{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.1.1",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "13dd27a2bd870dfb01d67a086a8c1948"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a942a7921e66bb0081b16cf8f8a68e456b91de1"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f8c00d9bbfbaa97a97a461cdeadb20054b956acb7536782703ca5a9a330ff22"
        },
        {
          "alg" : "SHA-512",
          "content" : "34c8a859e41df1a737ae0e4e2979f03d09528595cf56a940f171157f13d2994fffbf11945052643c5e56e30016340fc65111c2d813b1967f94b44823bb4318ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "f9d7bc7dfe75763b67801b640ae1aad488127af8dc2c0ba6dba1bee6927da059c03951f057591f046d5f3c8071ec0f8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewcvs.cgi/webservices/neethi/tags/neethi-3.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar"
    },
    {
      "publisher" : "Codehaus",
      "group" : "org.codehaus.woodstox",
      "name" : "woodstox-core-asl",
      "version" : "4.4.1",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173) and SAX2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1f53f91f117288fb2ef2e120f27e5498"
        },
        {
          "alg" : "SHA-1",
          "content" : "84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65"
        },
        {
          "alg" : "SHA-512",
          "content" : "33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0"
        },
        {
          "alg" : "SHA-384",
          "content" : "e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://woodstox.codehaus.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/WSTX"
        },
        {
          "type" : "vcs",
          "url" : "http://xircles.codehaus.org/projects/woodstox/repos/primary/repo"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar"
    },
    {
      "group" : "javax.xml.stream",
      "name" : "stax-api",
      "version" : "1.0-2",
      "description" : "StAX is a standard XML processing API that allows you to stream XML data from and to your application.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d18b63063580284c3f5734081fdc99f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6337b0de8b25e53e81b922352fbea9f9f57ba0b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5"
        },
        {
          "alg" : "SHA-384",
          "content" : "005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU General Public Library",
            "url" : "http://www.gnu.org/licenses/gpl.txt"
          }
        },
        {
          "license" : {
            "id" : "CDDL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "3.1.4",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c08e89de601b0a78f941b2c29db565c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac19014b1e6a7c08aad07fe114af792676b685b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e"
        },
        {
          "alg" : "SHA-512",
          "content" : "911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7"
        },
        {
          "alg" : "SHA-384",
          "content" : "83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://wiki.fasterxml.com/WoodstoxStax2"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar",
      "dependsOn" : [ ]
    }
  ]
}