<?xml version="1.0" encoding="UTF-8"?>
<bom version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.9</version>
        <hashes>
          <hash alg="MD5">8e595cdb67f17e4b41e046456970591d</hash>
          <hash alg="SHA-1">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>
          <hash alg="SHA-256">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>
          <hash alg="SHA-512">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>
          <hash alg="SHA-384">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>
          <hash alg="SHA3-384">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>
          <hash alg="SHA3-256">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>
          <hash alg="SHA3-512">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j@2.4.3?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j</name>
      <version>2.4.3</version>
      <description>The Apache WSS4J project provides a Java implementation of the primary security standards 
        for Web Services, namely the OASIS Web Services Security (WS-Security) specifications 
        from the OASIS Web Services Security TC.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j@2.4.3?type=pom</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="maven.reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-parent@2.4.3?type=pom">
      <group>org.apache.wss4j</group>
      <name>wss4j-parent</name>
      <version>2.4.3</version>
      <purl>pkg:maven/org.apache.wss4j/wss4j-parent@2.4.3?type=pom</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-bindings</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-bindings/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.santuario</group>
      <name>xmlsec</name>
      <version>2.3.4</version>
      <description>Apache XML Security for Java supports XML-Signature Syntax and Processing,
        W3C Recommendation 12 February 2002, and XML Encryption Syntax and
        Processing, W3C Recommendation 10 December 2002. As of version 1.4,
        the library supports the standard Java API JSR-105: XML Digital Signature APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bad235ebfca40a0514fba17fd742df51</hash>
        <hash alg="SHA-1">7f2baecd896ae8e8b02b6090220537bd950eccbc</hash>
        <hash alg="SHA-256">5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23</hash>
        <hash alg="SHA-512">a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e</hash>
        <hash alg="SHA-384">d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216</hash>
        <hash alg="SHA3-384">0ff82e0fcdb6a9b891a24160e19ca5db8558b41bf32f5eda45581a7982d903b81121a385f0030b90cb4a280b861217c1</hash>
        <hash alg="SHA3-256">355c1921dff3f01ece0170e63e55b599eec335dac51fdb055f9e46c1c15b105d</hash>
        <hash alg="SHA3-512">c158de9564db780b0f04b482d3d155c55119e94fd1887cc9abcc54a0ef9f44455b3e29b08596c3834928c2f15b6493ba73c957693484a3bd42f817597ad050fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://santuario.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SANTUARIO</url></reference><reference type="mailing-list"><url>http://news.gmane.org/gmane.text.xml.security.devel</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
        <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
        <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
        <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.5.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7faa8bf352ed3d280244cbc43f55c658</hash>
        <hash alg="SHA-1">cafa8aac5ddf104d28f172f19294d88d5e8c24c0</hash>
        <hash alg="SHA-256">21ad5f842f5332e0e2b56631178df45a8d205921d8370e2d5f557dc7f76cf4e2</hash>
        <hash alg="SHA-512">491e0659c8ffe61a8aa8a5e099af6722e6c13313b9607490b28c389b35cc15683df1c360b1e5e161d6067540064188213a481f53f434445979c99925fcd2aaff</hash>
        <hash alg="SHA-384">1f20ddfb41422b3a829d0ee2440c37c597e919a1c336df812bb6946639702895b112b6b13859dce195389e2e140a326b</hash>
        <hash alg="SHA3-384">f595086bcb02ea7f2d403dbf8f640da6ec11eecad366849dded6ee35cc757280084dc1aa98fb4dd07a52bad745ea38d5</hash>
        <hash alg="SHA3-256">19bacb8d935f29a492edde2d2a0c36b74714c37181aa8cfdc5232383ae0015d4</hash>
        <hash alg="SHA3-512">678f14a93c4e60ea806aae894db1e89ed3ff3fdf53e899071ad96d4f9038169f0f50d6ea427436a47337273de3fa2f82ba67849180e9b89ce8ebf9252645fa85</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
        <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
        <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
        <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-policy</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-policy/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.neethi</group>
      <name>neethi</name>
      <version>3.1.1</version>
      <description>Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">13dd27a2bd870dfb01d67a086a8c1948</hash>
        <hash alg="SHA-1">3a942a7921e66bb0081b16cf8f8a68e456b91de1</hash>
        <hash alg="SHA-256">7f8c00d9bbfbaa97a97a461cdeadb20054b956acb7536782703ca5a9a330ff22</hash>
        <hash alg="SHA-512">34c8a859e41df1a737ae0e4e2979f03d09528595cf56a940f171157f13d2994fffbf11945052643c5e56e30016340fc65111c2d813b1967f94b44823bb4318ea</hash>
        <hash alg="SHA-384">f9d7bc7dfe75763b67801b640ae1aad488127af8dc2c0ba6dba1bee6927da059c03951f057591f046d5f3c8071ec0f8d</hash>
        <hash alg="SHA3-384">1d6fa259ad241d19e73cbdd2b8f1ec23fd146b777d2462fadefa082e37aa7da5e5f9fa863b3c225527e16c32565ddb09</hash>
        <hash alg="SHA3-256">01e1a9ba813d10536054a85fcefdacf29b46471d14504ee80210dc3d6a35c0f5</hash>
        <hash alg="SHA3-512">4cb4d1c1e03196586fc95ac9cabb1f47742bc67dd6a23232335f496fd587ca556e6ee11d099647f60cdcad30e6b6fb0b14b85f1a7a4250a507cca0a33bb366ca</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ws.apache.org/neethi/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/NEETHI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/webservices/neethi/tags/neethi-3.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.woodstox</group>
      <name>woodstox-core-asl</name>
      <version>4.4.1</version>
      <description>Woodstox is a high-performance XML processor that
implements Stax (JSR-173) and SAX2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1f53f91f117288fb2ef2e120f27e5498</hash>
        <hash alg="SHA-1">84fee5eb1a4a1cefe65b6883c73b3fa83be3c1a1</hash>
        <hash alg="SHA-256">274fa403ed08c0d6f2f574dc1916adaaaec9a493e56d6442f8797ede620bca65</hash>
        <hash alg="SHA-512">33165cb587901e8908fa2589f16a6d1eeb87429936734e840b607e0a80c6a6680536eb8044536b871f3cd94b54ac734f51fdda9120bce0d2f58754c6822216d0</hash>
        <hash alg="SHA-384">e9b4203ae09719337238413d5b8db19563b5a6f6fd3630a3c64b07f1e7a43b3b6e4bb9c3016fca264f3c1502462659fa</hash>
        <hash alg="SHA3-384">d1413e12aa17bd9fb902d6685b067392135770e562df138d51233557be6b4b5978f834802abe7940f2862b08297930fb</hash>
        <hash alg="SHA3-256">f65358ba6aa597492dc6aeac425a8ded86571d00b162a5e931c664f08492dfa0</hash>
        <hash alg="SHA3-512">fc7682302d1dbe39c616b526349fcf756764ed0e21ab2beb9c4ac9cc4d9cfd64c392c4c72c9c6dc6bb3bdbfd6ab1b94679c39757f398efa2617079aecc838193</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://woodstox.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/WSTX</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/woodstox/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar">
      <group>javax.xml.stream</group>
      <name>stax-api</name>
      <version>1.0-2</version>
      <description>StAX is a standard XML processing API that allows you to stream XML data from and to your application.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7d18b63063580284c3f5734081fdc99f</hash>
        <hash alg="SHA-1">d6337b0de8b25e53e81b922352fbea9f9f57ba0b</hash>
        <hash alg="SHA-256">e8c70ebd76f982c9582a82ef82cf6ce14a7d58a4a4dca5cb7b7fc988c80089b7</hash>
        <hash alg="SHA-512">a7f337735100356f72639053734506982329015693677fafd4d2ca74c4e412caae077999cb42dee2402cc641a80c8fb027deb9d2dc6c4e141d94c9184baa9dc5</hash>
        <hash alg="SHA-384">005b7398b0a42fe2f11d2a0e65f638c4479c843bedecf691b6c1795d9f95ec8b3ff629b4e8b5d62c79082e762c4b488c</hash>
        <hash alg="SHA3-384">642519112968caa20b366e9f6e0cd7c3092d7da9dfe5cb47111e4dab7f025b6abf44c14805aa7d45df995a15b1c7525a</hash>
        <hash alg="SHA3-256">92a2eb0720aee125f29b1340a5571222bb6d2a50b441f839ec543a609845c68b</hash>
        <hash alg="SHA3-512">5be6d4726be02b83fd12db1e5c5ff871a33b097dd4b9a8d40a4466dcc194860cf76b1cbc399e4d3fe8b1e63e9b3c5f9d294fa9d85db5766b7933c346d65585b6</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU General Public Library</name>
          <url>http://www.gnu.org/licenses/gpl.txt</url>
        </license>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>3.1.4</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c08e89de601b0a78f941b2c29db565c3</hash>
        <hash alg="SHA-1">ac19014b1e6a7c08aad07fe114af792676b685b7</hash>
        <hash alg="SHA-256">86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e</hash>
        <hash alg="SHA-512">911e3e250c9ac9098899f12db584b83f36d91e8cca1afeef38c19952a168647dbbc88cb1cbdd5919769342ed09267263a142b12e71cab465b25daeedf2255cb7</hash>
        <hash alg="SHA-384">83c42936c43d6d6826edea636cf315924cdf52a7201bf07f1cf87a30d2b2855088306c94f39dea55529fed0360cf563f</hash>
        <hash alg="SHA3-384">905976003ae70127f2c6142070da5736fc4a01b7a98008fefa1270fc9096691c1307e002f3b6381da462a92f2f31478e</hash>
        <hash alg="SHA3-256">308d5a1692fd0135e5af967b0b83803a2fd835429ac83401124a0357f99cbb84</hash>
        <hash alg="SHA3-512">ac3d87dab7f1e89c83f039557557536433c52a0d3201a2f514b82bb8b4f454eb9fc28b02b46a45a9caf983239612cf270085270421e4fd79eccfce0fd01f99da</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://wiki.fasterxml.com/WoodstoxStax2</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-common</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-common/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16822d1228404b5fc14a607f94c04b69</hash>
        <hash alg="SHA-1">c51f094b49d8875a9d1e51aefc01331dff461729</hash>
        <hash alg="SHA-256">c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4</hash>
        <hash alg="SHA-512">75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b</hash>
        <hash alg="SHA-384">ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb</hash>
        <hash alg="SHA3-384">a651fd502eea69e1025c14fa531afe84c20c83e6a68682e268d927ff011b0060cb90460e1a2e90ae3ede31d31ce3df31</hash>
        <hash alg="SHA3-256">26c7a7a35392bd0888ab2b161733c1f89658c7fa6522a4ab7e944d165d2ac5e8</hash>
        <hash alg="SHA3-512">253a6160c92bf0c6239f892fa7c9ee2ea12ea81ac4d743d9051179b02542bc28650835936b1d28296661e3364f0f3afe4b5a7dd999a3594be9a4049025955665</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-saml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-api</name>
      <version>3.4.6</version>
      <description>Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0cb5bed685408a677fff00c5cbcf4e8d</hash>
        <hash alg="SHA-1">cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe</hash>
        <hash alg="SHA-256">d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba</hash>
        <hash alg="SHA-512">eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18</hash>
        <hash alg="SHA-384">b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161</hash>
        <hash alg="SHA3-384">bfecd6532109185e6899a9015742ba963f112bdd87f1fc65de6ae5fee79efdd713595e37293baabbb1ad795caac3bfba</hash>
        <hash alg="SHA3-256">cb41663926db230f6fa29636ed2e12c911b61b20ca9999cb68484a30ce7c4194</hash>
        <hash alg="SHA3-512">d3888c26a5d5444a177c8152385fc62cae4378e572af200412b7fcf70030e8648fe7afa29549d2af79e8c68e4c444d2faef3fac783e3003d7a171c31057717de</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-profile-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-profile-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core</name>
      <version>3.4.6</version>
      <description>Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">078679e8cb6a0c3361eac985019e8e5b</hash>
        <hash alg="SHA-1">75b749a9ce605414d071ffabbf7e61cd11b9204d</hash>
        <hash alg="SHA-256">d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1</hash>
        <hash alg="SHA-512">d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681</hash>
        <hash alg="SHA-384">28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf</hash>
        <hash alg="SHA3-384">a24ea3fb379156161ade032197c27d23dc0b90a7ac58aa4681777ebd41d6cd0b8c5cf51a763a1ea4b7988d95ca319fc8</hash>
        <hash alg="SHA3-256">ada4392913150038c1013e55c75352710457af7e7c7eb6fc4aa64d8c4a06bb9f</hash>
        <hash alg="SHA3-512">8d0f682aaf6a85ebf3a14ef0099eedf3b4559818cf645ab818edb47b37b72549f0e453ea0e967acf8f11cd27c669e6f1d3d97969f5828b7ae212dda918827fe7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-core/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.5?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.1.5</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc57fc46b3c5404655e23cfea6f7ac15</hash>
        <hash alg="SHA-1">b07d2c8b79a11dd0a7d6d48adc96f396d7b58808</hash>
        <hash alg="SHA-256">79d903d4ae850c9dee8d3939e5bd8d4172a91fda40b31b7e40a5d8c3e1fe4534</hash>
        <hash alg="SHA-512">4d25ec55430f3c804fd25a649b81b095a1f742a98b996b2310cd78567ef3059643cc4d38536e05c9ece88e87409d76c570472d3c17c6acce1bbd22279d59720f</hash>
        <hash alg="SHA-384">307a0e7496374c4c190f2467ecaa2a8ea3ae924853b141666d28307d3839c1277009f9509adcab0e39256ad9edbb39bd</hash>
        <hash alg="SHA3-384">893eae8bcf6dee5cd6150ac0edcf9020a91c6a001b88693de8947f25d093182bd2b3bb2c2f4b5d1f67379da563cdb0ca</hash>
        <hash alg="SHA3-256">3cf2fceefc1ff600aa42020f7070e8eb1648a6e2399b565e10ecefac3f391ea1</hash>
        <hash alg="SHA3-512">057be1e3bfa65437e886dc728a3b1ea8ea919434fd89b03f05eb346e117b65fa32f520283acc3e4e2f93378ab81ad50cc639f0c0d53c97fc25aa26e55b2cff9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.codahale.com/metrics-core/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d55c4ec6f542c201b6d5aad5c7115138</hash>
        <hash alg="SHA-1">571c2b041583625850afefdb3283fcf17940f9cd</hash>
        <hash alg="SHA-256">a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce</hash>
        <hash alg="SHA-512">eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c</hash>
        <hash alg="SHA-384">6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0</hash>
        <hash alg="SHA3-384">d8fa5d16090bb4108067a26d54b4a9d7e74fd150602a556fab10cfd7f15b5314107316258fd916cffc894d6e952fc238</hash>
        <hash alg="SHA3-256">9c13c83cb3ab35a2229854a876ca14d55090697fc72f9a8dba0301df6d0f5201</hash>
        <hash alg="SHA3-512">c7208426ca5322a7cbf9256dc7e93e66b665f3824b0e35bc63de4b56e3ae6dd645ffa04a9d9795c1ef5c3411b8e90062a53fab781d5419041ac1e9d3b853441b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-saml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-api</name>
      <version>3.4.6</version>
      <description>XML Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83483c37e5b6cd7c234866d9b5e1ac47</hash>
        <hash alg="SHA-1">3f84e8ce2dc40c247247be036a3a5c6adfae4a70</hash>
        <hash alg="SHA-256">fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd</hash>
        <hash alg="SHA-512">941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c</hash>
        <hash alg="SHA-384">224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412</hash>
        <hash alg="SHA3-384">b658a6857afec964bf1d48efede2bb0c231f1a99aeee2c530ccd9620011a7988ee64a51723e6e1453216347001f0a336</hash>
        <hash alg="SHA3-256">b4fc6f538095a4ca15c07cfab4ea94492a7aa1b6b6d156bd1295c47242f886bd</hash>
        <hash alg="SHA3-512">8a829332f903f632741612468313f785155e4e9fae1abcd34c3dc827cf61aa7fc511f1e9cf9e67509c414c6cb95319db20bfe9c6794d3cfac65550faf7893dd8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xmlsec-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-api</name>
      <version>3.4.6</version>
      <description>SOAP Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65e52ff6f3a55badf553ba021f08696f</hash>
        <hash alg="SHA-1">6e4dacb4caac0d5ed000719b3a772d384ceff916</hash>
        <hash alg="SHA-256">76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a</hash>
        <hash alg="SHA-512">ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474</hash>
        <hash alg="SHA-384">4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4</hash>
        <hash alg="SHA3-384">ab79fc2e03545b73eb8596a6cdfa7f0ec239de4809149b74ec2c3027f85503bdb03f892dd9c4eab8a86a1cf9fa5aa907</hash>
        <hash alg="SHA3-256">2bef86761f1771fb16032787f45dd24b23faa82d0446ba9cc08abd91357cbe72</hash>
        <hash alg="SHA3-512">dfc4b60bac6839e4c50c40ad899a577d1540b3a0fd9503d31689126a09def5388a40b1e993dab0954cdcfefac6dcbb631b83993b0eaba9d574e3941a33d9755e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-soap-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-soap-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-impl</name>
      <version>3.4.6</version>
      <description>Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6059e2364579e717f39aaa65f3e395b</hash>
        <hash alg="SHA-1">0dd4e7128d4de8c304827ecc972ee57ae46230fa</hash>
        <hash alg="SHA-256">78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a</hash>
        <hash alg="SHA-512">d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8</hash>
        <hash alg="SHA-384">3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209</hash>
        <hash alg="SHA3-384">7ba65c83bb503aee2862e0a538aaf11ebc4413f79b140635ca47e39b72acee985e7eea68371807420db6e92860d049dd</hash>
        <hash alg="SHA3-256">0df32d70a3ba9932429c07f57d4293ef05a06a9b5d0827fe9b1f1cdf7dcbde24</hash>
        <hash alg="SHA3-512">ae3077c04d8b341b5b8c2207a5394416e42f64d2c6b7e85a216a811ecb37705e732472a7326c5c1fb1805e48f8e19da2d42a365e244645d1fb5db635416fc311</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-security-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-api</name>
      <version>3.4.6</version>
      <description>Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b128a68409ed07d1094b40281576c3b</hash>
        <hash alg="SHA-1">d5cfb49df6b78b0dea66015040fe9940ace2fe71</hash>
        <hash alg="SHA-256">a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a</hash>
        <hash alg="SHA-512">a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766</hash>
        <hash alg="SHA-384">ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533</hash>
        <hash alg="SHA3-384">1a0e55d75f810bc988322668939869510a92af558fd21b2bac5180d75833d9adcabed88db5b546d7f2c63bc725315b9d</hash>
        <hash alg="SHA3-256">a51c5e0854fbad9049dbe4e77644c1e0796a9e35249989eedabdbb421406b982</hash>
        <hash alg="SHA3-512">11d2b36602e290aad73f8ccedffdc8bb99e679872cf47921e83ad62f48097bea3b720551ce58aeef0aea75ff21f3517f4d5215aedefbd9609368a3836f38fb66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-security-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-impl</name>
      <version>3.4.6</version>
      <description>XML Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29d0993ae0e882f5ab843fdca178ad53</hash>
        <hash alg="SHA-1">f07084d063f046dc762b86f90ff1350c923aa6ac</hash>
        <hash alg="SHA-256">8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7</hash>
        <hash alg="SHA-512">0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496</hash>
        <hash alg="SHA-384">63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8</hash>
        <hash alg="SHA3-384">b89208a5305630e4b4c75708f854b2f57e4168fbdbbb700b682d3845855c069b8f6a986da4311201ba5afb049722a4a6</hash>
        <hash alg="SHA3-256">a80892cf468b16155284957ace6da1c8da86dcfade6f1c0c17cfe425e601fd44</hash>
        <hash alg="SHA3-512">424cac960c48b49ea540ee402b30627c4a26d139fef46259f00de32b4f753abba901c072616d4bb5d2bf23178b78d29b30d0ac344b6ef9ff3829c97c4116b43c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xmlsec-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth.utilities</group>
      <name>java-support</name>
      <version>7.5.2</version>
      <description>A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8841e4abf4e88a32737d0f2870f2f4af</hash>
        <hash alg="SHA-1">1b0a80b8c0713e3d6233c643c7421ece305b544f</hash>
        <hash alg="SHA-256">bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2</hash>
        <hash alg="SHA-512">e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b</hash>
        <hash alg="SHA-384">4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc</hash>
        <hash alg="SHA3-384">c0324c49a4c7c8e4654f828ec353bb60e1951955a551d4078763839cf5d9cd1a6099c716811597e7024d79db4a42f0da</hash>
        <hash alg="SHA3-256">e0d86c58e70d7a17f9fd029bfbd5a3661182f15c39d745a02a8568092e860bd8</hash>
        <hash alg="SHA3-512">dc57c10272b416405e4c8e8fa1d51db9d5d72fc757c6c5dc49b888d1d0bb6f591083cd1edd0f642c71854177336d15e227bba0ee6c25c68dbe39d79e08a4132c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/java-support/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-support.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <group>org.cryptacular</group>
      <name>cryptacular</name>
      <version>1.2.6</version>
      <description>The spectacular complement to the Bouncy Castle crypto API for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4cf54fbc0b44a3233b0daa8b4c0cb83</hash>
        <hash alg="SHA-1">c97954b8bc9fbf63393d6a3b9113a6ce70772b45</hash>
        <hash alg="SHA-256">7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01</hash>
        <hash alg="SHA-512">f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec</hash>
        <hash alg="SHA-384">5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191</hash>
        <hash alg="SHA3-384">a48cd3adf9dfc90e9dd0023e1c40d21369c198bb46a992ee01719e8a1e6deeab3f8215d9c1394c1306ca8a8268a201ba</hash>
        <hash alg="SHA3-256">2197138eff1b76c3743e9dffc896b3376b92c0c70f558f10a3277b84b82b63c9</hash>
        <hash alg="SHA3-512">79b5016a94ed082b321e812492a5ad11c25c4f143f0a2167643c5c6a7e08d35e54a1366468d232534a9428d5c05858241086f47057c2db3e9414935d985a38a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.cryptacular.org</url></reference><reference type="issue-tracker"><url>https://github.com/vt-middleware/cryptacular/issues</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/cryptacular</url></reference><reference type="vcs"><url>scm:git:git@github.com:vt-middleware/cryptacular.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.10.10</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2a46de8a73ec7b60011429561ae72e3</hash>
        <hash alg="SHA-1">29e8126e31f41e5c12b9fe3a7eb02e704c47d70b</hash>
        <hash alg="SHA-256">dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3</hash>
        <hash alg="SHA-512">e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f</hash>
        <hash alg="SHA-384">7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87</hash>
        <hash alg="SHA3-384">9ba509d2d0ac83d7adf75ffc4d6949ff7e54adac022c3e2f23b2aa5199c3260d59ec01f5f97ae6b4ac1a8ff583a7e6c4</hash>
        <hash alg="SHA3-256">cbe7879898aeab28dadc4b6814303929e92ed8512f0d1ac4b20ee46acbaec873</hash>
        <hash alg="SHA3-512">4998f180686fc8407da93da5e30266d1a5e9f0a5f7209c92d379772f78eb349ed6a42934d2cd00f9e19ee3c2243cbd15be1fc05617720bf4e69256791d2724c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.10.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>30.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f8966f27f06101a08083bfa9f9277e7</hash>
        <hash alg="SHA-1">00d0c3ce2311c9e36e73228da25a6e99b2ab826f</hash>
        <hash alg="SHA-256">e6dd072f9d3fe02a4600688380bd422bdac184caf6fe2418cfdd0934f09432aa</hash>
        <hash alg="SHA-512">e7a8098c0af7746c8a97a8cc8245166c14ee9213f67943d9d1962c94699f58d789c1e103de9cd407c4f20cd4be4e89814643560e5dae0b3f629312f2b1a2a8e2</hash>
        <hash alg="SHA-384">12f54fff188f49a7d7284836768f198a6b002a1773ab80311c69449cec0544744938b8818b70cd1811cad830efb6a76d</hash>
        <hash alg="SHA3-384">2671b086b98b63915f471cc76f8ec281c12e94e14129bc35e0695f73f28e2cc1292abfcb18626ee9ee8691e587c674d3</hash>
        <hash alg="SHA3-256">6e498cb0c02bd5e60cf8feb9523b81056422df54be0e1f8d1da65b7aa454c8d9</hash>
        <hash alg="SHA3-512">a9d4cf2ff036032a0beef6249fa471c5d7d6a26e25b99995825c37555eac3fc53ca78e5c6f207476b258fe178f9ca7bf0551442632b7565279ad6c20f099b82b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@30.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/guava</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-impl</name>
      <version>3.4.6</version>
      <description>XACML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d8cb6a9cf8d68af9bc2bab3053d9a30</hash>
        <hash alg="SHA-1">542a94404fe6b51858cc291e18b1890772de555c</hash>
        <hash alg="SHA-256">2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146</hash>
        <hash alg="SHA-512">29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b</hash>
        <hash alg="SHA-384">b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c</hash>
        <hash alg="SHA3-384">671b231ece5429019e1a76a864b172c1f45cb0f3eea627e65728b848c03b53a52bac0b684cd3d089d0f3369563d4f4d7</hash>
        <hash alg="SHA3-256">ee73dcb676e9652bffa47c67a378ae6a2bdff544bb3087ee774dc7285ab19497</hash>
        <hash alg="SHA3-512">12311dac32d3991cfa12b3652fdeae1e958777d1d75960490685d413021b66cb9f0d2a213cb3b2605f1af4b0ac74479a29187d81ac93c755736d05114dcda9fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-api</name>
      <version>3.4.6</version>
      <description>XACML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfb758241b65c48297e510c5c1b129fa</hash>
        <hash alg="SHA-1">2fc136cf70605b6e490daf01a28161cb87b0ffc4</hash>
        <hash alg="SHA-256">9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6</hash>
        <hash alg="SHA-512">7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3</hash>
        <hash alg="SHA-384">43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097</hash>
        <hash alg="SHA3-384">2881568cafcb486a27ff445020eacd2000f50dfde6e7ddc5ae73edded6eb4348158f21ce8d2f916da3d0e1d77310d8f0</hash>
        <hash alg="SHA3-256">8713d49d970b6b7329db615ce345ed64113ba8de7f6397104363d9ed0d43ced9</hash>
        <hash alg="SHA3-512">2185bbf881824ad73e4b0bdcb4de5bd21b721278647d2095930b49a34c10762bfb6877b67801e9ed72b40cfb5e99bc8916592f8e243d1716f3ad5d30fa0d9429</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0eaa70b47d18c2a7ae72ec0ce1e47038</hash>
        <hash alg="SHA-1">2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8</hash>
        <hash alg="SHA-256">536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620</hash>
        <hash alg="SHA-512">bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb</hash>
        <hash alg="SHA-384">87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1</hash>
        <hash alg="SHA3-384">011ea0e3ee1e3841f1fee624af4858616c6024558eb02d97f7883ae6509e9d22dfab3939662b35e084bf2cdb7c7e4305</hash>
        <hash alg="SHA3-256">fc04e058e55e63247059177067d310912348ec8ab591dec9efb1564c9d39220d</hash>
        <hash alg="SHA3-512">84dd06b742e56582f6e442403e96617affb74ff2e74f1a0137077f0d35ae7f9160296f15a954ed4021f8be691e0c5a132367e7bbee9391338522109e267b63f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-saml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-saml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75f667b52f160481e65e7c317ab1c20f</hash>
        <hash alg="SHA-1">d4d573d93257738309cd079a290a1da7ecdc762e</hash>
        <hash alg="SHA-256">c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b</hash>
        <hash alg="SHA-512">612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e</hash>
        <hash alg="SHA-384">ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6</hash>
        <hash alg="SHA3-384">60b81353faea47332bf171a5ba7cb17ce4f12a583eb616c186033b39395bb5b6be60047e7dfb549965eac0cd8ae8082f</hash>
        <hash alg="SHA3-256">2effe635e6699d715e92ec2ba4081142447b876a071d351176e1b702bd46b695</hash>
        <hash alg="SHA3-512">467b41af5816f2d307e6994e719e0205bf0fff26fe6f6cfb9b40b5cd2ae751aa0965ff761c65552f14cefb7ad159afeaf0c4bfae8a0ee8873dbdba008c640d73</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-saml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-saml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ehcache/ehcache@3.9.6?type=jar">
      <publisher>Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.</publisher>
      <group>org.ehcache</group>
      <name>ehcache</name>
      <version>3.9.6</version>
      <description>End-user ehcache3 jar artifact</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f3cad96e513526c473610fb449ed411a</hash>
        <hash alg="SHA-1">c63362936308b841f81dbc7cd40384ffc473c595</hash>
        <hash alg="SHA-256">e1a0f4f270ed4a5b194cb632369a2d851472122d436b548a5a22430acad9cd24</hash>
        <hash alg="SHA-512">819b742c8fd42cdc7f16388bbe9b0f99f66632df622d72838eed8a0d957873041ab74aee4d8739682a04d0584d33157447255f85a99acd1e5f95b4b7f401fa22</hash>
        <hash alg="SHA-384">b27c63e06fde56b01d644e926cea6114cc12a3d3dc4b7f6a485924e4b192d722f6829613b3d585a8a72f822a50d286a9</hash>
        <hash alg="SHA3-384">a5b51f26955ec175c9091a223c313a356302df146a88a7850d335f2cad24306a6dd1100eac5bcc5bcf8119ebdef47b4d</hash>
        <hash alg="SHA3-256">f824dc2a533f2577d0eddf60ca83335c93c1186bf42356439416554b00b5f11c</hash>
        <hash alg="SHA3-512">da7d224e80d9158f507da4e354bca2589cd3cfb9545de99c7b675e0e67290df2c00b277e507fcf687e5ce03939bc2956f03b7be36247bb8272f4954b8daa4367</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ehcache/ehcache@3.9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="issue-tracker"><url>https://github.com/ehcache/ehcache3/issues</url></reference><reference type="vcs"><url>https://github.com/ehcache/ehcache3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.75</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">89c97c894111a42e3c4438f9d411a2b1</hash>
        <hash alg="SHA-1">fd9638f6468e934991c56242d0da2ae38890c2a4</hash>
        <hash alg="SHA-256">7f24018e9212dbda61c69212f8d7b1524c28efb978f10df590df3b4ccac47bd5</hash>
        <hash alg="SHA-512">1541fbc400c623159560a076d4589fa5fafa9324a26781843de307fc872af2ff6a8ea7efa8432efb846627d875030d02daefe7cec077cbed85e8f4a065cc625e</hash>
        <hash alg="SHA-384">58f3728a35708c6a75d667d067f6b5c43f9b72c744939e449c9afe08ec7a1aa3ed12973cccbe841f81db8d68c0954b16</hash>
        <hash alg="SHA3-384">02654bfe623bb83ff35d9049899c8fb8d686fc2338e7a33b0cff2d11a61ed8e05dce0fb62723f5b393580b0419c788e8</hash>
        <hash alg="SHA3-256">95f801f8ec3536a5c68508105df2243cebe3b1ba7083d24fcb795b029102dc0b</hash>
        <hash alg="SHA3-512">f2538a7635a355bf23586a99202f900a3925d85f058ca5e32ec0747bbabc39553a1f57d3561bdeceb1405607393b43a5fdeb1fb0daa9d9572a08d1e99dccf9ac</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.75?type=jar">
      <group>org.bouncycastle</group>
      <name>bcpkix-jdk18on</name>
      <version>1.75</version>
      <description>The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d60df588d1be9e5b5bb82cff0ee92690</hash>
        <hash alg="SHA-1">5adfef8a71a0933454739264b56283cc73dd2383</hash>
        <hash alg="SHA-256">9e2c1db5a6ed29fbc36b438d39ca9feb901bb69bad0ce8d7bc735264bea79bd3</hash>
        <hash alg="SHA-512">ab6d0943ca93baca4adab12b7a75f3941119e9fc481c46970fde4b53924cb699f7c13c71332fbbefab8fc2b60d261bae6d5a6c97000f7ba90acdc50a6604b214</hash>
        <hash alg="SHA-384">3492d11a04bb535972bc7825218cce1b6b7e9ada18cdc17301539bcfb679aa5289b93438ccdec20154f037362a73574c</hash>
        <hash alg="SHA3-384">e4a8452c97e55900c45fffd867a902094613e261b81991f40dfdf87c3b59ea41f2633234a5546e3ccc511b68bf3ada90</hash>
        <hash alg="SHA3-256">e9c99b6758280597deec7981827d5a4a8674ebc119583378a23c86817d427d80</hash>
        <hash alg="SHA3-512">de083665f8c54a41e6c5eb46d1a9e10e2fca2b43a96a02909e4060c7fbe90516ed7d2f17dfca74c98868d1bf4f94c6147b7d532989b9cc3c6f38235279688088</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.75?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.75?type=jar">
      <group>org.bouncycastle</group>
      <name>bcutil-jdk18on</name>
      <version>1.75</version>
      <description>The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eeb7a078454606e40c65583b878cb7a4</hash>
        <hash alg="SHA-1">0f58f4bbec8a40137bbb04f6174cd164fae0776b</hash>
        <hash alg="SHA-256">027f36578c1ffdf08878c1cc2aa1e191f4b9da119c1e8f113299c53f298fa664</hash>
        <hash alg="SHA-512">b110617bbef389b6f7b8b13b20936ad0ef40c270ec772341aa6efdd0b039c9876b2e960549b6cedec8f7da6ed2f524394f832a29623a7361c326b143f716759a</hash>
        <hash alg="SHA-384">6a9cb5b14eb45d84230a11c9521514a3310b2154696fe16a646f1259733398ece2e0b181d77c12b1b8b8eb21cd55fc8b</hash>
        <hash alg="SHA3-384">26b7c0ad5ab9ec2139e9f8dd49728423c972e4751b43b679ef6da3531885f526e49c5e3fa6ecb19052a4c69d1f230f7c</hash>
        <hash alg="SHA3-256">4dbf992f23ccf8447452890f18e4b2effae4576a56669f59df41715e60284210</hash>
        <hash alg="SHA3-512">7a3a8d3997a531fdc3a7ba8e11de47d00fdef78560afebe8ba8cd86a105a466a3b744cd4de9fb91107144ed496eb3a8c12f2ca3f62b385be1becfc3e3735b6d1</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcutil-jdk18on@1.75?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar">
      <publisher>The JASYPT team</publisher>
      <group>org.jasypt</group>
      <name>jasypt</name>
      <version>1.9.3</version>
      <description>Java library which enables encryption in java apps with minimum effort.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39327c7e38782102ecdb3c9dc4e8dcd3</hash>
        <hash alg="SHA-1">0d99ef9540f51c617f2a293b460f025d2ee563dd</hash>
        <hash alg="SHA-256">f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa</hash>
        <hash alg="SHA-512">99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821</hash>
        <hash alg="SHA-384">12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c</hash>
        <hash alg="SHA3-384">72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d</hash>
        <hash alg="SHA3-256">1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547</hash>
        <hash alg="SHA3-512">08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jasypt/jasypt@1.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jasypt.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>scm:git:git@github.com:jasypt/jasypt.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.javamail</group>
      <name>geronimo-javamail_1.4_mail</name>
      <version>1.8.4</version>
      <description>Geronimmo JavaMail Bundle.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0f877ca397f77198f4c941bee52f0a4</hash>
        <hash alg="SHA-1">0c111549605e4fb904984e4f40299a3a653871ea</hash>
        <hash alg="SHA-256">e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a</hash>
        <hash alg="SHA-512">a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb</hash>
        <hash alg="SHA-384">f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e</hash>
        <hash alg="SHA3-384">a774aa04351e16186868d53d50b34a200705a89d468d4e8826a4d553fd2fdfdef828f187b7a8a70930d17ddd9163199e</hash>
        <hash alg="SHA3-256">3da74bc40cdf844aa9329375e8cad8f24296c4a1414e8fcd7a8a0dda27bc4d59</hash>
        <hash alg="SHA3-512">3f45a98ec3c92d4846a0fdea10010cdbea57ef109fa89ff1b789396a025adf8c87ce63cf2a24bd055a9e8f99b0e95b1b8d7ea9773bf4b1a8f5aa86bb7e8b2963</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-dom</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-dom/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-stax/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-web@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-web</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-web@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-web/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-web</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>4.0.4</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5d1d7a29978e4ae0be5a456ee1c65c3</hash>
        <hash alg="SHA-1">b8a1142e04838fe54194049c6e7a18dae8f9b960</hash>
        <hash alg="SHA-256">586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127</hash>
        <hash alg="SHA-512">1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1</hash>
        <hash alg="SHA-384">ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6</hash>
        <hash alg="SHA3-384">3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557</hash>
        <hash alg="SHA3-256">f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5</hash>
        <hash alg="SHA3-512">188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.servlet</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/servlet-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-integration@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-integration</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-integration@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-integration/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-integration</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-policy-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar">
      <group>wsdl4j</group>
      <name>wsdl4j</name>
      <version>1.6.3</version>
      <description>Java stub generator for WSDL</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">cfc28d89625c5e88589aec7a9aee0208</hash>
        <hash alg="SHA-1">6d106a6845a3d3477a1560008479312888e94f2f</hash>
        <hash alg="SHA-256">740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725</hash>
        <hash alg="SHA-512">3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52</hash>
        <hash alg="SHA-384">19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996</hash>
        <hash alg="SHA3-384">ca2e435e6d94fea0b1d025f16b7b540aeb84bb5ef286139fa42c04443d5ec87b5663863a761f125dc4a8114148c89ff4</hash>
        <hash alg="SHA3-256">8429876fe0bd0d4bf98130c31856f6accccd2af5986b459689f7b5b49f4bdeff</hash>
        <hash alg="SHA3-512">915711a72ea5b1773e3336afcaed273d65283e5e93ddf35a12b8473951cfd3e1454bf782945c7da5399922dda46277054185b182136f2dbc356d43adb8afec8c</hash>
      </hashes>
      <licenses>
        <license>
          <name>CPL</name>
          <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sf.net/projects/wsdl4j</url></reference><reference type="vcs"><url>http://wsdl4j.cvs.sourceforge.net/wsdl4j</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j@2.4.3?type=pom">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-parent@2.4.3?type=pom"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-parent@2.4.3?type=pom">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-web@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-integration@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.neethi/neethi@3.1.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/woodstox-core-asl@4.4.1?type=jar">
      <dependency ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.xml.stream/stax-api@1.0-2?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@3.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.6?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.75?type=jar"/>
      <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.5?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.75?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.75?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcutil-jdk18on@1.75?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.75?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-web@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-integration@2.4.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
  </dependencies>
</bom>
