{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.3",
  "serialNumber" : "urn:uuid:e3409e9c-7485-41d1-a577-005bb0317162",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-01-31T23:05:03Z",
    "tools" : [
      {
        "vendor" : "CycloneDX",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.5.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "4f7d894200ad695fc9f0aad66d7da40a"
          },
          {
            "alg" : "SHA-1",
            "content" : "c044d9b726650cbea3adeb5cc1715c67d8356c0a"
          },
          {
            "alg" : "SHA-256",
            "content" : "b9a385e430e1f5efd9b835a084c195dde4d5e1bc79e469a8187ec58275c15313"
          },
          {
            "alg" : "SHA-384",
            "content" : "d96f68ef4b8830d70dc2eb5f2de5211d96b70dd1169da641f34474265c06a5321b63d2c80fe2d82d74c767391225e480"
          },
          {
            "alg" : "SHA-512",
            "content" : "1d7d1129cdc8604772b3c454d8dff98d936f85af705c95705e3263a038c0bb58fdd58c0b90efa3f56b4ce8ef9c84d3154b74b8451e0470f856f4d688489704b0"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "CycloneDX",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "5.0.5",
      "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cyclonedx.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.5?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.13.1",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d4a2f34e36be20a18ee9ca05631d6cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "bcc5e3a3056e6e98020856b52e53895ad5fdfc4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "caf277893c33a22cef27f657a2a08d37b9c560dd2ba11caf627eefa8edafd8bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "6201bd0ff32c7a8a5bc162a9644544585a5797313a6f68c4d077a359ab01e22cb286298b7d0d359cb86268856b94ceac"
        },
        {
          "alg" : "SHA-512",
          "content" : "7530cc4646e76e2941850ad30639382608ad3e24588900a5856fb4d0bcf8738e77f011cf7b02ff04eb9a5cf074ff1a75c8bcd06d4093db6484b0a03a286c2914"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5cf9290dc96e215e77f274794d5238e"
        },
        {
          "alg" : "SHA-1",
          "content" : "51ae921a2ed1e06ca8876f12f32f265e83c0b2b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "8be6935cd8f9673ac684a589aaa1caecd57dee7c37ed1443d17924325799003d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c2f35993eea6e4ceed39018b4f6257524907978cce7088628b9aa4c3b1ebb9f2e1e7d415d6d0c2f45f3fc9bf74b4943"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4e6890da21978dcca5ff5ad1807e19533c0638973d3d293e3271ad31664ca7713beb69a462bfb6535dd1b2a1fa5d2741ddfcce94e51167fcf9a1df119f4b92d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.1",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e2bb0894ba131c20c874331c9c04adc"
        },
        {
          "alg" : "SHA-1",
          "content" : "1cbcbe4623113e6af92ccaa89884a345270f1a87"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab607939d288e22bff4cb97acc6b25e841d82681f2bc40ce67bb35cb0ffdb06d"
        },
        {
          "alg" : "SHA-384",
          "content" : "af889d93559c60d4c2de16a22468e192b69a601b2f22be04bae88c880e0553aa12b74d60a251fe62d6ab2adfd6db00c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "c031040352d4b219e89d7d8989c51931a09820345edd58ae9f575f8b1e27be000215dcbe6c06ff9fa758b7baf59461d04a70100eade8156b4b18af2bb2d20728"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15699c52197c95cd66fb722ac93fc07c"
        },
        {
          "alg" : "SHA-1",
          "content" : "698b2d2b15d9a1b7aae025f1d9f576842285e7f6"
        },
        {
          "alg" : "SHA-256",
          "content" : "56cfbdc9e1736b5c56b43757f6cf546ee6d49393c79383c4e495c4f7047cb506"
        },
        {
          "alg" : "SHA-384",
          "content" : "8feea2cd04ad6db9c7b5600fcb2cd98b487536d9e7f54d86420aa98173bddde00a66af31dbe9fca2bafbb6406a396d51"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef7a1a434a89d286612688d18f52036a400c85ea115cc7d5bf6f9e066881b49eb9d1bee9ef6466767ea35e565f717d853c727bd87d6e05df7064e57537ea218a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.7",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "098c3f8d7d3dd78284086bbfa1a12d05"
        },
        {
          "alg" : "SHA-1",
          "content" : "86622cfd0a9933628b6b876d0c92589148d3b42e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.64",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bd1f07bfa09be7d3bcbfad4c37184c10"
        },
        {
          "alg" : "SHA-1",
          "content" : "86cd9aef759c52d87d091d231ffc069c55a75a35"
        },
        {
          "alg" : "SHA-256",
          "content" : "f1397599a82eb42859d8e6c44670fe6b57222ed068434f9a170b2ee9bb2d1dcc"
        },
        {
          "alg" : "SHA-384",
          "content" : "d142f78c5dde6266e408d88a68ac1521e91dc4f4f68dad0de07d86e9d3b319c5c6372632e152a1930d29ff81d3689c61"
        },
        {
          "alg" : "SHA-512",
          "content" : "2fb7fb8e2be1d1ba4f4a4b5c656427584e187aca25b32214d2317245cf0ae723fb10260b802c2021fac9199fc557e902e3c03da11cb2b7761720a13585aae201"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.64?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.64?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.30",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8be00da99bc4ab64c79ab1e2be7cb7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.7",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1df5623d78c432b7c3d58ff491e1801"
        },
        {
          "alg" : "SHA-1",
          "content" : "557edd918fd41f9260963583ebf5a61a43a6b423"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847"
        },
        {
          "alg" : "SHA-384",
          "content" : "328d948baea86d2d5d25003572fab503824ddf54ba7fc597e63950b7d69d890f53dbd7c0a2e040a5b9f632dd6a02793c"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd3b6b849f7af97a337b5884bf4d0f610753dad6ca0d95e84457cd47b0b1f2a614219632ef2283ec7da0725c49ae653c8c1c1f24186cb97db31313889b0ab08"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "javax.json",
      "name" : "javax.json-api",
      "version" : "1.1.4",
      "description" : "API module of JSR 374:Java API for Processing JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6128da383f9a4a45593650fc263a0998"
        },
        {
          "alg" : "SHA-1",
          "content" : "c8efa3cfaeee2b05c2dfd54cba21548a081b1746"
        },
        {
          "alg" : "SHA-256",
          "content" : "0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876"
        },
        {
          "alg" : "SHA-384",
          "content" : "67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089"
        },
        {
          "alg" : "SHA-512",
          "content" : "5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar"
    },
    {
      "publisher" : "Oracle",
      "group" : "org.glassfish",
      "name" : "javax.json",
      "version" : "1.1.4",
      "description" : "Default provider for JSR 374:Java API for Processing JSON",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac67218fb9716fec512be8d0d877bde2"
        },
        {
          "alg" : "SHA-1",
          "content" : "943f240a509d3c70b448a55c6735591ecbd37c88"
        },
        {
          "alg" : "SHA-256",
          "content" : "17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955"
        },
        {
          "alg" : "SHA-384",
          "content" : "afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e"
        },
        {
          "alg" : "SHA-512",
          "content" : "63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.oracle.com"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.64?type=jar",
        "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
        "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.64?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "dependsOn" : [ ]
    }
  ]
}