{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:18d36f3f-1df4-4c0a-97d7-6e6d46ed7a3e",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2022-06-05T05:07:30Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.0",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "c3466195d086bf7c31fdd23f8ffd7a8d"
          },
          {
            "alg" : "SHA-1",
            "content" : "2fdea945fa3c30de50040220d11f14d80d981257"
          },
          {
            "alg" : "SHA-256",
            "content" : "c084484d62553a4d3d1d5e80704941e620b0e935ae56936fd9f31b92852b6bf9"
          },
          {
            "alg" : "SHA-384",
            "content" : "eaa63bb9fe43143350ef15d21608d755e007d810a349d6a8c98e1719a8110ef35318582bfa8220bea6c1db3e4a489db4"
          },
          {
            "alg" : "SHA-512",
            "content" : "a63bae3558190e5ac018c3b9358dfc45766814858a726967c435b11686ed3fc0925c35e4b5170179b0016241ee6843f7080c61799e71b6d029cdf0f5f3b69460"
          },
          {
            "alg" : "SHA3-256",
            "content" : "048ed1d36f6d94c27c51a2d6f5658181d2678d83d86b544a42fdfcfb400c587b"
          },
          {
            "alg" : "SHA3-384",
            "content" : "b32fe6eafc71232a7cdd9b624d8b7b2da216a2060b7ce3c3a20acc950b385bb999d662ab1c2ecf37af8308f78b631baf"
          },
          {
            "alg" : "SHA3-512",
            "content" : "195d25b92dd0c0cfd180318cea84e0ebeb99f6cf593a0e7378dd13a325ded684b45eb96c1ffe4a49293721df57621949c77f0adef406758d848075ba5a17eccd"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "7.1.5",
      "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.5?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.13.3",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2215f4b13497b9cced1f981ada9d6f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec52dc41977a927a6ff175042576d716cd55c7c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab7aa994b1c514ca37e9721f0e79bb20d9aa31df9f9d8286cbd2b9e71235e44e"
        },
        {
          "alg" : "SHA-384",
          "content" : "224ea9166e185c8abe942bc691c3756cd41794ae46772fb0f4eb523ea21333d1b25498af75881bc5010d7a2fe56214df"
        },
        {
          "alg" : "SHA-512",
          "content" : "778b2358401997b03416998b534a99545c26d1256478e1992977cadea250a7796d09e63fd908ddd68362a11de563fe9ef6d6d064fd9f95c83c673080599f58c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d02ee619d2d504baa4bcc90216df3e699b888d9dda2b6c65240e3e42750dc7b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dbb5e1bf4bd50577e8956ed3159dbf81f06e759286d3999f92d68e4da93c3cfaa32d112139bd0d1aeeeff18c71f433d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6be9b0ff0c814a5068174c1f99da215328cf2089accf43927f248ebf2c540ab4c502787ac6a93ae16bc1d72b4e890d704f6c4dfaade99c6ce26dd27a01cf6c3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.3",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a6679e6a2f7d601a9f212576fda550c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a27014716e4421684416e5fa83d896ddb87002da"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab119a8ea3cc69472ebc0e870b849bfbbe536ad57d613dc38453ccd592ca6a3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b96a15f15eb9a44795c632313503677e0e65615d31922861138ee059defb1db31dbd98144a6474c25fa69de1c60f7d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5337db908b2c56dcb911e3d1a5f671456c13f254fe8d2a620823bc15b2db6aaa8325a86b436b5d181f2584b533158fd14d140b98305ac252f8dfd9a627da859"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4511d609261102f213a9704d71541f813360699b81c44ec795a8fb88bd087daf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "da78b678f4ebdbc9f61efd9475b67d35dc7ff5f2aa80bedaed8e9fbeecc2a96f2c793009abd1e4d5f27ae8fd2a81ad7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0d26e27d5d8920a856c7e8be48236bafae837994da1f8daced1078a1acde2ff1007e2849c9b007365e67541e1e881a18c1f7c66ed11fbc9fcdb91b8ea69dffa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.3",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fb8ee542a62a113fa7474fe88bb97e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "7198b3aac15285a49e218e08441c5f70af00fc51"
        },
        {
          "alg" : "SHA-256",
          "content" : "5326a6fbcde7cf8817f36c254101cd45f6acea4258518cd3c80ee5b89f4e4b9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "245c29f5dff5e7677c7f614df69de1072dbb56717fe88890128dfd6479994bb9a81a9917d41a2831a9a96e6d12aa3bb1"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f89b142068879b5fd96e4cb947313b3b39c1dbead43480307360a212fdb5347046b14fbc9b94c480034a4826fdd2a821686ebd121d774d55795326eaa1c95fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "69aa8638b7dee54ed7d676e90054977ffedc0e7e19acd82ae6a2ca28ed706b03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "14086ba58917fddf8b86e16db4a865d6550c3368e7c4ac11f14a29e60165c1a85cece76c03fa046ff6482af4c96618bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74121eb8b75529ebf01a8af81348efa889a9d13914620c95c23548a4dc42babac9f33556b0f668c66610f95db5854ced45fc5c0518147ec233af37213aa9c858"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.3",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e35e2adf33b2eed8e9f538a911244175"
        },
        {
          "alg" : "SHA-1",
          "content" : "56deb9ea2c93a7a556b3afbedd616d342963464e"
        },
        {
          "alg" : "SHA-256",
          "content" : "6444bf08d8cd4629740afc3db1276938f494728deb663ce585c4e91f6b45eb84"
        },
        {
          "alg" : "SHA-384",
          "content" : "38a8c81bc7a37315428697ab761f4c12b409046247414532fc68e37bb2a70e0d0a50b555dd20a251c6f63a85dfe536bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "dd6daeb7481bab4641adf71552774dd143039dc856aa6e3e5805c1964fecc69eb18a2fd8201e16ebebb92549edb7f10d1f9a50391ed9a120f867b675a6d4d4ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3f1bca51b619ada05e6a4f88ff37d65625e9fb9e5a4b3c017834c6594c964bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27936164e28773f942663edb22e1022bcf061ab1b4afcb45e6705b30a4e17cd668066edc094a8bd8bc44b82852313909"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc93eb45e2c1997db9b78b38db68f2648493c1ea79932ad076dfcbc5e5edfd8015798ff5d99a9f06f9e7dca745c53406b8954ec1ffc626a61ece429c30a06f47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.7",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "098c3f8d7d3dd78284086bbfa1a12d05"
        },
        {
          "alg" : "SHA-1",
          "content" : "86622cfd0a9933628b6b876d0c92589148d3b42e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075"
        },
        {
          "alg" : "SHA3-256",
          "content" : "497c702aad9280c9778628cc8bb675aaf991855cc79cad4e65920d000ca84137"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d80d5487972ce3dfdf9a277a1ee262fcbeeb354b32cf89c8380a937f7413007b23f3663780045f790efdc355cd78fbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1335fa8dc00060690670704e2f46ee752f39673e1f8c7af2b775fdbb973f4174e6d2cadb0f066d86d248747118a69315fabd570e682a60104ddaa26706265342"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.70",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4e554652f7c144fcdf90e8a50b70be8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "71e7fca6dd3e601094736f9778279d9b1f3f5369"
        },
        {
          "alg" : "SHA-256",
          "content" : "06924045ece73f35cc2e7bab5bdf8e050b70b83cf1ffcf79bdcd8527d6d1978d"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b57b6e02f242146fe22af5e2d32983be3d877a9902d4b8f5d9ad223c2ea72ec92e5eea630fe7802ffd2e13489b5fceb"
        },
        {
          "alg" : "SHA-512",
          "content" : "b99b71f22a3cc06121ea3450b6ac270f2739bc3cd598b5aaccea7e8485ee315c26b1c8c0477d024328878b7e354fcf0e1298408b785a0a729e26028ad820458d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4eb2722d0cdd3ddc7c7aed14de98f9ec1647cb9d97cf1e58fd881fde7e3df43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "57b048e8c79924dd7383dc774b0f008b9ae1c58be035a938c2fa8586dabb0d833cc169ce8dc319c1d3fe17ae1216a5cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a62547764cadeac96d332ab39591bf1e80f7357616b404f01ea907d077793e9bb02b6b92e5d69dc4afa5beccfb7eae14455ad841b7a2d1e98d54371aa16170c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.70?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.70?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.30",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8be00da99bc4ab64c79ab1e2be7cb7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57"
        },
        {
          "alg" : "SHA-384",
          "content" : "d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.7",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f1df5623d78c432b7c3d58ff491e1801"
        },
        {
          "alg" : "SHA-1",
          "content" : "557edd918fd41f9260963583ebf5a61a43a6b423"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e8dc31e046508d9953c96534edf0c2e0bfe6f468966b5b842b3f87e43b6a847"
        },
        {
          "alg" : "SHA-384",
          "content" : "328d948baea86d2d5d25003572fab503824ddf54ba7fc597e63950b7d69d890f53dbd7c0a2e040a5b9f632dd6a02793c"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd3b6b849f7af97a337b5884bf4d0f610753dad6ca0d95e84457cd47b0b1f2a614219632ef2283ec7da0725c49ae653c8c1c1f24186cb97db31313889b0ab08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ad204ee2bb225a65a37508fea3a2c3229b9d869e0f6f07c219cb10d7b0b6a936"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5f70c9add052feb5b2f1bda8c45b6b636d3963b23c4f8d3d6125e4c12f5ab4d1b91b2eebcbe8720e4a2956373e4bcadb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "075a8fe8e4c9c8ebf7628fb473e80fd04aea1f57d0b3d76382ce30f0189c09f8b863887c71c6e9c4498fb05bc92b0f4b8c800727d7d9d5d3112673bcfb948436"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar"
    },
    {
      "group" : "com.ethlo.time",
      "name" : "itu",
      "version" : "1.5.1",
      "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "324a8ca9b01f44dc2a376b81d6f8e329"
        },
        {
          "alg" : "SHA-1",
          "content" : "a30f897caa066b37d574af237eebdac7638e0fb2"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fa82963daf8a91678f7ed3859c756e95d24a571ac4ba57a1a6b78bb68567156"
        },
        {
          "alg" : "SHA-384",
          "content" : "0078f848c16ccc16f85699f6b282af47c3250f1889b636eda9328a00dadc2ac79b45b9929e86114c49d91b3556212aa9"
        },
        {
          "alg" : "SHA-512",
          "content" : "15038003f36f85638fd7c165bae374b08952b610682feba2c2aaadc7d50a793bb66055685b5288751fa9fefc9abc10f3ed022b41f5a5dce78094bd676454cc4c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d954aaf4ce13a9810a0e1e5f2066e67582cc92e735813c953699e4a131c06bff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7081323f8764f3c1ed9e1ab027d58fc8767ee5c65e49e87bf416eb5c668df73051848614207ef581db152102bc00f937"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eb1f9dae8c963113b1c5f60f7bd396ef064b3d13fdefd8725c16a3d700278baea9d9dc54c083a7916bbf4ae43e1eb384ed9794b68530357e0c0209a9c9039746"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.70?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.70?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
        "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}