e1ef650ff30be70433fdd03ab0986ad68f71e18a804c43a8736e5ee619b676218de4d6142</hash>
        <hash alg="SHA3-384">dfe5609aa1e95c4156fe2f0143ffb9d327d734a372ccccaca1d2d307b370fb79c5eacc8f228f90d5382f64cd0508447e</hash>
        <hash alg="SHA3-256">db3d74ba82ebe3eed0779121c694d3f40932c8c6f1f5985ec0187ebc6af6cfde</hash>
        <hash alg="SHA3-512">43cf8157d2de72a4fbbd6c0f92adb32d9454e3b1e32667d11b98916a3310f0835a0a38766ac0e56387e87e916fc4d18cd6b953150e404bc05a743605be90250c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar">
      <group>org.opentest4j</group>
      <name>opentest4j</name>
      <version>1.3.0</version>
      <description>Open Test Alliance for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03c404f727531f3fd3b4c73997899327</hash>
        <hash alg="SHA-1">152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e</hash>
        <hash alg="SHA-256">48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b</hash>
        <hash alg="SHA-512">78fc698a7871bb50305e3657893c10500595f043348d875f57bc39ca4a6a51eda3967b7c8c8a7ec3e8f85f2171bca4aa98823e912e416e87e81c6ba5b70a37c3</hash>
        <hash alg="SHA-384">10398b6998c9202a0731e2e19ae1c3f9d8a83582c2663fe7bdda15794ee6fa816727dbd8f7c7164bd5395ee1cfe7c97e</hash>
        <hash alg="SHA3-384">3abe706fd78509c25a402c7bbf6f9ddf71ffb5b35054864ba0fdf7902207115f888a0ba728fd71d2e87a9360d2498121</hash>
        <hash alg="SHA3-256">d961907a1bfa1dcda329dca494ffbc251b31fabcaca5ab7095661a8ce3c1d654</hash>
        <hash alg="SHA3-512">0ad661617bcac51bcd26f7ad4611c69b1fd9811b50dbf734e041a3243ab1f845e7796620e8a7c40c4a2df3946864598b1251396c7d9bd813203d82710788cce0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ota4j-team/opentest4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
        <hash alg="SHA3-384">c146116b3dfd969200b2ce52d96b92dd02d6f5a45a86e7e85edf35600ddbc2f3c6e8a1ad7e2db4dcd2c398c09fad0927</hash>
        <hash alg="SHA3-256">b4b436d7f615fc0b820204e69f83c517d1c1ccc5f6b99e459209ede4482268de</hash>
        <hash alg="SHA3-512">7b95b7ac68a6891b8901b5507acd2c24a0c1e20effa63cd513764f513eab4eb55f8de5178edbe0a400c11f3a18d3f56243569d6d663100f06dd98288504c09c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apiguardian-team/apiguardian</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-commons</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-commons" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae199049daca42c359e64974009025c5</hash>
        <hash alg="SHA-1">3197154a1f0c88da46c47a9ca27611ac7ec5d797</hash>
        <hash alg="SHA-256">b56a5ec000a479df4973b18bba24c98fe0db8faa14c8907d3ef451d8c71fd8ae</hash>
        <hash alg="SHA-512">aa739ee21b91fd4476aa5f9ad975f83cd440b6fbac71c8cc15816e3924710c0d70838465ee22a1b7390c2bae42ef1809868fa7ae0169b75f437cd95baac539d1</hash>
        <hash alg="SHA-384">0963ac9cf11f6312a807b4068dacd66cab7f6378445b4dc2cfd62b62dd7afe609fe389aff4fd2006cdcc564670e849af</hash>
        <hash alg="SHA3-384">64688f7803aff2ac8d536c5f9e11891f6b5bfae23580b2513ff4fde3c1f28509a27c483e91fd974e1fbca4a7cbaf3f87</hash>
        <hash alg="SHA3-256">83d491a6808587990e165c5065a7c938760065248083d9d05e81d9e4802d7764</hash>
        <hash alg="SHA3-512">1d54bed73766715b245012bce223e440703ff2fb8c7d5cfd208393060c2d63178e69e21aa739e5196599dcd1a79decf595cf142abc34ade6bd45a2b1d269f724</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-test@5.3.32?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-test</name>
      <version>5.3.32</version>
      <description>Spring TestContext Framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">095a9654f3ba80383f98abfdb2b47725</hash>
        <hash alg="SHA-1">ef4de37832a8fce1264ac0ebed6cbec2690e48d4</hash>
        <hash alg="SHA-256">8f8687215b90ff6f024f223dc18587db673a29e9e4d39c6f1965b220cdf258ff</hash>
        <hash alg="SHA-512">873ab3402b00ee569e5dc20ad35d7f7d166a26e9ccee5e214597ce1a13da53cd71f541428e49a0e1d846d950be10e9c45d05dbbc526f362bf1d78a3d62e0a999</hash>
        <hash alg="SHA-384">43726117819b9b7626705a48cee263a68ea2dee975623c2d899e83f897208db51da3623cbb0a3bc0bae89b4db636d40d</hash>
        <hash alg="SHA3-384">81948e62aa7a811fb63aba53d03eb094e5bff953c83ba01fcb21b0d36d29cad701831f61f28f34e7333a003f2ec6848b</hash>
        <hash alg="SHA3-256">737a9d6d7bdf1f75ccec99f74e46eca2e1b3bf9b97dde87cb310ad8748c126d1</hash>
        <hash alg="SHA3-512">49e271e26fde1718d48877caacafffb6db460eab813653c8f6245b3e3ca59dcddecb53363fd45184fb7bd2b6b6fd43d3dbcebd81de774e042d6312e49c8e3e94</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-test@5.3.32?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.32?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.32</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">de057df922d1f52cb028515d74c61b38</hash>
        <hash alg="SHA-1">50eca89542c407395a58c72097a6cc17b28e718a</hash>
        <hash alg="SHA-256">e2ac75fd816e2c0c058a737cf66f869b0adf5a2747e58fd85dac98fbd4292f10</hash>
        <hash alg="SHA-512">88d7f38991c0182e008618e684efae4a799c229ef41b1642164752e40f91677ce52242de5b5cb655f16ee27c46f8f43265a6543a5709ffe461afaa724b23dda5</hash>
        <hash alg="SHA-384">cb62ebca6b8142769885acc17a5a3bb17f2bb33629c26ced4169a0def26d6da3276da30acbb7dcbabd4fb4e509ca4044</hash>
        <hash alg="SHA3-384">3060281483d9f58ecbf1919aa955e62896d73f1046ff944e07ed2ec2fdb4bbafb740fd81f949f97414ddf68da2fc2e72</hash>
        <hash alg="SHA3-256">4efd26a8c6f4453666e2285be2d2bebc3fde18467ad40397ece69a82064199aa</hash>
        <hash alg="SHA3-512">121cb87987ef6ab820ec0c23b790e254dd98812bbeb89ca173e5154a4a3d5eff0ec9b91e457344fd31642e8da572defb890880f93fb6fdd3f56cef98b2352695</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.32?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>33.0.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5d8aefac09131c3a74d6dab4b01bcff6</hash>
        <hash alg="SHA-1">161ba27964a62f241533807a46b8711b13c1d94b</hash>
        <hash alg="SHA-256">f4d85c3e4d411694337cb873abea09b242b664bb013320be6105327c45991537</hash>
        <hash alg="SHA-512">bb122b4c6df2ae3282eefdf313f8d4a3d75e363cfb30ae65a5e51f744105e6fb7b5b77c8cc07a1d37fea0947aa22ac3070063174826408b57a44b2f26856ff3b</hash>
        <hash alg="SHA-384">dd0d01893159e2d734b885386635024c94606d5fe6259951e1f2ce37f026f60a419fefa536aaaa6274fdd2d5505e640a</hash>
        <hash alg="SHA3-384">a1b5933d73ea9881293e19fab4bbef2b301a88e480f4fcb2d1187e383dba0d5c02c8884997fd3f0d20456ab8c27e3898</hash>
        <hash alg="SHA3-256">ed01cc65afe540179c8e54dbc09331b679521cc5a6617389814fe2038603c7ba</hash>
        <hash alg="SHA3-512">6a422f8b319cbc21a87c7e03ff94ac4da0eedd8b9960212fb14446bd21da281afd8140ec7f3d3043e80e8c5b16ce50b5c27a235908f23ae4127e8d925a16886a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.41.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.41.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3187e97ad396c881e9e9f98456e8d878</hash>
        <hash alg="SHA-1">08be6df7f1e9bccb19f8f351b3651f0bac2f5e0c</hash>
        <hash alg="SHA-256">2f9f245bf68e4259d610894f2406dc1f6363dc639302bd566e8272e4f4541172</hash>
        <hash alg="SHA-512">d55d8f5d29aa373747064f300d6a21cb6394782aba161e1a6edff11431dca5b4e44c5110d3ec7b42b4132d30e247296336bfc317f593a065b1adbf8882e301b6</hash>
        <hash alg="SHA-384">6fa49369d7bd63ab2bcf9a29acbac3f16d4077ff78dc6fc0b228bc151a1d58a9320bdcd49e7ec70826618fd09e4f107a</hash>
        <hash alg="SHA3-384">ba341ea98607c2b8adfae367c1550eee8dff50e698a378695e67d289bc137cf98a7dc7e12f87b634f9ab15c10e217a3c</hash>
        <hash alg="SHA3-256">3a40a5b995c9160a714757987e0f56e4823046cc862162e5f2cd754235083d7e</hash>
        <hash alg="SHA3-512">4f9d9916b1efaed60677c5d835cc316809d6beb06c7d508ed2ac6d5adf42620d87b99cb00ee9d1f7598b58b64b338fc4784d0d0b2bb8f972a21a0e4fbf380406</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.41.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>2.8</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
        <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
        <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
        <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
        <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
        <hash alg="SHA3-384">10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d</hash>
        <hash alg="SHA3-256">b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072</hash>
        <hash alg="SHA3-512">d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-engine</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-engine" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bab6a13692441a957234370baae15f0</hash>
        <hash alg="SHA-1">d53bb4e0ce7f211a498705783440614bfaf0df2e</hash>
        <hash alg="SHA-256">905cba9b4998ccc29d1239085a7fb1fe0e28024d7526152356d810edec0a49a3</hash>
        <hash alg="SHA-512">5ca468aff73099673266e4e1431189023b0a660292f4f6c101dc4b03b8ab3643392731aa55455bf3a5079331a563dacda0c6b3cf3df64563ca6e0201af609e27</hash>
        <hash alg="SHA-384">7e883fc0a9cd5f3d6a792f26a43eddbe1e8e6583cedfba48690679ca43bf46482967c6e5a91c9b32f8904eaa54b7b759</hash>
        <hash alg="SHA3-384">25d922124644f344ec96487622c34c0e853c7a6a70858a3fae3572b0c03d7b7fec4f297f66d37311f87dcdf7c3c58f18</hash>
        <hash alg="SHA3-256">90615525738990e5226ec73729c052cb9ee2a8212b263c3214d71fcb28c41118</hash>
        <hash alg="SHA3-512">3cbd7d8afa9f1953fef49c010f04f47b286f0cc40ddc3766928801202cf08539919f4018ece569c251d198a1a6e3258bc48d4b2facd2bb7f2d5d675fc34c7dff</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar">
      <group>org.junit.jupiter</group>
      <name>junit-jupiter-params</name>
      <version>5.10.2</version>
      <description>Module "junit-jupiter-params" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f33df4bff7fbfb15352803fa575b88d</hash>
        <hash alg="SHA-1">359132c82a9d3fa87a325db6edd33b5fdc67a3d8</hash>
        <hash alg="SHA-256">edb1e43ff0b8067626ffb55e5e9eeca1d9ab2478141a7c7f253d115b29cc7cf2</hash>
        <hash alg="SHA-512">002b2010769413f1bc86cf95a48f679eeb7a372379e8f401f892d03bd1089483937a77f08c095579f81b8f0a27896fac6bebdc4c09a2dff9f5459e09207ac0d8</hash>
        <hash alg="SHA-384">f026f977c21b4d19611ea2ac8a18cb7c6110787241fd47f650557e427db0289aadd12a1069b46e73cb807bf45bb69455</hash>
        <hash alg="SHA3-384">210369e1ccd3a70a0b4fd785777367994414163361ed9d9c449b0b2364dd43122579d48ebb8feb923548c8f43eb74067</hash>
        <hash alg="SHA3-256">3714beec66c923801a378969a1d370a43761a5f18e86e26c8161763ad19adb69</hash>
        <hash alg="SHA3-512">edcd46e165d048ad49e023c1a71d14b9046c8dd1be20f908b63bde859dad2c76e6b84e8c100ca0e17008f22c3cddd1b4d427b7c4041e6cceea559ef707cfd024</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit-pioneer/junit-pioneer@1.9.1?type=jar">
      <group>org.junit-pioneer</group>
      <name>junit-pioneer</name>
      <version>1.9.1</version>
      <description>JUnit 5 Extension Pack</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b31345b5b1743caaa72a679f06400aae</hash>
        <hash alg="SHA-1">8b528fa0a49297582932bdd9096c84dedf71cf25</hash>
        <hash alg="SHA-256">0a62be4447e4066d628705e298e91d557b5f01c1f3f143501dc3eac36da59230</hash>
        <hash alg="SHA-512">0631c4d00cc732e991ecd70f9eeb5b53c8ed595a9436315c1ee33cd4dd6f3de127986fdb6d7892dfc188aaf3dbceebff42f48404a819855f25001d87f936195c</hash>
        <hash alg="SHA-384">e33108f7409ba6dd467f4f077ba9e88f2ef88cda6a513a16c52a7f0ff25059fbaa569aff2c23b8122f193913c6dae85f</hash>
        <hash alg="SHA3-384">5b84356553909a2516c42c22cee1dc3d32522f8bd7191c15906fb6015405d36ab99884aa4554012cf2cae0cf7e00d9ea</hash>
        <hash alg="SHA3-256">31d96b13fad5ad8d5bfe41ccfb8b0cc94f2b0e08e9dc9fe2d31070f034e72cf7</hash>
        <hash alg="SHA3-512">58cb634c8d64c7c4a0e175d80986ac3ab666d8a59bc5708ae021dd7ea28931a203e87c4d8bf4c22e48732736859d90779de4a83a9873917aacc6c80d0b7ed559</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit-pioneer/junit-pioneer@1.9.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit-pioneer.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/junit-pioneer/junit-pioneer/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/junit-pioneer/junit-pioneer/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-pioneer/junit-pioneer.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar">
      <group>org.junit.platform</group>
      <name>junit-platform-launcher</name>
      <version>1.10.2</version>
      <description>Module "junit-platform-launcher" of JUnit 5.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8697c2679111235abe01e66adca88773</hash>
        <hash alg="SHA-1">8125dd29e847ca274dd1a7a9ca54859acc284cb3</hash>
        <hash alg="SHA-256">aed4f42fb90ada9b347c231f13656fc09121ba20dab6dc646a6bd9d4da31e4aa</hash>
        <hash alg="SHA-512">764f1e1a978d8970524a22bf37f807d0a2b94a388abd79d23287ec931266f752e6fedf6599348fd6baf5fcef2105dddb315f680352532e8f2209b56e5d74f7ba</hash>
        <hash alg="SHA-384">36603050aae7c44b6d6ed59e648abfd22087ad75a390a02f5f081577ec583b79d889262a470b27ddc5572efb76678aa1</hash>
        <hash alg="SHA3-384">848722a651fd4b4e7de79fba326c17aa7cf1ddc1108e525a7c84cf3887b7af3435178adb349f002cb73059d20ae445ff</hash>
        <hash alg="SHA3-256">70caf603553fbe07b9219fa2e925681e8f68aa285d45ebf4cd3cefb4b643dca3</hash>
        <hash alg="SHA3-512">9732cdaf561e4290da68689acc2c46981335b1e2513a512ef70de869535dede48bf4a166106735529f1cf4d21222699789217b4997fa2bfdf785944135b9a790</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://junit.org/junit5/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.9.6</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0d872ce50d16e02ca72e348b9f7b3487</hash>
        <hash alg="SHA-1">674ab3337566d493df8f95eddfda90e41002d214</hash>
        <hash alg="SHA-256">c1327590398759da1918dbf356eb6d63f8fce7192a805cb3c8e336fbb1155dc0</hash>
        <hash alg="SHA-512">1b3ffd0acebd8b786aa5c30768e44b0246f7f91c8e7443e2143e015ab297e532b3f8acd38cd3acc4435d00f843266e36757b78e6464f81ea3f647fe6adfb63fd</hash>
        <hash alg="SHA-384">ff4d155ab40a86405c6a77036ddbf3a1c2aad9d25e66873a2394cae426120089e885337a55d66d751c55ca9f846821a9</hash>
        <hash alg="SHA3-384">62b56af02e16b8c3c136b420077162e5ccd5d2ab5e642045b6cff2b1011c1f20d11f5d7d72147ad13b816b5f7eb356ed</hash>
        <hash alg="SHA3-256">2a26fe9b6dd5d21071fdb58a7d329472f1f3d80239762e18584d589516c54903</hash>
        <hash alg="SHA3-512">ca17f7a1a3280898bba077d9b3a7f573fd766f2eb7ecf79d5dfc9bcfa278dac2bebe92b86a29ff357889681d70fb6f849222ee376b7d3d0efe6b96552e6f0e37</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-core/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.9.6</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">144dfb04d530da655c5f96d80adb4ef4</hash>
        <hash alg="SHA-1">7687311690b68c935753c55dd3f016d8c4a7820f</hash>
        <hash alg="SHA-256">0d200fd3b354d653d2a02cdba6a39b6dc2744a8539ff36ea423fe62cac736799</hash>
        <hash alg="SHA-512">169cd7f3ef1933bca97c8b05022a1537695c20d7205333775375353249913e343ed7d48651ef23278a5942f2751ffd6968812a02e23a53af7adfd2cc22dac709</hash>
        <hash alg="SHA-384">ff0eacfafb403c71c7b571101d44792e2c809b7e6c308e4906eb09af8520413579d4be31625059eb7547b2b875bf8ffd</hash>
        <hash alg="SHA3-384">598fc70e1fa4885f2f31287d825fa169243b10ec1b87f9bf1a45026ee6e0d41eb5c164958ccb2995cf22f88738700801</hash>
        <hash alg="SHA3-256">d6b2525a09ad10ca6d70f4fc2fbd92d1f8ff0c5bf15b30ff33d6df84fab9c316</hash>
        <hash alg="SHA3-512">87a7ed26f07ab9f29ecc033fe4c40c99f5365f9ccd31bfa4be6f02fa02ba98a4cebaed7436037e264ca4c2b1173bd423e0ea3aee465535a7d9f721783ec70c17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-settings/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-settings</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.9.6</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5480ba40c9ae1cac6931abf16f7e8b81</hash>
        <hash alg="SHA-1">2b75954b6f0c7eef38f388d97b91ce1ae3229f21</hash>
        <hash alg="SHA-256">e97cc245e4ef833c589fce0b5a8a4d77e3a0e01e619c57b5342c5e16d37a791d</hash>
        <hash alg="SHA-512">da5f18b6d6959805cedf659bf3086576014ba48c9c8b6216b26995431c2c0b407c130869bab981123cc897371efa66d8e08515a18021614372bce46157f36534</hash>
        <hash alg="SHA-384">ab60bc65e312ea41ed6fdcb08900941d0c63bf06c8ad8f31632a5ecd5cc9fcba6bc09c64be2b7f5d42dae048d2cccb4b</hash>
        <hash alg="SHA3-384">09d98ef4cb7141b931cd9c4e54011cdaaef1d104146f4b5f7c9e3dbbdd479b616eb020b22ee0b8be864b81a8e38b265d</hash>
        <hash alg="SHA3-256">8343aa4e31b4190e5ea6f4b09ebb490eba0c4e2ffde82861a65d641b636f5909</hash>
        <hash alg="SHA3-512">bcc1344c9cab3adf47863f024ee5f682c617bc2279a2d4d2705313d486c3bcc8878d4b05a0405ff9b101d0393dfda63498ed65400eda8cd342e98e4a3bcc6cc7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-settings-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-settings-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e68635a721630177ac70173e441336b6</hash>
        <hash alg="SHA-1">f89c5080614ffd0764e49861895dbedde1b47237</hash>
        <hash alg="SHA-256">873139960c4c780176dda580b003a2c4bf82188bdce5bb99234e224ef7acfceb</hash>
        <hash alg="SHA-512">ad4e814c8baff780a4eee064903e52b09ae00420a59fb075ef72dbb8d64d12d3d5009b03d56c15f93587d931c3a7f06cad6351ab2dc9415ccc6eeab0daebeb07</hash>
        <hash alg="SHA-384">4af3426b6409cce7d5fcda4e2af407fc2dbae9873e06d98332bcd032c0039d9080a291e42223ea2bbef9825d3d63493f</hash>
        <hash alg="SHA3-384">41720858dd5804f9cb26a8878c16dbdf0372a90e99c037809fe76c3de2c5517ba252af8f8cdf534c1a09900702e6a917</hash>
        <hash alg="SHA3-256">50fa723aefb551a3fd5888375d01f1d776c534cdf833baea392818e9bfa8166e</hash>
        <hash alg="SHA3-512">a43f823d31b377c0c7ec8d36ace69e5dbcdaf4dc4ebb45ff0561fea9e12d74c06090ee24b29b06769d4031693faf5d7e3146583d3a64bfaef6b7c79773a8831f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-sec-dispatcher/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-sec-dispatcher.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-cipher</name>
      <version>2.0</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55d612839faf248cbe3e273969c002c2</hash>
        <hash alg="SHA-1">425ea8e534716b4bff1ea90f39bd76be951d651b</hash>
        <hash alg="SHA-256">9a7f1b5c5a9effd61eadfd8731452a2f76a8e79111fac391ef75ea801bea203a</hash>
        <hash alg="SHA-512">8f187b07867a7c29d77454aae4b76479300238d9c4e777c1afa2aebe33b88dab916e29111dd55acac1341849f4579fe91a5470fdd45ccba0e05709c2ce3a1d65</hash>
        <hash alg="SHA-384">6973eefe06a8992aa8db1775c0f43a84cbef54eeea9122a5a30c362af3e4fb13b6cbd6fba229142e2a4495f97d71f409</hash>
        <hash alg="SHA3-384">ea780d218f96e61005c5582bf3785ddbb33b53ccb4efbffd76ab58166cf261d3c256d52fea28759380684b7e9b0db8eb</hash>
        <hash alg="SHA3-256">e2e51d5350ffdce341464ddcdf9ae60108bff40bf5174dc6be43e33ffcd84af9</hash>
        <hash alg="SHA3-512">f3e17ea31bdefc8094ba3495b8231ec7f90c7175839b009d9fd230110b66ac4c68c912fda1a6e644d93dbce639d738e2535f1ade5841e072a604f5f8ac536729</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-cipher/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-cipher/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-cipher</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-builder-support</name>
      <version>3.9.6</version>
      <description>Support for descriptor builders (model, setting, toolchains)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e004677a88ec086ba79a6a646b120f06</hash>
        <hash alg="SHA-1">bcfc9d8175eaba21111edf21e0355a8523461abc</hash>
        <hash alg="SHA-256">e1f4d2784459ce8a34b9dae1829a1999b569e483e21ee9faa7368691e729296e</hash>
        <hash alg="SHA-512">8c7e1dfec3285d0b834b76e815af3a41fabe20399a5144676b523cf5e1f7f4a35595b8de0e587c43e357b279114d43ac93449280a93634da934ca91911fe4817</hash>
        <hash alg="SHA-384">fcbe5b83ce778902e2734a693861bec86656ce027cb794fc7f3306e1e3b01d0057f8eb2d4cc67cad7664c4d3b026e704</hash>
        <hash alg="SHA3-384">e80adc67e2aab27122b520609a00fa15a8fe3b94a4602fbd5bb23bb3dc5d0a01cd95f6fba5f1889ede89bbb303d41896</hash>
        <hash alg="SHA3-256">ffa18d4f03cb557eb51b204a8a7ae8f5be6d4a818e065a42497d006ce580f535</hash>
        <hash alg="SHA3-512">d75a0f7038a1065ff6c9a52ece1b8d3830b5e52ad79abd0aa7c6a75fc110010e2277113c2662ba5b2322b4f15daa6549510303344dc1059f84bbafa48d9402c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-builder-support/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-builder-support</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.9.6</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">58a684bcc774fb44e4f73fa7466dc44d</hash>
        <hash alg="SHA-1">497cda3149f3c661113f9a663e0270ce2566cc95</hash>
        <hash alg="SHA-256">e047a67b204c434994253e2ab5bdff5fe8cb7ada9316ac3e754c39f900ea847b</hash>
        <hash alg="SHA-512">6020ef7361dd3a1c30227c80521b0233d99c61365b9e936968bc7421e771ec995b08cffe0dd1a94495e41208c6f2fe5f61b19162a59c8e5afb18569347ae6646</hash>
        <hash alg="SHA-384">8a56f8bbcbe303e87c0397c17456df1c14c2e9a10b899b26b30c905152fed1ca12863aed01641d1e3e2dc0b2b6355285</hash>
        <hash alg="SHA3-384">39a4aa4493977feb0d1772b660191c0ad029ff2ad498752fa02fec74610eac50f5f7a00a91bd128eca71c72a305dc055</hash>
        <hash alg="SHA3-256">e5a4e09609b2472233b395fbb31842f4d6f2ec1cebd65236cd93d2c34e910114</hash>
        <hash alg="SHA3-512">7d50337b8b9d9bea846b86cc25210e9ebda941f098bb415172a80748609a022e56057d7873dafe068f5fa7e3cd1591b7613d7c9fc479f36e4688e95a31a29d20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-repository-metadata/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-repository-metadata</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.9.6</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96a7982d9a46c5c19696b4558be1bbd2</hash>
        <hash alg="SHA-1">fb0979832c10c1a25d038a33ca862bef055fcdc8</hash>
        <hash alg="SHA-256">ad7a0fb408f8e47585ccc0d0011e0b501d93bfc9888d369bbd4a043d19475073</hash>
        <hash alg="SHA-512">7ac2f9e8a13c166b305ff2004d467a9f12ea65d08b444ccc651232384fc37592eae6c3263e5ba2d7c0ec2725ce5cfb0f40198f8a857a39c2379c72d0f4e16427</hash>
        <hash alg="SHA-384">f97efa314f7bb2c120fb1e1e65859e5ab8b367556a82efa4654b548cf1c19af0a803ce1048dd728442a894a2c022410e</hash>
        <hash alg="SHA3-384">c97ea2052e75590746004d2726b7b12dfcb7afbc652b9fe6fe4b09eaa3502fd2d8fdb5704384eac5a06b656fba63fe57</hash>
        <hash alg="SHA3-256">405547e3a1b5393cc72fd26de6cdef47f7b9a26a07c15eea0fdb799718ad5d21</hash>
        <hash alg="SHA3-512">ab2d2071750ba22913275953f543f65e9a1ed311a5f5c64c877ab30dd65d854af3fdc85d701f15772b579ded1ff7f96c5469ac53fd00627ba386cd4fc26ef5d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-artifact/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-artifact</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.9.6</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d554ff9d1f948ef4ad67dd590e0eb299</hash>
        <hash alg="SHA-1">64c127e31d9329928c72c403408a01f1871b6733</hash>
        <hash alg="SHA-256">3fd664f7e511463561bc343822347618b8ca0952db85da785809166f0a762411</hash>
        <hash alg="SHA-512">859b71dbf56651790914de279eee8452afbaae293051eb8f0b47b285c5a5d0352ea042acd9f64571b7d1deffe851debbb85f5bc6d10d404600cc964449757d86</hash>
        <hash alg="SHA-384">fc4188bdb695f52eea8f97d7b02fdc47e686ce61a1780ba85f147faed66257589768610896c5d04d3f5d24dae468835b</hash>
        <hash alg="SHA3-384">e7ee1c8bd1039fc378b7336716740316cd9ad014d66d379410e8efcae25c773ea6a5b87f10ed52ee72d89b9eb0cc9d8f</hash>
        <hash alg="SHA3-256">fdd09d0f129afbeb9e114025d55cae1ab01675f007ab66ae2252beb2b0295148</hash>
        <hash alg="SHA3-512">86b904876b16d1eaa9c692894f22a1bec64b58ef4f18cf08c721f5bb97307dce61f8eeb42b1986ec558b4aac389b65c52095128edf90a14433e681160c8b3ece</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-plugin-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-plugin-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.9.6</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b1aa0b78ffdb501dd4a6cbc0cbeff68</hash>
        <hash alg="SHA-1">983ce00d50a9f78ad1b805e21e4fd71807fa6ebf</hash>
        <hash alg="SHA-256">5f96dafbc411ee4b1e8426368d0d31d05ab5a4dace69808143142a0017598721</hash>
        <hash alg="SHA-512">a4fb4c65d2decd27583e67872d677a5be764f46aa718fccf5b28e00a3da0897b123981d813419362bdb0f2f4be18fbc2a9a4af705382b930f63353e6c605718f</hash>
        <hash alg="SHA-384">e3339d859f7f0596eb9f70df32c7fd2e49831adbd6ff1ee15d720c480b7bc6b888e9a9296981cf638d5800cbfb7ef730</hash>
        <hash alg="SHA3-384">658944e788511a9d838bcbc0152ee56341c251d1b767b9f1cfaced0c6dd71a091247184e6c62e2443f6f8139a3268882</hash>
        <hash alg="SHA3-256">012de6c311ffead1cdebf70b8cde874ae21112411701a4ba139a95414f762e76</hash>
        <hash alg="SHA3-512">f2908d9ae1d01b28352f72acbb9c545ac1b88687b917b7e31bdd8f83e5d2a0736d59b01230d0cbfa20b133ff306c1693f8bf7881588e60f8e9ca6a8cb64c5916</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-model-builder/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-model-builder</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-resolver-provider</name>
      <version>3.9.6</version>
      <description>Extensions to Maven Resolver for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">74c2e9695842a46c2c2c1cd5179266c4</hash>
        <hash alg="SHA-1">848c45d334f6cc5c8dd602b0e58fd4482964eddc</hash>
        <hash alg="SHA-256">73b00b244b7b9e285654a45e765892bf5d369da77d42b5b4b5429122ed198a33</hash>
        <hash alg="SHA-512">94d795274f8c78c55b7d041a5f8abea14ec151a4c287c17f517cbe1cfe32413a835aee2d1585b5a43a6c58f4d87e0638166c1f1d360adb4495ce3379877883a7</hash>
        <hash alg="SHA-384">a35dd490ec044890cc0a1cf663c2683d9117513742fe2dc3584e2b79de5dcf3db4ddd60338729afae8cbfbcbbfb0dd6a</hash>
        <hash alg="SHA3-384">7d3930d3d2d5f4f0afd00cb4239c2963f24ba39d5653f4169d83e71f282470c8f312bf7088b1760a4f51cd2904f13e44</hash>
        <hash alg="SHA3-256">b4ba4e0317de799723660a5ad284012f2ccf4b7fe0bdb5645a13655b7f5f5e8b</hash>
        <hash alg="SHA3-512">1eac6b376405d776ebc9226eddfea1dd94b3a0587d6df0c4ab843ca3e90808be649f3c1a9d985d77eac43d588a7c85743f73a8855b7f4dff8c58f008b1d1d08d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/ref/3.9.6/maven-resolver-provider/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.apache.org/download.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MNG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven/tree/maven-3.9.6/maven-resolver-provider</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-impl</name>
      <version>1.9.18</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0204f7788eb26200ff419d4abe21072b</hash>
        <hash alg="SHA-1">e928b128d1e52e6299f94431ce3df74647bc8c26</hash>
        <hash alg="SHA-256">6bb9c90d007098004749c867da2eaf5785fc1139907718749c1097bdb2929bf8</hash>
        <hash alg="SHA-512">64126f7045f32088e0ea7589cb0bbdc2142774d04b482bedd4c8fa6eecabdeb7f8166e652b8b56c78ea1e1e87319494846e119b86972d0998f4b2b3387e2f9a0</hash>
        <hash alg="SHA-384">bd7562286f2b65e32344e6090b15cac641e48e494d4c39faade90665e20f23657fcde8721ca9893edc6d2a23d6d078bf</hash>
        <hash alg="SHA3-384">57d1c84a8194ce4f2156a02b62facc9f929a0da25541c6f8b73191890252afe0b83928e8e5041d88d67d4799248b39d7</hash>
        <hash alg="SHA3-256">7d1b46b5b6697753b20f46c58ab48298cace29ce6ee9f9bcb6c8dcdc59221beb</hash>
        <hash alg="SHA3-512">d50a156eed57cc5d3ba0a73f8743e1fb68da2877957527db7cff213b904270ce5f2ece9b3cb7fb4db9ba1abaefa5e23652b666ca8e30f13536728fb1e73ee480</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-impl/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-named-locks</name>
      <version>1.9.18</version>
      <description>A synchronization utility implementation using Named locks.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e6da3cfadecd128a47814dfc661163dc</hash>
        <hash alg="SHA-1">31f948d89dcb3d9739e70d5e1000ebd68eb4405d</hash>
        <hash alg="SHA-256">098de7bbc5b0b26c3eff74ac30ffba6680fdab9bf4aebab95c3f5e2fe9eaeea8</hash>
        <hash alg="SHA-512">2b55a35aa8aa819e9e7287791790b9ac9ba70d9a2b3a6dbe7dee40254c6515f5d1cd61b15e4c6700036125529d0a2a2d13bf1ac0230e958b5f90aa8462a8d58d</hash>
        <hash alg="SHA-384">1c607e1e92b97856f6638a00e2e5f6d804450efea858c6d289575297eb071a8ced2b60f1b27694db286c0ae6ccfda786</hash>
        <hash alg="SHA3-384">fe75434380ebfa2e4b0e2a3d680a5447635552386c8801926c99134d130988003ad88d53ba462963180f144b820d0731</hash>
        <hash alg="SHA3-256">166cf9b1a9c4ba6cead05d6adfd7391a09d3d067187c971eb58323306428b951</hash>
        <hash alg="SHA3-512">f47e7b380741460b9609047b32fac66001abff730ead00cf565d9034290c051199f0b74f535aa748e62091a539d21359b5ad16da8b847f809bd1696405d9b9ff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-named-locks/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-named-locks</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-api</name>
      <version>1.9.18</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">43a87208b9585a61f268843f6a0931ec</hash>
        <hash alg="SHA-1">0cd5174d6e80175398debe4869d484169c0abbf8</hash>
        <hash alg="SHA-256">ebfb9e1dfeea3c2017905184581e007874b4eaac9d28bfffcfe5133d70ac6339</hash>
        <hash alg="SHA-512">80f98b487b89dddf8b4891e3260fa1c7e95a282513fa332a2145d35eb8c14c16e05b5ca1f1347076480ecb5eeaa1cf084d38c92200f7c5a13255b5a76d7920be</hash>
        <hash alg="SHA-384">a3b3c671a51bee5255af6e9a80714bd1ecac6e52c81cfeff1ead5027b9ae186f352e7518b1bd87008a5c5964c549785a</hash>
        <hash alg="SHA3-384">b48ac201434b82e3ae7dee828ccb66b62b6eb49528eb2687fb9b20e64f8f59de0b7cdb851a0e74a9ebda0733ac43e5f6</hash>
        <hash alg="SHA3-256">540c5f918984e603cd911053ebaf3be99b6bf3b2448fca12f1e851dd92303469</hash>
        <hash alg="SHA3-512">f02e5e1e083151effcc4b1617de334cb410fa43d371a437fa2f4edf3f0e09767068b1ef297360de68d1f480f07e6f1e615c73154b8da290863c4556d10cf627e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-spi</name>
      <version>1.9.18</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b99c631156da02290d0c95cf40c4917b</hash>
        <hash alg="SHA-1">7fa176b3353ef6d78d02db39e025f3c27a983158</hash>
        <hash alg="SHA-256">d364fce9a17b0e0b073c26efa92af95b29c00c42943dced4a1168a7923fd3fe1</hash>
        <hash alg="SHA-512">4d5149923daa3ae532704b55abc9f553e8ae700a896df2c43467dc6be273b0458b81f7d453cf69c203d4c30a9770b41efbf4c52c1ad28038f544fafdb1a85f14</hash>
        <hash alg="SHA-384">cafb154ec6c2de03737310566e8ff04e3df40614fa2b5aaa274a2d1c4ded45ccf97f4e78597271f859b684a89d6d7180</hash>
        <hash alg="SHA3-384">f73a5dcce5bae6ec88a9e9bf203e520ef6a28eb38ff74156e23054e5c169d76d21f15d21f1db35e3f6f9eccd3a07edc5</hash>
        <hash alg="SHA3-256">e9d0b1de73e887b97084e3bb9a533b428bdae96121e3333d012a5eabb8a22f0f</hash>
        <hash alg="SHA3-512">471cf0ac9de5249bf80992d4e7fe7693a41359540d704982fa19a2be174e594ce0e18048c69404defa1fd22bf57185f51e864eac0c088baf33242cc349464170</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-spi/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-spi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.resolver</group>
      <name>maven-resolver-util</name>
      <version>1.9.18</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e6aa5f372550f4239361df35a53b4a1</hash>
        <hash alg="SHA-1">5ae9406f188ae4a999c353fce3fd77273797a216</hash>
        <hash alg="SHA-256">2eb0ea667bc489384478231dda7516407d4b5b22a138077229871de9362a7ae2</hash>
        <hash alg="SHA-512">b084984ea96448bfc70d26091553df0f798957c736c4b0f21874a3844e2ea656f64f253968fa49ed572c80920ede5883c0563cab8961c5bda5e869eda3e2e57a</hash>
        <hash alg="SHA-384">ea25e9d331ffab938cc72306f536ac42b3af53f0c683c624e1a2751b12d503d1f8f9b6f948c361543938096ee7768049</hash>
        <hash alg="SHA3-384">7886276d15c071d03fbfcf3b4e2d4043417ff725583362123711da116fd24a027456c8835b9a3a1b29a339a1a559103f</hash>
        <hash alg="SHA3-256">650154a642fbb6069408aa452312f1abcad0656c6da7f9eb83ea8d683e5ce582</hash>
        <hash alg="SHA3-512">fc1726dd19a05060846cd14635b2076f703e5e832139bdd4285e77c0939667dfbdf4c90dc3021250dfc08de63dc346c9bf8bd00a80e31e5adecb305410c3e80f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/resolver/maven-resolver-util/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-resolver/tree/maven-resolver-1.9.18/maven-resolver-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.3.4</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash>
        <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>
        <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>
        <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>
        <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>
        <hash alg="SHA3-384">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash>
        <hash alg="SHA3-256">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash>
        <hash alg="SHA3-512">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://maven.apache.org/shared/maven-shared-utils/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>
        </reference>
        <reference type="distribution">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
        <hash alg="SHA3-384">e97753b0913e87a430a7e6ce8467a2903670edbc87cba4282cd401137983b15cb9c4361c7504e139bb10119d9d7ddfde</hash>
        <hash alg="SHA3-256">883521331173ce90227bec1c5848ffc2f2a45e83eaa29d0376fb80e633c462c0</hash>
        <hash alg="SHA3-512">3429abb8aecac539bbf04bd6f6ba339c71d7156ec0861f27de86e1664312bb30dcd076a317dad0bbdefad89dbd03fbcf56003e16551c3320e2bf223424998c16</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/sisu.plexus/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash>
        <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash>
        <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>
        <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>
        <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>
        <hash alg="SHA3-384">e2f8df1aad5867355fd1d3de2374d077e3ad885e6bddac3ce7c7bc72a34097e33bc5dfe960f839a7feb515bd5a92ffd1</hash>
        <hash alg="SHA3-256">2e2acc7429faecd2e74c0c441209b1a5b0ccbc245ccd8391425c4b1e4b2fbc94</hash>
        <hash alg="SHA3-512">9a28cb34c7761e695ccea04cc6df1e0f9cd18fef59bf50d5943ddc06802e616bc2bd55211e863c65f7f7661f963ba8ee9e569324642b87bc1703dc6f07cba5e3</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jcp.org/en/jsr/detail?id=250</url>
        </reference>
        <reference type="distribution">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://java.net/jira/browse/GLASSFISH</url>
        </reference>
        <reference type="vcs">
          <url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M2</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb805c5b2e22c8002877f0caadc6a87c</hash>
        <hash alg="SHA-1">5ace70e1ea696d156f5034a42a615df13a52003a</hash>
        <hash alg="SHA-256">9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5</hash>
        <hash alg="SHA-512">89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9</hash>
        <hash alg="SHA-384">7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d</hash>
        <hash alg="SHA3-384">e9f6df518234899f3f7e82d934c4e66164ccb567f8cf232a234a93c414bf6717ad199d2c6dffd8196ccc9826d113fd34</hash>
        <hash alg="SHA3-256">f1646c76c126c31fdbdf4b0833b53246f34314ed3a5480d56d579d29c8759fb7</hash>
        <hash alg="SHA3-512">e4d125178fea97856067ef119d2d6864235056d8aba53b57171aefd36d14e4b54d25a417ca18af19f720efb9b32eae4a1d339e79c1687570735f359cad01f5c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci.eclipse.org/sisu/job/sisu.inject/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/sisu.inject/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>5.1.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2560169296aa94492af34af2115e9511</hash>
        <hash alg="SHA-1">da25056c694c54ba16e78e4fc35f17fc60f0d1b4</hash>
        <hash alg="SHA-256">4130e50bfac48099c860f0d903b91860c81a249c90f38245f8fed58fc817bc26</hash>
        <hash alg="SHA-512">b9c7a9b815d9ce387ebf6d58a71541da1be3cb8d847358133dc1f35ca45315bb9db11c13f3238adb643670759a58fd106247039f42c10759374a9b361c62e99e</hash>
        <hash alg="SHA-384">1f7e6e7555c97752e2a3a7dc07473384762467c24a0fc8f4c93c0f209ef361ecd4bf2be847281798dd84f68fc8c54b2f</hash>
        <hash alg="SHA3-384">59b895108174073d9889ba3e18566eb5e0785310e90dbd918dfb06af5bdf0d72e8a54094c6109090f43e242daa4d6ebf</hash>
        <hash alg="SHA3-256">5a9518cdc72dd7fb8d7848500cb8c97c7689e64a52028dabf44e61a933ffd853</hash>
        <hash alg="SHA3-512">5b53b7ee09cf057f83acf86de3f35fc45c04cd95c01e78b59fc1b4d9322e17ecaec1d6c5d37cd37084b602c1a74f6457342e27c6271fd140ade3190448c9fb27</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@5.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guice/guice</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guice</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guice/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/google-guice/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guice/guice</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
        <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
        <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
        <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aopalliance.sourceforge.net</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
        <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
        <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
        <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://code.google.com/p/atinject/</url>
        </reference>
        <reference type="vcs">
          <url>http://code.google.com/p/atinject/source/checkout</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.7.0</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ed852b1a004288c44438381e6aaee1e</hash>
        <hash alg="SHA-1">fe6f1acefd1a302dd4bc6d9d7f15358828d2a44d</hash>
        <hash alg="SHA-256">c60ae538ba66adbc06aae205fbe2306211d3d213ab6df3239ec03cdde2458ad6</hash>
        <hash alg="SHA-512">8057b6c7d52aaa61a51aba6ec613e8bd1a094d62a84d50a37bfe7776ff53780f1602b6169242c3a60b28c9d496458baaac5377575553e4af881643490ccda912</hash>
        <hash alg="SHA-384">4b079cab0a5f50631ef134f6578f4772f59897977d20ddef071920c107ca13cc3ce85d7b3c2bad586fb7a29fb4a4e07d</hash>
        <hash alg="SHA3-384">1e4500603fc2ac0c080f4a7b127171103295571bc7e570e50f6c479c62667cf78cf177c09b92f39702864fff83e35f9f</hash>
        <hash alg="SHA3-256">ff715bac48dda5b19e29e18e47dbba9015cfcdf3a949c19154ae9ea3e5951c60</hash>
        <hash alg="SHA3-512">7bb6f86ea7300d4321fb78a0cfcbd2acc2b6639abb75e68e4bf1e301622ee1d41bdeed728aa49d74578918fe5da954860a29a9a6249e651db3edae941f816bf7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-classworlds/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-classworlds/tree/plexus-classworlds-2.7.0/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.26</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1049ae9f5cd8cf618abf5bc5805e6b94</hash>
        <hash alg="SHA-1">25b919c664b79795ccde0ede5cee0fd68b544197</hash>
        <hash alg="SHA-256">b3b5412ce17889103ea564bcdfcf9fb3dfa540344ffeac6b538a73c9d7182662</hash>
        <hash alg="SHA-512">6c3b40442adf721d325ee9cbf935d758223a04b3bd8e0f3b60fdb652175c1ca65a6010f7ea8288617ffa73cb1f19d2737c79c403d343b285e0f9afb1729caa60</hash>
        <hash alg="SHA-384">93dcdffb567f4b7d24eecf9fb0733243ebfe1fd80c92fe69532fed9d1727a58ffa5ce7da4ab26b5c6aa8a6a59beb3844</hash>
        <hash alg="SHA3-384">7489d45be45f74f7639db3b18ae6075d32d84adfaa9c4568f3fe2b2fc35c7de73ffce6f42e494466a8c81e78747b0f17</hash>
        <hash alg="SHA3-256">62145ec219beb405063de848cb54e0d63efc8c255322998858d7df74f8d1ae18</hash>
        <hash alg="SHA3-512">12fba4d2ffab1f89003e375bf74df3fc5d0f831906f9716f2ab2fc5a4ca7084c8a61500b24c5fa0ded27d1cef14b030df70b34c148c138136070e27f7cc41536</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-interpolation/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-interpolation/tree/plexus-interpolation-1.26/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>2.1.0</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
        <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
        <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
        <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
        <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
        <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
        <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
        <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-containers/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/codehaus-plexus/plexus-containers/plexus-component-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mockito/mockito-core@4.11.0?type=jar">
      <group>org.mockito</group>
      <name>mockito-core</name>
      <version>4.11.0</version>
      <description>Mockito mock objects library core API and implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9fe6ed240769c4e568ee331e0d850f90</hash>
        <hash alg="SHA-1">ce5226440c2ee78915716d4ce3d10aed2dbf26fb</hash>
        <hash alg="SHA-256">4b909690cab288c761eb94c0bf0e814496cf3921d8affac84cd87774530351e5</hash>
        <hash alg="SHA-512">4c6f12cbcf48a2e3f6fe98d61759cef8f927d077baf96a89dd7274b34325d793d9da285d35a3cc874685989dcfdeeafc38f1d64b169871cb246ab9172559c4d9</hash>
        <hash alg="SHA-384">c890f00840aa7080b8afca34f8589e0f929e39e38452f2f01e0d8dcbc142181d94a829a7b12f57edbc200717e7797742</hash>
        <hash alg="SHA3-384">84668f87151ca8ce1caa0091a09b700dc0167652b98d491338f7a1e07748b7a7a364608efc15a40928cec3078bc0046a</hash>
        <hash alg="SHA3-256">d878f32c9fc452b802af1be17930e2b884daf6243e02fcfdef33cef241fda8db</hash>
        <hash alg="SHA3-512">9c79e90bee9581732a864a1e56d0107762c5a584aa1c48554e1ef28bc7fb29371dd29c72fb3048e17fed741bd4304480e2dc883b08b6a75910c02b32d4648c89</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.mockito/mockito-core@4.11.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/mockito/mockito</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/mockito/mockito/actions</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/mockito/mockito/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/mockito/mockito.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.19?type=jar">
      <group>net.bytebuddy</group>
      <name>byte-buddy-agent</name>
      <version>1.12.19</version>
      <description>The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ad6a015319d8cfedbe3e69c9c4ba1c95</hash>
        <hash alg="SHA-1">450917cf3b358b691a824acf4c67aa89c826f67e</hash>
        <hash alg="SHA-256">3a70240de7cdcde04e7c504c2327d7035b9c25ae0206881e3bf4e6798a273ed8</hash>
        <hash alg="SHA-512">28f86e3fd49bff9a1b0b1ad2eae099b10e4ab6d6a3150b72580efb89750c4510123d239fb874ad7c54e507c0865645866b741add4f7966f9a9aa55b127ee1a25</hash>
        <hash alg="SHA-384">34fcccfb18197f7670dc35b8adbb2a8c9e25749b4d200cf9f78cfe2cc3d6b609875af3fd817b3c8c2eb854035164bd2a</hash>
        <hash alg="SHA3-384">77ebd6938f3a760d8ee1c00895ea8ec3bb02f3f410d79e604ea8a5b3417167880e366186e155089e1724da6a94550a61</hash>
        <hash alg="SHA3-256">87d2d66cfa7e35ad2367feab8c664be5f5adf3b74405e3e55e72519c972790f6</hash>
        <hash alg="SHA3-512">40f7a9f2b535bf1250d8a57001b0044b83fb5e5f1cc88b4e3d4232ffb8d16eebd61ef568c22dce3aa50a896ca70ce1694cb92df4b0bffabb98dcc606d87ce1a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.19?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bytebuddy.net/byte-buddy-agent</url>
        </reference>
        <reference type="distribution">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/raphw/byte-buddy/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>3.3</version>
      <description>A library for instantiating Java objects</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab0e0b2ab81affdd7f38bcc60fd85571</hash>
        <hash alg="SHA-1">1049c09f1de4331e8193e579448d0916d75b7631</hash>
        <hash alg="SHA-256">02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb</hash>
        <hash alg="SHA-512">1fa990d15bd179f07ffbc460d580a6fd0562e45dee8bd4a9405917536b78f45c0d6f644b67f85d781c758aa56eff90aef23eedcc9bd7f5ff887a67b716083e61</hash>
        <hash alg="SHA-384">2f6878f91a12db32c244afcee619d57c3ad6ff0297f4e41c2247e737c1ccc5fcc1ce03256b479b0f9b87900410bc4502</hash>
        <hash alg="SHA3-384">a3dd9f6908fe732900d50eb209988183ffcf511afb4e401ef95b75c51777709d2d10e1dc9ee386b7357c5c2cbcf8c00e</hash>
        <hash alg="SHA3-256">fd2b66d174ed68cbfcda41d5cbd29db766c5676866d6b2324b446a87afab3a9f</hash>
        <hash alg="SHA3-512">ef509e8bcea73bc282287205ffc7625508080be44c16948137274f189459624891dcf109118c9feff109e1aa99becf176f8db837ac4fd586201510c3ae2ea30a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://objenesis.org/objenesis</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/easymock/objenesis/objenesis</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.5.1</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdec471a77f52e687d0df4c43f392a71</hash>
        <hash alg="SHA-1">c6bfb17c97ecc8863e88778ea301be742c62b06d</hash>
        <hash alg="SHA-256">86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b</hash>
        <hash alg="SHA-512">e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f</hash>
        <hash alg="SHA-384">ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711</hash>
        <hash alg="SHA3-384">01fba8224fd90332e30c8633fc6cb3d4190af08d39f117f0b4c65d440fb8c174aa777fa52275db918dc941c3e5339518</hash>
        <hash alg="SHA3-256">79a135751f0df24eb9dd9d1d0c9c8907158234cddb1b710ebf43cc7a344a533b</hash>
        <hash alg="SHA3-512">f1f21811c5c5125479290ed3b5b2b07c11ee4b9671bcbd24e7e8b8a4123a2686673ee064ba38c1e195acbe2b533ca738289be3064ec77062a32a756ed851fba1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://codehaus-plexus.github.io/plexus-utils/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://github.com/codehaus-plexus/plexus-utils/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.plexus.codehaus.org/user</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/codehaus-plexus/plexus-utils</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>2.0.9</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45630e54b0f0ac2b3c80462515ad8fda</hash>
        <hash alg="SHA-1">7cf2726fdcfbc8610f9a71fb3ed639871f315340</hash>
        <hash alg="SHA-256">0818930dc8d7debb403204611691da58e49d42c50b6ffcfdce02dadb7c3c2b6c</hash>
        <hash alg="SHA-512">069e6ddce79617e37d61758120c7e68348ee62f255781948937f7bec3058e46244026d7f6a11e90fbc15cd4288c4bb1acee4f242af521c721a9e68a05e64d526</hash>
        <hash alg="SHA-384">fd6f7ad85d02ac63cd1a586c8bb158c1fc000495f512f097731ea9f749b5da2637615b821294962805ba312c738f40aa</hash>
        <hash alg="SHA3-384">17cd61f59a162250b52a89c7c56eb60da253b776210500313c7b82744483ff84717946f969251fb4d76f9bb12a2458fe</hash>
        <hash alg="SHA3-256">9dcb04582c64c79e788f9191195834ec75bb3457133d22a176a0ccb069b97103</hash>
        <hash alg="SHA3-512">990faffa454598a3fa82affe30f1323db769d2e1fff20d9c7163ef6fd95ac7a0874c06a634207a2eaed9e5afbdee68b225138fc75018717ba97efe3ffe92c88a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0?type=jar">
      <publisher>Bndtools</publisher>
      <group>biz.aQute.bnd</group>
      <name>biz.aQute.bnd.annotation</name>
      <version>7.0.0</version>
      <description>bnd Annotations Library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0339bd011cf13131841417c0de7452f5</hash>
        <hash alg="SHA-1">8ad279ebf0d04ea89c5ce4d934189d0d16bb6d50</hash>
        <hash alg="SHA-256">a0090390963dd2092f8abb6d76092bab1696494d2e31b127f5b1b2bf29c08638</hash>
        <hash alg="SHA-512">6e96cffe60466e9bd5730c93686a6ae252958be6202ba07d235239f0033b9a1cc53faad327ddaebab9eab30825b881acc6296777851028c7fad5668cbbe99c81</hash>
        <hash alg="SHA-384">f51cd44911333bf7c2f58bdf7440062c138005c8332be3bf69b0ab0d9d93af4d1e1dde3a4eae5bfae92e835b70e6f561</hash>
        <hash alg="SHA3-384">7e93113ee29b6fbed02fbeac096582476b0b7c04703a54ecf0c3c89cab6fff06bc486d072c78f5a19e2c7da1c603b9d2</hash>
        <hash alg="SHA3-256">e0a35d4ec2afe652ef58a37a9f2491349527e86c7a1b37d13436fdfef77f32b2</hash>
        <hash alg="SHA3-512">62783affe413b5419c08008094a43e63712c65d6e4a0cd345e58e1a7c66dc32a08f2e68852d14641d30da31d665091c19571809145f769480cb0b80e0ad003e9</hash>
      </hashes>
      <licenses>
        <license>
          <name>(Apache-2.0 OR EPL-2.0)</name>
          <url>https://opensource.org/licenses/Apache-2.0,https://opensource.org/licenses/EPL-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bnd.bndtools.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bndtools/bnd</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.resource</name>
      <version>1.0.0</version>
      <description>OSGi Companion Code for org.osgi.resource Version 1.0.0.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d857a4203e2996fab0cf070133e43df</hash>
        <hash alg="SHA-1">343c88949132984b3f2d4175a72c40b77dc65619</hash>
        <hash alg="SHA-256">81fc50f1f1d38a4af28e131907d4afe213249aab05060484edca0e60c4af9b4a</hash>
        <hash alg="SHA-512">4e798790856f83f50832db80bfab64dfceeff1c509d7dde43e74a9f9192ea7a7d5ea77b9b1e81291fa6ba3dcef5ab8fa791ca8093a72a08d7ca6f6499e13e506</hash>
        <hash alg="SHA-384">73038c395166552b64b6b5469bd8056584f48d19b5762df2e8bd2770405ed8f6071e397a87d9a7ed39f8c2e0e8ab85b2</hash>
        <hash alg="SHA3-384">e06c8a460b3bf06d6cb22237aeffa6afd2eadd9461096c67b768a14603ad8aaa88f891d03cf0a273a99d86906c1c8eb3</hash>
        <hash alg="SHA3-256">1097cfd20e80ce368fd828a23ad7c32a202cebd92106f6ebb88ba55ca74349ee</hash>
        <hash alg="SHA3-512">d7b710e1e0484badb875f326c602c90df6705df48b0f057320919a5255d3ecbddd7053eabc68787480a70aebd7e553e9f51728112e1fa0846c849366b7e8d69b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://osgi.org/git/build.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.service.serviceloader</name>
      <version>1.0.0</version>
      <description>OSGi Companion Code for org.osgi.service.serviceloader Version 1.0.0.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4943f0102a6d893c4dd77f369a5f0537</hash>
        <hash alg="SHA-1">3728ff37909c6a3c1870b3e851342d9f2bd3cc63</hash>
        <hash alg="SHA-256">8f876ce2a9aa4e95b1f1952950255103e2487425050a654f3285447ba601c154</hash>
        <hash alg="SHA-512">a7def4cb7a8ed992645faa80a780e0b30bd39c1587b5bcb65fe170d10842d0d880c2849edd50c64807fe0e4b9cc0051337d1b161d0d390465d9e63a762861c49</hash>
        <hash alg="SHA-384">1e480694b8a541da4cd1e044d3f3ea3cd55152515ac022b80d865b6654242506c2138daabb4e71c30d36b12b9aaf676d</hash>
        <hash alg="SHA3-384">7f076af200ae9c2bd9f235b949aee01a1a758c8aac10fee8b98ec2497197d2029117d5627eb0eabd9b42979eb1baa009</hash>
        <hash alg="SHA3-256">83b1dce69c4c899176eb6e368e434ecb77dfed7c436530b8c5d08b9b6f2430aa</hash>
        <hash alg="SHA3-512">5debde53a7ead231dcd907467d59728f59cae4eb3b967c19808f78890bd97d2f04657cad9c093e88f9818338b0b3b38a57c66400ebcff61fbb26d18e9f7bf8ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://osgi.org/git/build.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.24.1</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">345bbebec9b3c68d2638c0f6809436dc</hash>
        <hash alg="SHA-1">32b299e45105aa9b0df8279c74dc1edfcf313ff0</hash>
        <hash alg="SHA-256">19fe2f7155d20ea093168527999da98108103ee546d1e8b726bc4b27c31a3c30</hash>
        <hash alg="SHA-512">75a8d055b90fc2be2198d8502299b5e4f08a81d87b15334a788a719e155f006b23c3648a4574be831de932db212593a2b004584948c394adb8272ed7d5844c94</hash>
        <hash alg="SHA-384">b474fabb3ed301583358187787cb89161d4ea3a5e46d66aaf4317bfa74cba0063f53872c30fbc130af505537ac72f9c3</hash>
        <hash alg="SHA3-384">5d5456af3f5d809c6e1fbe13b6b65c71b442dcff66e087bf1be3958e582c7565135cf61f7b3bff55cee6d27a74365d01</hash>
        <hash alg="SHA3-256">39119e15f4769fdd5b018c1c9cae88c78e9454e05666731e8a703f47ed903693</hash>
        <hash alg="SHA3-512">d25c633ed33e217d71076ecf76040c13e3d8dfcc9eda1a2300a718a8699317de0b87680bfa5e499bf8c51f133408ab24c93e47393aa8c4300e92db0d683b48d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/osgi.annotation@8.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.osgi</group>
      <name>osgi.annotation</name>
      <version>8.1.0</version>
      <description>OSGi Annotation Release 8, Annotations for use in compiling bundles</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3bcfab9c55a2bcc158aa4953084021b6</hash>
        <hash alg="SHA-1">59d42736bcc0af2144ba5c1a12ff7c08ea4b7e12</hash>
        <hash alg="SHA-256">68afeb86a5322675d4dfe3df5863c7d8a37b34c18e3a8e41553f1ab3ac15d78f</hash>
        <hash alg="SHA-512">a190fa888fd22c2c31455d672b3e50ca79fa9f02269b9d45f6e6fc189dc8f90d20663e290f151a851e010b52ce87e62dc5079253c3e59caa72f11ea6248ffb26</hash>
        <hash alg="SHA-384">581c88a48fc7df5edae29712f943ef780fb0f32b4eee10dfcaa879f122f19fd1645b961b38bc0a97dd894d89952fdb68</hash>
        <hash alg="SHA3-384">ab4fab76440671def19eb0ca3370d8f0f8a915df4ec92e5aa2b9e12a4b97aa49301c51ccd28a2d2718beec6fe8105bc6</hash>
        <hash alg="SHA3-256">6849ce4a9cad5dbf2dce1ad817442821a633f8ae10ab1ccde69ac46d26127a46</hash>
        <hash alg="SHA3-512">3c3ce68b5ae1ea157f78d72a210cc152375fd8819a7c85ed5c718fbe387ffb522715e1b0dfa5094caed1e8bbe4b8fcc6d2aadd1cd3851f4c0fffebda5acaebba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/osgi.annotation@8.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://docs.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/osgi/osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.osgi</group>
      <name>org.osgi.annotation.bundle</name>
      <version>2.0.0</version>
      <description>OSGi Companion Code for org.osgi.annotation.bundle Version 2.0.0</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19115314a0ce4cfb711a811dcc0be0a3</hash>
        <hash alg="SHA-1">f5c2cd6e670c3c5d440d3003efd5ef2ead5c68eb</hash>
        <hash alg="SHA-256">b9c9546ec5be3ebc2e85ba4919150ad76d64594805282fc895133a47d264a7ae</hash>
        <hash alg="SHA-512">f16b8983240ba3c08d6bc78e2eae92e89eb528f32a705961d90b463def0a5ed1ba08cc3d0be38b5dcfb946c6f759df772e122fb769e58e8c20aa79a489a1fd21</hash>
        <hash alg="SHA-384">88217b7d3a2d9a0a3f005162b95d68ba2bd29629688b2c32e93e4587d89fe6bd468f5c62ef422ebf2b609d402e62ff56</hash>
        <hash alg="SHA3-384">c7ee64dd3e235d900d01d8629b82245303d34a006e1edcd2571ef736d9c6256dcb718be326ad4909cb6d2cea26118ea9</hash>
        <hash alg="SHA3-256">9adcacb036caf30d17a13fcd5952a35e011678b1dbfabafdff73dba065ace8a3</hash>
        <hash alg="SHA3-512">76bec6bb2cdbc8da043760a7aedd51203c8d70b740c9b8de0ba6b0cf9ad991a58059566e7f62dee30606f32d267b2596d5bd5e885c73e336ae7fff6cf7f970db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://docs.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/osgi/osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.osgi</group>
      <name>org.osgi.annotation.versioning</name>
      <version>1.1.2</version>
      <description>OSGi Companion Code for org.osgi.annotation.versioning Version 1.1.2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a61b3b8d09c85ad296c61e21bf77ec70</hash>
        <hash alg="SHA-1">dc3cd4ec96c0b3c5459fe00694bd73a816ecf93e</hash>
        <hash alg="SHA-256">f51f235e80df8ffbc30ef1b557b6ea38a696632d675404ec117e952978b8b863</hash>
        <hash alg="SHA-512">a4c612bec624a168f25f0923d51925bbc914686673eeebd5b2442998b876f05855e2b0a6e6e9aca4a6533ed3156b0d24f94c3e508ee9778e1b2e469be318afa3</hash>
        <hash alg="SHA-384">68a2046f083a2e77304622a56d07c0e73ba88534af4a87b5428cebf8b638c40ce21bbac089a8b5520ad488c946b633ea</hash>
        <hash alg="SHA3-384">930734f6979650191d51cd8bf1f9ab4548d307950735aa98e2dbda7aecc19b49d01a3b968824f6df2ffafce65e122c60</hash>
        <hash alg="SHA3-256">513392d0e8ddd873d04c5cf4f402a9cfe094413832bb859fe37b70fd0512dd12</hash>
        <hash alg="SHA3-512">3d2bd7d2eb784a9fab4b09c42adb0722363079235340f1915bb82a99f1c5e616ee8f3dc34d2c90b941d2651dcb4f393c7fea3e23b579456a696604148d10f22b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://docs.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/osgi/osgi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar">
      <group>com.github.spotbugs</group>
      <name>spotbugs-annotations</name>
      <version>4.8.3</version>
      <description>Annotations the SpotBugs tool supports</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cd5917b77643c3a7ba5420aea78f940c</hash>
        <hash alg="SHA-1">05d2dc4ca5b632976371155252499819aea372ed</hash>
        <hash alg="SHA-256">e5d4f60be8e57595766ba7f1d4535dc46aebf98dae05e16372a4d4120d3ebb6b</hash>
        <hash alg="SHA-512">1a64f6911a94654d440ce4918395af0cbdee79696acbcf727af79134b02e6be17956fffa8f39e05fa9e22e336041443eb31165b338164b48a1c70f947e66d68b</hash>
        <hash alg="SHA-384">6875428ea8454185df4ac50b6551f9d9ba7d9152083eec2ecc5046aa464767982abfe0733c258f2dfed9fc3f2ad68add</hash>
        <hash alg="SHA3-384">25422667753a299021150558bf094a6bd5a521a0b736d94866f807f3246b11a0574e9e480f85c7a894258979afdaedd4</hash>
        <hash alg="SHA3-256">116a3c20fdd3253ab1cfc1bdc95c8d4eb3c454b3f7d89af1d2b87bde4b890c88</hash>
        <hash alg="SHA3-512">0e9ee42600abe9496fedc2d82cd71e51fd05f26c0094c1710025d3931b79507a3502a9f9e83fddefeb6ed784123c7faa7251bd58368e78cdcc218481cd05045d</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spotbugs.github.io/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spotbugs/spotbugs/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core-test@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api-test@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.assertj/assertj-core@3.25.3?type=jar"/>
      <dependency ref="pkg:maven/org.awaitility/awaitility@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-test@5.3.32?type=jar"/>
      <dependency ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/osgi.annotation@8.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api-test@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit-pioneer/junit-pioneer@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.mockito/mockito-core@4.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"/>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hamcrest/hamcrest-core@2.2?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.junit-pioneer/junit-pioneer@1.9.1?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-params@5.10.2?type=jar">
      <dependency ref="pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-launcher@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.junit.platform/junit-platform-engine@1.10.2?type=jar">
      <dependency ref="pkg:maven/org.opentest4j/opentest4j@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.junit.platform/junit-platform-commons@1.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"/>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-sec-dispatcher@2.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-cipher@2.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.7.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.26?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.9.18?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.9.18?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-named-locks@1.9.18?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject/guice@5.1.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@33.0.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.41.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.41.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.24.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    <dependency ref="pkg:maven/org.mockito/mockito-core@4.11.0?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.11?type=jar"/>
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.19?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.11?type=jar"/>
    <dependency ref="pkg:maven/net.bytebuddy/byte-buddy-agent@1.12.19?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@3.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.23.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.assertj/assertj-core@3.25.3?type=jar">
      <dependency ref="pkg:maven/net.bytebuddy/byte-buddy@1.14.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.awaitility/awaitility@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.java-allocation-instrumenter/java-allocation-instrumenter@3.3.4?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-test@5.3.32?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.32?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.32?type=jar"/>
    <dependency ref="pkg:maven/biz.aQute.bnd/biz.aQute.bnd.annotation@7.0.0?type=jar">
      <dependency ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.osgi/org.osgi.resource@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.service.serviceloader@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/osgi.annotation@8.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.bundle@2.0.0?type=jar">
      <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.osgi/org.osgi.annotation.versioning@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
  </dependencies>
</bom>
