<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.10</version>
        <hashes>
          <hash alg="MD5">1cc7f6a0382f8bb2f758d6a6ea401d1b</hash>
          <hash alg="SHA-1">a4297947a1f2d7d453105db542651614bbd37f38</hash>
          <hash alg="SHA-256">bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872</hash>
          <hash alg="SHA-512">9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39</hash>
          <hash alg="SHA-384">93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/maven-surefire-common@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>maven-surefire-common</name>
      <version>3.2.3</version>
      <description>API used in Surefire and Failsafe MOJO.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/maven-surefire-common@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/maven-surefire-common/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/maven-surefire-common</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-api</name>
      <version>3.2.3</version>
      <description>API used in Surefire and Failsafe MOJO, Booter, Common and test framework providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9160f6b26fe2ba9e84bc7760217e1d7</hash>
        <hash alg="SHA-1">385fb784ecf415fd8c85eecaf528d752b639fc97</hash>
        <hash alg="SHA-256">a8de90dfd4e82505776587a233bc539f2edf319582b0331cdbb3779e54b52834</hash>
        <hash alg="SHA-512">45fa38e0871eaad158a5e68e89cb57e72118c031556977c19ece8a563321683b29440dd1fa3820d1b34585ba937bf877f8c766dcbf6e7774159499abdad5de52</hash>
        <hash alg="SHA-384">1a39cedd41f3ccc759122ba80aab0c869b92b0267924d4a09f749c3dd551932f2547d47e5abcbdfd3fabffabc1eb8411</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-logger-api</name>
      <version>3.2.3</version>
      <description>Interfaces and Utilities related only to internal SureFire Logger API. Free of dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4583078b93a152321ed99fc889a48684</hash>
        <hash alg="SHA-1">963ab0611235695673656c42e56e9d88e38b4ec3</hash>
        <hash alg="SHA-256">b77ad337f49661dbc87c26f791009a591791598d63046b5bfbff0d7eec7e1efe</hash>
        <hash alg="SHA-512">13b6a8ef3409a80416fc64d31a953295aad5d1c23b13c43d5f277ce54ca4ed8508869e54547a0e3c1a6f1edb16e2fb9ff6321036d0c106264d46a463f3dc64ba</hash>
        <hash alg="SHA-384">04696c27e4e4ebfb7082fb4b9aba487fe233149df7c375ba35001df53eefe122e428ab2ec247db96223b7b6800945ef2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-logger-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-logger-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-api@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-extensions-api</name>
      <version>3.2.3</version>
      <description>Surefire is a test framework project.
    This is the aggregator POM in Apache Maven Surefire project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">18f612793ba07291c6751299dbab3be3</hash>
        <hash alg="SHA-1">90b4e7f82f52f153734e6342afa1a0ebcc2fce40</hash>
        <hash alg="SHA-256">8c34ca976444685605784dc4c5cb3ac8b838b2b475310a9fcd2b3e2a545de16a</hash>
        <hash alg="SHA-512">037033f18245ba9c4a1d0b40787b38eebc1ea45bbfacf509c6ac90ed2e66e7fbf4fde1e35cb3cde0f275071a1285e62b5ec237e53f577b0024f4ff31d88f6b0d</hash>
        <hash alg="SHA-384">96612283e57ef8ad7ab05e824ba5b37971aee403f8cd7c515afb75326495acb086cf390b16e714f651fe2a051b073ff8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-extensions-api@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-extensions-api/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-extensions-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-booter</name>
      <version>3.2.3</version>
      <description>API and Facilities used by forked tests running in JVM sub-process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a01310ed0619acc78ddf54d926bab1ed</hash>
        <hash alg="SHA-1">148fb18fe910ab3e69fbb7cb507d48f5dd970f3b</hash>
        <hash alg="SHA-256">8e17fb7515a968eebae8e4a41ead220a7fffd7a884b4f44fdef0e5a781294482</hash>
        <hash alg="SHA-512">9de954be73816af23959f21c6fc4ad8cae1bf7b0470e028ec06f4918f55d688c0cfdc0c582ccb1f340c3c5ac37d09345165555148ff69ff284af29a479584167</hash>
        <hash alg="SHA-384">7e054756cc132633008bc658018368d300f518071484e925c3a17137b0f23d615ea0c4c9d8a69b6c3446aca95d029011</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-booter/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-booter</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-extensions-spi</name>
      <version>3.2.3</version>
      <description>Surefire is a test framework project.
    This is the aggregator POM in Apache Maven Surefire project.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5bf8611d8c865c945af236c667c47bd6</hash>
        <hash alg="SHA-1">70f26226daf70aaeff7f8d39e7c577e62eca1d96</hash>
        <hash alg="SHA-256">5eae9d42b9da855b005adc385a35ddd62659aefbe0a3ebeab4dff2c56762c56f</hash>
        <hash alg="SHA-512">cb20ef9257e3767d1b0035e71feaf68380ef4d70a12756512953e14ee18011063609da894ad5dba0ad09c7f8d130cdd4817702b7c93488c9e2749acffce65c48</hash>
        <hash alg="SHA-384">ab1178d4600108210bbffd7a09a05fd7a8826459827e1b4e36566eab1105c665f869764b039eed2b4df0ddbf39cd43da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-extensions-spi/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-extensions-spi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.2.5</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0988ce2795bb72277a0199179154d398</hash>
        <hash alg="SHA-1">fbec7cf0df4fbc2896a6768ae59053877c05c241</hash>
        <hash alg="SHA-256">4f1a0af8997e1daf778b91c5ae9e973f92df699439d909fdec7fc6055c09de12</hash>
        <hash alg="SHA-512">0173f2ad5720466164832da561b8558a1e75786457548ce3d51c5b15c9a08b5c797b1964e1b4398dc31c747917da604fb50a24a747ad1bab16de714002de60a9</hash>
        <hash alg="SHA-384">a680dfb67da5b1e63f0acfe9bcf3fa123e8b164c92735a4537d74c802bc4ce27a6b95865b536f375f054be6b1f7da0ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-core</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.2.5</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16ceccebac412654c427dcd66df4f6f9</hash>
        <hash alg="SHA-1">ced305476a43e8a042a59e94ef38b3291d9ce1e7</hash>
        <hash alg="SHA-256">8d439cc1661349dab1c69eed0f831336d187e162cc6d68aa4deefcff57ee0624</hash>
        <hash alg="SHA-512">5f67231329c4d1fceec84684f69b3e2a840c4acac8a3af927036e6cc05fe35562fc6a17b104ddc52d8d863fdf70160aeda99259cbc3b08d63b217f52cb8a7658</hash>
        <hash alg="SHA-384">b341f59c5756a7ad161dda15c114ee027d111b2fc5982ed1e9af1882cad87acb6628b08a971f04a5c5716c094416fda2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.2.5</version>
      <description>Maven Settings model.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9f78e75d76e2f92c08cbbc859bf6e272</hash>
        <hash alg="SHA-1">52179da78893ed7afea98d980c55e658fb04d9b4</hash>
        <hash alg="SHA-256">1874d4ee660b935675a60bdb2ef63e0ff5a81769f4fc04a035fa9d4c4e238224</hash>
        <hash alg="SHA-512">8e2e132534781f316060fe02eecde47dac20c50fbdc30a9e98efc74a1df58e22601319d779fb6d1fa121fab3860ffa61842ab34c04b4e733bf3a6daab5cd1b36</hash>
        <hash alg="SHA-384">f38f547bf3eaedf9f224fd7635ac2b227a381846e80e802a7b664f0652a28487e87710236f016ea3dc4888df9cdb05b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.2.5</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c48b8a83cd03a5672f07b559ca1a5307</hash>
        <hash alg="SHA-1">7fd98de76398a3ff5c1d9a7b85f26cb65a862578</hash>
        <hash alg="SHA-256">9c5a014ceb8abb55e997dcc41d17bbe0ae145db574be6b7186e75950c241269f</hash>
        <hash alg="SHA-512">f2015ad44aaa0b217e5e0d1e22c366136cd44588961cdca2104c4d9bf7d5067e4952880c537a86a669f1ca0169344012a4ca896a3ea3fed2fd7615ff3a12a208</hash>
        <hash alg="SHA-384">28eb1569383d19df9a7c0568193b733c60ce22ff2bed3eff79bd1773178d65fe237045ffe1423b5bf31fd8fd7395619d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-settings-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-settings-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.2.5</version>
      <description>Per-directory local and remote repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bda12e2d6070d417a6118c6ba769fd4f</hash>
        <hash alg="SHA-1">17049c63ce63654c112eeb82797edee49f8a4601</hash>
        <hash alg="SHA-256">62b517b77f24edebdee0e382ecddb44bb6632b7c08c528d625aed7d2980df12b</hash>
        <hash alg="SHA-512">487f49f1a2da4c39d92d2460864c7cff8efb2fdbe05ac89346a675b5964c4dc4c4551c43a28a423c55e7184f5fe0e517258c5427b2611f171e601794e8e00c55</hash>
        <hash alg="SHA-384">b49837b04166dac3e7667a0a006c889c7c39b8efb41ff6e1ddd9fbeb0c14ca426f8be4bd62813a92c93020ebdd61bc48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-repository-metadata</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-repository-metadata</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.2.5</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ca73ba6de24218f238a45d8a06e519b</hash>
        <hash alg="SHA-1">bf5ce89d5f7ff57f2a33e78067ba97e62bae007d</hash>
        <hash alg="SHA-256">270385907ecfbcb256fe5afb883869fd57a5c021b5242693743ef787605c6335</hash>
        <hash alg="SHA-512">7be445c021ac2438a9f37d37db159ba5875b32d74ee901a07462f266f1847c97e69cffd3f51058e468539bfa322c270f6bb50852cbb38e39806011386fb08ed8</hash>
        <hash alg="SHA-384">c918bb72c186b84a6990db3749fdf0dbf819f815fde27242276cac59d9da826f00433794f53987ebc844ff6df3768616</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-artifact</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.2.5</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">11a402fb287811b6a249a553e9af5383</hash>
        <hash alg="SHA-1">5c6893f4ac5425d07c4053f3c4e27b2a3b37c516</hash>
        <hash alg="SHA-256">194a6f0ce889ed3b0d8a9bc4d3c79541e878098b7e303e4ac76c1031850772c3</hash>
        <hash alg="SHA-512">ace85ef74fb6a582afe6edb8282d4f09e2e4d5899e7471a0169cb8ccae9bc93d664b9c3e7f7be753434e1b30290447d87a3226969045cfb4e3e15b3ca2a596fa</hash>
        <hash alg="SHA-384">0e796a4fe15828a8b8fc7f642c8cf7932c7b15de868b72eb222f95b91d55fd5281fd679f8a1cfaebfc3d1eeaca794edd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-plugin-api</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-plugin-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.2.5</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a216c67dae851a4cedb4b431a674eba2</hash>
        <hash alg="SHA-1">7a32f3966fab463df9cdae95fd6df8c2e561e3ae</hash>
        <hash alg="SHA-256">cc5321269d080ad6694458f53186be5391a21c488ab3a7d6dd73123c7681879d</hash>
        <hash alg="SHA-512">a25a612d607e301e3041a0c6edd708a096d23ec6e2e1fc1bc092e1f6b9a6974ba9f5b256007ca2b9a9d23a45b84b2d7b49f38e31ebe42844ad438ad4da92b922</hash>
        <hash alg="SHA-384">36a95790b1b09f903ad1f245318d1874ca2f6a5f8d592f5b9a1c1a182f8f5ed0923f7d1c672ec117b503c33f10107f4e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-model-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-model-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-aether-provider</name>
      <version>3.2.5</version>
      <description>Extensions to Aether for utilizing Maven POM and repository metadata.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b6cc79c8c8abc3c92ae7d57c4cbb078</hash>
        <hash alg="SHA-1">dfddf469d20b877b184dda5d6e60f0c75f558a72</hash>
        <hash alg="SHA-256">703944b922d5351aad53b842f7dd38439b7213425f13c6c7f034b8b699b7d578</hash>
        <hash alg="SHA-512">8ce9984b76364e162f8f31c99222c9b996813f2e12e6a8406d6a438d857855f8255e2f0403af281b081e6bc6e95374cb9faa9cff3f35214de1005c477f408299</hash>
        <hash alg="SHA-384">619bcb4fcf830a43b75b5bb3545173aa302102ead74ac3addee28f278d906841292130c4f515a15319893a3617fdd5ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.2.5/maven-aether-provider</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.x/</url></reference><reference type="distribution"><url>http://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.2.5/maven-aether-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-spi</name>
      <version>1.0.0.v20140518</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">51c5870c01f48af3231ce6499464827a</hash>
        <hash alg="SHA-1">985a9a12b904fb3bafd4dc6b49f6a084845703a1</hash>
        <hash alg="SHA-256">a3266d127a4e9f4aa9c4fa0986e31eec784e866f79112e1840d1667e17c10fb2</hash>
        <hash alg="SHA-512">8074048d24d05c20da7adda6b8de93249e9e22b7fb62612b74c9f5623b093a7f23ba2cc2e77808542ee5dca6352b0e40e4f755dbd2a63f83a16d24b180bc19fc</hash>
        <hash alg="SHA-384">fa6d14091ab9b0ff63337e31cd0270640e1a84675733963c2d186ad1a6d2f8f64360431b81124e9c5f3d700ef8269374</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-spi/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-spi/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-impl</name>
      <version>1.0.0.v20140518</version>
      <description>An implementation of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">819d1c095629b2bd9ed0980395c91b7d</hash>
        <hash alg="SHA-1">a5ee67be2c99dfb95ad61235d749c92ae09c926e</hash>
        <hash alg="SHA-256">9a9b60e685385225f08e662cb9f60d96610b0987f0f47bbf3f0c92df8a897d00</hash>
        <hash alg="SHA-512">594b84397a652e481e1ed14a7b53b554bf3e851410b99189f78d9aa4dfa872f02e9e536255357799d934d1171607a36d38e7e9ff6409d04f4e88aded914f215b</hash>
        <hash alg="SHA-384">5b38a890f624b378fc5e4e067aee2273f24b6f1dd3ef72ae0dd450bdfdfa873e7f814beab8150b9e0c6957275d81b29e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-impl/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-impl/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-api</name>
      <version>1.0.0.v20140518</version>
      <description>The application programming interface for the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b05ef5410dad83a4e9ba50e08e0dbbf4</hash>
        <hash alg="SHA-1">be68e917f454dcd841865ad7cf9b7615b26a51f7</hash>
        <hash alg="SHA-256">84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773</hash>
        <hash alg="SHA-512">41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e</hash>
        <hash alg="SHA-384">44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-api/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-api/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.plexus</name>
      <version>0.9.0.M2</version>
      <description>Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">98e320df2caac742b2ae33d938c69df8</hash>
        <hash alg="SHA-1">31456dd2293197bb282c03168f6767acca3dec96</hash>
        <hash alg="SHA-256">9500d303ce467e26d129dda8559c3f3a91277d41ab49d2c4b4a5779536a62fc1</hash>
        <hash alg="SHA-512">907bb88258ba9d9ae465db219de803074a677193f3a5a05cc36c7fcf413123f50742bab231d3eb783395448bb487934f85b12972efe36b77a32e235524bef4ec</hash>
        <hash alg="SHA-384">8eb92a65730622e93791bc4c6435113596473d69f3d8dd5348c42ea47c2a93017674fafb34f5d5a48ef210638d37640d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.plexus/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.plexus/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.plexus/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.plexus/org.eclipse.sisu.plexus</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75fe320d2b3763bd6883ae1ede35e987</hash>
        <hash alg="SHA-1">479c1e06db31c432330183f5cae684163f186146</hash>
        <hash alg="SHA-256">5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04</hash>
        <hash alg="SHA-512">2453330b27a0822bba440c28b98ae1d83d60d97dfa2d040562dd5126b3548e0caa040fea3b886ac6feb0a858e6c1bc45b6c5472b180f1f14792e5ca33e355959</hash>
        <hash alg="SHA-384">37a46eaa1d011969d28ff0daaecd67a560169b3ae70c40102331d85a71139ca07110169fe367f484735914ce5c6b86c0</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/GLASSFISH</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.annotation-api-1.2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <publisher>JBoss by Red Hat, Inc.</publisher>
      <group>javax.enterprise</group>
      <name>cdi-api</name>
      <version>1.2</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java EE)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a8c973affa178efb89e6c50f78d79da</hash>
        <hash alg="SHA-1">53bba91dc3968adf411e076df020cf207283d7dc</hash>
        <hash alg="SHA-256">cc5ce2cbc62fe96bf59af00bba00bde823a1094462b4364747863510b76c0518</hash>
        <hash alg="SHA-512">d73772ea4b1d63828ea2aaa71edb788026065bf5ffbc54fed2d86ca88f08f61199bf9df734941531a3eaf1aea5858b3a37034240f92bec6e1e4e72ce5364c791</hash>
        <hash alg="SHA-384">fbb55bbf43e02c72e0f0dc86569a5666b1fb1b48f97081b00d22e911b152fa0fd0d997bc0816473a70a74da3fbe0c273</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.enterprise/cdi-api@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://cdi-spec.org</url></reference><reference type="build-system"><url>http://hudson.jboss.org</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.jboss.org/browse/CDI</url></reference><reference type="vcs"><url>scm:git:git@github.com:cdi-spec/cdi.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.sisu</group>
      <name>org.eclipse.sisu.inject</name>
      <version>0.9.0.M2</version>
      <description>JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb805c5b2e22c8002877f0caadc6a87c</hash>
        <hash alg="SHA-1">5ace70e1ea696d156f5034a42a615df13a52003a</hash>
        <hash alg="SHA-256">9b62bcfc352a2ec87da8b01e37c952a54d358bbb1af3f212648aeafe7ab2dbb5</hash>
        <hash alg="SHA-512">89544822c6c11a165f36e8bc29d9c69c9bcf85635234367cd9e8065273d891d1e9a8118a283502b20d00594db9c123e59901caf118b92424690fd6b3f60f2cc9</hash>
        <hash alg="SHA-384">7c1331d3ac0f1908861c96a6d0d32dcd9bfaf3bf1c0a403e6b69ffa88ba2d1b1deddfa9a59c92be43d443688e1e0282d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/sisu/org.eclipse.sisu.inject/</url></reference><reference type="build-system"><url>https://ci.eclipse.org/sisu/job/sisu.inject/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/sisu.inject/issues</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse/sisu.inject/org.eclipse.sisu.inject</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-guice</name>
      <version>3.2.3</version>
      <description>Patched build of Guice: a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">733be430711a32f2b9ba72da565cab2f</hash>
        <hash alg="SHA-1">6b8262f32ff7b60881aed3e7aa9d81fdb48330e9</hash>
        <hash alg="SHA-256">004af7012b6d11ab585ae841130ff091dcad6531d7bf13db4d7deac91589eef4</hash>
        <hash alg="SHA-512">6cbd0095a564aa76423a835c08ee3c12f61eecae241f1c19fb4909f6b5355143e901766e9c7ae97953f70adbec79b8561cbc1e02af51c23552599ed5cb2b5ce2</hash>
        <hash alg="SHA-384">1af7c634c87fc8ec7245c0ada7031f43c54df00072fc637604d3043f43e319368e65e234457b53313364ecfb0c03b6fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/sisu-guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://github.com/sonatype/sisu-guice/sisu-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>16.0.1</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a68693df58191585d9af914cfbe6067a</hash>
        <hash alg="SHA-1">5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5</hash>
        <hash alg="SHA-256">a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3</hash>
        <hash alg="SHA-512">a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4</hash>
        <hash alg="SHA-384">acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@16.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.21</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6629656495f4e5eac4f244fe3b252ea1</hash>
        <hash alg="SHA-1">f92de59d295f16868001644acc21720f3ec9eb15</hash>
        <hash alg="SHA-256">aba7980581027ad5fc74a27ee4d64aad74932fdb32694967242d03fc50290d1f</hash>
        <hash alg="SHA-512">073168d32e16e4e67598558ebbb68778740185e6dcb87d68ab2a68ab867c2acbf2af5c1e8fc82dcb8b2062e46ddc36b6024c00cd5c2fffe794b4610d5f13a66d</hash>
        <hash alg="SHA-384">2ce80945419fddaf00d2d7110d8b0c61975dde40d6b8b643262eff84263974c5551391f5028a995d84c46c65a0ab954e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-interpolation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLXCOMP</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-interpolation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>4.0.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16481d9d3af602d73a6355e79d2de889</hash>
        <hash alg="SHA-1">ff00a04ba971655ed10e9fb93bce0ed3014e9477</hash>
        <hash alg="SHA-256">270cd703b48c6e5c8c691f1875f22d62d22cfe072c73ae2f5814d83d68c1da0b</hash>
        <hash alg="SHA-512">1c4dde3e36c37c4b3b3860b54848fc5fbb80f536d2efe095a06629aa782044aeb693adeda3106ac8c773069e766f3def616990c0444597d20c0bc9f1d7348bd1</hash>
        <hash alg="SHA-384">5f855b2f6b40c05d9ed6b7b7a0c79d808c69f0fae0bb5d2ce5840c74775831a7def6f5309c484988e73474e255823b20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-utils/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.5.2</version>
      <description>A class loader framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53b54feee8cef6b843bd6748bda4bfa7</hash>
        <hash alg="SHA-1">4abb111bfdace5b8167db4c0ef74644f3f88f142</hash>
        <hash alg="SHA-256">b2931d41740490a8d931cbe0cfe9ac20deb66cca606e679f52522f7f534c9fd7</hash>
        <hash alg="SHA-512">5bbbce8880a8513ba1314c202005de96fe263b48f45d5cd6a3a3577fdfe7ccd88c2b908093eec237e6624f5dbba664dfb8aa82939cc540bb6652c0f4eea7b333</hash>
        <hash alg="SHA-384">27df83d9e2eb2730f1b0480aead44e0ed8c5243c0e3d96642e564917ee621f3c8b3217a4f3ae4f640fe9f8a0b67a43da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-classworlds</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>1.5.5</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef37dcdb84030422db428b63c4354e5b</hash>
        <hash alg="SHA-1">c72f2660d0cbed24246ddb55d7fdc4f7374d2078</hash>
        <hash alg="SHA-256">4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f</hash>
        <hash alg="SHA-512">2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2</hash>
        <hash alg="SHA-384">94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.3</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53160199f5667de3fca69b723173639b</hash>
        <hash alg="SHA-1">dedc02034fb8fcd7615d66593228cb71709134b4</hash>
        <hash alg="SHA-256">3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063</hash>
        <hash alg="SHA-512">8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd</hash>
        <hash alg="SHA-384">539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-sec-dispatcher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-cipher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-util</name>
      <version>1.0.0.v20140518</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">08495ee7ecf90f0b528e7d65471532af</hash>
        <hash alg="SHA-1">7df5ba98ce8b78985d75fdd8c2981fe69234ef85</hash>
        <hash alg="SHA-256">aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984</hash>
        <hash alg="SHA-512">ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e</hash>
        <hash alg="SHA-384">f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-util/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/aether/job/aether-core/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.10.2</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b06dba2d701e028fca2951e22043af00</hash>
        <hash alg="SHA-1">631e7bece9413b0aa45daefff48e48b291a4de66</hash>
        <hash alg="SHA-256">96ecaa2fd230ec1689976f3916650695c2b6b204f8418fc49121deb4a27ccaa5</hash>
        <hash alg="SHA-512">9ea3923ea1bcf82dcca9b974bd929b1c548b92bb7201740fc4b0949ee20c64129dc7be643efdaf3411d83470377ccd935c9baa0ada98239dc76ebce5438d7a62</hash>
        <hash alg="SHA-384">f74139ea1da450e4c002fdce86c49c63ecca4002ea84bb6c602aa703eaf96691bb44861cc4fb5de836a0c648239abb0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.10.2/maven-plugin-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-common-artifact-filters</name>
      <version>3.1.1</version>
      <description>A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbafdd6747cc103b96bbff6dc06f9124</hash>
        <hash alg="SHA-1">044f7d167891f281160764ef1a687dcf487d3a2c</hash>
        <hash alg="SHA-256">4a8eea7663992e49206d9f928138f334a835ad3fbbc40929342ef007ccf5471b</hash>
        <hash alg="SHA-512">517c12b4f6baaa680f0c80748970da9b824011121ee07f5391161e9512ac657e9cc183d052779d5d294814991fdfece588e705afeca40e1b26f8a7e1d2f0c489</hash>
        <hash alg="SHA-384">fb22b1c0f1a4387e215569299c788edbaa2ae7f4889baa56f59d089b51fe2b8b6a6938d886c3b708251617717eb684cc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-common-artifact-filters/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-common-artifact-filters/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-common-artifact-filters</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-common-artifact-filters/tree/maven-common-artifact-filters-3.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.15.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">125a9d3dc2477b10cc6fa6e89c699e81</hash>
        <hash alg="SHA-1">5c3c2db10f6f797430a7f9c696b4d1273768c924</hash>
        <hash alg="SHA-256">a328dad730921d197b6a9b195dffa00e41c974c2dac8fe37e84d31706bca7792</hash>
        <hash alg="SHA-512">49cf3897bf456f9639900aa9ebb396666718c5828b93bc6a95195e8cdafc15db5b436567b15752d9f3cd1cc0d9eebe4447320fccaac6733d883aac451e93fcc7</hash>
        <hash alg="SHA-384">906eafa0f5b574cf3bad0b0377547766acc8a8bd7bbaf2cedf9756c98f5a7e2fe7ec7138ff7de00ac883efaab6f8126c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.15.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-java</name>
      <version>1.2.0</version>
      <description>Plexus Languages maintains shared language features.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc0976d9a939e5afe5c543f72438f290</hash>
        <hash alg="SHA-1">3f161764aac786d64c4cac26511215369250d4fd</hash>
        <hash alg="SHA-256">4d2d63cdcad46feba432110ef64bcdc8f8fad48538fda5cd2253686b45a94304</hash>
        <hash alg="SHA-512">c221a9b754734d0500e0cb0eda7f2cf748c48ffaad3f07d170459f0cdda5575ef44226767ce42ca5a7a642e4b5d74275c26af00122d2ab1371c8f5e5d948cf00</hash>
        <hash alg="SHA-384">8633d8002af703254e55aa900e75eb0562fc7ee693165b5911edd6c50012315673d8ac1f3b4a4dfb6438507ee961044c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://codehaus-plexus.github.io/plexus-pom/plexus-languages/plexus-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-languages/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/codehaus-plexus/plexus-languages/tree/plexus-languages/plexus-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.6</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6f8bccf756f170d4185bb24c8c2d2020</hash>
        <hash alg="SHA-1">aa205cf0a06dbd8e04ece91c0b37c3f5d567546a</hash>
        <hash alg="SHA-256">3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1</hash>
        <hash alg="SHA-512">01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52</hash>
        <hash alg="SHA-384">80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar">
      <group>com.thoughtworks.qdox</group>
      <name>qdox</name>
      <version>2.0.3</version>
      <description>QDox is a high speed, small footprint parser for extracting class/interface/method definitions from source files
    complete with JavaDoc @tags. It is designed to be used by active code generators or documentation tools.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a599568ea16556d01a008d9e062ac89</hash>
        <hash alg="SHA-1">d70143d2a58e7b16a8ec73a495508d43a085d83b</hash>
        <hash alg="SHA-256">ff70c10165714fe9546c418a65d74ecd5d57623ba408cecde9428f0a609b5d1c</hash>
        <hash alg="SHA-512">f1844c1a1752c6ab7bea4832736f2c9461bc1d36e2e65138f2893e480570f1fc84cb85a5f729cf58f3a63a2d81a753df7007f71ebe2ba456a48cdc51d8579ccb</hash>
        <hash alg="SHA-384">f6a83584cf037c08560e5471ce257b07bd09550a02f625f2f233df19d9af5e2c92e37412c669043113dce68609887aa3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/paul-hammant/qdox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/paul-hammant/qdox/issues</url></reference><reference type="vcs"><url>https://github.com/paul-hammant/qdox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.jansi/jansi@2.4.0?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.jansi</group>
      <name>jansi</name>
      <version>2.4.0</version>
      <description>Jansi is a java library for generating and interpreting ANSI escape sequences.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bb0f7e4e04a71518dfe5b4ec102aa61f</hash>
        <hash alg="SHA-1">321c614f85f1dea6bb08c1817c60d53b7f3552fd</hash>
        <hash alg="SHA-256">6cd91991323dd7b2fb28ca93d7ac12af5a86a2f53279e2b35827b30313fd0b9f</hash>
        <hash alg="SHA-512">7a6a8952b07302cd2ae1beec3241c36cdaa24215b23671ea4a47eb70b3430e99398e3b9a52c6fdaa017e464b5ee5ef5473da250df06c301c5331f7b4535ce4e7</hash>
        <hash alg="SHA-384">766087de6a3e179c3596bef5730adb933a6cd93b88c8d4ffef728aa39c4fb9a008597aeef75b7484b8982908be258fc9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.jansi/jansi@2.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://fusesource.github.io/jansi</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/fusesource/jansi/issues</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/jansi</url></reference><reference type="vcs"><url>https://github.com/fusesource/jansi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.surefire</group>
      <name>surefire-shared-utils</name>
      <version>3.2.3</version>
      <description>Relocated Java packages of maven-shared-utils and several Apache Commons utilities in Surefire.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9a703ccfb8da44f77da2a1c84cc22cd7</hash>
        <hash alg="SHA-1">d5dddd54beab4472a8210de29b89bf58b6706226</hash>
        <hash alg="SHA-256">bd33b3448e59f9607afb018e8f5a17f05dc517eadf4f2a23d6850a5b622343dc</hash>
        <hash alg="SHA-512">647692f6a743921f91d6042af25c5fe21002e8720ba1bf5788394d60a61003824b72fffee0de24cb953e28e2a1fdcf82d6c1135a3d6e93e515c74a5507a6116b</hash>
        <hash alg="SHA-384">fdfc0cafe0783dab9d61ea6bc4a5ecdb41e1f56b60249a71c2117a7a86a42bd0d1a232b86d4994a1e94a70e3ba5b22b0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/surefire/surefire-shared-utils/</url></reference><reference type="build-system"><url>https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-surefire/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SUREFIRE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-surefire/tree/surefire-3.2.3/surefire-shared-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.3.4</version>
      <description>Shared utilities for use by Maven core and plugins</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash>
        <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>
        <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>
        <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>
        <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shared-utils/tree/maven-shared-utils-3.3.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.25.0</version>
      <description>Apache Commons Compress defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45f94488e95ceeaf2f401c4f5542b35c</hash>
        <hash alg="SHA-1">9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e</hash>
        <hash alg="SHA-256">d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49</hash>
        <hash alg="SHA-512">262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764</hash>
        <hash alg="SHA-384">73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.maven.surefire/maven-surefire-common@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.jansi/jansi@2.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-logger-api@3.2.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-api@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-shared-utils@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-booter@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-extensions-spi@3.2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.surefire/surefire-api@3.2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.9.0.M2?type=jar">
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.2?type=jar"/>
    <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.2?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.2.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@4.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-impl@1.0.0.v20140518?type=jar">
      <dependency ref="pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-spi@1.0.0.v20140518?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.2.3?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.10.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.1.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.2.5?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.15.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-java@1.2.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
    <dependency ref="pkg:maven/com.thoughtworks.qdox/qdox@2.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.fusesource.jansi/jansi@2.4.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
  </dependencies>
</bom>
