<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
          <hash alg="SHA3-384">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>
          <hash alg="SHA3-256">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>
          <hash alg="SHA3-512">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-java@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.ext.saml2sp4ui</group>
      <name>syncope-ext-saml2sp4ui-provisioning-java</name>
      <version>3.0.4</version>
      <description>Apache Syncope Ext: SAML2 SP4UI Provisioning Java</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-java@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-java/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-java</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-java@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.core</group>
      <name>syncope-core-provisioning-java</name>
      <version>3.0.4</version>
      <description>Apache Syncope Core Provisioning Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cef3e17b8a1fab734913ee2a39142d0e</hash>
        <hash alg="SHA-1">2c77db9bf4f7fb786198b4b7b5e5c9babd31d7f5</hash>
        <hash alg="SHA-256">f3eb99678dea301fdb1f96d394500e9d0e74b23073ae600f3e139bbffc5f391b</hash>
        <hash alg="SHA-512">d37d18b9dae970c021d6555da8c1772858f1c565647028d4859e0c67167b4882e05fb9846142fa11b3d330cc5faea8ac19ef1aeb8581ad8bde4cd1d47da04cf0</hash>
        <hash alg="SHA-384">7a8d5f03e3f51ea4be0eb8e1cd9ca57f000eb8833b3280267efcdf1987543607af6cf18464c4b14047c12791820889ae</hash>
        <hash alg="SHA3-384">327a0c677c06e386cf24f6b22f893f652557b96ba52abc740d81679cb1e0581fefe1505672d9131cf83224fa12134e60</hash>
        <hash alg="SHA3-256">2fb74f0d1a4b262e9fbf051225df4e91b6e2e57a81e1054457299990b8e74c42</hash>
        <hash alg="SHA3-512">559dd4a9d96dfcf0b4ac7b87b2f5ca6f7b772d731091ba6c9d94dd998fed9f5f24c8723bc86211f7329e17307e73c65cfc3ecbd58d50c62645d9d6a9169dd561</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.core/syncope-core-provisioning-java@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-core/syncope-core-provisioning-java/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-core/syncope-core-provisioning-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-mail@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-mail</name>
      <version>2.7.13</version>
      <description>Starter for using Java Mail and Spring Framework's email sending support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1df7324e9a45f98487eb35f6584bf1f9</hash>
        <hash alg="SHA-1">f18dc4c2a8f9708922f84f54e757290fe17b53cc</hash>
        <hash alg="SHA-256">6327993416e37724fd5ed9eb3f54b302cc1caef160f80d7666b1e237bd213274</hash>
        <hash alg="SHA-512">758fc4011d768a050882a5af59f37bacc750890101910aab9ad7fc3fc0d4e66572e5db7cf22e2017c60fa7d2dd29a5a53d85766bf2fc4697d50e726e25b00860</hash>
        <hash alg="SHA-384">800205c1e5d7be8799f82f8b049981063917834f1d8b3b865a72a06e8d5bd793519cf5e1702f37a808d80dbe0e0e3cd1</hash>
        <hash alg="SHA3-384">28800597e6622d6f963367aa3553f2f55baaf5898d014063087ff2b4297a04da391a66b51936ee38ec9b99d5ab35f220</hash>
        <hash alg="SHA3-256">c0e88707cae30e6f47fa4a078c11b78d604e2c46f8620b18c0886b2d3b2b92ca</hash>
        <hash alg="SHA3-512">fefe3c109e27c43e88c712fb1aa9c7ca9461e5997ae30f98d07793042403218d9d39401149a6ddf9043ad766db7379a374799b0f0bb3f417e53af860ae51af7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-mail@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter</name>
      <version>2.7.13</version>
      <description>Core starter, including auto-configuration support, logging and YAML</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">89469301aa77bbcec40387cd6ba0d434</hash>
        <hash alg="SHA-1">5617ca04b06778877fb80d146dd2d0dd6adb23a8</hash>
        <hash alg="SHA-256">0f12a512b06efe228b99029594770065954313e6553439d515fa36f3479e0fa1</hash>
        <hash alg="SHA-512">5a97de8161f2ce91ce614ce5c5927fb50f522043d13f09e3b3a348fef5edfa89ef4d39a4c5c36203f9164a87957cde68dac3f47b98ab1db5bd15e820f18320df</hash>
        <hash alg="SHA-384">4b5b68a7f2a5813fe5fb86e15d7d8ee7204424fcaed29b714c5481c72e7fa66f9697e5033cea210ea3515ce394d16748</hash>
        <hash alg="SHA3-384">85c78805b71734f057825b56478927220fbe7a3e0c22b7f6765fb9bf23c1a1c7a88f0a896f8a9b63bef4ab3428cfd8a1</hash>
        <hash alg="SHA3-256">bb741d677ab021fa9d0b670de6ce381d8fb4880419253b7e14d4e70b6ba4f3f3</hash>
        <hash alg="SHA3-512">6ef08db71a5aa432ad6b0a392bac255a56545f78a2d00179e0c16ec02826564df3b6a43605e6936d32f2add1e7c7c82f0dc941be40cfd47b1cbcf6609a40e3f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot</name>
      <version>2.7.13</version>
      <description>Spring Boot</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b79d0cc5c82b4f073f42cf2673ed6a1d</hash>
        <hash alg="SHA-1">d009fa51c7792c9e510da7e69329baf39591707d</hash>
        <hash alg="SHA-256">a895cb99d51c7cfba1d8d5fb54215a78c4a877cc5252e9d1b43d08f81ae6d7d8</hash>
        <hash alg="SHA-512">96baa82e993406f4c803336ce4b00fa38aa9ba476ea0f2c2317b0aa216a4e72cbbf4ec880e969d2b5387ed34a1f2f41a3383330c519839d53b003855d73cdb52</hash>
        <hash alg="SHA-384">67684c67f4dd97e37210028594f5c0bc840adc506d6c84c44c6c0e5693e7933e2cf8109fa1aeb6f695bbcef588ef599c</hash>
        <hash alg="SHA3-384">2d7df3354f9627ee9ccc509ae1075bcb4c54ee98d0269eeece367e3a74a4439699e83f0ea40b56eb62e76411abaa31c4</hash>
        <hash alg="SHA3-256">dd28ca3f786868f689098dff0acccb33ddeb266008650c7a0f0f8174e56e5bb8</hash>
        <hash alg="SHA3-512">7dc41b49285fac73b35fd77db21fe7e224f33c2fd991a8edddde9fcaaa8b61608107f8c1df510dce08ebe06005f5a84a5ffd7a3169289374ee8b98bc03bae9bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-autoconfigure</name>
      <version>2.7.13</version>
      <description>Spring Boot AutoConfigure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6cedbb554441165c6f70fd2f52135221</hash>
        <hash alg="SHA-1">1b6b9605b1b116e32c372f3b9e15abf7bb17038c</hash>
        <hash alg="SHA-256">64397ac1dab36e80f9c85094f688d8aa81841914eae915f2fe55d28b9a6aa767</hash>
        <hash alg="SHA-512">6ac7596cc76980338d84c22ffe9f194365f1105e8389c91108a1a1f400f23c01da9846ea696800e28077b21e40a29ef24baf0d878d6684ab391f13727ef403f3</hash>
        <hash alg="SHA-384">ab28a5c704e49abe7f80690dd4938e5ae61c7931e75009fc3e4efb1a9531415c194d5a23d93541e88c7c36ba259d475c</hash>
        <hash alg="SHA3-384">db7eea00442243f8fd115e379cef9fdd0bc15a6a56da09b3de6634da426900ab7f25b56e5fac71f0fe44c570fb929f9c</hash>
        <hash alg="SHA3-256">7a9541b2361bda9132fdac8120fc07cfb9ad033729792d44d38fccfa766e1ec1</hash>
        <hash alg="SHA3-512">c2b4e39b0114e924db5b4b2092ec14518a538557f75e836458d9025d0ffe388160e49b6f900f891d7d579b98bb709e1457a2d0ecd04f78a20c906c5f8892e3d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
        <hash alg="SHA3-384">abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6</hash>
        <hash alg="SHA3-256">3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009</hash>
        <hash alg="SHA3-512">88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@1.30?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>1.30</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ba063b8ef3a8bfd591a1b56451166b14</hash>
        <hash alg="SHA-1">8fde7fe2586328ac3c68db92045e1c8759125000</hash>
        <hash alg="SHA-256">f43a4e40a946b8cdfd0321bc1c9a839bc3f119c57e4ca84fb87c367f51c8b2b3</hash>
        <hash alg="SHA-512">b00f52326cae804d0dbb48c0ed7f3a98cdebbce9b145f685c616e4049b65183a18e98ca29b7b0275971f9ece52138d0015bb9771902532084cb2cc07a264cfc6</hash>
        <hash alg="SHA-384">aa4f7b90b3a2a83274664f78ca54b523e26ea2f96750c336a8802a6f68fc0842e3e8d36ce4f7e277e7d959aba3bb3246</hash>
        <hash alg="SHA3-384">d3cd269127dca6042237f66cf3c3557f87f395d0286712e74da908d11ffb5d4ee7c4960e29e61db346a8376e515d59af</hash>
        <hash alg="SHA3-256">4a3c20ddae5c74b381476c491716e01f847e76e28fe82dc46819e9ef122c70fa</hash>
        <hash alg="SHA3-512">d1e848c74efd4dd2ba5d4878c0f9df6144926b1d413f44ba2881614cc557a18479eb74c8f1c3392375cc166c94acf2adb7f211f902a7e5acfd7b2966bec70f26</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@1.30?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/snakeyaml/snakeyaml</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url></reference><reference type="vcs"><url>https://bitbucket.org/snakeyaml/snakeyaml/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-context-support@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-context-support</name>
      <version>5.3.28</version>
      <description>Spring Context Support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d7f39240f952016513d3341b2e39a9e</hash>
        <hash alg="SHA-1">dc3b8fdd02fc983c7b23f9779f6b391ac7a02385</hash>
        <hash alg="SHA-256">b042bf6104e985dd1c0040ae089e21e80d1ddd06e9845e539779d160245e39c1</hash>
        <hash alg="SHA-512">944d366720da3a7fea21d0c668f5b5a6635cbd03878a3174866c51ce914aeb3f626d5dc0c9333cbb7255186ee4a3f1aee70e772050cbdc59368a3d31795fffc5</hash>
        <hash alg="SHA-384">316bb2740ff258e8d59dc3564d4a812d07f8a5d36765399ace5214fe5f85badcdc8865b8b8b169268b4bfd446b03191e</hash>
        <hash alg="SHA3-384">5153ac84cd6ce9b27508ae5e0861d718dbc7aad586d7d0e462ca5ff7c47b2c53f426d8a7e064f56aca871201d0b36e8c</hash>
        <hash alg="SHA3-256">665a55bcad94bb5aef44168d8e4e9936b3f06ac07ff51b3e3abd91023446c44b</hash>
        <hash alg="SHA3-512">f4793385ebb556813affa46d935d8fd5721b9c28580e30b36e655a075fcd84d0f013dbe4157e48786d72d1fb52fb32e38edcc65bdeed9f2c9b1d63fce070cd08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-context-support@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-context</name>
      <version>5.3.28</version>
      <description>Spring Context</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1056acd106770e052c7cc382914e9317</hash>
        <hash alg="SHA-1">edf8ebfd637e3e10ec7fed697eb69f2a5229748a</hash>
        <hash alg="SHA-256">1f45f8780eb893b1084ba127e294c1ba7c3d2523b68121c57795e63e696059c7</hash>
        <hash alg="SHA-512">60ed5b8e59c5e1f17650cc48689b99b3e5cb11760c6bb5fecd8b5341dc01031a0f2daacc5492f3af75daea9394d9f547bb16e0a3db8df91fc6f5bf6f1350f83a</hash>
        <hash alg="SHA-384">0b7782440691e239d5650209e27da2bd19f938227c676be3f2d24dd5a5b722f309cab6ec055bce9840e1d64a812723d7</hash>
        <hash alg="SHA3-384">daf483aca33511e049260fb720c5f38a7c0774a14135eee35d512fff53dd068d35e3c412a94c92eb00be9b9c24e1ff96</hash>
        <hash alg="SHA3-256">bbcb7d2fb9fd99b160da665c7408011091a62d2d13ea33d62349bf250c0f2697</hash>
        <hash alg="SHA3-512">16cd0f1ab4812bbf7e72271edd88eee2b20c2471f5d44cd2669c2ffe127de5b558623fe2fb6681034675699ceda6b1f44faebfcf44cf5b43784a638da3792538</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-context@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-expression@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-expression</name>
      <version>5.3.28</version>
      <description>Spring Expression Language (SpEL)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6cb08c88f8eb7e3d17ed1e8fceb271b4</hash>
        <hash alg="SHA-1">d049216b1a73b939b36bbf5cc7ce734cace7b245</hash>
        <hash alg="SHA-256">904b965360238b2432bd5d060bc773fce59bb2e467d2ca8272a4f546af4ed9e3</hash>
        <hash alg="SHA-512">5cb345b8a6803b069688279d7560e03fe74316e605eacda34f67acc34d475d37b0f1d0bd6802d575260f477d55c421debc8b442109fd735902203060d90ee2c5</hash>
        <hash alg="SHA-384">bff3e7b82d6cec675c663cb822742ecfedcd80f17604d19d557082c9cbb687f04da932288a70d50cd9e2f28551544480</hash>
        <hash alg="SHA3-384">b045769cbad68471d1bafd8bdb1143c3c48d2e4f5897de14a6469273eb04211132b66b9fe339062d7d7ab393911fdcbe</hash>
        <hash alg="SHA3-256">e5de81f5bdf20b8d638411713670793572fcff23675c171f1d782cd2a393981c</hash>
        <hash alg="SHA3-512">3f778c687e4f0ed13abf1ac9bdbee93a7e539da9ea8f8649ee6f2c595a58a89da717972da3a3b249085735ec94a3927dec62ebdb41eaff72d47da2f00f5657b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-expression@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.mail</group>
      <name>jakarta.mail</name>
      <version>1.6.7</version>
      <description>Jakarta Mail API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17eb378c9dd574be23e71014ce9d5d30</hash>
        <hash alg="SHA-1">319df0e9d536c1a01acdfe49b6e82b97d2393073</hash>
        <hash alg="SHA-256">1b258ef45fae93059b65d0a0dd109e59ab93e8cd8a735ff66b2ba85f870d5150</hash>
        <hash alg="SHA-512">3f392a6ae3eada47c37b67d92f3cf39c609a5309fcc97eb271bcf079d0d01f5973c0d32458a875ac1186092a113bb452439f7b7b0edd58a5b3aba5f775e9a001</hash>
        <hash alg="SHA-384">868a5f77973668eb2af92c8a32fca8b0d80860be3489249b4e93246eda5711aad64eefe0f97ec436c57e2cb0cc89f9e8</hash>
        <hash alg="SHA3-384">83395046d0ad4d01c7ca16fb35a0591bb26367583e65dcbf4f11b9be80241c117ab61859e4e4f4c31883caf6539613af</hash>
        <hash alg="SHA3-256">1c64d48a7aadd0b7a75fd93d642da723921763ddb215bd78cdbe05d01e80541b</hash>
        <hash alg="SHA3-512">dc6c43c485a5b8eefc8211862b44195bfa1d830ba4f4029b7fc68eaf08dccb8909a9cb93772fd81a3b7c785cbc873c046c10d1c391040282cb58595bdd0ed3d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://eclipse-ee4j.github.io/mail/jakarta.mail</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/mail/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/mail/jakarta.mail</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
        <hash alg="SHA3-384">83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590</hash>
        <hash alg="SHA3-256">5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d</hash>
        <hash alg="SHA3-512">0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.retry/spring-retry@1.3.4?type=jar">
      <publisher>SpringSource</publisher>
      <group>org.springframework.retry</group>
      <name>spring-retry</name>
      <version>1.3.4</version>
      <description>Spring Retry provides an abstraction around retrying failed operations, with an
		emphasis on declarative control of the process and policy-based behaviour that is
		easy to extend and customize. For instance, you can configure a plain POJO
		operation to retry if it fails, based on the type of exception, and with a fixed
		or exponential backoff.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee899fe67cd32ff5f89182e4b34c8afc</hash>
        <hash alg="SHA-1">4262d75536b193ea70bd3e854155462623d180a5</hash>
        <hash alg="SHA-256">c4f21dcf8a01af59179f8c20b1196858e92ddc31e9ee346c6021216bd455a90f</hash>
        <hash alg="SHA-512">dc1c2f705a81f1dd881325f743ae67901b2b1dc7604536b06e596be3b0d83d7bcda982397355eed5040824cba7bb15d36245a38925163a5f8b2ea4a8278fe71a</hash>
        <hash alg="SHA-384">e3ce477c6829084a82b1ebfdf865012dd5ee2790ffd4d6c7f2df5305810035acb8ab010f54237724b346fd8161bc1dc0</hash>
        <hash alg="SHA3-384">f4c394c4d4c7513737e2a64e8fa6abba20e476476cf049124daa78f34ada9c9483ad6cf624d559332fabb75de08189cb</hash>
        <hash alg="SHA3-256">1056c02c2b56d87fa7ef26f5130df2ea8d1b8864a3851d7dc8f408b03e627b1a</hash>
        <hash alg="SHA3-512">d71ee0857d2403bc9ea8fe765ecf13081b5deec609964f14716fcba33b7805e231ccdefecd1de610142502189048ae6fd23f1dd4e8aba956584a3095d9e64285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.retry/spring-retry@1.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.springsource.org</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-retry</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jdbc@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jdbc</name>
      <version>5.3.28</version>
      <description>Spring JDBC</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcdc279cbc20c36471a47efbdff69609</hash>
        <hash alg="SHA-1">9cff07e670a77c3943e77c7dc0120be0aa3d926e</hash>
        <hash alg="SHA-256">e729115ab6df7a01e9555fcf8c0f562c4f1376e5f4340b82816c9863b7fb3679</hash>
        <hash alg="SHA-512">2d2ef9c48cd6ee981513ec7f1fa1fa3c61d826cc8a70d9562bafba8c6d813c1aad9a195ea94dc94aee720aab9cab79184e4dc39fed61320d60f038dc22191a46</hash>
        <hash alg="SHA-384">794ffc45bbf72b71eba900ec20f9b1f1834847b26938d1d3d2fc9035aa1fcc91745d7c16ea62e72adc0dcbc8926f3cde</hash>
        <hash alg="SHA3-384">05071755d111e8dc813c602d40a633804d4454727c4b8476dcfec10ac3ec96835efd77063154a6591efa24e402cd1108</hash>
        <hash alg="SHA3-256">d2bf4f165b0067f5a68bf0253a7874fb00900409f579174c5e982252f3e343ad</hash>
        <hash alg="SHA3-512">3d118b2d42ce8f36c85e873b2fa003224d5416f2459d3c26cc29726edf4af18981646c477071657e38f40e7f2bf0ea9cd341628df808ee35d3218a8aab687455</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jdbc@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>5.3.28</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">37ea594161affd9cf1d3e7e2e9898f46</hash>
        <hash alg="SHA-1">4d232acbb7031963688cf28b1b34134937892c4f</hash>
        <hash alg="SHA-256">b273d6b4e76af9c443b6df464e075c2e5a026875bcda59d98689a8db7ab61ba7</hash>
        <hash alg="SHA-512">2a07847202a8612d4fef624ad04830b3a47424b21ed3917e48bf5301a4eb04fe5f97ea3158d004224edf4700d33ca81f1995f4b922c5fa142345eff33441bd5e</hash>
        <hash alg="SHA-384">3dc50a690139070ef76a685865af7c9ff769f567f811c257b9c192999806f09042f02533f16aa079640dd40f372dec8d</hash>
        <hash alg="SHA3-384">51c6748dc3c054fd12662ef08837c02cc3976c52f6da72245871d4276167eb480a818eed6030f24f610766394ba7c6ed</hash>
        <hash alg="SHA3-256">9005486a980a56c85bcb8a80029100e943f98afe980992caf25442cd2d91d739</hash>
        <hash alg="SHA3-512">7a85ca3487b07afeb8fca4785086a01facff4280603747a7271c52103fdbf76442bfec4b9a999f3ba18d4435d34d1238a26b54caaa37a38cc59c3f717517fc7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.28</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bf889db69e714829787f9b96d2f9866f</hash>
        <hash alg="SHA-1">5b7ec246fef72fdfbb0b4123956715ca89cc6ddf</hash>
        <hash alg="SHA-256">89b657e3d388d5b323eec88305ed3e7ce7f910bdd25eeee0f8c7d2bca175d81d</hash>
        <hash alg="SHA-512">cc841a144e323b3a789639dab60da8d870482c9427c40d778886fc23f53a63760df105a58486cb10082c32313cc24833d4a8332fdcf89977d95f011b08c2ea4b</hash>
        <hash alg="SHA-384">58b16d8ec6c7adbc4116834b2345348475cde156f7499bbd24b371646ac47341db9b1b7c5e43cf2b6b5b8ecc65213add</hash>
        <hash alg="SHA3-384">b7467443de33badce97a61fd4e759c2b75f9c313781bbbdc7517c3d5485f957f9407515e753f5a9306b257f0e5136b41</hash>
        <hash alg="SHA3-256">5755d4202659d7c4170900faf90996c2628d718f95bd1444549ec3df83d20442</hash>
        <hash alg="SHA3-512">c0c16e2ad892a248f6aac5dc79006597687ae536d8ca60448c2bda9d354ef2358f7326d01d8d8466cb7febd2efc6443f9e7b53a62419bbf376f6b882bb0ce2d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jcl@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jcl</name>
      <version>5.3.28</version>
      <description>Spring Commons Logging Bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d1d2477b84650e4b4befebac0436a91</hash>
        <hash alg="SHA-1">d67e8b213aa08a0f3d71e547fb4345372d819d36</hash>
        <hash alg="SHA-256">6e3bc044ff5330daece133843905f5f1a9493799fca87797199d474257afcb7f</hash>
        <hash alg="SHA-512">ac6837563619404b935d7beec6e26ba6c956cc57cfd607c6b05dbe240ef3a47d308792918d658095ce7928792eea3cfa3c1d3e97b3d6d629eea3369c92883663</hash>
        <hash alg="SHA-384">63c089a54c035d64c2b41e1edaf998dc381efa7776e85287688fb8759e8152c7015fa26ef2df976faeb0d0f0e67410df</hash>
        <hash alg="SHA3-384">856c8eba2ad79e7a9b675087731c39f7fa2eaf2063236e25a7e14a75ce82c3e071d745828b8be3e44e00ba37a19e97e7</hash>
        <hash alg="SHA3-256">85684fe221a87a5355d8f111b89aaca32676680311e8ea0906462c46d276f906</hash>
        <hash alg="SHA3-512">5511d1b942b7b4e2d7e45bd103d9d812e13f67125e0612c2498aa7314b5964da89a22de8032247463cd8a8ce038467511b587b37cbb93ecad88b4c50a7d38ef7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jcl@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-tx@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-tx</name>
      <version>5.3.28</version>
      <description>Spring Transaction</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d505362144bfb8e0c159028f3d74dc20</hash>
        <hash alg="SHA-1">c992220cd3139fe97f86c6e7a99cc2498c00e929</hash>
        <hash alg="SHA-256">61ee17625ee2e6efd3716c672b094274937ac717e1f14b984297fa7b5a74ed0a</hash>
        <hash alg="SHA-512">fe4671ac05acaa9e6120883019e4d509600e15a85fe399e9e7893bdaac0533aecb3ec6532d62acfbfd88ac11fa4dbb8a79110b8816557dfb50d6434d52e4d392</hash>
        <hash alg="SHA-384">e56103924cee6995640bfb69e269b5b73e689c5129ec81159299bb49048a07accf7e04934b66018afe42248f4131f8d2</hash>
        <hash alg="SHA3-384">c4a2b1bcab2b436448a8c8df6e934cc7a39424222b6503915cf5f22d2dada59ee6e70ee8c86285950feeebf73d1fbecd</hash>
        <hash alg="SHA3-256">608062f1fb9ffdbb6504c66bf9ea373ba60e4d12df2869bffb25f7d8753bf39d</hash>
        <hash alg="SHA3-512">3eb6098b7e7415b3e5d5e16b0e321629835074f287f5f4367507e3a00eae9637f2716ad0c21acc318f241abf79402f62b0779eb524d8e08e3a85b8e724c1f574</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-tx@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar">
      <group>com.github.ben-manes.caffeine</group>
      <name>caffeine</name>
      <version>2.9.3</version>
      <description>A high performance caching library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0b9c5ccd60a1b5403df1dfe6de37d8e</hash>
        <hash alg="SHA-1">b162491f768824d21487551873f9b3b374a7fe19</hash>
        <hash alg="SHA-256">1e0a7bbef1dd791653143f3f05d0e489934bf5481e58a87c9e619cd46b68729b</hash>
        <hash alg="SHA-512">9b039f7b9535d5686542a0352e2c39410df3e75f192f02a466a5e46b31f81584c00597a738d36afe05939c00ee8e366fdb1b52c87486bb9718954bb49e247935</hash>
        <hash alg="SHA-384">cbc875088f4189ba15d5d6a87ddc1750200b3448b6ef69eb749751fb24e21b10387b849f5b27230c580585afbf957abd</hash>
        <hash alg="SHA3-384">e22af10898947271168bb583e079d5318ffcd39fe33bcfe5d3410ebcfe87a36408705b6f9e01b62c189ced0be3bdcf73</hash>
        <hash alg="SHA3-256">2874806a06ff66b4013ea5d47bab8cc16ff7784fb18bc340f0f3ab20501aee33</hash>
        <hash alg="SHA3-512">5c524f5e07aa99639333c1a304568e26ab6406173af35ef7e8cd480c43c240db15aee3748d28f1d5155937c078dd4d769db34832f957535fc4184246bb42d33b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/ben-manes/caffeine</url></reference><reference type="vcs"><url>https://github.com/ben-manes/caffeine</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.19.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a70912824bb142a53d6cb50a349dab1a</hash>
        <hash alg="SHA-1">838b42bb6f7f73315167b359d24649845cef1c48</hash>
        <hash alg="SHA-256">a827c49183f3a632277d27a0a4673686cb341507447b9d570261094bd748aa68</hash>
        <hash alg="SHA-512">2406c3188c5d7eed0530adddd6c8782686ecae665e27e8cd5cb84c8da88532eedad4d93fadafdf98fc37ba6f5114669ee458e62682a1eab7c2c8570f41fdcc12</hash>
        <hash alg="SHA-384">6384bcf40badedc35e9e52f4c4263bf439dd0e45c5a8db73b72999b18a6e58519d05a5cb1ed25feb2c58ce14198035bd</hash>
        <hash alg="SHA3-384">3f0b4f70fbd015ed00e4f67ed89feb4ca31f885e86885a13a6a46e121fd221a9cb47309a6128c4c97fad1730c007bc43</hash>
        <hash alg="SHA3-256">fc0f6dd9f4239303a221e24e86b5e5a03a4e0f919bd07ae7e226a67482cc9fd1</hash>
        <hash alg="SHA3-512">0af9efff31a4b9ea2bcbdefe906ff54fc35db5e733bc6ec26501d900869fb3626497bad1cf6f8f566198a7cceb64e86302f2016a63e8e7657c3ec4700e27d184</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.10.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">df93bd9f00b1d2b1e2ca6317fd8f6df3</hash>
        <hash alg="SHA-1">9bc20b94d3ac42489cf6ce1e42509c86f6f861a1</hash>
        <hash alg="SHA-256">a249d4d25dfb86d41e6c82fc335df580189f0c9feeabdc53233fc1e5060724a1</hash>
        <hash alg="SHA-512">f44c30261f01e42658a253e8311852a49c29b42547c381c3c4a73f7a124be0ed173d832712c00be6de3a82a58fd9ab5503dec2cba7d30333ddc685c8a331ad31</hash>
        <hash alg="SHA-384">255f696508f6aa95d99a171cce3ab1b9a3273cb08900d382d211a8eb206e7bbebaf2cc11b34bf7282959cbd4b746a458</hash>
        <hash alg="SHA3-384">a88e397ce7b44b25f586f6b92506bd5e9c3d0b049db6ca1ffa1e71bd119ab3b63a8a3554213ea27e791bdeb1987f22f5</hash>
        <hash alg="SHA3-256">9c8976a37bced6c4a66f9ff2b75b6d048305c5d8b9c62dab2f69f28b1a6ec207</hash>
        <hash alg="SHA3-512">e7bc77149ec70e8622572790b0df4266d3dff12561a7d39ad02a7ab1ee2612b44e9902395b4a7cfded6730352f4b9e63c635743857d225480c687c9eeba32354</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.javamail</group>
      <name>geronimo-javamail_1.4_mail</name>
      <version>1.8.4</version>
      <description>Geronimmo JavaMail Bundle.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0f877ca397f77198f4c941bee52f0a4</hash>
        <hash alg="SHA-1">0c111549605e4fb904984e4f40299a3a653871ea</hash>
        <hash alg="SHA-256">e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a</hash>
        <hash alg="SHA-512">a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb</hash>
        <hash alg="SHA-384">f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e</hash>
        <hash alg="SHA3-384">a774aa04351e16186868d53d50b34a200705a89d468d4e8826a4d553fd2fdfdef828f187b7a8a70930d17ddd9163199e</hash>
        <hash alg="SHA3-256">3da74bc40cdf844aa9329375e8cad8f24296c4a1414e8fcd7a8a0dda27bc4d59</hash>
        <hash alg="SHA3-512">3f45a98ec3c92d4846a0fdea10010cdbea57ef109fa89ff1b789396a025adf8c87ce63cf2a24bd055a9e8f99b0e95b1b8d7ea9773bf4b1a8f5aa86bb7e8b2963</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-csv</name>
      <version>2.13.5</version>
      <description>Support for reading and writing CSV-encoded data via Jackson
abstractions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6d298f4cf00166e6dc98b9b75777799c</hash>
        <hash alg="SHA-1">876ae89cc4908d7950a30b5a0990737911fc214d</hash>
        <hash alg="SHA-256">7cefaad4127055ebcb19d9447b3baf775b2521518cc0a83e565e2d96acc9025b</hash>
        <hash alg="SHA-512">c078c94e8634a15810af73a4a31d8094c2743286b36dae7d405877ea31f627528697773dee3aeb2486ad808e9f9f6e149cc2233da8cbc9f13551de2d4f91e835</hash>
        <hash alg="SHA-384">c19d4ac734c26cb978f5fcca9b49582821bd6f207c619f706f86703769c68b7f1d45cf4894f8dc6b6fccc2769e472922</hash>
        <hash alg="SHA3-384">c9d8588a1345250e408b624e1a1a7897c0b01ac5a76550e28e5d872ebcff476893cfb7e19b35b8f915f9a7a1159e6f17</hash>
        <hash alg="SHA3-256">c27cadf15cdcfd65d03b1c4022fa8e627f674be1eee28368237a41043d57cff0</hash>
        <hash alg="SHA3-512">b29950438812e4c68f45e8d4805faf0a076bf5b724ddc505e903539356f8f4e5007c43bcc7425843f1e12ced3380140a8140f15f04950ea057a6997c002b1a3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-dataformats-text</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformats-text/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-csv</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.13.5</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1dbb98839964a6967a428d868b2d8714</hash>
        <hash alg="SHA-1">aa95e46dbc32454f3983221d420e78ef19ddf844</hash>
        <hash alg="SHA-256">5fedb24b2356491815d18267f65da9a21dd67413345ad7795f221afa25c78984</hash>
        <hash alg="SHA-512">2929b2a48c318e4ce4afa5370937cdd989483c7c6b731132a14b863e32cac26a84a21431966d715731b4ce23638b4065069d43fd28414d16663e71d15c83173c</hash>
        <hash alg="SHA-384">2aef4e171490a4b8c4dfb1523419484595743c5d63e82c93d79db0153c6379475c9dd18f6038172fdc95703e1dcc4f7a</hash>
        <hash alg="SHA3-384">bb648174e5633a513b220fa9a2f0011f17ae75a11176a149d004fecab1ea1dca74357eb96c14ba1f395ad4b7f93ccf3f</hash>
        <hash alg="SHA3-256">7c7b002e6034ea14ab7c3abcc92ac08e90f8663135553fee47ab22f37cc32689</hash>
        <hash alg="SHA3-512">da0c92aad8bbe99d90ae3ec3c9dcd84e4dace8b3304ae8900d2e13f24c7c06e82d3be15058ded621a85e9a5693ba52a9420165383a1e70a118a0ab99222ae7e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.13.5</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b1245f3245cbfa53e61d9d366006041</hash>
        <hash alg="SHA-1">136f77ab424f302c9e27230b4482e8000e142edf</hash>
        <hash alg="SHA-256">80aea8ed7232db5040ced4b3f982f29da95bb3d802343dbf6fd82ccd98c21c4f</hash>
        <hash alg="SHA-512">088cef452de85a2e9bef0fefd3129e20b8a199c7e01514ee68d35bc697ebe56915bd939846ae329d8c1fcbd3037f226b5e5870eb2feadd880a4ccc27b07202c6</hash>
        <hash alg="SHA-384">9e2cec03d04635b36fe9aec2e393e816b13e4808c3443f621a7f6f76e6e1df5f0c65bd0333bab973f0dcd6698c966302</hash>
        <hash alg="SHA3-384">5062a1909b534f086317b95aa55ea0bd90db1b4b446ef91772212cec0f7fef5f32d64fe4fdccef72c81860269568eead</hash>
        <hash alg="SHA3-256">39379937e765a3543ecf273fc7cd19680cf1366b33dd7c170372061121a3be8f</hash>
        <hash alg="SHA3-512">9b20b7bace69be9742c1e21f04245b0f218aae430d9209072b6c6fdaf07587c2ff8044467a351d594b86e6faba80636a0acb0fe786ecb0e6aced3409ffb1b594</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.13.5</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2272453c780d1383ecd2efde00c1a7a9</hash>
        <hash alg="SHA-1">0d07c97d3de9ea658caf1ff1809fd9de930a286a</hash>
        <hash alg="SHA-256">48f36a025311d0464ad8dda4512a20c79e279a9550f63f3179d731d94482474b</hash>
        <hash alg="SHA-512">c43227696cafe70f71c2f8a8f4bb6106f91ccc5c35ef0ff06fd52bd2913ae825e3e12cb6ec8f4c3fc47c93aef76a48fce994c7e5e7da44bfe1bd268d9d5be6f7</hash>
        <hash alg="SHA-384">e8219dd5bc50f4bdc390376953d445ce0ba1c3145eca304fef9d8d89fd8888d12edf0af1142521aec3d7e489cd3a35f0</hash>
        <hash alg="SHA3-384">bb0d8fac9aefc63bfb5b89b5a7eae51203702b7bc253a26f80a7ec09b53287c48f0aaa7bd6cff85f9f045f81ea5ef427</hash>
        <hash alg="SHA3-256">017500e323018c6954f248d50e4ebd423df3b3a9f5385c079cf44d7df4095b31</hash>
        <hash alg="SHA3-512">74c6adcdeefaa6d55a6889e94547bf5d7e9fe473e82e7370a804ec82ecf2f6f9a3135d9f8947b25b11d1042c0b23bf2b768b0e1efb0b094ff8c1951f14e9039b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/pdfbox@3.0.0-alpha3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>pdfbox</name>
      <version>3.0.0-alpha3</version>
      <description>The Apache PDFBox library is an open source Java tool for working with PDF documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b3878140044467322347b099b5f2d36</hash>
        <hash alg="SHA-1">e5731f0d0be0bc1799c8725c12fa475c69b1277c</hash>
        <hash alg="SHA-256">96fe72c808708f376e09f316342c02b1c4d622fb6e90f8e138400b65260a6607</hash>
        <hash alg="SHA-512">bf6e80424d0504da6aea9468dfe8c81403793750332c87afd4541122ddea3ae96a8923138e6498ce72ffa4b9abdce2b1899daf7a9328b4565a68622574520137</hash>
        <hash alg="SHA-384">4d5aa24fa7cb934243328cdea0ba206bd1f4b3f987bb2a79d3cc5877c05154f4ac1820f8c03feb5be132bd14ccdd5d7a</hash>
        <hash alg="SHA3-384">286c4a409897e260d564232e48d0e8b057bf5fc416552eaf366337860f9001357d35f4c354dbf696c9b9563dfe863eab</hash>
        <hash alg="SHA3-256">cdf6c629da64b8868eec1265216caac723a0ddaa1f9d37a3d2b79fa8f1ee63c2</hash>
        <hash alg="SHA3-512">3c61c76253438ad1cd9ff3beb1932f52294cafb0ed72f8a9a03b30b84ea5b73a48008644f3147bde1254a4ab74a090c568b32d7b964bd8f397bffa82083a383c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/pdfbox@3.0.0-alpha3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/pdfbox-parent/pdfbox/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/pdfbox/tags/3.0.0-alpha3/trunk/pdfbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/io@3.0.0-alpha3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>io</name>
      <version>3.0.0-alpha3</version>
      <description>The Apache PDFBox library is an open source Java tool for working with PDF documents. 
        This artefact contains IO related classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2dffdaccae55c99d1ab47815cbc4141e</hash>
        <hash alg="SHA-1">4b096033b03bd8e01fbdd161e2708cf46c8e771b</hash>
        <hash alg="SHA-256">8d1246a59fa318587ebff999a2ca63d6464d8950c38ae3549a6e5162965e137d</hash>
        <hash alg="SHA-512">1256672a7644775963d55f3944c8b03169912986c3af77ea315b5e677d18ec204576fc520ce3364b64a413be6bbff3682c2c21da3cf3a5f042d4be4ba0d19a75</hash>
        <hash alg="SHA-384">c68148144deff91f3558f428904b08abd9971ac39ea84f43b5c70dc2fee26bb74a7b0edbf8908513ed68ef22113e8f8a</hash>
        <hash alg="SHA3-384">8b4405efdc19981b9311819f644f59d139781648a384545c95176c4893a08bd2172c744db0cb74e5e9c5a4aba485249d</hash>
        <hash alg="SHA3-256">81867210843daa8bf80734897fee5657ebd86c5e333a01cb38d474b12ac4ac7e</hash>
        <hash alg="SHA3-512">24f4dafb4dbec8c9852c62d7f8be960df53f71191f1f35d4516a78ddc0238691ae4aa1e06a895756e35918f6a2e8cf5cf5a4c9fc735ec660c68b26c30b0b58c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/io@3.0.0-alpha3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/pdfbox-parent/io/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/pdfbox/tags/3.0.0-alpha3/trunk/io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.0-alpha3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.pdfbox</group>
      <name>fontbox</name>
      <version>3.0.0-alpha3</version>
      <description>The Apache FontBox library is an open source Java tool to obtain low level information
    from font files. FontBox is a subproject of Apache PDFBox.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e8070a5f4967edcb7c26d8dcc638eab9</hash>
        <hash alg="SHA-1">b1ecdcd1ccf4819df33c98c78f31add4983a5e3b</hash>
        <hash alg="SHA-256">2aeebfa371c133134e3be56ee3f24db694bc40c8fd1ca0ef0e25edf2cf3efba6</hash>
        <hash alg="SHA-512">5327055683c242df1253cf483c6a76435383ba5ee4afdae973e7fa72fcf7633c34f1d7482bca7eb9a475af0305c024e50d7b58f093336a0cab35aa6fa0cb0b04</hash>
        <hash alg="SHA-384">7ab14d2554212f5657e2d07d3890dd10429030c9f4ece89dfd992098957dfffdbefa4369fd084186f9328c70013f1e94</hash>
        <hash alg="SHA3-384">cc3d566a9641e3f26e75d35d41d9b6c6d9643a9415d4e53a0b4fb1a27b9596fbbfa0188c4a07a6680fb3f62b1db9d52d</hash>
        <hash alg="SHA3-256">74e929dc1e3d21afdb2747e18995aba7f64bde43d4c3c0cb7c9738a8f74ee65a</hash>
        <hash alg="SHA3-512">80d444be6a55d8af882718d27f657dd590fc475369cce8cf88164234d273948cfaca350e6a12176a2855b1f8ad4379da4cf3e0f042853dc44012e541e4004473</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.pdfbox/fontbox@3.0.0-alpha3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://pdfbox.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PDFBOX</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/pdfbox/tags/3.0.0-alpha3/trunk/fontbox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
        <hash alg="SHA3-384">6915e597821aa2fed7f4b05f4de3476364074ab5cee7e13b4eb5b94a9d297b58cb391c6b730e6ea0d4e81e323a90d002</hash>
        <hash alg="SHA3-256">c49c80e2576bf037fc871e70df8708f5e35c0977a907e966c0334e9fac17b297</hash>
        <hash alg="SHA3-512">b74b6e6d771005014614774d059a4e1ceab929c0678839846d143e56e4724455242ffa3d5d411c6554a41e1f66fe1f94c51472d80c07d44c02a2f9a6715d8c7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1b6bcc41bc389bbe3aaacb6b5c72cef4</hash>
        <hash alg="SHA-1">30046b48d472bf22f4d361f377e2e343b9e4a402</hash>
        <hash alg="SHA-256">9360d696504a1ad70417735c1342a8aed6e95649b01258a8d0f4e9e45950aed0</hash>
        <hash alg="SHA-512">26dd8a0d56ea6219e235335c9817921f32061cf276b0d788c8f191717d440c3d5f3ffb362288c5f8b754be166a0f83b4de56ed6cc16eebed393a78101a5d11c0</hash>
        <hash alg="SHA-384">3d9da9a3e38ad40b74f1381b0060fb2be7ba336ff24a95102c65854b93230f3415b1cf3546a8cd23ff2ee7a2796b9756</hash>
        <hash alg="SHA3-384">9a024edb8312ff3f55483bdad34aafe13bf885d13aaff38f9974920f17c859d7038f3c5a8d94146f71af9b8983df103e</hash>
        <hash alg="SHA3-256">696ad289c13963543c2f78e4f4a382ded9191ac3c45926441f5c43c95ab030e5</hash>
        <hash alg="SHA3-512">95ae669a0fe30e6d53fc37fdacd516858efe121627daf2c3813b5ea3e7923235b36ee05b0b58e3dac6eafb6a0e16689c5e7a25be710383fac712631f82692682</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-templates@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-templates</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e33b8d2a6be0b54cf1eece4baa1edf05</hash>
        <hash alg="SHA-1">826f709822eb9446c26a8acb3715dfd72597b732</hash>
        <hash alg="SHA-256">bd1b2f5663b034e1b4361990bec57225b4ff2286fa4b93b51f6e9233bd66aecd</hash>
        <hash alg="SHA-512">9d5cf73b35be9c40890525d731c0629e3fd2c5469b02fe1633c272c97c93c1dd7736494906d82e14a8298ff60afc038ade7fb1c730ec3d87b02870e309a36a7b</hash>
        <hash alg="SHA-384">3a17ef3d52bf2c6440665e77f6c6176f90ced8c06efd63cb3b9a7490f49cc7ae1bcfec0709a93c155308b01fe11b3394</hash>
        <hash alg="SHA3-384">26caba2899ede95617a42951e4fd56493fb2c32e9073008a60a767a241d41dfde9f369f7ab2a8d9834ccb1ed46e0a0ac</hash>
        <hash alg="SHA3-256">44d5f7aa09ae32e40851608c18190683bbeccc5f9c358a034e17cb96e22bf7cb</hash>
        <hash alg="SHA3-512">8c4d1adef46b7aebdba6a7723f7f880fc028c5e4d9efbc3b71c55d419e352fcda06af3234cd56fcf72691500ca30b469300b39007b184a6e8ac162cc6f8a4361</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-templates@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-xml@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-xml</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">26f3e65a158a937c9ab8d161c679015c</hash>
        <hash alg="SHA-1">91049d5769c104c97677ab37c815b321a4399114</hash>
        <hash alg="SHA-256">a5619a3e76cc5535e054200989ea6f316dbaefb8bb23715fe63c23315a58f675</hash>
        <hash alg="SHA-512">5b654b6378f5a0e34068f94fcee037434dd948bc8e9ef72ec21a2c6851f9a555ca498e4a6bb23dc9a74959ecddf342abaec85a0784c18da66e0050ea02f05cdc</hash>
        <hash alg="SHA-384">eecfd0953f707ca6ac5ae40486e2fd62e495ee0c4b29f49499aded93ba7c8112e51986f609b2686deab218a46aea2466</hash>
        <hash alg="SHA3-384">109750a8f0d2ffc3da6f1088eac05836060edb45e3d26f279cdefb1deeab33490fd3e510b2d1f5ed44e59e30dd4a0aa6</hash>
        <hash alg="SHA3-256">b579c0d36f7f61b6cb91ad2948b4aaf782b981b251e94068e1fc1507635a8db2</hash>
        <hash alg="SHA3-512">148f10ff8db01a27d71222dfc7c5c92d083901c8a4beb1beec7af338bab0755380a9564ebd059c7a705f3e68801d2a5583b46b9ecc12bd607c77bc84453e9de8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-xml@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-jsr223@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-jsr223</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47c36c3dae64e9cadf7fa6a1ddb453d7</hash>
        <hash alg="SHA-1">30ad97684b83a84783cb02fffcf8e0711b784fdf</hash>
        <hash alg="SHA-256">dc78d1170f5f9b1f9aba3b7317c3f98c9fcc2c73bd6062e861a2bafc3585a133</hash>
        <hash alg="SHA-512">456d48d370345cd36b38b93b6c8ab3ee89f2cd846a9b4896f1b508be10b22c6e26bc9fb5f2b97cd23e7be69f67b5acf753492d5123b8f4a586de818e3cb27dfa</hash>
        <hash alg="SHA-384">4bdbc39cd2289477443d17afd4636eccb1e76c31a0ea9b30ba84acc25f8b3348c47435fde990b0f5b4a3417d37fbe151</hash>
        <hash alg="SHA3-384">9079415bbbbd23769e1b391a9cf52b6bb7b90ce24c63d93d68c704b9b6c3c700ad97281f3ff8d43997285fa3c32595c0</hash>
        <hash alg="SHA3-256">a71e8ffc17f480e6a1d87a3eab6e2446646d97ea8f14f2457314ca5b5ffc8920</hash>
        <hash alg="SHA3-512">ab50a291cca82d088c8902075cb6ad2c3dc6d36245a803c3dfb765cafed630133447f5205791052bd3296a1b48940a8fcaada6ff947fed0a5a515f0fb4d9bf09</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-jsr223@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-datetime@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-datetime</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">021d87df19520d8dbacf2316f73b1a77</hash>
        <hash alg="SHA-1">3039667258170db6c916c4a65f338908af2825ab</hash>
        <hash alg="SHA-256">1759d4a5bc81148cbc9513efd1e683feb021f99ce175e00aaf809060080d697b</hash>
        <hash alg="SHA-512">53eee2c15287a41ac13fa791ed92a0b045506f77197eb7b71a5cf3ee9c1ed85906c39bb83485a85aa0e07e0ae00a4a6fa88ea8686d36d23aa4ca3d3e8301ce18</hash>
        <hash alg="SHA-384">706c57c80f97960b8d2a053e234b0672fc80da86ef1f9a94fd7ae8669b4354b3fd365376412692249568749c18423e35</hash>
        <hash alg="SHA3-384">5663ac0beb62000a0a15a1368f2a37eeab7c34c876feaa3a320e9eee616a4bbb3be07c7f016ee504b1057ebac5ec6388</hash>
        <hash alg="SHA3-256">64ebb690ae37fb66071a9dbb8abcc9450673de3f5c504045f46f8ca829190749</hash>
        <hash alg="SHA3-512">37ffa824fdb6a9befa017741abff3a6548105b16db220059e4b38531a5d655db9bedda0d0416fef93449642e6a2e0ab9453b78fb2b8fea80fbce4ea7cf499e21</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-datetime@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-dateutil@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-dateutil</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d9cc0e4edb8b108548fe2514896b4189</hash>
        <hash alg="SHA-1">b145f8f2724b0623b2ab0b84fa8431229a909131</hash>
        <hash alg="SHA-256">57b9a8cbebc06f893c9f454db032f0d4c90fa7fd2894911482c71155e34b8117</hash>
        <hash alg="SHA-512">bc3045b41f02a564cd5a21fb0a976d412f2f117447b03e85db87b20ec3c5de7bd7a57bcc352f150cb4582069984d3efe252df3a86c71cdd975860cad5f254f46</hash>
        <hash alg="SHA-384">846550f6791682028ae039b5e6e7fefbab3d25db1eb543da9754ceb774f7a882f344d18e523a3ccc2e90ae3bc54b2677</hash>
        <hash alg="SHA3-384">55c4cb518ac54a2f0641e3943ba254ddc81ad5ee08a507f81c149a03fce22c5c45ad8c1347636dc79611477cc419ed3a</hash>
        <hash alg="SHA3-256">500a59b5aefbe32f835448f33dd02e97e66b7f709aa0b43963a278cd1fb3f8b7</hash>
        <hash alg="SHA3-512">8bac31d39567b366cb95b8ea973e91e7dba26a2bea0c6641e362e22d3992b7383a7f8a473e758e76f1fa6c8366160fa0a4b2f43be88767927123dcff8f8e8cbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-dateutil@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.groovy/groovy-sql@4.0.13?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.groovy</group>
      <name>groovy-sql</name>
      <version>4.0.13</version>
      <description>Groovy: A powerful multi-faceted language for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ef6796f5eaa932f3e01a300076f785e1</hash>
        <hash alg="SHA-1">3845d590fb6f0e2dbcccf84f6ad78c1e7e0cbcf7</hash>
        <hash alg="SHA-256">dfab10b6eb80ae8f18becd9be650d611457e8fb115bf8d6d8910ed16b6582393</hash>
        <hash alg="SHA-512">66a92cf8f3357a2ecc7e33c59bfe1687be238665010c60b53aa0014b068acf54808f54f13abcd86f2bb69ad2499089db4e591ae8d037253971fd31fedfac41bc</hash>
        <hash alg="SHA-384">a6b37db676b0eaf01160be9492c7f3f89df1c9b10b5b9faacaad4287903655fbb96014489d63dbb686ad2b5e000d444d</hash>
        <hash alg="SHA3-384">b9a0aafa74dccbd7eca1bdf4d4f17b9c4a487b9a42c14b35c90e2218d7efe7d4d3895332bd2b02059cc21cf31535698a</hash>
        <hash alg="SHA3-256">a1839032f19c1b68024e303cb14b1e6bf6768a0d4fed086e91f27c11fddfe00e</hash>
        <hash alg="SHA3-512">b14b4a5c2149d2cf64270b180e0865163bd3eec2a93feb5b25c8ff8e61df928387f253a5e003812fc00b5e39d0234d039514e64fc412943e3d31bcb413d24195</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.groovy/groovy-sql@4.0.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://groovy-lang.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GROOVY</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/groovy-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/groovy.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.core/syncope-core-workflow-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.core</group>
      <name>syncope-core-workflow-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Core Workflow API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27caec8fd62e50e30b94b0e8f05b5098</hash>
        <hash alg="SHA-1">ebb677dc34e983a5788a57045e53cee143c29465</hash>
        <hash alg="SHA-256">92e3b5beac70de6b2c94f3563b56047de57515d8c8adcab291fa0fab910f2b0d</hash>
        <hash alg="SHA-512">e3523f7b83933906c41df72b83df034b51b248ff62767e11bb81f3c59c8700beca07e4652b5abe06fd38947d724a22b2c66726a514648b44a31032b8e3997709</hash>
        <hash alg="SHA-384">4d36219cd13433b9ca4c95d7b41f052d7043dd30a336529641d95d611905f5a3642ced5e1bd0b5a1820700a6be0bea74</hash>
        <hash alg="SHA3-384">26f696fd9bd807a378d6b593e2f43ed27ff868a8ab042a29db3b7fbae90c345dcadb32107a94150c7ed0432da900f26e</hash>
        <hash alg="SHA3-256">f23e4783a9c5c66fa21ee19b14d56ae41899491c84b5128a38e5e7becc491184</hash>
        <hash alg="SHA3-512">8be56e7403a6c9e729ee8e222ba343fa2706d53b11bc18eac4ddc08d44c715d783128b69f1ada5f232bef97ac9848440f2849fa94858424b7d72c12ccce81cfd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.core/syncope-core-workflow-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-core/syncope-core-workflow-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-core/syncope-core-workflow-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.core/syncope-core-spring@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.core</group>
      <name>syncope-core-spring</name>
      <version>3.0.4</version>
      <description>Apache Syncope Core Misc</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e83f1afce6b7b0deb1241b55d0112f81</hash>
        <hash alg="SHA-1">883ab70e7fc7eaf29a62e52e8a57d0e5519d9b02</hash>
        <hash alg="SHA-256">6f78bb413770512d7b45fbac1316786881f9bb04348d9c00feda107c5c1988ab</hash>
        <hash alg="SHA-512">f66e2c65d5e97bb5a161c91cc27f00cfc5d4f315fc73407533f633caa7fd015c5ca1d4b147a3f85050ccb48afc236a4a9cc0438fb8f218136302c48b98b4af3c</hash>
        <hash alg="SHA-384">3d9d7f7b681f5789961c1dfe478d67ee249b4a171bb409a182ec4bdd9b8490c074035630046a4a7c7c48336811f93b73</hash>
        <hash alg="SHA3-384">04a70e80a89fc06a6f4c723af67c92fea13427f4a3d76ba658055a9d9f4fb1887de61862500f2380508156aafa595481</hash>
        <hash alg="SHA3-256">a064f85e7ec26afafc9caa594af4da7e6f7f3276594a8b7f6be8b056777f8fb1</hash>
        <hash alg="SHA3-512">28359c041f664effc617c62e9e937df711b0ac4c174e58f03cb5c52871735b4a8ac27c8417baee0b1d830d0ceb88f9239cf5e0d030756b62470ca0909a1e9caf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.core/syncope-core-spring@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-core/syncope-core-spring/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-core/syncope-core-spring</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
        <hash alg="SHA3-384">f09065ed066c25debf8c78cbb0bcc738e1ea283302ec992dcfb649acb90091cff879465c65a162e94534d454e3b4e9bb</hash>
        <hash alg="SHA3-256">0b59c567164bb755f2353b78ba66744000a8c4b35e1df05255b080a21c3a3dd5</hash>
        <hash alg="SHA3-512">f0fbce02a862b70f472a27d0722c54ac111ca2eb94584b8b0b73d1926aec26047cd92542ad0b3cf980a6825077587f41b194aa93d6f6350d1b87e59e8df1be7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar">
      <publisher>The JASYPT team</publisher>
      <group>org.jasypt</group>
      <name>jasypt</name>
      <version>1.9.3</version>
      <description>Java library which enables encryption in java apps with minimum effort.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39327c7e38782102ecdb3c9dc4e8dcd3</hash>
        <hash alg="SHA-1">0d99ef9540f51c617f2a293b460f025d2ee563dd</hash>
        <hash alg="SHA-256">f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa</hash>
        <hash alg="SHA-512">99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821</hash>
        <hash alg="SHA-384">12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c</hash>
        <hash alg="SHA3-384">72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d</hash>
        <hash alg="SHA3-256">1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547</hash>
        <hash alg="SHA3-512">08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jasypt/jasypt@1.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jasypt.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>scm:git:git@github.com:jasypt/jasypt.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.31?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>9.31</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e49eeb9c1555104302c05294875efe6</hash>
        <hash alg="SHA-1">229ba7b31d1f886968896c48aeeba5a1586b00bc</hash>
        <hash alg="SHA-256">e0d1d9beafde7ebd46b69246bffd73dcb33409ea4ab7b91ac5622b1e6766f34e</hash>
        <hash alg="SHA-512">667add28f19adbb7f37b673b31c26709c56755b6387a64737629b376f2078e0f006f2bb6b077cad879f795af5a59a673284675a4429bc2f02ee2ceb6c644788f</hash>
        <hash alg="SHA-384">eadd4b4d4ef033f1cb2bed9d9c4b552ad7d988d5bd0e1e86f4f15836fb59ef2923771387cb59f5dfe266eb13676ac7fb</hash>
        <hash alg="SHA3-384">147c0c7c92cbf205da232e68ee720ab5a752a26dc20715261ea99bc88148dd538353b72306698440c892e9622e99f4ea</hash>
        <hash alg="SHA3-256">d738df949344e7ab66d966148b8042414e9fe37e2e51762eed4b66bf10dd7222</hash>
        <hash alg="SHA3-512">1c1dab4fb200ed7e0a2ac4700d0d8e88bc3be51074eba0fc241a6d5fd77457ecf598b7710cf4afeb588b7ab76f552525948e8e25bfbf04bae0a857d3b26f81e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@9.31?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar">
      <group>com.github.stephenc.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0-1</version>
      <description>A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d62dbfa8789378457ada685e2f614846</hash>
        <hash alg="SHA-1">ef31541dd28ae2cefdd17c7ebf352d93e9058c63</hash>
        <hash alg="SHA-256">4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323</hash>
        <hash alg="SHA-512">02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069</hash>
        <hash alg="SHA-384">88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6</hash>
        <hash alg="SHA3-384">487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1</hash>
        <hash alg="SHA3-256">3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0</hash>
        <hash alg="SHA3-512">ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://stephenc.github.com/jcip-annotations</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/stephenc/jcip-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/stephenc/jcip-annotations/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.passay/passay@1.6.3?type=jar">
      <group>org.passay</group>
      <name>passay</name>
      <version>1.6.3</version>
      <description>Library for checking that a password complies with a custom set of rules</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a0a73d7566aed7d94bffa3ec5d3e68f5</hash>
        <hash alg="SHA-1">bae4754c87297f5600e4071b2596c0b6625cf92b</hash>
        <hash alg="SHA-256">7a656b316f126526946628c42c8740d670c1b392e8b202392cae625557d41eb1</hash>
        <hash alg="SHA-512">13a91d616828193294562a0139fd9c964a632ec27c1f6a3b20364f036b7a69e648889d079a9234bc2b2b53f3c3a9738a4d6e3384470f58841279c470f4442e20</hash>
        <hash alg="SHA-384">19a2df95c2f392e6316b8735f70809ff7355413db23f44b0467320595ca548cc93158379345571b4949103a7018a7fbe</hash>
        <hash alg="SHA3-384">6c7cc5758cc27c5ef1ee63d3459406cfd86b596f4e766a566f1f0048b5d68cca69fe054867b53687da164dc8a1bcb333</hash>
        <hash alg="SHA3-256">9b2e84d73b8df379081a7f2c05be489970fea72e893b9f4975ccd148a6eed830</hash>
        <hash alg="SHA3-512">7991a19e33dfddbb3fe65aa20dc9a3133f83a03501a518aed8831e2ff7df9f64e1f6d2c3c338dc15af7cba2f294ffbaff4091c26178e5c76cd12c0e511b97192</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.passay/passay@1.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.passay.org</url></reference><reference type="issue-tracker"><url>https://github.com/vt-middleware/passay/issues</url></reference><reference type="vcs"><url>scm:git:git@github.com:vt-middleware/passay.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-security</name>
      <version>2.7.13</version>
      <description>Starter for using Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c66c6e700c468f5f2e7e2e45cfa7918</hash>
        <hash alg="SHA-1">f9865128e03e45337297ce9efd998f0c78a8e5d7</hash>
        <hash alg="SHA-256">0bce4dc264ccf30475523d2dee592215ab79b90a4c5997ab77f420a6a6055508</hash>
        <hash alg="SHA-512">98f945a08d9bcbc23e080dc80ada1549e78d4766415631e5933b2ebd9681fed234bc97084e4cd81299141edd88b7c5298ce58fb8d637ac4883004d26b949f36d</hash>
        <hash alg="SHA-384">ddc028e530ad11f5b1cbc1539771c3581f0018c20afdb47bd2992bbf5428547b4646e0abb4f9f4e1c7c9fbf98ecc10e9</hash>
        <hash alg="SHA3-384">1025046e5d5e71a3659dccc4b4cc20fe08d5d0093b0731e15d5d9e8c206871a87c95449ff02a3bb394d85ba91324bbfd</hash>
        <hash alg="SHA3-256">923c62d23c959385794bae9dcb9aaf5fbfa9a9f9d3e2a483ceaf9a1bac7a3b70</hash>
        <hash alg="SHA3-512">bf01fb65d7f790a243e55059223fde3441627f4c064747ad2f0b2e3bae17be4767c7477a80dd834b4a24a2252b21643d2df807a86956191aab9ea384c7daade3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aop</name>
      <version>5.3.28</version>
      <description>Spring AOP</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2ed79aa8764330628862f623d10cfc0</hash>
        <hash alg="SHA-1">aada0ea72a3efee5f02f264f90329f7eddedf321</hash>
        <hash alg="SHA-256">02b1fa88932804c87cba2b577fcbcfb08057e85a5d60620db13f452542828b8d</hash>
        <hash alg="SHA-512">8dc076fd191a989626c078917d5431906f4ca927c5d7a7afe0834254e45a5da9d73f63b46a404b6c671811461518cd1c6bb8895308c7a6eb82ba1b98f28ef32d</hash>
        <hash alg="SHA-384">277bd72e2d699dfe1a9c20cde63423a6646e4b5d7f135083e32eabfb0d25d5a79a5615da18228bb0828126e4c44a05e4</hash>
        <hash alg="SHA3-384">6c6e9ba2902f64ffa0ecd5db2acfe0d2c47070e6c12e7d4f96dde7ecb261afc4fa498acae52ab022add66908c639cf6e</hash>
        <hash alg="SHA3-256">babe305519e4f0cf8d3f4f7bdb8409f0f6cb010cc0023c7ea6f4e45479dce1bf</hash>
        <hash alg="SHA3-512">185dd84b7a42ea74d6ccea52dbd8fae747f82ac8724a64c430012189c653b2d6d4d0fc7c365235deb8b1119d14da64e2ecf48708daab9ac47a123784895ed0e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aop@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-config@5.7.9?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-config</name>
      <version>5.7.9</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d1e9cfdcd957612275d2dfb4d5228ee2</hash>
        <hash alg="SHA-1">ff6cbd11ba8619350ed05e0d7d49bfe38227ee21</hash>
        <hash alg="SHA-256">2f0e7f0780db713ca0da7a761b19f765253a6c9c4de12a7d281c39034055a625</hash>
        <hash alg="SHA-512">ee4a4eeae7bb54034da05f0cb045a22fba3ae0f67e082755bd3138cd7c39423b8729367fa083932029156a57de4eda2cd5b1676c76d31a84fe30c87726f286bf</hash>
        <hash alg="SHA-384">91557f9c7182477ca3b635df7238686d882f25f45eb3ecabb90580a17c471402df1409a4e3891f2326329ab2dedd0657</hash>
        <hash alg="SHA3-384">95861a614cd5d50f7a2e8be5d5bf45f7f1c2777b62d1e237ee163310cf9286d8a764b2c85a55a4da60ac525ab91605d1</hash>
        <hash alg="SHA3-256">c79b2151bc5a10c6278c4dbddfe6f4cb988217efc3b8228f76792a7f35271b4c</hash>
        <hash alg="SHA3-512">e37559958050077f242ff366430b76fd785c4aac12fd3408f8d37d4c11c83f406b6fd8afff70b3b33fd41643d9f0e6fb660580262a739ab49572c459b9b02bd5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-config@5.7.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-security</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-security/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-core@5.7.9?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-core</name>
      <version>5.7.9</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ccc94a7fed99c89562115c5b36c3524d</hash>
        <hash alg="SHA-1">c39f49392ae9181499327461bceeec9515caaaec</hash>
        <hash alg="SHA-256">9f13f1cf0b9758bba8830573ca3dd796a686f2c3fafbaab123a20e8d4a964345</hash>
        <hash alg="SHA-512">dc93bfd82c858d9416cbbe0a1597626f5249a64394538184a787f5f2f7a876c71059d2ed9f651e3dfe6975c844e6cf5a778ec4048b4852b6b2e2100ece73ea79</hash>
        <hash alg="SHA-384">e3fc4ac3493e79cfc64f3fd3ae7ef55aa180ea38d705117ee831e00c6bcfa3a08e9986c10b0c3db23f2f85675378c7bb</hash>
        <hash alg="SHA3-384">3e92fd427b8a20ab15bad9d249a9feea4617bc8e13449840fac7263f1204099b7b59fefbe275d419429e3937d8896b1f</hash>
        <hash alg="SHA3-256">3a4e6848408f351f96aade206557e79174720a1cfc6abaab82bc42d3c7bed06b</hash>
        <hash alg="SHA3-512">f748f168f81eef277d01e289c450c56389c8efb99b8b3d67b82b12fababb68823e14e8ec2cea3e0a1779b893132f5ce800249eb3a11e65f08bc680ab702ad23b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-core@5.7.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-security</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-security/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-crypto@5.7.9?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-crypto</name>
      <version>5.7.9</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03e877f995895e6890b9d7027dcf4d73</hash>
        <hash alg="SHA-1">a83f97d02b70fa353305fdb41eab9e550a8b0b4c</hash>
        <hash alg="SHA-256">8e873f5b2687d0c786ce310535e451feb4391e2038cca9a54c2d17d16b769010</hash>
        <hash alg="SHA-512">89488d3ef40c62056d34450d1d2590de0fe9a8a7f017ea79ae585ffa9a2a9b43d89e4bdf362d8df72e0fb8ba51700c3752fd3c34ce8578c807786f76424be870</hash>
        <hash alg="SHA-384">711dace87e4326369453f5e51b0136717cde5be169dc50fbf15c7a55ab5e4637c5b6f6f62a400d79c6d5a1856eba2cce</hash>
        <hash alg="SHA3-384">14234c165041a8620321bbb998e45deaa30ec86773f1f5278b04cf59b553097e4706fc0c8adab745ebb471d2c57d723b</hash>
        <hash alg="SHA3-256">020ec2bbc16006dbcd539de485caf0ed1f3a08a75d8cebb2dcb2d1e1467ec635</hash>
        <hash alg="SHA3-512">22094bea2473358093c2b94c156eba81206ee0ef220f25a752992b1a1652561e560fb0e0e3c0b084af6924b2a3bea3d50c9df0b4edcacb0c229d03a29edd3f2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-crypto@5.7.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-security</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-security/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-web@5.7.9?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-web</name>
      <version>5.7.9</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c09c49cc251885070e3adf732ea4c769</hash>
        <hash alg="SHA-1">62340f4a5626dd708c1e25ebb04c51263f18d491</hash>
        <hash alg="SHA-256">756cf5881fe184bef99b4e2866e87bb15a607acd45ba39470ca1850d333ead61</hash>
        <hash alg="SHA-512">4d31f751c39e739537e55fb4487a16d4466323a07ad573c354091371345816ff5709c4e2491fe0ca9c82a0f7752aeed9dc464d98accf5c9186310c2f8756d7c6</hash>
        <hash alg="SHA-384">2a98a3b0a3d3b6690a17e1cd57b31c6451ed2f12c63bd325035af9b9829c883e96540d2a99e6ae587a02fb78f545296e</hash>
        <hash alg="SHA3-384">9426be0334f7762905bf43fc8c848b6599fa768897ad45c5e92bd6f376eff35d1dacdc0a1c634395f984794dd4817199</hash>
        <hash alg="SHA3-256">856745f27417f71e1ae6cd57c15df95a48a0da9122ad44a2e29a66839b07cffb</hash>
        <hash alg="SHA3-512">bea4e0b4225ab5cbb25be89e839a10496df065f76b1459c0f438a13f5788418344f35635aa1065cf43f6feffcaf70b91635b5c767820690dd308f00c4fc68173</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-web@5.7.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-security</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-security/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-web@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-web</name>
      <version>5.3.28</version>
      <description>Spring Web</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4ece748430984a9ed03162a0d5e51a4b</hash>
        <hash alg="SHA-1">e15c861a248f5ba41dd1ebc691e582bb5f3a2813</hash>
        <hash alg="SHA-256">a289c65fc652c66dd73cc2015e0349bf7e356cb1a7e56bac801581afe5dc1658</hash>
        <hash alg="SHA-512">081a158f0a58155ab0cdfef385ca01abd22c430edb37c7d03a8c48c66c04f21d31fde96a38832dacc801ee90451bb6502df0f2b9a6ee4269fe2f004ce8818680</hash>
        <hash alg="SHA-384">66ce8593d1a139e8b7c61c9a4a84c2550a2456c6935e501b7a874757e9a3e6e975248d6baea56b2092ba4d3697a74c3d</hash>
        <hash alg="SHA3-384">3369d33ad2653321d6f99ef08ea4451f68a9ccbc3060c9cece6f5cad1d14b1e7aa5413fcb94f264ac4ff4399684c3635</hash>
        <hash alg="SHA3-256">d4fd19c48896291d2b696b8e517b1791e92fdd5c4c0ccda619ca7c83667e659c</hash>
        <hash alg="SHA3-512">b8245fa983d8791b34c72c54bbd77f999fd0156b38fcce5d326e4a050ce221ab8bfe5549c1b05351a912e9c1f4d435fa708c13073d41542c7e1d5db0f0a1b2af</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-web@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.uuid/java-uuid-generator@4.2.0?type=jar">
      <publisher>FasterXML.com</publisher>
      <group>com.fasterxml.uuid</group>
      <name>java-uuid-generator</name>
      <version>4.2.0</version>
      <description>Java UUID Generator (JUG) is a Java library for generating
Universally Unique IDentifiers, UUIDs (see http://en.wikipedia.org/wiki/UUID).
It can be used either as a component in a bigger application, or as a standalone command line tool.
JUG generates UUIDs according to the IETF UUID draft specification.
JUG supports all 3 official UUID generation methods.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">82d2ccc2fdf93965c3ac20b73acb129a</hash>
        <hash alg="SHA-1">4c0978d77dc121a700d676cfaf8cbb69e3e9d6ce</hash>
        <hash alg="SHA-256">0bfdfb4a63dc130f50a2d6f246d362fccea4dedd6673739e130d58cca3602cc2</hash>
        <hash alg="SHA-512">694d340e45828d7e50fe5ecd4a7fd36111a1cdc4a4c669e75c03eca160aefa6b1a0765899da1b2d1fcdea5c0b17029c73c0f1b67156573a18d6d11d1b1f045e3</hash>
        <hash alg="SHA-384">46d9899ed602cfdd2b2d382798ef55e03eeb86ab8c8173d6eeb29752b95ed2b26b653236474387def13c43332efab904</hash>
        <hash alg="SHA3-384">57041cc1bb8a991b3da222705121d209382fb15301eafe3371f33dc146d6d1a9f0795419e1f3829fc4288f282660bc94</hash>
        <hash alg="SHA3-256">1f00c7be79776e48caa732a86a14a0329793164e372aad077c3e7904faad26d0</hash>
        <hash alg="SHA3-512">acc36511cfa3fa81c31613be3b4a7375727a12d8990fed06b4acf55f6e3942be30ad3e1d3baecc8d0a4b85a2ccfda6b3003c51320809c6c75fa9fed41b4eb68a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.uuid/java-uuid-generator@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/cowtowncoder/java-uuid-generator</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/cowtowncoder/java-uuid-generator/issues</url></reference><reference type="vcs"><url>https://github.com/cowtowncoder/java-uuid-generator</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-rest-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.idm</group>
      <name>syncope-common-idm-rest-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common IdM REST API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b09e41d95450291b810cf5fd47ff4e68</hash>
        <hash alg="SHA-1">19308ae3e1533f0fb87e74a912cd104e779094c7</hash>
        <hash alg="SHA-256">aa09dde586db91836dd1ecd25a056bfc54d794ea445aa323c676ada6c5d9f873</hash>
        <hash alg="SHA-512">9eed02d02110631d68c202419cba95628a02e57e43236d337189ac52cd880e69048ee8f8bd2cd4388f87ca3c595f90984d0d0f13ba452e2ea50b78f0a8d90f6a</hash>
        <hash alg="SHA-384">4207385d9e8177635c3a9544b6fe3fb36022828376570532c3bd7d754f38ee1b336fe9bc4f00c2ac6ab51079677dfec9</hash>
        <hash alg="SHA3-384">48cd21d9b10ce3c3fd68d71b0ead329f8ca8323902686a5d4c7da23cd2e5948a7494f0c0d8810b19c39685e92c435ae1</hash>
        <hash alg="SHA3-256">6e383d17b07a0fd714440a0b6eb0d5b753015c1b2c8bbc5d03ac5daff5250f71</hash>
        <hash alg="SHA3-512">04558345f82d00ad96dadf6b89737b195199bebeac254bdf0f882e45f1d07054b20c8cb163fd2414d5f3f9a3c2fb9f9b8e9078e18fa46b3368538c8c2d65eaa0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-rest-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-idm/syncope-common-idm-rest-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-idm/syncope-common-idm-rest-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-rest-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.idrepo</group>
      <name>syncope-common-idrepo-rest-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common IdRepo REST API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">341d9fece76ff95446d7c6be37b134f8</hash>
        <hash alg="SHA-1">4693f42e9d78a96ed517c3820ec7fd21c8f679ea</hash>
        <hash alg="SHA-256">b6dc200e9e8e29bc35f1069ba645cefb652020a5e70cb8413ac1fdef3a654d9a</hash>
        <hash alg="SHA-512">8c98719a8b9293efb75fa8d5827369c0a051ba065168bed329eed2305f22204836f65d220c16e9c01102b4d7db6a437c8833b4a630eb449335ab4507995478c1</hash>
        <hash alg="SHA-384">aa608982173fda202289ea1b92fb5c3e7239e9bbde94bcefeb0e76c84d13e033acf6b4551ea15f6ace5d98de0d49d52e</hash>
        <hash alg="SHA3-384">4c9425f10da5348cbc0975c96c435ad7f52eadbdef1410b68efb6108a0fcb9466b081f60c258fd2ece2f354b0898c781</hash>
        <hash alg="SHA3-256">7a6e38157d89becb621481e32c58cccebf713fa8b12127d1f5c99fcf4a09aa98</hash>
        <hash alg="SHA3-512">0a67cafe04809b59bf3bbc71322e62762d0e07081caaf39ad60005c71b51fd32812eaea97e5b35471b4f46caebd8bc01316f0b383a56024a75d27eb7906371ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-rest-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-idrepo/syncope-common-idrepo-rest-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-idrepo/syncope-common-idrepo-rest-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-lib@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.idm</group>
      <name>syncope-common-idm-lib</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common IdM Lib</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d5cef5713ff0bc6a437363705893db2</hash>
        <hash alg="SHA-1">e54950b6af57c7b3650da0f5ea9dabb25f86912c</hash>
        <hash alg="SHA-256">05af4342021c5cd544873b9285417ff0076985e9e0c71b4dae404c888db9669d</hash>
        <hash alg="SHA-512">e2dce7cd5ef5a3ae62b1e45b4e43f2c8012768aa149704aa1bbd768956628140de586195b4fc6b9c6210693643fbf004c3b2d48e7af3db388f3284520c130048</hash>
        <hash alg="SHA-384">e94129e53c3b71860a6f0fa7d8757b0d294c330b6c3950f4a44e03650db0c7dc98b55c2d924a2bcc3a7bdef5accb4f13</hash>
        <hash alg="SHA3-384">2301077b85c71f441ce1a3a7803fbbe789d0cd015d60b2036d142d30a292f2a3a4f2a502e8060e2a2343c6b7aec97877</hash>
        <hash alg="SHA3-256">79f80e7ca1d13f44bc81bc33330969fb454b986c05c236498eb8411132f63532</hash>
        <hash alg="SHA3-512">82c8ada82b6797f8e3f9c391d9c58f6b08ca28f250793b1e73a28b8130eedfd12bfb506c917e80d33803d95745e45857210256c6e0d6270e92cf1de78516ea08</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-lib@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-idm/syncope-common-idm-lib/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-idm/syncope-common-idm-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-rest-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.am</group>
      <name>syncope-common-am-rest-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common AM REST API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">87256533d4648c101254060b4899ae57</hash>
        <hash alg="SHA-1">f8d841dad448aa65c028b036b1a28c3dae81f839</hash>
        <hash alg="SHA-256">fc4d8349001e8cf8b0f102e6b28bb93b3a0b0e956c71554b899efd5934bec964</hash>
        <hash alg="SHA-512">11e0d7f3c643f7c456137e311a2641375f8b4d32fcc06730f8580c374bdd16c0216b813c2342fcf91caf500c25a5dbb83170eda6acd45fa81dd3a8a7b6b032ef</hash>
        <hash alg="SHA-384">09aec19c3e4ddcba2fa49e10fe283d1b3c6e5cefe8fda1a90525b1f1af90ef532e09502687ffe6cadfa933c1d9809935</hash>
        <hash alg="SHA3-384">7c13e651e24fb0c0fd9ba6691a9f459557dc07b2ccc080d6de703e2717569d06c009b65fac4d4d6df6e68e262087df52</hash>
        <hash alg="SHA3-256">712aa52c803f19373958d7e79281844a4ceb3a5df7115d8be7c5907f5f008e35</hash>
        <hash alg="SHA3-512">9d824e58a61fb842e648a2e6d25e5cbf31dd9e0215f749af069de05829f7463082d0f64ad4d7ca1e8037875c013d127f8f27c48bdb8cf992a16db4b5f9d4ccdc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.am/syncope-common-am-rest-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-am/syncope-common-am-rest-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-am/syncope-common-am-rest-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.keymaster/syncope-common-keymaster-client-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.keymaster</group>
      <name>syncope-common-keymaster-client-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common Keymaster Client API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3d8920976537c81a0685835a4579f314</hash>
        <hash alg="SHA-1">39160d2720cbe8b386f9e28330f808c902549cce</hash>
        <hash alg="SHA-256">76098f0beb757a7c39a6bd6a29fd602f9fccddb93c905a2840d1d3681ffc031a</hash>
        <hash alg="SHA-512">a6bc70141b5c5271dd9e997ac84c0c80946b7b8e5a6ace379ef86b4fe6853f9a79cdfdc0c090034982c513790256f804d26bf62dd31d0fdc113582955b48f674</hash>
        <hash alg="SHA-384">615d853df1029eddcac5194755718ab72a4e750ec06a8a209e709ddd328f519aedee361b1bf2699fdda40dedffb8fdd3</hash>
        <hash alg="SHA3-384">ba6dc64fd16391359f3c12e0b915e9f9e439be54ea4e5e9f735eceb96361ac6a63e48ebb00d6c10e7934fac0d64c4085</hash>
        <hash alg="SHA3-256">caa4775baebedf1a6315867e45c0ce0abc1110c43a4bdc61b7bd5450d58b8137</hash>
        <hash alg="SHA3-512">ee63c2ff026882fc12a3b7c51bac4b95868faa3deb6d86911698bbc227fb70682d61622938d75be6e8e5902c89433ff82665285a3a7bd0f9ba3398d2da573c07</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.keymaster/syncope-common-keymaster-client-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-keymaster/syncope-common-keymaster-client-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-keymaster/syncope-common-keymaster-client-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.idrepo</group>
      <name>syncope-common-idrepo-lib</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common IdRepo Lib</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d5b9f2053b267f8ceb1dafd4f31106cd</hash>
        <hash alg="SHA-1">f7a59ef812c22595a15f588adf5bcb1f99c04950</hash>
        <hash alg="SHA-256">5fb7b801ae68920f8733fc0ed80d999982e279ba23a00ea82a264c35783ffe1e</hash>
        <hash alg="SHA-512">2d809532e9de0efb923fec5c515300da7fce5a4a11a95424c1e58746cc96431aeb5a117e8711f1d6fb9bfa635111f6cde9a20af3099853a18c36e0f6ef15a73d</hash>
        <hash alg="SHA-384">945ccc385e5a4bb8a600e08533272a48151bd3f6ccccf8681e740c43bc07d3605811e074f9916605ceb99066070a0979</hash>
        <hash alg="SHA3-384">3df8585d6b35921ca9f9ba2735e8dea39856e335a4ba37152b059c09154384f3cb6773b53c33e95bd5e59938e214678a</hash>
        <hash alg="SHA3-256">6b3cf4c47dd7aa6964bc7eabfdd38bba5517d6e99e8fa70e6f3f66935d629fb5</hash>
        <hash alg="SHA3-512">cc01555d1b70baa0e1a2848b55b7c9246b3804e36d72d83a716027d36479f080e6c15bd95cf5d0a1f849d35e703cd5a064adc0b8fd119fad13ffee280f357970</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-idrepo/syncope-common-idrepo-lib/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-idrepo/syncope-common-idrepo-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-search</name>
      <version>3.6.1</version>
      <description>Apache CXF JAX-RS Extensions: Search</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a3ba854fbd86a6ab2554f24419fb83df</hash>
        <hash alg="SHA-1">582b81ec9d9fe24965e12308ad5045fcdbdae814</hash>
        <hash alg="SHA-256">7c3929cc0eef24dbd38787d2a172165574fab4acc710894638486bba773886ac</hash>
        <hash alg="SHA-512">fbf64d4c79f0b54d5c59e8b3c1f15e3ac782c90731f08f5ffe96a1ab9319da2d6959a18277bd2a0c9ef5480cb31a445902da8cca643f87949647a7da887a09b8</hash>
        <hash alg="SHA-384">958f2fb545627857390f29afac56268aa16565895b7aad40cf4483c9c66eadc2d36cbab65cdbb41e4fa5b777756365c1</hash>
        <hash alg="SHA3-384">f0ba7e4bf31d491dcce9698e509c97e99674dc177331226014e379b9b8f70be82da3359ee88271356d80075b65d7a785</hash>
        <hash alg="SHA3-256">447380eac3feca69502e9c74be489e29b4d7ba57e312942771c0c694603b52b6</hash>
        <hash alg="SHA3-512">78ef0401cbaeea1256a65bb29e76afd1dd9eb0240d414e79623f1282fa3135426aaa9338d6707be99ec7743f2b49a13deea1909ae05f49afa7d23f7947e7205c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-search</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.6.1</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5958d35d9bdff7dc3265eba37766a83e</hash>
        <hash alg="SHA-1">f717aff76c7cd50c30f71769b9515b7b4fc8500a</hash>
        <hash alg="SHA-256">c2d01a294b0f4b6c56ffcc6bcadb752a1af13f6b2c1782982b880b69a0b4d76a</hash>
        <hash alg="SHA-512">82cca1542a42a841c9ed8532c8957abd305afd204f2999b3e3532d5cbebc9c509bffa6ec83403f90c369d7c0eb3f6f8a06d0e07d81e2981a2ab5a9f21afc0404</hash>
        <hash alg="SHA-384">af88b19b54cf6a5ed2501c60399b59895ff9a95ba18d38d3d41885d05c23a4cb743032a7f7c11ae5cc8fb05a008f438a</hash>
        <hash alg="SHA3-384">58435a016c6c90feed8d459e89e60ca05ec915adefd9aa3382f8a1ee4d4e07ca5795d2ae92a40a3c592ec4e270ecd816</hash>
        <hash alg="SHA3-256">980e98a436207e0d8749a3ac52b3892a6e3260ef34576a604d904d6ea808a9f2</hash>
        <hash alg="SHA3-512">1f883f8fdf51ddab0cc6f4eb7cb0b0636bac34049f04c6dbd7bc6fbe4f56d7c730a61d70107b32b1508047ae89febc79dd6bc38e5e5c5401ba95eab02e322570</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.6.1</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ffba3949b366a5396622e4689a0bac9e</hash>
        <hash alg="SHA-1">f9be17d2cdc3012266c7bc43c1af45c46f260fa7</hash>
        <hash alg="SHA-256">2d6357d588dfc81740d9025a5dd8dc5b0b01575fd5462b1f3301d61492417009</hash>
        <hash alg="SHA-512">2bc5b50944f58c2f84f14bc25750d55e6b5679c5f2406d9a40c090ddf584c4ddee09dfef7836087ec971fba2a5e6a34d1b0217b1e8503440684ab926cfb88426</hash>
        <hash alg="SHA-384">d47592bc24fc73176bcdcff3f56387123c6fc11023af75f2e3fa4195d1102b95981d0ea2026a818d0e13b816f2f49121</hash>
        <hash alg="SHA3-384">47ce4a6f89fbf15a276d22ee9397133f60e9d4f9e3c34e97f6db25ce74ac07097a7f119e6bbc7452dd9d9beea2bf19bd</hash>
        <hash alg="SHA3-256">8498b5f6f6e8174c3f07f239bdc2736b347d6dc617c495ecaf386a82866cf0a7</hash>
        <hash alg="SHA3-512">ef5296b134135f5f361f7a2292bd4234241a51c6f46bfe58077cad895d928bf1d33b5d42e18eb6a79017dc86845129429a317fbf7ac8119dfb7bb2488cb77a6b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.8</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2db810cf9eb5fab9e3ac13fc27adbd7</hash>
        <hash alg="SHA-1">c90a335a07c60db986f29d35b0f8ac0a18f0f989</hash>
        <hash alg="SHA-256">9e535d3b504b4ce09f3b78478ead09486c3a676ebe33c3102b7a1f88317d05b3</hash>
        <hash alg="SHA-512">de2a649ba3adbb98b4401faab84c7ba20a5611ade37ce425b85ffe8effc58080a9f88d613b52568e2db952f2878c066214812615efebe2f9ede3cd725257957e</hash>
        <hash alg="SHA-384">3a2e48655a0bbd65a38d9ae2e7c556c9aef4a41ff599a0defac4b11c6304ce2789ee795aee3e4880cee7074980e53ee5</hash>
        <hash alg="SHA3-384">bfa2cafe5475f60335c17413e8657b83f78e71d3adb3480e49e0ebb3ef157fa07b78ff5d8dd8345c31ff3bd556b9ef45</hash>
        <hash alg="SHA3-256">2c78efa856aa350d0f39edfd21a391a3df1973bbed979152e749bf0585edae15</hash>
        <hash alg="SHA3-512">1f7aba046ec63f8d496e2447433bb80609334bb8eddcd2a564c3a6834d86252620b4a29409c912676746b5132202348ecd411bf250e3dd799845749d4d998800</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.8</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d14d98be8f76fdfa4cfa8a2769ca360b</hash>
        <hash alg="SHA-1">66e0297f1196f0d15a776e699de1b8e6ac5d44dd</hash>
        <hash alg="SHA-256">b10b729087255ff255d82d9cb826b4f993cf112e972ec3ade21a5dd1852fa5d2</hash>
        <hash alg="SHA-512">1d87b2294270812bccf08aee639e2bdad9b8520eb1f09bc2af5a754311e7a9a7bbf2ece230b751de503587ebd69c04448783dbf3119645028dff37d2cb3b3fc2</hash>
        <hash alg="SHA-384">19a8aa79bf9eac88cc20e0acbccf5f23ced3cd878c7593629e6417520b89044d61d9b972f6324b0c51dcbaf82cdbe79b</hash>
        <hash alg="SHA3-384">15c7115c155a655dae40bd203248c16450272af5c73db24deb9457dff79244646b31fd66639c8cd975137ee4cbdd13cd</hash>
        <hash alg="SHA3-256">43efbba7b6498f41046b744af95d7575bb3bbd98febae6ce216d43601f0dd328</hash>
        <hash alg="SHA3-512">633ff396e28426a26b7dd9eb33d6b6506932f51f324ea682c0eb49c984d149624ba0955521603e7bafbb9fe8ca923baf5406108ea1dca301bcadda80358723e6</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
        <hash alg="SHA3-384">2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d</hash>
        <hash alg="SHA3-256">50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e</hash>
        <hash alg="SHA3-512">286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.0</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b8993a59697b293e5b1f123990df0020</hash>
        <hash alg="SHA-1">5b99c4a647ee7155fcab0f7ec2a8737129281d68</hash>
        <hash alg="SHA-256">ab4ca02ae5634caf114161e40df94cb7e6bec2b33d372d46bd78189a4cb27dfa</hash>
        <hash alg="SHA-512">2f031e9d8fc4b7b29b62ba6340edef948e3b9f07b568d8a913558de17be0133c68beff0d8ffe951798c21120b7304ad0e96fc643126ae34cb27644719c48d2e8</hash>
        <hash alg="SHA-384">aede613ecd30874ba41c8fa967a2fe8e502070d8ea52700a64ab6c7f5d0e8e11133a6224c7a2897f55b3394f09e1f1c8</hash>
        <hash alg="SHA3-384">a9a09e26e7029afb3550ff17342e4e820c706ea93deb8cccdd129103d50492c69095e7b9d3acc1b8b724552310150b22</hash>
        <hash alg="SHA3-256">783bea59339a6953f8db0f32aacc6b60b030fd6a8782f486e78de731b3fb2ec7</hash>
        <hash alg="SHA3-512">d6a05e16da3081663f85d830da3cec1d990a35cffe86f89c62f7afc3e0c269521ae64b7261ebb5123cb73df5a12e7cb364d8bcaaf818b388de7b1f20423db23b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/XMLSCHEMA</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
        <hash alg="SHA3-384">8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33</hash>
        <hash alg="SHA3-256">a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4</hash>
        <hash alg="SHA3-512">9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
        <hash alg="SHA3-384">07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d</hash>
        <hash alg="SHA3-256">5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e</hash>
        <hash alg="SHA3-512">6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
        <hash alg="SHA3-384">3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286</hash>
        <hash alg="SHA3-256">794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17</hash>
        <hash alg="SHA3-512">fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution"><url>https://repo.eclipse.org/content/repositories/jax-rs-api-releases/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.6.1</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">852c2018f15dade6e275533e40760508</hash>
        <hash alg="SHA-1">30e4f3cceb29b199bddc02cd3eccb0cb1f3e74f1</hash>
        <hash alg="SHA-256">c62b7a29e2a2fc40a3eb119faf5a977f005c67a420f4008b2a7e2f5cbb7d5df0</hash>
        <hash alg="SHA-512">2f2ba90fb017bc38fbf8962413c923395783d61824fa38dd3cf0d051066aa6897d69d26994868fbcc464e640e1d9b30eb9f3a5106f2e2f406a4070da995f74f4</hash>
        <hash alg="SHA-384">5afd718d1f0c2b66cc346575adf51671b08b72791b11feeff0388af55530912a89b36c2042007c76e08df237a0465993</hash>
        <hash alg="SHA3-384">f139e5d0b5205e8374adc10fa217ca55208127f98846a173f4d89b478a90e33950b382b6ef4d8c28a62da0f3617c1c91</hash>
        <hash alg="SHA3-256">244fb5878837ec14c5383dbaaacc88ae2588f0aee4941e22319e8615a37d59c0</hash>
        <hash alg="SHA3-512">213b21df343b1ae6b15a2ca12adf9ab57700008a85138585cd03b29e0417b4d603e8ed9e363d22608df8fb53282582f15db62571557f52aa02c11c11293a2d71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.6.1</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7bee29c4e3334ff327822a1ab9cdc1f</hash>
        <hash alg="SHA-1">663c4ee286795a30854d34f7eb79633f184a2838</hash>
        <hash alg="SHA-256">41ebacd97c415e6dee4999d37910f5d39c94006e0ea944b0ae1bcb5848a9227f</hash>
        <hash alg="SHA-512">231bbf2940d63ce2ea4d71a204f3a167d2a1c152136833abe09cb383b5bd5788dba254e0d39976d278dab89ea337042893cb70b36b6c37bd231c4967f5b658fc</hash>
        <hash alg="SHA-384">ff0fafad912ff36592f9304c1ca9680cd917a4f67b237329cfc8feb9bd931755d80a019b0593b6cd72ef1c7243e4f2ba</hash>
        <hash alg="SHA3-384">5f4eb44df0b553803c012d2404db5f6e6bb24ae260eaa14f38d45775d58ed4937fdbdd16627bd93df6e09203d035d9a7</hash>
        <hash alg="SHA3-256">b610e88644043bc9797b7c9b165857c702c4916541c0add0d1964b222c0674ea</hash>
        <hash alg="SHA3-512">16e2d5a763d25cea3aa5f16f60d0050525a1b51697852839ec0249104fd4a7b40fc684c4af7ac329a73ec4b8180825d9c45f0e329b51bdfc91aeede79ba34e5c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.14?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-annotations</name>
      <version>2.2.14</version>
      <description>swagger-annotations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a3f9db6683165b97d5fb6f35d148616f</hash>
        <hash alg="SHA-1">5a6a6d6ec648f2df9b5b7f2e7ddbf2fa6924a16a</hash>
        <hash alg="SHA-256">32b78615fc319f5774192927bc7e5772fb9e194a361e56452de37d79322d5159</hash>
        <hash alg="SHA-512">970e7aaa292664da00a37f9a3cd0cd842d52aeb9bdfc7f86866b7d003fd38cef73539b0a38f677e941ab367635608bfcf0767c54688357ffa8abaf985b688ee7</hash>
        <hash alg="SHA-384">9ce35b1912bc33e0f390222f8ec716513adb039e739270cce19918b0802f152e8561690b4d5a61f6818d04560526ca1d</hash>
        <hash alg="SHA3-384">5d79b722db79bad00f019fbc769bc09d2d9b03250e0e52affc51ac7bbbe5aabd757c88a6ec1e9f85ad42e599ba24c240</hash>
        <hash alg="SHA3-256">7ec5ac2f3062840d06ac65f101c8e8e443d4ad9b0e3ced5a79b12c60fb6ac310</hash>
        <hash alg="SHA3-512">456e5ece032ed0809628ac3822e813868091fe8efca78b27918fcca84b4b6001f83cfa2cdbc4f38142a33fa05b59401a4930821af91773eec92028d5e42f78fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.14?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/swagger-api/swagger-core/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url></reference><reference type="vcs"><url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-yaml</name>
      <version>2.13.5</version>
      <description>Support for reading and writing YAML-encoded data via Jackson abstractions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fef4733925c9b64b00996ed874be2075</hash>
        <hash alg="SHA-1">fa79b136b42d37b588b5e7bb77e46897583b9fc8</hash>
        <hash alg="SHA-256">fb1161b565cbf7f5b8c5dcf3a229429a30ae87bc4ee496ef4891e17f8e12d074</hash>
        <hash alg="SHA-512">10a3d50da2aee277a35c43b347250bc879ff59e3bce130b69b52cd85bd16ebf8558c6dc89f4cdff77b74747a8637972c4e31ce2164616fb1adff584fc9a4584a</hash>
        <hash alg="SHA-384">c97680c19a8439abd08524a3ad3018313fb75ddc1a8c61f1ec053afe99a9b347dacf7b51f2d97ca34e16089afb466132</hash>
        <hash alg="SHA3-384">2413b0e903e7b7d3a1e818312ea5aa274400c4da2ee9e87ec923db4018e7fd98a90b4c2676b54435f17775c773afa2a7</hash>
        <hash alg="SHA3-256">d356c695e0ea9f0cf87b0bd0411c4ab34d3d8d3af1f24fcba51732596ad1d28f</hash>
        <hash alg="SHA3-512">ce9d80b1edea3725ec69ae8a39fef04fff054bc46776c80646b46d6f4b2d2387a669685244a656c256e0709432142d48786b2dd704cef1822cd141572d6345dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-dataformats-text</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformats-text/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-xml</name>
      <version>2.13.5</version>
      <description>Data format extension for Jackson to offer
alternative support for serializing POJOs as XML and deserializing XML as pojos.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae63d92efd723df32699830ca1ae36db</hash>
        <hash alg="SHA-1">70f9003aefadda1fa94d0292e559b16c6364163b</hash>
        <hash alg="SHA-256">5766a9d543a9b2e163711de50ba7b083125ee24ed920947d2fe1b5fa17608f4d</hash>
        <hash alg="SHA-512">8303508cf896038c2eee6c4f580213f04daceb156136ab0486e3573b1fa75c554c6983db9d5bb069f3170b54c79d03e986e4b9b7b68b2ef75c06e001264c551f</hash>
        <hash alg="SHA-384">c9d56d3e1c0f756fa360234d7ca7c80465d6594e045b3d0ea193448722bfe8fb637387222bdf3f9c9e394bff406227bb</hash>
        <hash alg="SHA3-384">0cabe385165e40750da96f255c0feeb1ccc4e0ebc25c9ed9a99005f6f68c6d4f39cda37c0bc641a7d2aaba8e7e59fb74</hash>
        <hash alg="SHA3-256">7938b9eae3360a3763ef03009223460ada5ed348f073390a56748d55da5a2ac7</hash>
        <hash alg="SHA3-512">ba383adb99dbbb7d0499034649bd46acd3a1976a9c2cbea568dae4b9b4cb4ef5acccf064fee6b8e5203ad473adb944e8c6a4e0937948c6ca0a846d4419055437</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-dataformat-xml</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformat-xml/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-dataformat-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
        <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
        <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
        <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.13.5</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">712138e14895b15181e0b9af3292e222</hash>
        <hash alg="SHA-1">8ba3b868e81d7fc6ead686bd2353859b111d9eaf</hash>
        <hash alg="SHA-256">ef15ceddddc58dfbd686b6b7fd0853ed328ff08c628bd4a395734bec20ca857b</hash>
        <hash alg="SHA-512">8528107394baa9ddca5a182c8a99baffe650b3e52bf238c30d639a146413cdf24d872c631d5d8f67d3260c44f4575db3b338c8177756518ca109f92e72b389fc</hash>
        <hash alg="SHA-384">74b0a882cb7ceeb9cfc809c52190e20a9f16384f37f3ed8d11d2507ea6acf31ee0dad728853405dad19a7fb6d74c8935</hash>
        <hash alg="SHA3-384">a0f991810fa44d8662e85b3bd01057649474407f23223f0c42990461c191f6d047b7611588e09aab8863215e74403a67</hash>
        <hash alg="SHA3-256">bd7bf66a4bef0f485516f26f83d7d5aa42a06628e2afa98bc3de3499f342ff27</hash>
        <hash alg="SHA3-512">957374ef39359f03cbdec140f0237c79bd1c6987f2a0f75565338df04a8a65c39d9bb9af95c6b1ec0a65fe25b8504391100511b2f8f9d54016399f6ddf962433</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-java8/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.ext.saml2sp4ui</group>
      <name>syncope-ext-saml2sp4ui-provisioning-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Ext: SAML2 SP4UI Provisioning API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b83e9c695fd630c54008b74fb8b06a23</hash>
        <hash alg="SHA-1">b7cb86fb602975d69e51daa741910651a78420ef</hash>
        <hash alg="SHA-256">164841d8cb3e200397acc6bcc9a9330816e45f3f7f43089dceaadf50f713eb45</hash>
        <hash alg="SHA-512">b69010a1867826d0e4c50f5457f6f583c013225716b4b97f0a1c50acb87953cbc90282ba8c00a7cd5d19170a4ed12107a63cb48cdee125e092f1369d36f7e973</hash>
        <hash alg="SHA-384">afb97633847386d87129afb5b0bfde98f6abb67038417bf225e75d36eda6d207f2b9d9752a0e24accff25e2c5086f982</hash>
        <hash alg="SHA3-384">9e05f02da07b07b957195e859dd53b250a7c343a35d4a5200abe31fe9543d3a183ae715a1a1b029b027a5d13be15b5ff</hash>
        <hash alg="SHA3-256">9f37596de52f51c1bd926ca1c43778a3664755f8f706492bd192e4dce2e7358d</hash>
        <hash alg="SHA3-512">327aaf1abe32f55311818b332844c82dc4a3dc052253cf2ed1095eb7bc7c4056af081bc869a34de54473cdd16205488c0734d720b558824ee87c41a8a7f574b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.core</group>
      <name>syncope-core-provisioning-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Core Provisioning API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f378141603cb79ed07535dbccf01575f</hash>
        <hash alg="SHA-1">ba42a454397e48b821708d756ae9198a37122150</hash>
        <hash alg="SHA-256">2444ab26304dce08e8655a63971c45f9fc80f85355f0805b3d7182b9f151960e</hash>
        <hash alg="SHA-512">42638052c5c1ca5a54a3a2f0c9e95c1f9a92eb72f487eec706bc3fc704ada2b7af3d26327aaa0afed95b88ce41e11c82476504623ee87f5c7f882ae4a7c688fc</hash>
        <hash alg="SHA-384">0bd2fb031881ecf681b22b57fab5c70ed458a7080f66b0dfc48799d4e79bf994ba031b3e5a75ff0f2dd92881d9442699</hash>
        <hash alg="SHA3-384">e70c60b88f8b295bbd1a65a8d4b539111b374ff66be6f2e3b1e14909f816cd055d9c325c867e5119b1fe84d41c8c7629</hash>
        <hash alg="SHA3-256">f372b4d369a585d9057a7c5faf068a0e4eb78af08ef2dfb060f46a17db81d341</hash>
        <hash alg="SHA3-512">d52c97f8b6add59fbee66f1b3b735352525c03b180bfd4b95d268eb818bc40c8178c24e52a1af68f20b80cb9b50411fdabd8b5778f5c7b858a01d56e9b5317be</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-core/syncope-core-provisioning-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-core/syncope-core-provisioning-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-quartz@2.7.13?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-quartz</name>
      <version>2.7.13</version>
      <description>Starter for using the Quartz scheduler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6dc94134ad86196613ab0050dc6492de</hash>
        <hash alg="SHA-1">8e249a9ef5b248532bfe9d7d68d718007a7d4bf3</hash>
        <hash alg="SHA-256">eb110ed1e0a368e7c87df49279a66b75818c3c737b0a07e36c10bb03e9542497</hash>
        <hash alg="SHA-512">96ebc271eec8c47f36465a5358e21b812189b02ee4b04e2ca71e09ef2d3feae093219bbfed54ed1c408dfb45b785d75cbfec646d6f5155f36911913b24ed38a7</hash>
        <hash alg="SHA-384">acc0df78db76994155c17ca927f8bf3d9508e987e330d8a0e9a6057bc055612c92dde1f506e8cf6f209b32f4a9e97f77</hash>
        <hash alg="SHA3-384">912f10e9f1bf823fba10466a17bef62fea6afdc0fe20291be89061fb4b49f1673596f84a707c4350be1a94a3ff973935</hash>
        <hash alg="SHA3-256">94551beba5caa4e7d879365f435eeac865038d92efa26cae439da10ee6bf04ce</hash>
        <hash alg="SHA3-512">3339d160cc395ed6375d128733cc09cc3f0a35239796b2c1991e9ce7bc9474e2092aad1e690903859f82c9f0c07c9d5277022027968d2fb9f895869f18872486</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-quartz@2.7.13?type=jar</purl>
      <externalReferences><reference type="website"><url>https://spring.io/projects/spring-boot</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-boot/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-boot</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.quartz-scheduler/quartz@2.3.2?type=jar">
      <publisher>Terracotta, Inc.</publisher>
      <group>org.quartz-scheduler</group>
      <name>quartz</name>
      <version>2.3.2</version>
      <description>Enterprise Job Scheduler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d7299dbaec0e0ed7af281b07cc40c8c1</hash>
        <hash alg="SHA-1">18a6d6b5a40b77bd060b34cb9f2acadc4bae7c8a</hash>
        <hash alg="SHA-256">639c6a675bc472e1568df9d8c954ff702da6f83ed27da0ff9a7bd12ed73b8bf0</hash>
        <hash alg="SHA-512">d9154efdf419e9b9a521970cb6fc63697541424387a2c0b3e8343e3a5daf74fc532ba3da8f4bf557a42557ad820e03992377183422df2d3e1e6e2e1b284799ca</hash>
        <hash alg="SHA-384">97bbf915b5053bd11fa082b2145c8e068efdaf1f9905202f67a8662f9983d2305f43df65222fe9b82d1fc36ad333b76b</hash>
        <hash alg="SHA3-384">cf56aaf3211919124c69e51706571a121abad8246d7a813811ad9a7cc62f24f8f3fe4aaed9cfbf0c6069f1838b105028</hash>
        <hash alg="SHA3-256">1d38659d9d425f74844921a1a404dbdbec04192592d85ce3870a4f5af6281d8d</hash>
        <hash alg="SHA3-512">3f94dfb237c464471c8f660613cb51bc69f5663d9657ab08e4801a994a202f4c08be8a4ea2448807a16b046c39cbbb32a6b0136ea3ef128640def88ee0e4d28d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.quartz-scheduler/quartz@2.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.quartz-scheduler.org/quartz</url></reference><reference type="distribution"><url>http://nexus.terracotta.eur.ad.sag/content/repositories/terracotta-staging</url></reference><reference type="issue-tracker"><url>https://github.com/quartz-scheduler/quartz/issues</url></reference><reference type="vcs"><url>https://github.com/quartz-scheduler/quartz/quartz</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.mchange/mchange-commons-java@0.2.15?type=jar">
      <publisher>com.mchange</publisher>
      <group>com.mchange</group>
      <name>mchange-commons-java</name>
      <version>0.2.15</version>
      <description>mchange-commons-java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">97c4575d9d49d9afb71492e6bb4417da</hash>
        <hash alg="SHA-1">6ef5abe5f1b94ac45b7b5bad42d871da4fda6bbc</hash>
        <hash alg="SHA-256">2b8fce65e95a3e968d5ab3507e2833f43df3daee0635ee51c7ce33343bb3a21c</hash>
        <hash alg="SHA-512">288bcc948b0438b4c9d67189eff87d1c7b7cbbac386a295af86c0606021a904e0501b42eec3b788aeffd686edec5bea4a30d3698b6dece99d8f16b692cfd41ac</hash>
        <hash alg="SHA-384">8f98d0903850e5d5440f186f54e7a06890483c8d7150ce5e224242001309b8cb2e04cacb9a518d6531a59f37b1c599b7</hash>
        <hash alg="SHA3-384">f06ab7858ba9e5370f33ab0cdda77f3c783aad66ae6807304bee001568df8a5a0d5eba8b2a8ff2126dbec0719d5cabda</hash>
        <hash alg="SHA3-256">069ba8469c05d642d3c3e43bad83bf551f01c27d64a4b4efd07cb90d75f841cb</hash>
        <hash alg="SHA3-512">d68093be5b91ea4461c152d2ee28e8d6cecfb6208fa4ca97b1a1d97bc2b72956b7e5b2330fc03fabfd4453ea64e454b7d9093933e6dc982cd278a7b4688ae2ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.mchange/mchange-commons-java@0.2.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/swaldman/mchange-commons-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.core/syncope-core-persistence-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.core</group>
      <name>syncope-core-persistence-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Core Persistence API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c67ca0da10a30d6066a56a7ee7348356</hash>
        <hash alg="SHA-1">388ed095ea819139f94112fa496bb64fc8d3a314</hash>
        <hash alg="SHA-256">8a9c8bf1933ed293d82f241b0b3791fbf178a7114a331a4611e52595edb07c70</hash>
        <hash alg="SHA-512">3a0eac73778c54488532306eab2debeefcabf503433af1faf8a7f9dc3acce8eb5b608438aac35a0348f54c291c5af96c0793d15709e5b393f2c9874db2ccd02e</hash>
        <hash alg="SHA-384">bcb748874f96e40e6dbc4863366bf066b483b8969d7104624d74d1d859488d3cb55c5b206d5e2442547a5a41d9091b7a</hash>
        <hash alg="SHA3-384">c3dff187ef9340fe8ce9ae605177c2ed66fc334ce5180b560f4ee06830d9ef979693407ec6e1bd63718cc89f2d6f66eb</hash>
        <hash alg="SHA3-256">38caed3938266aefca0cc017a841f39257c196a3fde9196882688fa07cf6e16d</hash>
        <hash alg="SHA3-512">a37dd267378230f3624d1dd11feebba1c90efb9c09d23343c330ebad2a48c1a7ac1781af41ebb957bb3269f4cf66d93d583d455ce4fab7f27c71dff11e13569f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.core/syncope-core-persistence-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-core/syncope-core-persistence-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-core/syncope-core-persistence-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.validation</group>
      <name>jakarta.validation-api</name>
      <version>2.0.2</version>
      <description>Jakarta Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77501d529c1928c9bac2500cc9f93fb0</hash>
        <hash alg="SHA-1">5eacc6522521f7eacb081f95cee1e231648461e7</hash>
        <hash alg="SHA-256">b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4</hash>
        <hash alg="SHA-512">3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb</hash>
        <hash alg="SHA-384">6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94</hash>
        <hash alg="SHA3-384">55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d</hash>
        <hash alg="SHA3-256">1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21</hash>
        <hash alg="SHA3-512">c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://beanvalidation.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/projects/BVAL/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/beanvalidation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar">
      <group>net.tirasa.connid</group>
      <name>connector-framework</name>
      <version>1.5.2.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c4a209ea2040b04a6157424bdf1734a</hash>
        <hash alg="SHA-1">b1a55d89826c955b877cf74c42f2fcbe1116e9ab</hash>
        <hash alg="SHA-256">32a27bbbaff2cf444ce51bf7c660c4d586cbc42e8eed3914b4b02d8ba0264bbb</hash>
        <hash alg="SHA-512">88a2695b2b43ce1848ed30642c0719ab26f4e9b6bc57ea768dff1366cf6945a8b769380b83a41b0395697b15621fb64aee041aef8b5a3d5028d4c0f8e941a7ad</hash>
        <hash alg="SHA-384">63cdcc76b19829579fcd5d02b5dada6f0c0714b682b74a67c021db1546da4e3ad78ec6bf357985830f2c4e7d0c5ac996</hash>
        <hash alg="SHA3-384">3502060cf590cfed6823c276ba759690cfc1f0bff46e26d568d8952ec95b1961a0a577f0a86cbf8f373e3bb75d8513fb</hash>
        <hash alg="SHA3-256">db29e353f5f8b3e03560bf387987b546dd1e110bbd0a813305c4bab6011b178c</hash>
        <hash alg="SHA3-512">e3b8e00170a3d465b58c9187124c5c662362acf51426bdf67ccf5071ffc08a5ae818ac9eeb4adbd72137788ff573c6bda151af4d6212c850110e630732882b6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://connid.tirasa.net/connector-framework/</url></reference><reference type="build-system"><url>https://github.com/Tirasa/ConnId/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://connid.atlassian.net/browse/BASE</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/connid-dev</url></reference><reference type="vcs"><url>scm:git:git@github.com:Tirasa/ConnId.git/connector-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.tirasa.connid/connector-framework-internal@1.5.2.0?type=jar">
      <group>net.tirasa.connid</group>
      <name>connector-framework-internal</name>
      <version>1.5.2.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">767b733f27300e44b527fc172a210391</hash>
        <hash alg="SHA-1">1ddf4eba3f0bd22873d897fe4c4410e88d55706d</hash>
        <hash alg="SHA-256">1dfd1b7eb44826056131847df956c8fd8db8b429dda8bab26b89e6f4447e6086</hash>
        <hash alg="SHA-512">637ba29e27ec87b6d26d36a13c47616a3d135f8eb347020b1a953a929fa0eec50906ea1bc4524d91cf29d0d752c77302175ac9f564d12104c9d4f12ca7c9d5b1</hash>
        <hash alg="SHA-384">436cc12ce44a7e398f2fe8f90ee82f68426a76f3d4d2f80bbfc342084ede7802fa254d0975c90b115aae5ddb8fcfbb90</hash>
        <hash alg="SHA3-384">29bcc514c05b9d94f78e1fd81b8b3af3aa83fa7d1f5300d92c53e78c57a60e0396807f6baa45611059466917c8cdc014</hash>
        <hash alg="SHA3-256">d79fba191e379ef8b44bf239311fc8377b7375287a1d7aa0d2c085bea3142cce</hash>
        <hash alg="SHA3-512">48a717dc3b5c16c9f55f0f19b20185438129689b266302ab308af94566af94194795f88aa725f2f263233b461d67d6d5070bc37b8ff9d9b9383583cd260c4b93</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.tirasa.connid/connector-framework-internal@1.5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://connid.tirasa.net/connector-framework-internal/</url></reference><reference type="build-system"><url>https://github.com/Tirasa/ConnId/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://connid.atlassian.net/browse/BASE</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/connid-dev</url></reference><reference type="vcs"><url>scm:git:git@github.com:Tirasa/ConnId.git/connector-framework-internal</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.tirasa.connid/slf4j-logging@1.5.2.0?type=jar">
      <group>net.tirasa.connid</group>
      <name>slf4j-logging</name>
      <version>1.5.2.0</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f827bef048c125a859ce42a9f1c4441f</hash>
        <hash alg="SHA-1">a4c0c0e843f0cd0516f30558e5786b235fa1cc83</hash>
        <hash alg="SHA-256">7826e24843aff2336786f49dcb147efa9c5c0aa9a4bd404b95784ac2a0ce02e3</hash>
        <hash alg="SHA-512">1da3ccc3921b9e7339e4b7daaffd3b07675d3241fb6f38012e7989caad1ea15a05547f77e2b12a573689851778e4a8484645702e1f178109b8871c24d4a9316c</hash>
        <hash alg="SHA-384">b5ea089e2c3daf9b77da8ad528d9a807696a0af900e17ff986f76a7f13647befbd13d0d06f4e4326e301f234f2d3fc5f</hash>
        <hash alg="SHA3-384">4f517e2a9fa736749ed2133e68c859dcefe89ea9a03e06d5a2ec8668b16b5ec00c86258ed12c11039014c4f890873323</hash>
        <hash alg="SHA3-256">3fbe43684fb4d2060a74ee7efc6530f1f5f6ae43261c9f6948fac54934750fbf</hash>
        <hash alg="SHA3-512">089c57634daa5ed6ed9eebb14f603818b1ae4567ccbc705a15e2dbef176b3c5e83c92aab7710817728d4844b465d9e3a398fa9cd12fa436c3a17560795da1909</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.tirasa.connid/slf4j-logging@1.5.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://connid.tirasa.net/slf4j-logging/</url></reference><reference type="build-system"><url>https://github.com/Tirasa/ConnId/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://connid.atlassian.net/browse/BASE</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/connid-dev</url></reference><reference type="vcs"><url>scm:git:git@github.com:Tirasa/ConnId.git/slf4j-logging</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jexl3</name>
      <version>3.3</version>
      <description>JEXL is a library intended to facilitate the implementation of scripting features in
        applications and frameworks written in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-jexl/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/JEXL</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-afterburner@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-afterburner</name>
      <version>2.13.5</version>
      <description>Jackson (https://github.com/FasterXML/jackson) extension module
used to enhance performance using bytecode generation to replace use of Reflection for
field access and method calls</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a1924e1bd671dfe38cb4399afa352d89</hash>
        <hash alg="SHA-1">884dc6f4931e0e14faa818cf9344f5f08fabce61</hash>
        <hash alg="SHA-256">bdd2dd59a7d722c3673658b776db32a32eb9050f047265c8d72f371da6f5f100</hash>
        <hash alg="SHA-512">de24d8d6f7ba704c8bed2182c9b81e650a07e8b3183e9091559443f7cc6fbacfcc533547f849d38cabc1a04b0faef2285d08e5893a6c3e65ca6adf9fb64d6623</hash>
        <hash alg="SHA-384">6e7b4f2d10debd2c58b1ef9d2c62639a14c9e70d3c1f89b1cbadcd8c21250ac1397de294f8ed56ac7bd8880f630016da</hash>
        <hash alg="SHA3-384">422c8b7a30f727a0f4c5b9c5e41356e1cb1ffb7774435da34c13c0ee2c5ac459849988c2c5b4bff59a6bd639f40cece5</hash>
        <hash alg="SHA3-256">9440d88d51400c0f9438703b365b27fcbb170ada685151456c73c7ab2f472098</hash>
        <hash alg="SHA3-512">de36f77ad955f10cf0fbb042ff533b747ef7eb36eb6203ecd2d18a0db4d674caf52cf2c4b2aac8cd9dccff7d7f3cf4a6c1c91f100c875ff54951f896de905f85</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-afterburner@2.13.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-modules-base</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-modules-base/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-modules-base/jackson-module-afterburner</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.ext.saml2sp4ui</group>
      <name>syncope-ext-saml2sp4ui-persistence-api</name>
      <version>3.0.4</version>
      <description>Apache Syncope Ext: SAML2 SP4UI Persistence API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b84ddf604092dae3ed3789b37bc2ba4</hash>
        <hash alg="SHA-1">0c2f05ad3a70dcd3926af276e6edbaaeac7734a8</hash>
        <hash alg="SHA-256">f1fb8dcd1d0bf45957b7406f5057f1995f69d9626ad6c1f5008f0485c765b2eb</hash>
        <hash alg="SHA-512">054d05b54e97b2a8120b0c01aa827acccdeeceb9ad989baf9ccbc79d7d863c91a20799a76f333720b23af443354e2571cd88011278b6b51da63ac6c3412eb967</hash>
        <hash alg="SHA-384">aee4d36af873142bc398c9ce466a20b8f5b3e1d54780f6966d6325c5fb24ebf00ce0145832a5fa0bbc396e3005d15fdf</hash>
        <hash alg="SHA3-384">2b96e1e2c71200b1d7dd2db451192795d1d79af97b22d45df2bb5d135f430445ede78d721344182a6f92e6ebfccddbbe</hash>
        <hash alg="SHA3-256">f2c810b66835c490ea8853a8068228bcd6c84eaee61406051a8be5191db323a8</hash>
        <hash alg="SHA3-512">68e627f155ee481f9700ae6c16dcfc04273b3d9189d2c479648d20c16eb19df70bb125706cbcca235cc00bad2fbe3bb768b35b4cea2114ed9ed0afaf711d1aa9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-common-lib@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.ext.saml2sp4ui</group>
      <name>syncope-ext-saml2sp4ui-common-lib</name>
      <version>3.0.4</version>
      <description>Apache Syncope Ext: SAML2 SP4UI Common Lib</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a65d7cd27801edb79d520fbb97ca37a1</hash>
        <hash alg="SHA-1">3ad4140dad56eb9b193c19ed829e40c67a19b6d7</hash>
        <hash alg="SHA-256">7361bba3886f8e62aedadde5fb955fc2b41c105e408eb712f38c090d372fb3a1</hash>
        <hash alg="SHA-512">e88455270cb490c4379b97a39c721884a4fe5d1d297716bc59674f9a0607d67042b6286c0b18c851d254111e70ee0e2c6fa266c620147cd878260ed16838c8bc</hash>
        <hash alg="SHA-384">e24b953bb6f98d852c4d4cdb8489cffab487b20bfba8e7268f14774e011ac6e5d3aab037d700ca9e94150453389397ea</hash>
        <hash alg="SHA3-384">fe6404bf88df60ca892735c1670535285b50ddd1abfdf793a8a1e1fdc5185cb7ef930387816be610683a6af6d29e7230</hash>
        <hash alg="SHA3-256">92622978cd10386d1b79dfb8e9943a10d9411779c8bbbc82cdc88dbd4543dbd8</hash>
        <hash alg="SHA3-512">9fbaab0c7f09dcac57981f9139f8730f6ec19215accb37e2407540aa94c86f1c4860dcf0a4836561e21b6812da74289b76bb2beb90d2af8774a9b6622f83b0fe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-common-lib@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-common-lib/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-ext/syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-common-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.syncope.common.am</group>
      <name>syncope-common-am-lib</name>
      <version>3.0.4</version>
      <description>Apache Syncope Common AM Lib</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3060ed5a6b386fa68c2ce02c8514293b</hash>
        <hash alg="SHA-1">b7cdb7ad46b2b8a9612f69d938075a298a98b363</hash>
        <hash alg="SHA-256">ae1a07cb24034cdd637831ab874457eb907c0a809afe713f4820d7122b49bdd5</hash>
        <hash alg="SHA-512">554830f268ebb9883751e261923bef98b605085c4b9c8e63cd5e8822be3d6e82f42c85b6c521698fa410ec4751f86baf4759deb52a4e038a0d17d47dac29b27c</hash>
        <hash alg="SHA-384">ce2bc252f5ad1d66f5cb546e9027a4a0a36f1ec50dfb9e8dea6ae7e93725c3db0eeb6ff1949619649283f8c74201ff51</hash>
        <hash alg="SHA3-384">572f888080ba86fa76945cf31c6fd5a22593d83c63012668965f33266ac8c8a9af8421d361dfc61f64510bd99e82586a</hash>
        <hash alg="SHA3-256">5e26d213adea0f2e2cadf19e20f31e6c15a9a026018966a81484e0f22524aaff</hash>
        <hash alg="SHA3-512">2dee921142d94dadd9755128eb36db01e5a57d3f602a9d90330fca571871a0878433bde25fad229dcce82f293bac7d376b3d56bbd24797e81d8a3abb28d34031</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://syncope.apache.org/syncope-common/syncope-common-am/syncope-common-am-lib/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org./job/Syncope/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SYNCOPE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?user@syncope.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=syncope.git/syncope-common/syncope-common-am/syncope-common-am-lib</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.pac4j/pac4j-saml@5.5.0?type=jar">
      <group>org.pac4j</group>
      <name>pac4j-saml</name>
      <version>5.5.0</version>
      <description>Profile &amp; Authentication Client for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">628962bb488471172552f7908250cdf7</hash>
        <hash alg="SHA-1">bbb55471d17c7474855a206063858fab2dff7f64</hash>
        <hash alg="SHA-256">622cd508df73ba95df15ccc0887f18472a3b4e50f2c33d850f72c3ee03168d22</hash>
        <hash alg="SHA-512">6ab29494be7219e7bcebd179138837afecf9879a4806b803e629c42140384c822fa4c05cc843245ab13539ddd25fd5fbcb8a01d6ec94a7154f7ad747eb217902</hash>
        <hash alg="SHA-384">95038978c0e6f2027adf2bc6884702a30f4d9c2518e39422706e293fb0d97c2efe61d2d9e1b02cfad6246d21488e5bf2</hash>
        <hash alg="SHA3-384">85d17b82f9778b1659bff8629bd8d363ef2612c65455d14ea14047607a1b7d1aa14b5269ee451cb3b17f59d0abdbc385</hash>
        <hash alg="SHA3-256">b9a17bc0f98b724e0a854698ecfa9e18767b72091d06bfe33980a8dff643f554</hash>
        <hash alg="SHA3-512">e0d646063c0505f7419c3fb6789ce43b6f49461667db456ad61cf7cc3c92da7e2fb17166a934ab704e217998c3d7f46087749fe20ff522c89ce9af1a0b96f66f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.pac4j/pac4j-saml@5.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/pac4j/pac4j/pac4j-saml</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/pac4j/pac4j.git/pac4j-saml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.pac4j/pac4j-core@5.5.0?type=jar">
      <group>org.pac4j</group>
      <name>pac4j-core</name>
      <version>5.5.0</version>
      <description>Profile &amp; Authentication Client for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fede984f4ee61986c1c8d8917db6ed9c</hash>
        <hash alg="SHA-1">928d46fd78eecd79668fa7986f6d388ef61a8d8a</hash>
        <hash alg="SHA-256">aa8ad3748c3b870662571b4183c5ac6abd5f687d751c422590a46ec70a13d8c6</hash>
        <hash alg="SHA-512">b5485c5a7ea8b56fbe62795f4196d151a33b77bc17d401289bd70f5fe6c1a0e17d77111ea7e3015c7a1a88e786f614472ff84f5af10f393b47746ee948333704</hash>
        <hash alg="SHA-384">db474cffcd8a05b459b0ee58c295429d67cb3b0766e0e3e16e7b85519fbb8de16b3a5228826efe03e930012bb910aeff</hash>
        <hash alg="SHA3-384">f6b2e9316f93090ebe1b4a68fc6ffecdcc58cf7444ce6a42b843337371ad80109ca771aff36997ee34115995201a3b1b</hash>
        <hash alg="SHA3-256">46b1c6a2334a957b463e7fd2c201fbe7f3b73d3278c2e73cc56e72681b95f773</hash>
        <hash alg="SHA3-512">ed1d77c4f64452e0af860e180d27430ea61badb1982ee5fb75bc3cf1f9fa3d8c955c2776625bc07a0263a30b0261eb1aa819b59e94a76c572c4ae8984ff67005</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.pac4j/pac4j-core@5.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/pac4j/pac4j/pac4j-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/pac4j/pac4j.git/pac4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core</name>
      <version>4.2.0</version>
      <description>Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">23c34f99df7c7c53e151eeaf7505874b</hash>
        <hash alg="SHA-1">0e0e10451e482614955e6bd221fc3b20294b3d2b</hash>
        <hash alg="SHA-256">3a58b6fda836e19ff3c595002105cb6a91c074823e962b6aec9efef033888ad4</hash>
        <hash alg="SHA-512">c6c8412207d73f8b5779a77ff2ed5dc5df4fef28e4502a4958bb532d038de8965a786d2fde18a9beb1d17a64cdf3f72161746ed01fec99d58bcc3d9c05e09d0a</hash>
        <hash alg="SHA-384">e215b5932d985ab88867c4291cf8ad5c03fc08c86939ef96f405c5c26a36a2e5f5566bbc2bbae186630d4abde5c1b179</hash>
        <hash alg="SHA3-384">d42b1e609a7a79d25b88d26503c65b9114ee277ce624eee26085c700bbdded556936479b91f4404e36769c40334a8c4e</hash>
        <hash alg="SHA3-256">f7ddf6c2750de37e0abab4ace4ac0ef8858838d139fda354e7631eff128c0e8b</hash>
        <hash alg="SHA3-512">844528475e4e6a03c2b9d1e1560ce658686191d6eb366acf773b88f816a506f872179d161ab751db1914fc07c5d7a4e9ed48c787560db4ac7a29f89526625730</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-core/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.19</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd9caf026f4330b51c6308e6d0749084</hash>
        <hash alg="SHA-1">d32b4c3f3e733bf4cb239ca4204fbed8464973a5</hash>
        <hash alg="SHA-256">fa967bc2b37c8bff5bc377e60e439504fd9df5d335c7a42b37212403250023df</hash>
        <hash alg="SHA-512">dd1af2a8104e344ebdba21a7366c6aedfeaba7e03861af9c1ed53c82ce2c51e7a6034c46a6ad9a5e55e20670b5c490e178105c944c4f91b07d4be5455bb13dcc</hash>
        <hash alg="SHA-384">c6a6077f528be485082e2418b0f7d87e28a91d07d66bd861bd23fac60fd99e4828c5cfa8722ead6e69d5cde030ff465f</hash>
        <hash alg="SHA3-384">a9dc0167f0e95e7a511ea45a79658e46d336311085e14344edcf6bf6a7dbf1739d0a6719ffb8a307de301c0bfe6b95c3</hash>
        <hash alg="SHA3-256">da9ee08f1fe5f07cde53aece52ca59233edf034a08f58d23ca8a1efa67e49630</hash>
        <hash alg="SHA3-512">26a71fbd300f1a7769c8455a7cfe68fe7afd207a4fde6407ed62602d405b870002f6639a1c82a8796de4e5962ed3cf54b1df55d96957843c5e9c76cbed3d8fb6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth.utilities</group>
      <name>java-support</name>
      <version>8.3.1</version>
      <description>A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V4 projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47951663990f0a6d1c6c82ca6f4cf547</hash>
        <hash alg="SHA-1">0746493c422efde51fb3f4abad71818e7ad47cdc</hash>
        <hash alg="SHA-256">400a44947228cc62f72f0acb9286a1f5c41e75e148e888f1a91dc10fb3d5651c</hash>
        <hash alg="SHA-512">cbff9f44f2f660574bc95a032ad02f8be761967130bc02b1f19ab0df7b38397370d906e2489d075cb9106ca9ad5408e6f0311db439b72fbc90e527ae0c68580c</hash>
        <hash alg="SHA-384">76db5ab1f28c2a36e2beae75eed5c45f5feb7049c46f60376f0a8330522d0cc9eb8ee9c1741bb93fc04ff5bc28d95f83</hash>
        <hash alg="SHA3-384">48c24d22397c831f4f55a154b020a7a33c7cbbfb70a938674fbea2935e1c4ff3a9e654212a8af2531d08c45fef072689</hash>
        <hash alg="SHA3-256">20d0f472f7aa7171f803cee9fad0504a0fa34853a0cfa0cf3dc301cb5ac9b03e</hash>
        <hash alg="SHA3-512">4e7a40433b81ed32e403e5fdacd7943b9348479dba3a41983ea739cc3708eeed9a0c5de06bc788315ecfa3ffb30eb69a30e1ebc839990d0aa04babfc9f879bc2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/java-support/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-support.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-api</name>
      <version>4.2.0</version>
      <description>SAML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69ee9b153014e01e8e17a0e2efc50789</hash>
        <hash alg="SHA-1">2e98bb5e20409d03dac641bb9e8088af0a519858</hash>
        <hash alg="SHA-256">e4ba492834298153801f89be8903cd537d449a8cfc662188d6a296d203e0a78f</hash>
        <hash alg="SHA-512">081f18f9a953307e6359c07dfb51a21f08fb052717fa5f74a4fd3bf4895f0389dc0b84c423757f47e084e21b9e53296acc8854a2256a4a55e7a4792d21d6f842</hash>
        <hash alg="SHA-384">cc8a7cc9da2e3c75ca41219ebfa3d57d99d8f03fc237803e3deecb65dcf38b8e1182ae95abc2bb076838d1d6e0bede77</hash>
        <hash alg="SHA3-384">b67e95cc25de24aa081fe568789f30502abdaa5f9056039da06306cdd565713ff833245f6697090845b039dc1885fb30</hash>
        <hash alg="SHA3-256">aae9e20f758aa594cd8f78c831897c7329dd0522a05f9d36657e7c26f22c17c6</hash>
        <hash alg="SHA3-512">f45ad23e5e3f3ddb0e7d6b7c59966f6dd2d0855d29ae7839f10689bfd294c7e926a13f45ca8c2ff18635eac5ca61d02043be7627e5b8deac98fa60380820296a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.santuario</group>
      <name>xmlsec</name>
      <version>2.3.0</version>
      <description>Apache XML Security for Java supports XML-Signature Syntax and Processing,
        W3C Recommendation 12 February 2002, and XML Encryption Syntax and
        Processing, W3C Recommendation 10 December 2002. As of version 1.4,
        the library supports the standard Java API JSR-105: XML Digital Signature APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cc3288e65ca5e11ce2c1202969780a4</hash>
        <hash alg="SHA-1">fbe5bf9896f9f90346e36e7d839b1be6f304c500</hash>
        <hash alg="SHA-256">4b77d41c1a4415dae7cc284d75c69375a46696ff0f811d2cc88bf2ab48a78ca5</hash>
        <hash alg="SHA-512">481677bac39977b7f583f5b4af9872cec4524cb1281cc20fa1d34c701f7aa12c36a22f2b7aaa2df063a05778a14382dc0e6367d29ee9a4823ea2401e730ca826</hash>
        <hash alg="SHA-384">0637aa62768bf0e8526cf232c917c85dffa50147f59fc7e9a4216971f215013282fb6b438ece1c5ff7c7d007d26261d2</hash>
        <hash alg="SHA3-384">2be322eeb9ecf3879e050c5c8cefdc0a0ceff8111a1ae81ae280ac2b3fd59dd9c17bad4873a6af2b1575dd63919c4f87</hash>
        <hash alg="SHA3-256">e6338c7216df11c992a1cecda38d2a56e4b69b5ae177269e5d67240abe5888d8</hash>
        <hash alg="SHA3-512">a934b7f3f044044854aadfc1cfb37bb79f632a4753ac2b2a8d99674f1701671ee717328aa7f0f87dd76ff22dae7ae2de94de00c4300b3f5a3c2dc30d67a340f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://santuario.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SANTUARIO</url></reference><reference type="mailing-list"><url>http://news.gmane.org/gmane.text.xml.security.devel</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.5.1</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">961dd4b2afedf95293dfdd8adfc8f211</hash>
        <hash alg="SHA-1">c6e52e84fe959e69a243c83ec7d24cd889444ddf</hash>
        <hash alg="SHA-256">c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f</hash>
        <hash alg="SHA-512">d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2</hash>
        <hash alg="SHA-384">d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c</hash>
        <hash alg="SHA3-384">2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de</hash>
        <hash alg="SHA3-256">f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b</hash>
        <hash alg="SHA3-512">257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-impl</name>
      <version>4.2.0</version>
      <description>SAML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4182a240849026351e2160c0a49f0fc2</hash>
        <hash alg="SHA-1">0031a3b85957a1a6e6b0f8c41bce81abf8b8d51f</hash>
        <hash alg="SHA-256">07407200eb02903c6216ade9e0d900c27af2650c9abbb42df48601cb1a9d3196</hash>
        <hash alg="SHA-512">6e5015fe92a93513214615777c170ef4d3b30ac386c7481b9fc746496188d62f41b91cb50376ac7ad7366164fafc281ca4e1574f6ab62defd009f94b6b80dfa1</hash>
        <hash alg="SHA-384">c73ce8829dd39ca23bc462347de66f8d721421f5623e4a838bd8ad18f9b5929d7241fa465614806b5398b2b3e7b91bc6</hash>
        <hash alg="SHA3-384">e10636cde8412d47ff2ec3331e68230df07104c98debeb1ac873d332d9d5d3123765ade586319868608dee800aa418b4</hash>
        <hash alg="SHA3-256">995b462177a0f5ffc281c86d4128128437290c6499304a25c83d69ca8205f5a5</hash>
        <hash alg="SHA3-512">c18e90f7e674384e8cb3724cfc0042ca9ac1c819f842957e2f0b441c5bffb14980d91dd24a7791ece8b70a105c268d72b0f153daf393a88937393235983aee93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-impl</name>
      <version>4.2.0</version>
      <description>SOAP Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">049045f60e874f15fc1dbadb7dd14a29</hash>
        <hash alg="SHA-1">00f89af0bb7c2cf10876cddbfc5e33a5d817d11e</hash>
        <hash alg="SHA-256">899f27c758fd792e6170de532a7525ac0947b0bdd9e3bcbed239bddeebb301f3</hash>
        <hash alg="SHA-512">3f0d5ba8c0c45981e0104ed2725ae5d86756b874ab58c4575d743dc5106b44ec786b882471fd48803fa25a7191f99f6bf314381705855290aba3985709950dfd</hash>
        <hash alg="SHA-384">c287c47df5fc88e70cac75e1970726ce6715025fa9a7a115b5511b6218e2c24f5e2dfe8cdf99e6157f09bac22038b7ff</hash>
        <hash alg="SHA3-384">f2161b3cdba6845744ac0550277e5bb2510b39a757a6ee5fabb87377b28529ef058ef9d05b92b44dd30aa08d0449fdb3</hash>
        <hash alg="SHA3-256">7be6d4f27aeaab01b68240f01d53a9bdc12bf31a3cd74a0c47a1299bf553b817</hash>
        <hash alg="SHA3-512">7e012afc7519b514667f56d45c9ac24ef1c22232f99214800b1c8992676ddea8d241334073b898f3f5a15c272ab70fc4cd03b60dc8c07a7b558855ef94889611</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-soap-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-storage-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-storage-api</name>
      <version>4.2.0</version>
      <description>Storage API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8850b37881fac4f7c54235d90381683a</hash>
        <hash alg="SHA-1">d94c0039146109eb2353797350234dc49b51a876</hash>
        <hash alg="SHA-256">90aee1fdd47a9a2c6f33b6c611f70236cd2fb043af0fe2fe4119f37e744d3ec1</hash>
        <hash alg="SHA-512">4b082b3164da66047acefd72ccd8397c6f1fd20916dd25d8b4869cfac03b2cc8424dcb4798daceb5dfce18fcd541f9db840caf8716f79159e5dfc12c6ed19a4e</hash>
        <hash alg="SHA-384">b64b3e26ab984d4caa8f59ffe5c261c2b9a53eb7f05686c28385d7f8350030c3c30ac081331bafe74817de805e50bb0f</hash>
        <hash alg="SHA3-384">b15dbac351e4a3c15854464dc85a87980f345d9a975c5915e0e6deb95d8271fded6d2fa3c50e3a70c9c7bd3018c6e138</hash>
        <hash alg="SHA3-256">1690a7e589b6d97c7524e0ebd195fba1a77c48f0ae5dccbc2aa5495c45ae8f66</hash>
        <hash alg="SHA3-512">246d69452941be5b6bae328182026d2c6d08a1c9087bf781d2e167ab5923c685e5efe7a94a3c069045e37de9fd4dcce2ec427d7c7fddb8be4f59e8a9f1365338</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-storage-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-storage-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.14</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cb357c4b763f47e58af6cad47df6ba3</hash>
        <hash alg="SHA-1">1194890e6f56ec29177673f2f12d0b8e627dec98</hash>
        <hash alg="SHA-256">c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6</hash>
        <hash alg="SHA-512">a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced</hash>
        <hash alg="SHA-384">c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d</hash>
        <hash alg="SHA3-384">9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510</hash>
        <hash alg="SHA3-256">48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa</hash>
        <hash alg="SHA3-512">4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-api</name>
      <version>4.2.0</version>
      <description>SOAP Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5cac0d6e24d11a7cd6981a15c1de920f</hash>
        <hash alg="SHA-1">1a7e74ee0bba6fb7e1c68e19c96917b6cac1b0e5</hash>
        <hash alg="SHA-256">4a47082ac988c1fdbcb187844b4721fe808e0bd7cd59a50e5978e3bf5a5b416f</hash>
        <hash alg="SHA-512">8c0ecd69f272dac277794109f2466741927ade05e3718eff35c0aaffd8d91ab76543ca23435cc6e1ec029f01874f3501a666eff7ddb57637d369bcc56f63e4c8</hash>
        <hash alg="SHA-384">53737629d64658b3232ad1b0c81f4cb9d8e4dccbf4cb463bbfa5144998a43dedd2613bbef2561eb3a3fea7a8ace49ae8</hash>
        <hash alg="SHA3-384">406c25710d4d7d5eb71cb464da2580c76a01f4a4c95a6c19f1d4eea93a1d19f81b92b07369e3c6f273ebe3584c7309fc</hash>
        <hash alg="SHA3-256">cd67b758caccfdd6699b1c03d3b67832cbfbf43ce3c1580c8a0caf33ab0363c0</hash>
        <hash alg="SHA3-512">122d4e252ccc8a610ddca8a923af160d8d96108d248cb6d7b87c401d1d23f3d2a099ae5205f9f60fbce46206cdaaff66fbe876e96599eb89bb7dc33e17a2b5ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-soap-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-api</name>
      <version>4.2.0</version>
      <description>XML Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9580f5e86b5e247d78ff6b65716340fa</hash>
        <hash alg="SHA-1">61fb2665e9fc063a219a8080d548976510ed706a</hash>
        <hash alg="SHA-256">de17554941a2ffc6391e27743f7f6f9972dfafad0178afc91a23c59e42ac8cef</hash>
        <hash alg="SHA-512">b9f9b634d3476b53f85b29deef7407087758b130d18036c59d586efec63ab4d7237a28698ce5e2837cb19c998220cd73e954d575632323d88de1b2d9d50284ee</hash>
        <hash alg="SHA-384">ccff36b38ad156273817834546afd97eeabbefaede31824994fa1691f219734a550059da6f585109a41d384a675906a5</hash>
        <hash alg="SHA3-384">022096a4e32534d9194c1e678827b2d2274f2e71df7c597ae3dc6346b263bdbcff1fea4e9ed428fc4a189f9b7287f8a2</hash>
        <hash alg="SHA3-256">ffdf49aabf23e1cdb1909f6699ecca3772b2fa0985305cee8db7ffe930cfb423</hash>
        <hash alg="SHA3-512">97513b35da6d7860f9810f6d79f2ec4a9ae2056efcecccd858bdf88f5b77ffb1a1292afbe62c5c6486221bf75817aa1900c1ed14e70fe8d2072391f4b3f4a350</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-api</name>
      <version>4.2.0</version>
      <description>Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">70157bf95834828f19877fcb636c2635</hash>
        <hash alg="SHA-1">ede3c9b7f676404137ac1b31f86cceeb7f01a9b2</hash>
        <hash alg="SHA-256">e80b83834399d0bfb83f78d048900068b8aa7fa0b9d7485d2fcb39675cad9343</hash>
        <hash alg="SHA-512">ce6341b9e1f3fd5d0e91a023c4a2aac9c7b62a89af037cd589f4fcd6bca97c34c84b62b93ede0bdab52b5ccc4bb35e0158908eb7c0305a096c55fedd999a3168</hash>
        <hash alg="SHA-384">880584007a55e30b4587e1481220dcf3f71bfb239b44ee407885ae25a5ccc08c3fdea8d165f5b25ef5d47a4f83876227</hash>
        <hash alg="SHA3-384">3a2f326f44a3b99b8bfaa1f5f0891124413f3c4afcde97aca1346205b4eca6fd9585cfb978b53961c22203440b352976</hash>
        <hash alg="SHA3-256">4684117293654ef2a5ca62e2361093f7c658297d27f6af05e612a1cf06304d94</hash>
        <hash alg="SHA3-512">f5efe168f3640d7358b0460188a8a98d636a5ec6dee56ddf134c529eebc6a7b14f49c28bf773ca09954bbc977a1b70e03144c5468d7a7b6d894f510acbb244ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk15on</name>
      <version>1.70</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.5 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1809d0449a6374279c01fdd3be26cd92</hash>
        <hash alg="SHA-1">4636a0d01f74acaf28082fb62b317f1080118371</hash>
        <hash alg="SHA-256">8f3c20e3e2d565d26f33e8d4857a37d0d7f8ac39b62a7026496fcab1bdac30d4</hash>
        <hash alg="SHA-512">7dccfc636ee4df1487615818cfa99c69941081df95e8ef1eaf4bca165594dff9547e3774fd70de3418abace77d2c45889f70bcd2e6823f8539f359e68eaf36d1</hash>
        <hash alg="SHA-384">a0b35d204cd962f1d246fa94b6e8b0fcee1a7c3f37b7e87cda742f2124a25b48794ce11a903ea8d12009c86227b6808d</hash>
        <hash alg="SHA3-384">980d81d3d9906764bbf2ae9b3b364ea58628b485ce1dc3d06734e10495d79f2be2e7cc7df61ac88cd67c1104c7af9393</hash>
        <hash alg="SHA3-256">10a3572e42d29f609721d795116e3e5d0f6f03efef84bb979ce72e26908d242b</hash>
        <hash alg="SHA3-512">a0761cb6deeb86c94b96850c72c0a0eaf516ca849f4b8268f9f60c9ed2a6730e692c15098d47e617da294e931113c6cbcaddec8957c9f029fa595b5f14ff35ac</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpkix-jdk15on</name>
      <version>1.70</version>
      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2c383f50d41937eae4fd32c35d8668cd</hash>
        <hash alg="SHA-1">f81e5af49571a9d5a109a88f239a73ce87055417</hash>
        <hash alg="SHA-256">e5b9cb821df57f70b0593358e89c0e8d7266515da9d088af6c646f63d433c07c</hash>
        <hash alg="SHA-512">477001e9556cdbe7fe9eca0c35b3ce29cd6b4d9cd5e13d1f44e3da6433d56a18e23f3679603a23730d78a93bd401113b804562c8bacb1e745e7944127f7afa4c</hash>
        <hash alg="SHA-384">249614fa138e4b405ad067f69ee538269ade5a517d8f47b6d69bfc8180ae48c019570540a47314f3b64060a6bca20682</hash>
        <hash alg="SHA3-384">13d1354f83de80b89fa91ffc44a14b0aeee418367ec7dde95aaecd70f6d219e4ed1bbf102e099cdfe64737c06dafc199</hash>
        <hash alg="SHA3-256">afc8204fb76d0ec343ba436eaeac7834156ee976a1e0b2bafd0075812451046a</hash>
        <hash alg="SHA3-512">b55bcc09c9f9c87332160ce068ca349502d628c34b156ebb30a99d94f87606d59ccc62f8ded4a927d57ed9553d274b34a8f9b5602a5eefad66958f9eddbffa28</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70?type=jar">
      <group>org.bouncycastle</group>
      <name>bcutil-jdk15on</name>
      <version>1.70</version>
      <description>The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.5 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">805173dfb0891331dbe69d0e53371af4</hash>
        <hash alg="SHA-1">54280e7195a7430d7911ded93fc01e07300b9526</hash>
        <hash alg="SHA-256">52dc5551b0257666526c5095424567fed7dc7b00d2b1ba7bd52298411112b1d0</hash>
        <hash alg="SHA-512">f65fc2af60be9b4a0cfa227cede3ba5ef994716dcd462a9935ef74535a32e67c56cff92e6af9d5168c7a866e5f7c9fd17797485b89eb020eda12f7018af0fca1</hash>
        <hash alg="SHA-384">46f32ed832f447e519beab6c553ffbab455376bdaed3554bc8c687b876776861afa02bd5ae226cdc0dc3f0c2ae28c9a4</hash>
        <hash alg="SHA3-384">749aa3317618bc93fbdf12fb49f4c653f81321b4ee69d7807515f50234bf531539bd6eb5c3ed34955eeb60bdb56967dc</hash>
        <hash alg="SHA3-256">2dc5b7a38918f9eed8e3652c0794d8bf3eb674d8b0f24f03c64edc2e2ac251eb</hash>
        <hash alg="SHA3-512">0506c3a4cfad6c892568ffefb71b049ef7c943e5ab172ac8756cebcd53a7facee7c1472b18ed2211eb6f820dbfc6bd07da25dee62a5edc61dc6b333d42964fbc</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-impl</name>
      <version>4.2.0</version>
      <description>Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ec37bd7f4cbb2d748a7a48b73216c16</hash>
        <hash alg="SHA-1">1aea62491e369f2fc2358c4f013061fecb95e510</hash>
        <hash alg="SHA-256">c7558f5be57b56f23767a029830202c39de91de0fbfc511ce83688e6eedc7be5</hash>
        <hash alg="SHA-512">4c5d39dde39659bdfaac557225175b67427da45094f5a0e4ae58de5f484255f60b5def8b115bd7f25e3c9c1c00d1098cb75a168eb7ec9a016dc3dabcf3b21d13</hash>
        <hash alg="SHA-384">eb1f5d010082ff5273b56eeb62cdaee3c4e30f154c9b19af269f65b9708bae52359646cf9c666e0113734a698cf22923</hash>
        <hash alg="SHA3-384">128fbda5be9e849dbc6caf77bc094fba0b6fd953009edc6ffcb2a0b9162ec6262c8c578f6c44716d91c1b40ee7fa1428</hash>
        <hash alg="SHA3-256">83ee6b3ca02fd2e91668b89384e4c1ba2ba483111ddcd39dc0d6a174252926d2</hash>
        <hash alg="SHA3-512">c9ef7462408a9a387bcd4fc389716bcfe1a64b5e9236a2b17d59b661253b2be65494ab361ae6eba7a8656bf7f1aff338df7bb55d7397d60bbda9ec793523498b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-api</name>
      <version>4.2.0</version>
      <description>Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">46d697253dafdf96bdf441696668ee2d</hash>
        <hash alg="SHA-1">24a38da8a05404b8bbcec8cc6e372116a7c84f0d</hash>
        <hash alg="SHA-256">68902ac6d0fe1bba9784e8123bd7c4c5cb9f090fe053012b40cd82235083fe44</hash>
        <hash alg="SHA-512">2c1f35c8faecc689981d43c117e845503c8decb20c7eae6a9c47053d1dc91a5c1d8fb9928ff4db1bc08e5f464f2cf7fbcb32a733c3c276f79e01fcd864c2690b</hash>
        <hash alg="SHA-384">aa1f81d495112946d3f15208ed896ddbb8cff1f25142fea250076317848cad65512c88516cfe8028b9c1e667176719a7</hash>
        <hash alg="SHA3-384">9aee7321ad4902d8a6593baa091ff198ce566fddb8a3b54da68cb9d3deff92bfae099c0c7caed9808d2536a9c74047bc</hash>
        <hash alg="SHA3-256">c438f6acacbbf7e2748e2b2ad821a0d4d8e4f047e15da86170649d164f9cc82f</hash>
        <hash alg="SHA3-512">b96f30a35a72b3c8b691a8364774cff0bb23b03a6da77e6e75070b2a06ad14679c8eba288ee1fcf983be11356607d68f5794996dd88cbcefa9075b5e9a3caa7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-profile-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-impl</name>
      <version>4.2.0</version>
      <description>Profile Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7a354fd06cf268ab72e98f14b0ca0dc1</hash>
        <hash alg="SHA-1">a0d85fddee392dec1dd9553e6d42605d1ee8a1de</hash>
        <hash alg="SHA-256">f3dd19894a1083fb8ed488218be886f5b43edacecfc71d1ddcfc0cd4ecd449b6</hash>
        <hash alg="SHA-512">e73f4a36400ce570200c80cf00f197af1e1e4ee535bd10726971a5d6f1006b86347a8645d210cf8e147384ca6f6e2ccc7cb27d504a13a2a837f05789bbb6e13a</hash>
        <hash alg="SHA-384">e2151c489185aae4338719578427f4607b1a06809e178d2b0673385a88b08a1ebce809fc096670077984326d6fc1f9b5</hash>
        <hash alg="SHA3-384">b09fc00a9fa0d086ce07f0464a2b3eaa3244b9748c7d0e5fc83a7e5a11b1625cbcb6ae50fe162c5e29fa324e0a204e5d</hash>
        <hash alg="SHA3-256">c38193226c8380e76c36e2319937db5012a377996eb85f1c5813cbbb8af10066</hash>
        <hash alg="SHA3-512">b060286f0e5eecbfc14c9e3190ad7229c173006a96e69538e4e2457718e3b4812400747f1d6ebb76011e7c0e323c1f8c60d31151c7b7e7090ff41021808e8614</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-profile-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-messaging-api</name>
      <version>4.2.0</version>
      <description>Messaging API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">030a8cccc283fade2ea119e122704e1a</hash>
        <hash alg="SHA-1">21fc5ffd933ab97d95664d639f277dc39cdf1d0e</hash>
        <hash alg="SHA-256">db403dba565ad78c34b99ec23b975aac75b74240d5fb5570dbf635950e319729</hash>
        <hash alg="SHA-512">a8a53c87a52a9a8e36b6d31a3a4526312d68965c2d83f2dd17945eb25cbcaf8ed327e02cd8e9cab74212c7183fe85ae3926e80bb1c3821c6b8b7f6fdb4733244</hash>
        <hash alg="SHA-384">75ae9fbdebf4cc09405d20cac89541a932103e000d98c31d4c350997826ea2d10765cc45a1c60967ceea485cf41b88df</hash>
        <hash alg="SHA3-384">c1a23589bc325ec777e81c5ea29de5e75240cb9323d65f1966eea67baa3a9a8b620de54d9a78c1b3da348a2195720c0a</hash>
        <hash alg="SHA3-256">a790aacab188f9e6ef9df8a0ce5d12dfa0c93c6193da1e79038eed09bf3f165d</hash>
        <hash alg="SHA3-512">825f262675178084e8af8312c30ed65e3e39c67fb0f459be7307418d20518166f298088b978ea10e0c4ebca9899b6620735e9de7bc2d1b8093099b0b73db4e19</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-messaging-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-messaging-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-messaging-impl</name>
      <version>4.2.0</version>
      <description>Messaging Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0157557072ab969e7796e2cf22cd378e</hash>
        <hash alg="SHA-1">53dae1c35b150868a8d78cf647fc9b5d821b0356</hash>
        <hash alg="SHA-256">f24053a209c24c7520f77696e52129afa25dda553259a89e5135f8b0fd800b13</hash>
        <hash alg="SHA-512">9506dc84ba040e019a154e364b65b19c7176de44af977fb4f284d40ee7248bb3bcdb043644943b37bbeec793e620da765104d0f8747f90e5b7126c9e1d534dd8</hash>
        <hash alg="SHA-384">4364068369fbbe25b7cdea8737793a22ffea7222e813f31ae2fabfe10916386d072461006e152388bf785e0100e5ade2</hash>
        <hash alg="SHA3-384">c07b36b5fdabbe6c86ed96dae06f2c8d2331d1574c6805192c196f4f3b1397c2554393affa7bfc80e93e9cca9fcc5788</hash>
        <hash alg="SHA3-256">e4b782fb875980a4ffe402c337f560f9f24d801b84a5c1396d4d8c8d9dfc6dbb</hash>
        <hash alg="SHA3-512">19c1db68270729d182dc5a4487703ba18a1a18141d474c3c616e4293680686822798cd0d1bf89485f10303259c6326c3e184bdb1766748753e7fcf4426c8669e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-messaging-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-messaging-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-storage-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-storage-impl</name>
      <version>4.2.0</version>
      <description>Storage Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">48ad842e0e6c32bb14e17d0f98f88623</hash>
        <hash alg="SHA-1">3c5098db0478c860a30aafdbd682720b11a08429</hash>
        <hash alg="SHA-256">7deb74849b3512b1a0039a8b753f45a216f79026ec86c0131f8446ebb5b96c74</hash>
        <hash alg="SHA-512">56ec5ea26b2f156aebbe0b3c4eda4020bfd50ebdc8051a80c2595585302b9689610e1b296bb98897bedb03e7b3b836a478e0189a9cbc15a2b23519831db6ca69</hash>
        <hash alg="SHA-384">fa1327f2d489a9e1a15d4ef463dade35317cc9bc6ea18ed2a15ab500a62dbec66095d3814f10d7e7f75d12be32d6bde7</hash>
        <hash alg="SHA3-384">68b6a81994f83504735c507722faaa535a5d5b1462f521311c37c1484eea2a955ee9c14dabd679631f24749fdc0b7981</hash>
        <hash alg="SHA3-256">8fc0de6c20a0f5aad7dcd78bf00e2b5dbb3f68ac91c79ff1ee08a4f1aa2a4ee4</hash>
        <hash alg="SHA3-512">1f25d23ebd49a6890dd18ede955edaf58aa85aa8fb65527d5773f85cf81d31a86089ef3ba6a2e47757336185db59d8a2b9f24c965606cde6eaabb7d984d1e688</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-storage-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-storage-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish/jakarta.json@1.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish</group>
      <name>jakarta.json</name>
      <version>1.1.6</version>
      <description>Default provider for Jakarta JSON Processing</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">929731627c96deeef4e963b247089c3c</hash>
        <hash alg="SHA-1">a39aba0ef0a70c3f54a44a2c539a4f11c9bb07e8</hash>
        <hash alg="SHA-256">4e1414edc1d6c7dc0747d187c94b451515ed340a9b735156daa91fcefc6aa1b0</hash>
        <hash alg="SHA-512">2c5cdc4410006e0de4180970de815832ab997ed6e7ede6c153327d589913c221df4d9ffa1d63549f0b428cdc87d9b808db340566111ab0c26981c2fe644876fe</hash>
        <hash alg="SHA-384">931055c59d6cbf2f994bb09a511d17e5f8f7ce0ef78994f367b15bbca84cd968d15219953495783468d95d711d2af555</hash>
        <hash alg="SHA3-384">ae8ae8c8e445bf809ed11f975548fde8110d808866cc2c39384224542821db2bdb6e72349789a5e5643c3b68730814a9</hash>
        <hash alg="SHA3-256">edbf6f209ffe3b369496fb6766f2dac3ef62e30900eb7ce8619e578f8d0cf7d8</hash>
        <hash alg="SHA3-512">0b9ffc46c100a5e2a32666b93ba6d2205045c1dbfd9d57dfa506b3d6ac6507d6acec5a802fdf1dd1aaf378f61fa42381470cd35e4652d27a62b38983e020faea</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish/jakarta.json@1.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jsonp</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jsonp/jakarta.json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-orm@5.3.28?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-orm</name>
      <version>5.3.28</version>
      <description>Spring Object/Relational Mapping</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a2995ddd6fddc62143aeb5ea7d048712</hash>
        <hash alg="SHA-1">127b548d81ea3b125b8c45a2b0ab14ffdac5a33a</hash>
        <hash alg="SHA-256">57b72911299504e404e52da0f31e68459752f63398a1a09519d2d591eca6ce55</hash>
        <hash alg="SHA-512">714db00744557581f8e71f4d92c631680e15a69cba74112aa57331a1c379152d0b5c35a792f6598065abd78cb8777242eaec29ab5e7087e936bacda9e30d6b25</hash>
        <hash alg="SHA-384">0a6b17229885d22e622dc539e4c79d0d1cfcc552d6f04bcac1cba49f0034b060004146e76aa17e266f265f437042da8a</hash>
        <hash alg="SHA3-384">6a76161f7f53a40fae2ebbf670a8ff763be12eb5e678b62aca9415e3c13e305f15933a9f6b3c88ec2f3c33e216da20b4</hash>
        <hash alg="SHA3-256">54f5c5756737142dfc1d00414b074aafa442607515ee124c2000845ebfb176cd</hash>
        <hash alg="SHA3-512">dc0c6ec47a2cd1e67ddaa52c80db7572f44ddcae620e6525b829aa982b61e137c2d5387e73f324ab275551933aa8df14684d164a53def36cd508d9a989e9a16a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-orm@5.3.28?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/spring-projects/spring-framework</url></reference><reference type="issue-tracker"><url>https://github.com/spring-projects/spring-framework/issues</url></reference><reference type="vcs"><url>https://github.com/spring-projects/spring-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-impl</name>
      <version>4.2.0</version>
      <description>XML Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27400973606900b216d1660406073bac</hash>
        <hash alg="SHA-1">ef75c2b74f82c15bb6667528a87fb01a83ffc59f</hash>
        <hash alg="SHA-256">604b1814f6a9b07b16a47f792a7f963863b814f1d0be253601555bfb9988fe75</hash>
        <hash alg="SHA-512">56fab5d3a7fbd785a1380724f609018869b6d8c864e741aa2804d7a6af8d1070c1e95e9f623f1697f18ad3174ccb84fa34b2ef2086b01b34ea1098812d82561f</hash>
        <hash alg="SHA-384">fdaa6ad2e3f502ea9e7f7b6707480fb1b17c25195f0eb3aeb58546e07e6224a5c9639aa80b77b46b2dcc3525b776ab44</hash>
        <hash alg="SHA3-384">e908ea8d574d53a1e8d2fcc748bea788f2b5e0849379e46496869aa86e90648f9f9b6d7b48aefa9759b3d854bb6f2a85</hash>
        <hash alg="SHA3-256">a0ea60e99e6f5e1fe8395822173c57b497c31e3e29f70bee37b4f0cd1df3183f</hash>
        <hash alg="SHA3-512">09491a190a575999703538fb6456dc9a70593fdceffb762a6cc6eaa60481194d52be181a7b6b25194443f3ac7c2330abc9683ccabeff7341b3445c99b1ff7f41</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-opensaml.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>31.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e37782d974104aa3b0a7bee9927c8042</hash>
        <hash alg="SHA-1">60458f877d055d0c9114d9e1a2efb737b4bc282c</hash>
        <hash alg="SHA-256">a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab</hash>
        <hash alg="SHA-512">532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb</hash>
        <hash alg="SHA-384">829ba1c473782158d43a0e56c932b45139f121a504613b27eacf6b0774354e52c5eccaab5c2da3753b5686b93f0169b4</hash>
        <hash alg="SHA3-384">55f70ee4afad92540faa9d260109c00190e6d1bbacf10b22e52f599103284c1a8b2a2043d8fafbe1309245290b5fe614</hash>
        <hash alg="SHA3-256">dd534fb7df6b380d8701290b0b0c4e388cf42f8179a436c509c0899afde91e5c</hash>
        <hash alg="SHA3-512">617288cc45858588e0626edd21382d38b87cd0e6c78221e3a1626f579d5b4acd4adff37b72e3e51c73e91132f43951d12369624dd515f87bcc0c54213db43ede</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@31.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava</url></reference><reference type="build-system"><url>https://github.com/google/guava/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.3</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5fa4ec4ec0c5aa70af8a7d4922df1931</hash>
        <hash alg="SHA-1">ba035118bc8bac37d7eff77700720999acd9986d</hash>
        <hash alg="SHA-256">21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b</hash>
        <hash alg="SHA-512">51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115</hash>
        <hash alg="SHA-384">d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71</hash>
        <hash alg="SHA3-384">8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b</hash>
        <hash alg="SHA3-256">e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664</hash>
        <hash alg="SHA3-512">864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar">
      <group>org.cryptacular</group>
      <name>cryptacular</name>
      <version>1.2.5</version>
      <description>The spectacular complement to the Bouncy Castle crypto API for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ecfa9e8fabbe8d42ce427e088bda1651</hash>
        <hash alg="SHA-1">a8a4542bac306650a4299825e6217001aadbc11c</hash>
        <hash alg="SHA-256">c600d1ae61b5b0ff1391e00eb6fb390201e4612c3aaf2dc1b94050c8784840be</hash>
        <hash alg="SHA-512">09793423f568e419f2c35b387471452ab835de5d173e13077e4c814a7e94b0cb9fca25f3f191f35fb6786c6be34a0ad5c95e274f98523adcf9ce9d1726ec5f50</hash>
        <hash alg="SHA-384">1fceeb109beb3cec60e305d2f4d721648a50d288d4aa34b8509a43a38015088bc67e75b3aa0c4eaf9d2cdef978226407</hash>
        <hash alg="SHA3-384">73c151086a2abc5026eddd16049292b5c486cfcb059b62af53d9f5a3ce80a63fcac383b7e675666ca07e8bb76ef052d0</hash>
        <hash alg="SHA3-256">fa1568d446ad772d4b3603e9996a09d42d1c1b10e760889deee1a4e60e2eb450</hash>
        <hash alg="SHA3-512">9de5a93b8776f8c2f78a00eac9b95c4a20591b3c9b39a7ca4f203bc7e7f7515af434024338155d1a6a0dee982e368a01fe577d8fcc1d8357f4d4f00f737423ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.cryptacular.org</url></reference><reference type="issue-tracker"><url>https://github.com/vt-middleware/cryptacular/issues</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/cryptacular</url></reference><reference type="vcs"><url>scm:git:git@github.com:vt-middleware/cryptacular.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.73</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">db1309ef2297987495d57456a66fe137</hash>
        <hash alg="SHA-1">4bd3de48e5153059fe3f80cbcf86ea221795ee55</hash>
        <hash alg="SHA-256">ad3ae628f4459a8fecb5c1a142b5525ce5118817414f97efd92f5448a69180ff</hash>
        <hash alg="SHA-512">faab87ff4eb7107e975b30ccc01fb49ca533fefb4df772d94f282935f3212fda7279338e8bd96ca7a592457005cd3c4400f49b6ebfaa2d8e261e8e39b3b88de5</hash>
        <hash alg="SHA-384">b3a7643bcef6bb1ac8c4179ac8ab70558124ccf3ef7db6e4c2711196a7eaece4cd0cd562cff3a6b4455880c912b2ffaf</hash>
        <hash alg="SHA3-384">7f71e6cbe7958b949dac7ffbfeb20e42a339bfd38b2a7586cdbf7bd7e3fd7d5f2d046dbeae6da980b22be0d48ac9477b</hash>
        <hash alg="SHA3-256">4210a25fae1b706782baead8250d6de782ca5bca64ea06e86f3dc102594c3da0</hash>
        <hash alg="SHA3-512">8b3678ba2a33e03fc876bd70665b377f9cec22ab2a6daf1bdaa15109db60da85320c3ad87f8af8193fd037a71b9e51864cc7b5d075a4320bc5904dcd97ed009c</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth.tool/xmlsectool@3.0.0?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth.tool</group>
      <name>xmlsectool</name>
      <version>3.0.0</version>
      <description>A command line tool for checking an XML file for well-formedness and validity as well as
        signing and checking signatures.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">855cff919e80a399bfebf1fa6499a078</hash>
        <hash alg="SHA-1">ec5fe3aa5800ed9416edf823448bc3fe286f917f</hash>
        <hash alg="SHA-256">086a8b819e3ad3bea595e2c89109d05b3fbe2460c56436518dac03ab1c724523</hash>
        <hash alg="SHA-512">c5828449a8cd9b85200677760f9f4881aa83dec489bdf80c8d7e5eff90856971c256d1b75f0d321660c995390288377e10992b70e95ab0e80afacfe8f52f8355</hash>
        <hash alg="SHA-384">9d51aaeb796d19b9d5ce3320aab2377a45b9a21ad0af48ad9ca8c2a3b94c936480dcae0dccc523f3d928bd75e25cfe5d</hash>
        <hash alg="SHA3-384">45f4466a0da7a7a28199ab85282041dc4539276176d711daf8501eca91064d6eb6243e53a4a35103930a8b365de7f95c</hash>
        <hash alg="SHA3-256">0d1f379db07066cc15a6829d2fd74c4f3429e34c52d84fe119da1d8229ada89c</hash>
        <hash alg="SHA3-512">a059adf1c3a4f5031a8cad173704e6cee38f3610d71e14af1513e071ed70009443b31c882949cae61b30a9986f7bbc85670081160330e72aa452a2f0140b4db5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth.tool/xmlsectool@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/xmlsectool/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/jira/projects/XSTJ</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=xmlsectool.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.beust/jcommander@1.78?type=jar">
      <group>com.beust</group>
      <name>jcommander</name>
      <version>1.78</version>
      <description>Command line parser library for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">50552e69ce8115d80b9a31ec93c87bc3</hash>
        <hash alg="SHA-1">a3927de9bd6f351429bcf763712c9890629d8f51</hash>
        <hash alg="SHA-256">7891debb84b5f83e9bd57593ebece3399abbe0fd938cf306b3534c57913b9615</hash>
        <hash alg="SHA-512">5ee2ef4c12888a48d7c830189d06ee8a653c7664a53c9b6fa935d4e7866b0454111f8092d7ece086ec80c61edab2856187a1e247873e5c8e4724efb02c37504b</hash>
        <hash alg="SHA-384">cfd68158d572057bb9114e066e44c5bfba57e549b90c547686fe97454c3c35a244f65e59384dc956396b65246cd193ae</hash>
        <hash alg="SHA3-384">f9596612f0d60b690ff12fd234de94fc5913aa097f2933859554328681fd6ea565d678dcd973353428b7f1786967e71f</hash>
        <hash alg="SHA3-256">a45b153a70c7e3c0fc9dfedc5421b3914a74f1ad7c98fba1f139bc5d763fadc7</hash>
        <hash alg="SHA3-512">97ae33e2d7665060ace246d0152af1d10d1d0eb64f2ada805eeee158ba21a3873a9a792f23476a99a322c5e8786f40ef2ae98186c592a1a5b8a1b0eb8028009e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.beust/jcommander@1.78?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jcommander.org</url></reference><reference type="issue-tracker"><url>https://github.com/cbeust/jcommander/issues</url></reference><reference type="vcs"><url>http://example.com/my-library/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.12.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7abdf3e1c7bb44ae120be4b7dc1995f0</hash>
        <hash alg="SHA-1">e5e3eb2ff05b494287f51476bc715161412c525f</hash>
        <hash alg="SHA-256">74bd60c8eebd3d43f77a66c69c86540c257a3a098172f8b1d7fcdc9ed3e139ea</hash>
        <hash alg="SHA-512">12fa3ea9f841f1ff847d89c31dff5edc2e05939efa7b2395fa8b82949b209fe9cbda613ca9290c19d0ddfa6017a4391156efaf548aeb12fd0918928e285f0623</hash>
        <hash alg="SHA-384">de2993427516b5fd96d44d5269d4b853dfeae5fab2949606873218633a4d0e8492ac985a0590fbd74a1274ff89c7073f</hash>
        <hash alg="SHA3-384">bc73c7de65ff28740182bc0b226b42a861137be17761f4abffdf8228b8af0289f34dfb6e6e07fd1cfb9ea6936a78b40e</hash>
        <hash alg="SHA3-256">694e837f8152a70fff1e0c0aa90da00c29f2a501fde74b1cc0d50182107589fa</hash>
        <hash alg="SHA3-512">387337bf3605b6714a3006c47c069accddf8ac3c34b8f2681aa1dbdbebc319a3bd60107437edc389eff17fa649347c6650ee8317a39e3ca150fdaceb86f3818b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.11.1?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.11.1</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">101b097d1ce2a174711c9de65bc985c1</hash>
        <hash alg="SHA-1">175a59c4c86fef3800c40ef37f61425a31976f13</hash>
        <hash alg="SHA-256">cbef38e4138d679c5c834e4eea7f80d7056881efa9196b41b6a081851aa7fe9b</hash>
        <hash alg="SHA-512">16094ac2e38d19cf9ce67ecbc605b833950717e1c91a849fd711b52f9bf2c75f04782f6ab2b0526af4969e282c68d60598522b1890b955db949e564314fc7b25</hash>
        <hash alg="SHA-384">595da2b81ea9423b3aa3cdf4ff8e87c59b845816ed9f4fa70f40b174bf07c5910519de332dd57cfbad38394f9b39fa33</hash>
        <hash alg="SHA3-384">16e1affda4a96b3c3f9cdbdf80eb7d5f6b89573df8719c038ab779e5ef935d1df5acb8873b2d3857fef044c32069f0ab</hash>
        <hash alg="SHA3-256">fff69fe2de779c929871548a96dccfb8d8ac8e4363545bb6183446f437aae062</hash>
        <hash alg="SHA3-512">8bd7b2855b12fbf083e72baeba77631c06071b5dd7b747f2b6b03228c05bc46ce912ded619528d74fec075f1e14a0aa9398b4920d2fe6e96c7c03040f8998607</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.11.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>1.7.36</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8065610cde33ed9fd5d34367912c1938</hash>
        <hash alg="SHA-1">d877e195a05aca4a2f1ad2ff14bfec1393af4b5e</hash>
        <hash alg="SHA-256">ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195</hash>
        <hash alg="SHA-512">ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148</hash>
        <hash alg="SHA-384">618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a</hash>
        <hash alg="SHA3-384">95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40</hash>
        <hash alg="SHA3-256">7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb</hash>
        <hash alg="SHA3-512">da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/jcl-over-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.annotation</group>
      <name>javax.annotation-api</name>
      <version>1.3.2</version>
      <description>Common Annotations for the JavaTM Platform API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab1973eefffaa2aeec47d50b9e40b9d</hash>
        <hash alg="SHA-1">934c04d3cfef185a8008e7bf34331b79730a9d43</hash>
        <hash alg="SHA-256">e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b</hash>
        <hash alg="SHA-512">679cf44c3b9d635b43ed122a555d570292c3f0937c33871c40438a1a53e2058c80578694ec9466eac9e280e19bfb7a95b261594cc4c1161c85dc97df6235e553</hash>
        <hash alg="SHA-384">fc0058495e54efb6e05a34e3ff422e7c8347bcc77d6d9b87e9253424968dee6ef6a215c318d7e54f8705276be81f0682</hash>
        <hash alg="SHA3-384">ed6464b715de6ced0d9981a3f28140824946a4b7a02ffaff6116c833bb36e8f77a6282ce63c0d82cfe841d4fd6916891</hash>
        <hash alg="SHA3-256">ecfc9bef24ae28cf94c6775ecf6e2086d90a25d8d5476a4f6bb24001601b6cd0</hash>
        <hash alg="SHA3-512">f2b333527faedf504f60aa70a3d491972fa76f7e61e6351027f74613f41001157656824fe312b6e1df6dc4979704fe2a745b618d5368a97fe0bf8749739de9e2</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jcp.org/en/jsr/detail?id=250</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/javax.annotation/issues</url></reference><reference type="mailing-list"><url>javaee-spec@javaee.groups.io</url></reference><reference type="vcs"><url>https://github.com/javaee/javax.annotation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.3</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e761e6088b946b42289c5d676a515581</hash>
        <hash alg="SHA-1">e2133b723d0e42be74880d34de6bf6538ea7f915</hash>
        <hash alg="SHA-256">b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629</hash>
        <hash alg="SHA-512">ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204</hash>
        <hash alg="SHA-384">5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13</hash>
        <hash alg="SHA3-384">5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc</hash>
        <hash alg="SHA3-256">6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c</hash>
        <hash alg="SHA3-512">c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://velocity.apache.org/engine/devel/velocity-engine-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/VELOCITY</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?general@velocity.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
        <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
        <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
        <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-java@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-java@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-java@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-mail@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.retry/spring-retry@1.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox@3.0.0-alpha3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-templates@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-xml@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-jsr223@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-datetime@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-dateutil@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-sql@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-workflow-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-spring@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-mail@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context-support@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@1.30?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.28?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@1.30?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-context-support@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar">
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.retry/spring-retry@1.3.4?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.3?type=jar">
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-csv@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pdfbox/pdfbox@3.0.0-alpha3?type=jar">
      <dependency ref="pkg:maven/org.apache.pdfbox/io@3.0.0-alpha3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.0-alpha3?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.pdfbox/io@3.0.0-alpha3?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.pdfbox/fontbox@3.0.0-alpha3?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-templates@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy-xml@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-xml@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-jsr223@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-datetime@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-dateutil@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.groovy/groovy-sql@4.0.13?type=jar">
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-workflow-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-quartz@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-persistence-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-afterburner@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-quartz@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context-support@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.quartz-scheduler/quartz@2.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.quartz-scheduler/quartz@2.3.2?type=jar">
      <dependency ref="pkg:maven/com.mchange/mchange-commons-java@0.2.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.mchange/mchange-commons-java@0.2.15?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-persistence-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar"/>
      <dependency ref="pkg:maven/net.tirasa.connid/connector-framework-internal@1.5.2.0?type=jar"/>
      <dependency ref="pkg:maven/net.tirasa.connid/slf4j-logging@1.5.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-lib@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.keymaster/syncope-common-keymaster-client-api@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    <dependency ref="pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar"/>
    <dependency ref="pkg:maven/net.tirasa.connid/connector-framework-internal@1.5.2.0?type=jar">
      <dependency ref="pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.tirasa.connid/slf4j-logging@1.5.2.0?type=jar">
      <dependency ref="pkg:maven/net.tirasa.connid/connector-framework@1.5.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-lib@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.14?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-afterburner@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.1?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.1?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.1?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.1?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.14?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@1.30?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-afterburner@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.keymaster/syncope-common-keymaster-client-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-spring@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.31?type=jar"/>
      <dependency ref="pkg:maven/org.passay/passay@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.groovy/groovy@4.0.13?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.uuid/java-uuid-generator@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-rest-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-rest-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.keymaster/syncope-common-keymaster-client-api@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@9.31?type=jar">
      <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    <dependency ref="pkg:maven/org.passay/passay@1.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-security@2.7.13?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.13?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.security/spring-security-config@5.7.9?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.security/spring-security-web@5.7.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-config@5.7.9?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.7.9?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.7.9?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@5.7.9?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@5.7.9?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-web@5.7.9?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.7.9?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-web@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.uuid/java-uuid-generator@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-rest-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-rest-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.idm/syncope-common-idm-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-rest-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-rest-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.idrepo/syncope-common-idrepo-rest-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-provisioning-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-common-lib@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.pac4j/pac4j-saml@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-persistence-api@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.core/syncope-core-persistence-api@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-common-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-common-lib@3.0.4?type=jar">
      <dependency ref="pkg:maven/org.apache.syncope.common.am/syncope-common-am-lib@3.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.pac4j/pac4j-saml@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.pac4j/pac4j-core@5.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-storage-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-orm@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.tool/xmlsectool@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.11.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.pac4j/pac4j-core@5.5.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.73?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
    <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.70?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk15on@1.70?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-storage-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.19?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-storage-api@4.2.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-storage-impl@4.2.0?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-messaging-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-storage-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@31.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish/jakarta.json@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish/jakarta.json@1.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-orm@5.3.28?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-jdbc@5.3.28?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.28?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth.tool/xmlsectool@3.0.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@8.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"/>
      <dependency ref="pkg:maven/com.beust/jcommander@1.78?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@4.2.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.beust/jcommander@1.78?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.12.0?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.11.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/javax.annotation/javax.annotation-api@1.3.2?type=jar"/>
  </dependencies>
</bom>
