{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.3",
  "serialNumber" : "urn:uuid:2b54064d-78ca-4b58-9b33-e41131e62f36",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2021-06-24T02:55:46Z",
    "tools" : [
      {
        "vendor" : "CycloneDX",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.5.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1a5528adfeb75e1fef6264a90a0de94b"
          },
          {
            "alg" : "SHA-1",
            "content" : "bcbf4d76880f8b7b9008bd08fb72454e7f666957"
          },
          {
            "alg" : "SHA-256",
            "content" : "42fc254f37585624de9ed2dd9e1701d44e34cb5856433075afc851f4ae37857e"
          },
          {
            "alg" : "SHA-384",
            "content" : "6dc2adf4e002def6c49f1593f3d490c8ef5de6df77b390f0177ee84637fa9263e6948c0bb8daaef6f352a2f5f06714b6"
          },
          {
            "alg" : "SHA-512",
            "content" : "d456791aeac58ab6ec7e28312d0f57c7307cfd63542358e63a145260b82d60ce5a17a950a5808563f0f72d95e431ac83eb14fd245ad9b68b81a63286503c8368"
          }
        ]
      }
    ],
    "component" : {
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "5.0.2",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.2?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.2?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.9.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0d54b9821ee5d0955a7adc49a139f021"
        },
        {
          "alg" : "SHA-1",
          "content" : "9cb4ce5672f6db9eb0ef6b44910e1ed96fc50e5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c7929d59f394cc59b0ff285f5a6f2db8a5c68c45abcb7f4e9483185e2505d31"
        },
        {
          "alg" : "SHA-384",
          "content" : "a059248bde32dd50464a6cf6626edfb58d01f2ef7a3d5ce5a2580e408fe4fba4a543835c53340387d01d25a6a9dde033"
        },
        {
          "alg" : "SHA-512",
          "content" : "5ece44c2331a8ceb72a4e71df002a98fcf3d69d1ea49ff423471c533275c85ff2a959b5c0296ce2df4cf486816de9b8e2ceedd00300705c48c926534d8bf6966"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.9.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.3.0",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1544bae88ab2ca976b9a3dc32e0affe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d7d89f3a3195d422e14a6ee560784f1ac060af0"
        },
        {
          "alg" : "SHA-256",
          "content" : "075d62c0542e1762a3571fa6f0a35049b5685d11517507e766c059237c496127"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d944bfa334806ee39c965b6fd7d9844818b96b237b01f159915c057618628d5a5f19d2e6649eec624a0082288f9ed7e"
        },
        {
          "alg" : "SHA-512",
          "content" : "17bb2bc468c24831d2b2fecaa2254b99fb0f311818f4a0a528a3ae182ceb2c95934bb63c2f877e1067ae801f07e52f494e94e5acf7652e8354002001c44f8566"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.3.0?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.12.3",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e8a3f056ba4995bd5da9723f8c693fc1"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2a90460fecffa0c7ae9fd836272bbce91b5241a"
        },
        {
          "alg" : "SHA-256",
          "content" : "470419325a9dadaaf2e3ccb580246d130f20c8bbbf6122f5e4e247086cc53fe9"
        },
        {
          "alg" : "SHA-384",
          "content" : "18437a67b4d5286f0f8afc3559c7e2c184901c7e6e5654ef157af33864a0038fded82da0f48553b063ba957da69c10e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1004a1818ba710b10d311a87aaa2191cfe9030807f7d2ce72ad66b1d5ae54630eaa2c9f531eec634d38e76e871c89703ef9bee6bd7af4d8e2851992ff9e1849"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.12.3",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f2db39bffd7e5ec8648977a740b870f"
        },
        {
          "alg" : "SHA-1",
          "content" : "deb23fe2a7f2b773e18ced2b50d4acc1df8fa366"
        },
        {
          "alg" : "SHA-256",
          "content" : "baef34fbce041d54f3af3ff4fc917ed8b43ed2a6fa30e0a6abfd9a2b2c3f71e0"
        },
        {
          "alg" : "SHA-384",
          "content" : "335ef717cfd53d1a52c04e49946b4c2931649dd0405197a04bcce2fd74975a30212cb7d18bec22268bdaca5fa308e805"
        },
        {
          "alg" : "SHA-512",
          "content" : "bbbc4fba33448854627f9764b1e086370e607b29819884415f21d1943243b0bddc781d71d56021dea52386f1b230a344f852dc3ea0e904559b95ca60e03068ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.12.3",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e522914770d1d39b0a8aa31cbbaa798"
        },
        {
          "alg" : "SHA-1",
          "content" : "7275513412694a1aafd08c0287f48469fa0e6e17"
        },
        {
          "alg" : "SHA-256",
          "content" : "05da0a25bb44a217880a299a1a1e0a301d194b5656a9a07776b77a88f326e7e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "77ad39d3122d982b168b2dfc285d7d2d83bed5aad4b47db11d9ee3f8dd0de2a75568d2e846d986f4a667fb6b23f78f6b"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a1e45f0afe34eb36605b8763990f92ac5b4390432f058f682cf186bf3ba0f7325a67d4d35158ab22ac4fff025869722dd49365f19c47fc5f4c268f003ae773e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.12.3",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e821fbfd2d3034ae84735b564c30fed"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6153f8fc60c479ab0f9efb35c034526436a4953"
        },
        {
          "alg" : "SHA-256",
          "content" : "94d973062c2fda3dff2c9a85eafce57204821cce9085a99377693dbc9fb8da23"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a0e38b18263ba253dc8cb58c5a57895c9addd4d5c3e0a870ee58815d917977ba844fecdac8d8e455ff88d9972aef3ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e7b06d78565254718954ad5ca180476ac4327a4ddd8e07d84a5cb52c55d81870cdcfd08bd54ee984e75b4b7c30e21a9100962cda6275f16106357b7cca4478f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-jaxb-annotations",
      "version" : "2.12.3",
      "description" : "Support for using JAXB annotations as an alternative to \"native\" Jackson annotations, for configuring data-binding.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7bd5a7545541bdfda494494cf950278"
        },
        {
          "alg" : "SHA-1",
          "content" : "ea843951d2efdd5e6844d6faa8aabf71698463a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "2b95bada85960212a9b138da954e7b8d278816fa92efa25437e5cfeb5a235dd0"
        },
        {
          "alg" : "SHA-384",
          "content" : "49ee3dd9c6703b11366400f8f3a25985ca1072bfa08b4dada97972ab33bbb6595c497f248eca1172167c9b288188837a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9d42423d6292942f9f8e805ebd1f7da7821e28e0c4d8a9096866a13d431c6541bf064f2808f3deaded5a3ae35636ac53b4a3b0130b0a1b27e43e33dd797a5854"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.3?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-base/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-modules-base"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.2",
      "description" : "JAXB (JSR 222) API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dabb40ba58199304c640b7bd8bb2fbac"
        },
        {
          "alg" : "SHA-1",
          "content" : "8d49996a4338670764d7ca4b85a1c4ccf7fe665d"
        },
        {
          "alg" : "SHA-256",
          "content" : "69156304079bdeed9fc0ae3b39389f19b3cc4ba4443bc80508995394ead742ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "78c5131ed2926819aea1a8a59d78ca9a9fa7e5e8da05a0816608bca4768569202b15b9666e5d608ef1611ecd409dca90"
        },
        {
          "alg" : "SHA-512",
          "content" : "5a9a94fc323aecc9c5b28e9ac688aac8d09725d4cae660a57f5698914db91e351283dfe4909a2cc6de803890ac2b3b9f06af9d071d465031e55326a1085a11db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Eclipse Distribution License - v 1.0",
            "url" : "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.1",
      "description" : "${project.name}",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b647398add993324d3d9e5effa6005a"
        },
        {
          "alg" : "SHA-1",
          "content" : "562a587face36ec7eff2db7f2fc95425c6602bc1"
        },
        {
          "alg" : "SHA-256",
          "content" : "8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b"
        },
        {
          "alg" : "SHA-384",
          "content" : "07422d64a103aacb8956c2067175f2cc257494d2cc8dbde29ddf8d93778a2d4b3903565b17173a0b5230b59d535bd474"
        },
        {
          "alg" : "SHA-512",
          "content" : "c60edc99f119b9e0df0cf527e2512f2b7ab9db0e17c54e83850695f80f652c981eaae90a296db671cf7ed88a044c150224e030df333feb30f346e8a31fb794c6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "EDL 1.0",
            "url" : "http://www.eclipse.org/org/documents/edl-v10.php"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf"
        },
        {
          "type" : "website",
          "url" : "https://www.eclipse.org"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.4",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c72181f3fb82bda9aa724e6b0fed3395"
        },
        {
          "alg" : "SHA-1",
          "content" : "16b9f8ab972e67eb21872ea2c40046249d543989"
        },
        {
          "alg" : "SHA-256",
          "content" : "5fa734d5050f097405a801022d09377bbc81e811ef9a17cd0279ed3279f495a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ea1a2dd9f37bf0229b88c6f8d20e92c38018e7680352469920b0712d96a4e7f51183f0d836fe12e2ebfaf5a2b638d46"
        },
        {
          "alg" : "SHA-512",
          "content" : "f235a53cbf3df547ab82fc27597f8d95a90b8373b3081558fd63fb9ef0dfec16e814a85ce1c2f00bbfe6fabdd8f74ef015a05ff32db450e1c37f91b13520d8ef"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.53",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eaa768e047bff77243fa435b466ab859"
        },
        {
          "alg" : "SHA-1",
          "content" : "124c941abd2937d53d1e5f2c5fbc3d5e5ea0ba67"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c5a0f83ecbaf72d75266491fa09591911ab4811d211110b9b6abcd5de4b52bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "73a81639fba6e41ab9b4d354430bcad3bd56d8008d16c5f70e0ac1baf05b30551212e18dfd6d590567af14c81bea4953"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdfb418758c8cab51aa033d4da72d34e4e06cda140df3536c7c98d5adf6fb006e2c608620b4fb81b12838fc9b06a73fb24481adea52c19e2b5ae74a177143437"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.53?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.53?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.30",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8be00da99bc4ab64c79ab1e2be7cb7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.7",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1df5623d78c432b7c3d58ff491e1801"
        },
        {
          "alg" : "SHA-1",
          "content" : "557edd918fd41f9260963583ebf5a61a43a6b423"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847"
        },
        {
          "alg" : "SHA-384",
          "content" : "328d948baea86d2d5d25003572fab503824ddf54ba7fc597e63950b7d69d890f53dbd7c0a2e040a5b9f632dd6a02793c"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd3b6b849f7af97a337b5884bf4d0f610753dad6ca0d95e84457cd47b0b1f2a614219632ef2283ec7da0725c49ae653c8c1c1f24186cb97db31313889b0ab08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.json",
      "name" : "javax.json-api",
      "version" : "1.1.4",
      "description" : "API module of JSR 374:Java API for Processing JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6128da383f9a4a45593650fc263a0998"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8efa3cfaeee2b05c2dfd54cba21548a081b1746"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876"
        },
        {
          "alg" : "SHA-384",
          "content" : "67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089"
        },
        {
          "alg" : "SHA-512",
          "content" : "5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "org.glassfish",
      "name" : "javax.json",
      "version" : "1.1.4",
      "description" : "Default provider for JSR 374:Java API for Processing JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac67218fb9716fec512be8d0d877bde2"
        },
        {
          "alg" : "SHA-1",
          "content" : "943f240a509d3c70b448a55c6735591ecbd37c88"
        },
        {
          "alg" : "SHA-256",
          "content" : "17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955"
        },
        {
          "alg" : "SHA-384",
          "content" : "afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e"
        },
        {
          "alg" : "SHA-512",
          "content" : "63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.9.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.3.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.53?type=jar",
        "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
        "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.53?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "dependsOn" : [ ]
    }
  ]
}