{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -8,17 +8,14 @@\n         <version>2.7.9</version>\n         <hashes>\n           <hash alg=\"MD5\">8e595cdb67f17e4b41e046456970591d</hash>\n           <hash alg=\"SHA-1\">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>\n           <hash alg=\"SHA-256\">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>\n           <hash alg=\"SHA-512\">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>\n           <hash alg=\"SHA-384\">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>\n-          <hash alg=\"SHA3-384\">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>\n-          <hash alg=\"SHA3-256\">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>\n-          <hash alg=\"SHA3-512\">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.apache.santuario/xmlsec@3.0.3?type=bundle\">\n       <publisher>The Apache Software Foundation</publisher>\n       <group>org.apache.santuario</group>\n       <name>xmlsec</name>\n@@ -68,17 +65,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">872da51f5de7f3923da4de871d57fd85</hash>\n         <hash alg=\"SHA-1\">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>\n         <hash alg=\"SHA-256\">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>\n         <hash alg=\"SHA-512\">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>\n         <hash alg=\"SHA-384\">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>\n-        <hash alg=\"SHA3-384\">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>\n-        <hash alg=\"SHA3-256\">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>\n-        <hash alg=\"SHA3-512\">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -104,17 +98,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">ce443876615a903fdff9e0d5d13cb8d4</hash>\n         <hash alg=\"SHA-1\">5257932df36ff3e4e6de50429dde946490a6a800</hash>\n         <hash alg=\"SHA-256\">b8fb4bee3ff5b5c1ef77144d8411316018d7bbd41fcf1ede0646f7978546b867</hash>\n         <hash alg=\"SHA-512\">7c74cedf7c0baaa5166311a4c4300a72eb09ae280ec3376553dd8651e6e3d5f100794421ba647b328195dfcf98a6cf7623169a0b87de3f13984dd7436c284807</hash>\n         <hash alg=\"SHA-384\">9e3e8b7b86884751280e71e3888d1ff3f4f0c9d6446ed8e32cd61f030532b455b7401d1495dc0da72cd3f6300c68f482</hash>\n-        <hash alg=\"SHA3-384\">47bfcb7a14b57aaa6c813a54702af321dd488cd1697a52476bb46fb9e6162cd46b62faa876a77752b4a7271241924b38</hash>\n-        <hash alg=\"SHA3-256\">91d3e457af90b684e246e02808fb8ededfef65f602717e3815417cb63f22c6b6</hash>\n-        <hash alg=\"SHA3-512\">3c72bb852c244bfb7da0f382fda743c0f8522f56fa77337b203f5027ba8b32d12cd6d0d6ffadfea65552b508be9b40601d876b398a8fca8f4ae9ecd979154a93</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>BSD-3-Clause</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar</purl>\n@@ -148,17 +139,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n         <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n         <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n         <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n         <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n@@ -193,17 +181,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">961dd4b2afedf95293dfdd8adfc8f211</hash>\n         <hash alg=\"SHA-1\">c6e52e84fe959e69a243c83ec7d24cd889444ddf</hash>\n         <hash alg=\"SHA-256\">c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f</hash>\n         <hash alg=\"SHA-512\">d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2</hash>\n         <hash alg=\"SHA-384\">d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c</hash>\n-        <hash alg=\"SHA3-384\">2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de</hash>\n-        <hash alg=\"SHA3-256\">f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b</hash>\n-        <hash alg=\"SHA3-512\">257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar</purl>\n@@ -231,17 +216,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n         <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n         <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n         <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n         <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n-        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n-        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n-        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>BSD-4-Clause</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>\n"}]}