{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,25 +1,22 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.3\" serialNumber=\"urn:uuid:578846c2-3ad3-42f1-bfec-68d8e7e9a623\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.3\" serialNumber=\"urn:uuid:7bc75b31-8553-4c4e-ab86-f0c856777ac7\" version=\"1\">\n   <metadata>\n-    <timestamp>2022-03-07T04:53:44Z</timestamp>\n+    <timestamp>2025-01-31T23:09:41Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>CycloneDX</vendor>\n         <name>CycloneDX Maven plugin</name>\n         <version>2.5.3</version>\n         <hashes>\n           <hash alg=\"MD5\">4f7d894200ad695fc9f0aad66d7da40a</hash>\n           <hash alg=\"SHA-1\">c044d9b726650cbea3adeb5cc1715c67d8356c0a</hash>\n           <hash alg=\"SHA-256\">b9a385e430e1f5efd9b835a084c195dde4d5e1bc79e469a8187ec58275c15313</hash>\n           <hash alg=\"SHA-384\">d96f68ef4b8830d70dc2eb5f2de5211d96b70dd1169da641f34474265c06a5321b63d2c80fe2d82d74c767391225e480</hash>\n           <hash alg=\"SHA-512\">1d7d1129cdc8604772b3c454d8dff98d936f85af705c95705e3263a038c0bb58fdd58c0b90efa3f56b4ce8ef9c84d3154b74b8451e0470f856f4d688489704b0</hash>\n-          <hash alg=\"SHA3-256\">44231962fe0c1e5501ca38ad3320f9223ea5e8d62aa8aad170577818801ce349</hash>\n-          <hash alg=\"SHA3-384\">99659ce3e58d8416f9e28d6b87c800442a79c4a5703fb657f6a9da87495d1d9d3b9788e06a3d6ea0e1b659a4681a4c92</hash>\n-          <hash alg=\"SHA3-512\">8d5c3f0ee5a53cc714c4d829ccc07688f951a6b6655ad1e6435b8ab1c281bc38a78073b329bdaaf4887114b6843723ac8b5176a5f954581960a43662c688a95a</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.2?type=jar\">\n       <publisher>CycloneDX</publisher>\n       <group>org.cyclonedx</group>\n       <name>cyclonedx-core-java</name>\n@@ -64,17 +61,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n         <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n         <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n         <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n         <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n@@ -109,17 +103,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n         <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n         <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n         <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n         <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n@@ -153,17 +144,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f8b3a23e6402d317b612251c83d292e7</hash>\n         <hash alg=\"SHA-1\">0a0d1009191c1cf6b04f40d26e4717596f3a90e0</hash>\n         <hash alg=\"SHA-256\">8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2</hash>\n         <hash alg=\"SHA-384\">791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3</hash>\n         <hash alg=\"SHA-512\">ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b</hash>\n-        <hash alg=\"SHA3-256\">29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3</hash>\n-        <hash alg=\"SHA3-384\">c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6</hash>\n-        <hash alg=\"SHA3-512\">3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -193,17 +181,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">9d4a2f34e36be20a18ee9ca05631d6cc</hash>\n         <hash alg=\"SHA-1\">bcc5e3a3056e6e98020856b52e53895ad5fdfc4b</hash>\n         <hash alg=\"SHA-256\">caf277893c33a22cef27f657a2a08d37b9c560dd2ba11caf627eefa8edafd8bc</hash>\n         <hash alg=\"SHA-384\">6201bd0ff32c7a8a5bc162a9644544585a5797313a6f68c4d077a359ab01e22cb286298b7d0d359cb86268856b94ceac</hash>\n         <hash alg=\"SHA-512\">7530cc4646e76e2941850ad30639382608ad3e24588900a5856fb4d0bcf8738e77f011cf7b02ff04eb9a5cf074ff1a75c8bcd06d4093db6484b0a03a286c2914</hash>\n-        <hash alg=\"SHA3-256\">bc1849baca38f699db935d9034037db2a19c75b38a21cbfef62675654de529b6</hash>\n-        <hash alg=\"SHA3-384\">564531f74a7b5ba8e9a8c53b0ae59f8a556fe4ecbdc513301df552d80911ba900508f1460b11621ad2dc439c93b2a930</hash>\n-        <hash alg=\"SHA3-512\">5278e00144fb81699176fde8ede6a6b551a4b8a9f812cdc23a26f81f71eda52059ce45ff61b5430f626268eef6204511d3ed023dc3bcf45e423a019558fe294d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar</purl>\n@@ -228,17 +213,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">b5cf9290dc96e215e77f274794d5238e</hash>\n         <hash alg=\"SHA-1\">51ae921a2ed1e06ca8876f12f32f265e83c0b2b8</hash>\n         <hash alg=\"SHA-256\">8be6935cd8f9673ac684a589aaa1caecd57dee7c37ed1443d17924325799003d</hash>\n         <hash alg=\"SHA-384\">7c2f35993eea6e4ceed39018b4f6257524907978cce7088628b9aa4c3b1ebb9f2e1e7d415d6d0c2f45f3fc9bf74b4943</hash>\n         <hash alg=\"SHA-512\">a4e6890da21978dcca5ff5ad1807e19533c0638973d3d293e3271ad31664ca7713beb69a462bfb6535dd1b2a1fa5d2741ddfcce94e51167fcf9a1df119f4b92d</hash>\n-        <hash alg=\"SHA3-256\">e940c4cf840936bb465e195213331d3a444999573b272a201523f5cc385a9c82</hash>\n-        <hash alg=\"SHA3-384\">deabe1d678acecdd35963f70bd653834112982fc5c772d139304d1621e507585b83f85aab7b9582f98ef3937b0b5879d</hash>\n-        <hash alg=\"SHA3-512\">2f59a6eb97da6f2afe49bca38d68c9ee6148c28b2234e4e30178a855b81fd18e89e2a066bcf67360f571bd236f1f1e58e738df8b0c6329e83bda0b32cf3eb1ae</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar</purl>\n@@ -263,17 +245,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">9e2bb0894ba131c20c874331c9c04adc</hash>\n         <hash alg=\"SHA-1\">1cbcbe4623113e6af92ccaa89884a345270f1a87</hash>\n         <hash alg=\"SHA-256\">ab607939d288e22bff4cb97acc6b25e841d82681f2bc40ce67bb35cb0ffdb06d</hash>\n         <hash alg=\"SHA-384\">af889d93559c60d4c2de16a22468e192b69a601b2f22be04bae88c880e0553aa12b74d60a251fe62d6ab2adfd6db00c1</hash>\n         <hash alg=\"SHA-512\">c031040352d4b219e89d7d8989c51931a09820345edd58ae9f575f8b1e27be000215dcbe6c06ff9fa758b7baf59461d04a70100eade8156b4b18af2bb2d20728</hash>\n-        <hash alg=\"SHA3-256\">34ba346a7ace4bb73f9791df4348b7b2f91057d410ae4ac15a5868414c61c5b7</hash>\n-        <hash alg=\"SHA3-384\">500febef47227e3a2b8c75818614c5c7e43d8a75e91e8139f94e3b1988942c3659bef821b85f8e2a5e8523ca32277848</hash>\n-        <hash alg=\"SHA3-512\">e8c450af2a9e6ee25e0d2741e894dba0115750780d0ae5944b72b4b0e76aebff2ed18b2084eef2e156128753577da45fc3009414a25dd034372eb663d27894f6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar</purl>\n@@ -298,17 +277,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">15699c52197c95cd66fb722ac93fc07c</hash>\n         <hash alg=\"SHA-1\">698b2d2b15d9a1b7aae025f1d9f576842285e7f6</hash>\n         <hash alg=\"SHA-256\">56cfbdc9e1736b5c56b43757f6cf546ee6d49393c79383c4e495c4f7047cb506</hash>\n         <hash alg=\"SHA-384\">8feea2cd04ad6db9c7b5600fcb2cd98b487536d9e7f54d86420aa98173bddde00a66af31dbe9fca2bafbb6406a396d51</hash>\n         <hash alg=\"SHA-512\">ef7a1a434a89d286612688d18f52036a400c85ea115cc7d5bf6f9e066881b49eb9d1bee9ef6466767ea35e565f717d853c727bd87d6e05df7064e57537ea218a</hash>\n-        <hash alg=\"SHA3-256\">5243d92a55077eb3c21c042b164cfde85f68278d329d56125f4fd384f439000a</hash>\n-        <hash alg=\"SHA3-384\">c2f99dce211999b9b9a35478e17e01c8ada2a6c18ef86575110a912934a872827ca2a7dd9dbd851684e963239773bd1f</hash>\n-        <hash alg=\"SHA3-512\">58a10ce7506e8871896a1083ef944dcebdd7169efb35174c99371980bb93e5256f61bdb977d47d310491fae88d737ef119eefdf7a7c38d337bdeff1bb4c2d3c9</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar</purl>\n@@ -332,17 +308,14 @@\n       <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>\n       <hashes>\n         <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n         <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n         <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n         <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n         <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n-        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n-        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n-        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <name>The BSD License</name>\n           <url>http://www.opensource.org/licenses/bsd-license.php</url>\n         </license>\n       </licenses>\n@@ -368,17 +341,14 @@\n SAX2 and Stax2 APIs</description>\n       <hashes>\n         <hash alg=\"MD5\">098c3f8d7d3dd78284086bbfa1a12d05</hash>\n         <hash alg=\"SHA-1\">86622cfd0a9933628b6b876d0c92589148d3b42e</hash>\n         <hash alg=\"SHA-256\">dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037</hash>\n         <hash alg=\"SHA-384\">4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae</hash>\n         <hash alg=\"SHA-512\">25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075</hash>\n-        <hash alg=\"SHA3-256\">497c702aad9280c9778628cc8bb675aaf991855cc79cad4e65920d000ca84137</hash>\n-        <hash alg=\"SHA3-384\">5d80d5487972ce3dfdf9a277a1ee262fcbeeb354b32cf89c8380a937f7413007b23f3663780045f790efdc355cd78fbd</hash>\n-        <hash alg=\"SHA3-512\">1335fa8dc00060690670704e2f46ee752f39673e1f8c7af2b775fdbb973f4174e6d2cadb0f066d86d248747118a69315fabd570e682a60104ddaa26706265342</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar</purl>\n@@ -405,17 +375,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">21b0b965f6d0ceecce1dda5c9d55e80a</hash>\n         <hash alg=\"SHA-1\">cee2241cb0f24d37c4b08f585b12889e41c79b61</hash>\n         <hash alg=\"SHA-256\">fc64dbb0b42bd6d0be068e276b93ee9753477f677b506b1ff32531dbc7ec69a4</hash>\n         <hash alg=\"SHA-384\">05a8fba0c2c52575fbff0267213a6e0792269cc7923d5b1d7300dd8a2ba05d77b160f85997232060da21f5b455e369d4</hash>\n         <hash alg=\"SHA-512\">e99e2f023ea16ad3b2bea8cb2132f641f2c07e749218578591a340e39eb93f963d3db10004e3036f493a876bf509602445f81bf09161641bccc6f1a2ee3044f2</hash>\n-        <hash alg=\"SHA3-256\">98bfcc8383c13f08700f595a1a6bfafe4d3ce2a0aaa6da5cfa370f921c233c6a</hash>\n-        <hash alg=\"SHA3-384\">f6dcf1212d5ca9efd957c0aefff08c52052cfa63f45995c6d35c733073138f5e02d66d46f46f072d6eb371c6dbaa87cc</hash>\n-        <hash alg=\"SHA3-512\">6ea82dd9bd33132ffb734b50c5c2e07a026d6bc63953d9764c0c08e905126ec4ed6f3669c700091f51831d54bbceea940c76e7fe10371dcbbdb66bb1996de97a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.networknt/json-schema-validator@1.0.66?type=jar</purl>\n@@ -436,17 +403,14 @@\n       <description>The slf4j API</description>\n       <hashes>\n         <hash alg=\"MD5\">f8be00da99bc4ab64c79ab1e2be7cb7c</hash>\n         <hash alg=\"SHA-1\">b5a4b6d16ab13e34a88fae84c35cd5d68cac922c</hash>\n         <hash alg=\"SHA-256\">cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57</hash>\n         <hash alg=\"SHA-384\">d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de</hash>\n         <hash alg=\"SHA-512\">e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173</hash>\n-        <hash alg=\"SHA3-256\">7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e</hash>\n-        <hash alg=\"SHA3-384\">9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60</hash>\n-        <hash alg=\"SHA3-512\">a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -474,17 +438,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f1df5623d78c432b7c3d58ff491e1801</hash>\n         <hash alg=\"SHA-1\">557edd918fd41f9260963583ebf5a61a43a6b423</hash>\n         <hash alg=\"SHA-256\">6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847</hash>\n         <hash alg=\"SHA-384\">328d948baea86d2d5d25003572fab503824ddf54ba7fc597e63950b7d69d890f53dbd7c0a2e040a5b9f632dd6a02793c</hash>\n         <hash alg=\"SHA-512\">bfd3b6b849f7af97a337b5884bf4d0f610753dad6ca0d95e84457cd47b0b1f2a614219632ef2283ec7da0725c49ae653c8c1c1f24186cb97db31313889b0ab08</hash>\n-        <hash alg=\"SHA3-256\">ad204ee2bb225a65a37508fea3a2c3229b9d869e0f6f07c219cb10d7b0b6a936</hash>\n-        <hash alg=\"SHA3-384\">5f70c9add052feb5b2f1bda8c45b6b636d3963b23c4f8d3d6125e4c12f5ab4d1b91b2eebcbe8720e4a2956373e4bcadb</hash>\n-        <hash alg=\"SHA3-512\">075a8fe8e4c9c8ebf7628fb473e80fd04aea1f57d0b3d76382ce30f0189c09f8b863887c71c6e9c4498fb05bc92b0f4b8c800727d7d9d5d3112673bcfb948436</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar</purl>\n"}]}