--- results/org.cyclonedx/cyclonedx-core-java/9.0.0/oss-rebuild/reference/cyclonedx-core-java-9.0.0-cyclonedx.xml:bom.xml	2025-04-04 16:27:51.784113467 +0000
+++ results/org.cyclonedx/cyclonedx-core-java/9.0.0/oss-rebuild/rebuild/cyclonedx-core-java-9.0.0-cyclonedx.xml:bom.xml	2025-04-04 16:27:57.772019425 +0000
@@ -17,9 +17,6 @@
           <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
           <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
           <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
         </hashes>
       </tool>
     </tools>
@@ -61,9 +58,6 @@
         <hash alg="SHA-256">f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59</hash>
         <hash alg="SHA-512">cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17</hash>
         <hash alg="SHA-384">a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4</hash>
-        <hash alg="SHA3-384">803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2</hash>
-        <hash alg="SHA3-256">41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748</hash>
-        <hash alg="SHA3-512">eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b</hash>
       </hashes>
       <licenses>
         <license>
@@ -88,9 +82,6 @@
         <hash alg="SHA-256">d1e417901235fae3aa0cb9736baeaf5b74de7349817d1c72390d82e3d83d3a97</hash>
         <hash alg="SHA-512">afba6cc8fdef9d347aaccb3bff327ba8e2c17135989cf01179fdb2e3ca8d0afdce37defb08659eb1e99b8730e2baaaec95c7d3599f7ebf526c97c8edc477b852</hash>
         <hash alg="SHA-384">0413eda39746809f3c7ce44336f6d88d8d72e2781db4b74c98a206f34b94639a39024697fde25f310edda8cf628fd376</hash>
-        <hash alg="SHA3-384">386bee9245d0ef901c3010be3603d4cd083c2745737fdf852f3c7024b295aa74d006f0d1a3e7cbc2b09b6023b42d41b5</hash>
-        <hash alg="SHA3-256">22054f3faf8d31b9bdb010e1341cf74dfcb40860e50eaf238991c784a9a8b4ae</hash>
-        <hash alg="SHA3-512">c7e76ce4a2177ea7898931e180cca6463bf5eab34199c6a9a0146474262f16c30d99a05eb02a86f37870ba83b1b413e78949582add25aa87c5f39462444be6ea</hash>
       </hashes>
       <licenses>
         <license>
@@ -116,9 +107,6 @@
         <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
         <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
         <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
-        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
-        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
-        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
       </hashes>
       <licenses>
         <license>
@@ -142,9 +130,6 @@
         <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
         <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
         <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
-        <hash alg="SHA3-384">15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f</hash>
-        <hash alg="SHA3-256">1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5</hash>
-        <hash alg="SHA3-512">c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5</hash>
       </hashes>
       <licenses>
         <license>
@@ -167,9 +152,6 @@
         <hash alg="SHA-256">e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247</hash>
         <hash alg="SHA-512">8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959</hash>
         <hash alg="SHA-384">0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0</hash>
-        <hash alg="SHA3-384">bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c</hash>
-        <hash alg="SHA3-256">c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a</hash>
-        <hash alg="SHA3-512">2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca</hash>
       </hashes>
       <licenses>
         <license>
@@ -194,9 +176,6 @@
         <hash alg="SHA-256">375e0e1c5cf530ac06858d4c9e674b03498644c2e7ee59f16160702ee02aabce</hash>
         <hash alg="SHA-512">0d576e403958a69553bbf186db8b850daa47d99312c68932658a1d116a97c52ec3dee9ff30b9f65f614da6bee473d4faf08e577f7e435ba33384a460d343fe49</hash>
         <hash alg="SHA-384">11737a9db7bfe6c2c66b5bf00a7c5c6da96d1613d1fca650be7fcb985166bcecf4de57b23892d21770001afeb40f2e25</hash>
-        <hash alg="SHA3-384">c4c5c06bd4af0a95e4b63f41dff4ceccf285662e90f95b0e9a0fd59700ba676ab7f080991222715fa257c33520bd892c</hash>
-        <hash alg="SHA3-256">e5c618225b6da5099236e37200fa492eda10d4024203764d95e01ed29a839aaa</hash>
-        <hash alg="SHA3-512">ff474b904215f7a328ca5b4bfb3091e6975034894f362fbf664c6ee665e621960bbea1ae46db2860932fcff7b71e6e1a9035adfaa83735cf577ca265494d39f3</hash>
       </hashes>
       <licenses>
         <license>
@@ -219,9 +198,6 @@
         <hash alg="SHA-256">55be130f6a68038088a261856c4e383ce79957a0fc1a29ecb213a9efd6ef4389</hash>
         <hash alg="SHA-512">85611fb7687450eb6078855c46d94dabf1cebcf179e23455cd1069aaded3b169112ec5d3d8d8510a7076166dc146e2f684f8527c5ef5b9ed99a7ec91f0825523</hash>
         <hash alg="SHA-384">12bbfe5721ecd374a77ede24cca8a39f1415fd50dd95938c5e3365c703a02b5f6c0e7b10c7b44b7c9c5a874dd0b971c7</hash>
-        <hash alg="SHA3-384">d1b1f9c3e53603ccc690d76ac1a90dd1ddf07723f4eb53f58acfa266f17a675b311b0f29b94d9f1bb0ab32ad1a8aea4a</hash>
-        <hash alg="SHA3-256">62a76265cdc48c8a7f80c9d5566a179bd796c646b25c5cb937fd0a10cfffff1f</hash>
-        <hash alg="SHA3-512">87c42bea365905e9d877bda162c9d79d962a969a53a46861c350b9a9a87d09f4986c6ff67c4f00eba6df8c86f0621cfb52359a91321ace7eec3bb5d7c82feeb9</hash>
       </hashes>
       <licenses>
         <license>
@@ -244,9 +220,6 @@
         <hash alg="SHA-256">8562569a001d46e84ea23802257e33c8f68b24eb47c1e0efd133a0372c512959</hash>
         <hash alg="SHA-512">20104840da168653b27ffcbef6600d29d04b7f315934531f6521b30cfc0438893ac5e3b2476ba03a6a47f3aed8882cc7d5a57b66163ad19aac217a258826e51b</hash>
         <hash alg="SHA-384">c597370368f411e8f63500537a94f503f44f3bbd653c77d39871eb65745ee2a3d8d83bb8c303790c1e26f30e76219000</hash>
-        <hash alg="SHA3-384">6c446264fac7209fc435be283dbb6d578ed7328e84756d7e987a0871a9119bf9bffbfe40827e84324ea7924f83aad770</hash>
-        <hash alg="SHA3-256">437fa185a964c155377819fed79558491f31a7ee20a60c4624d252f6c6bf75bc</hash>
-        <hash alg="SHA3-512">ad18bc120cfafe0ee6c961c5422242361de7b3154d3252a2ffaecf5d981865c141a25fa8706709eabc351d42f3593dd2832219657671f21d9672c2488e5d1bf4</hash>
       </hashes>
       <licenses>
         <license>
@@ -269,9 +242,6 @@
         <hash alg="SHA-256">d0ed5b54cb1b0bbb0828e24ce752a43a006dc188b34e3a4ae3238acc7b637418</hash>
         <hash alg="SHA-512">c6b06d4b20941d9e32b462552031e6c98378e5edce57693e55adcc73cf7d5088af5b3a666a59e94a7f0b57066ac694863919f398f28ee0d7ceb362c8c05f7491</hash>
         <hash alg="SHA-384">02875865ef42573114755ab7147d64f8e5a791f2a2b8debe51dda22886370ef34af8c159d8efa8b90735f33f90089187</hash>
-        <hash alg="SHA3-384">ee93411dc73337c11d48609fbf79ae606ccd0ab712e3d2c12c91103964182910a810b9fa062a0afc47d19c720c97c5e7</hash>
-        <hash alg="SHA3-256">eb5b5dfb8afb2538a2c31caab47d909970bb647763a0eccabaae8e6f0a9ad988</hash>
-        <hash alg="SHA3-512">09ce7a8d928d42b221e0f6151653248f78eb68b6228cfc36fabd48ae48a3890f235fb33b82cc2faa24069efdf5a14d7433014e3bfb0d5173047d1911e5a55fe4</hash>
       </hashes>
       <licenses>
         <license>
@@ -294,9 +264,6 @@
         <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
         <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
         <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
-        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
-        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
-        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
       </hashes>
       <licenses>
         <license>
@@ -320,9 +287,6 @@
         <hash alg="SHA-256">5655c56e820b0140c1814ed4bddb3352efef88e33c382f3a0b51aad7ef89956c</hash>
         <hash alg="SHA-512">4f6cd44c47d11d2bf1d02236f70dad8267bd9a93b9702aae31023725b48e63784025165f0cf4b290442b4a5b14dffb101db3dd8d7bca701a11c6506eb5e0788d</hash>
         <hash alg="SHA-384">3708b825228da92f3b491d72f3104677241926091c3fffc6a66ba763907ff97c9dfa793aefab0a1820918f5dc5355f04</hash>
-        <hash alg="SHA3-384">cfb13014a414f92f84b14defe072eba4e13046839b22705e78bcad63412282cb732b4b6f22bea360df26d04aa6a8576e</hash>
-        <hash alg="SHA3-256">6a12bc8142518e2c74adde9d7367267a783a9b69b46536ed9cb7506a01dcbb5a</hash>
-        <hash alg="SHA3-512">5f6f257d5ee5995c2a7966d38ec50e1adf73b3474d2b6f6a78ab4561dbf5e629fe0eb74d9f7a5bb2f85df381ecb0d8fe816184af647b61f87f3c99eec4ae4554</hash>
       </hashes>
       <licenses>
         <license>
@@ -344,9 +308,6 @@
         <hash alg="SHA-256">5d7b6ce4c7b2a3ed189511cbaa913808c7cd2b570d70b923426352785bffbdd0</hash>
         <hash alg="SHA-512">e156aeb4b603023dd55c599315f22cbcbfdb00a2037c01b346324dceba583922dad29b20570a244863373545f5b77a311c0f740d3598dc4978bec6298cc613ba</hash>
         <hash alg="SHA-384">5313166403f1c62732d41283f946418dec1971cdd6530a8e4495b84f67d60b96f7c50a2b8b6a63905767bea1ab0780b5</hash>
-        <hash alg="SHA3-384">a7cc84c4ecff22d04fa3da5d56dda9ca6253b87ab71479932c2e3da1edcfebfe176250b82abb66a9325907ab79309f96</hash>
-        <hash alg="SHA3-256">a45ff1fdc732d5e7c626072e84e8ba24eb0102d26380d918b8ef8707ea307c3a</hash>
-        <hash alg="SHA3-512">7164adfc8d496253af3d4841150fff7335f72d29523696cbcb15fb7dec2c18a74e731ad55db6c3392aee895f2b4f055a2f83414bc9ab292a49b47e17401aac55</hash>
       </hashes>
       <licenses>
         <license>
@@ -368,9 +329,6 @@
         <hash alg="SHA-256">a9a567da9bf8bdcd4710fb5c4c7bc155658bb964a91637664ed7bd6e77b050c5</hash>
         <hash alg="SHA-512">7df8d7b78c76e3d4c11be0b45e18561177245b0494d67dfd95be13a10b0f026cfae870fdbae7bae34bb278be73d8f28d02c175ba43863a712a73306d89b1e710</hash>
         <hash alg="SHA-384">3433a20e764a82fb9ff48a4a6337b492f329015b9416465508650782db090ab275c44166a6f9a407adb3d39c0fdb7554</hash>
-        <hash alg="SHA3-384">863a2245e786b5906d3d9d2c59af6366a1b5a53b1770c5f2c4ac07cb9cb65e213a0695c81329ebf19cceaec289bc3fa2</hash>
-        <hash alg="SHA3-256">de376611b8d84c8f0b9017604d3b00bc0750f6a4b3e887bc4ea379ffbca61b56</hash>
-        <hash alg="SHA3-512">de8d24c29486eb900c313109662800c41f029c6b7e0246b59a0da30150d8641f121445f52df64066e51dbf083e23fe3d2f10a8b44e5a48fe7c25b52216938425</hash>
       </hashes>
       <licenses>
         <license>
@@ -393,9 +351,6 @@
         <hash alg="SHA-256">2dd70a080e8542dc5ee727387abed963fc24122cd784ab38355f87d0e08d9772</hash>
         <hash alg="SHA-512">1e00f24d41a85ea0bb21ca08b1964acaf66ede60347df9bfd5de9c90e7d08dc59530cb7d6c0c138f44bbd75406ae3c0c1e7f031716a7c3d30e6cc5db14071345</hash>
         <hash alg="SHA-384">8a3be2087d79b469470138b2d17fae342a57e3e7dde0aeaec9ae385b473ac2cfd871f81fd12879c41372002ccea52a3e</hash>
-        <hash alg="SHA3-384">701069df05a5567cb23ec1748433d76044de4ff63c5bcb07e9b145651500325910cc15b94a1a3c9aa9bd96cbed5fe168</hash>
-        <hash alg="SHA3-256">c73d7bbb271d9eeac7677064f1abf1879455f665df96a25acec456568c4d59e7</hash>
-        <hash alg="SHA3-512">3d82cb5931a382cbc87ba69fc0118af92720396cbfa6414021964b1a4799f855760243b684ee7bfd7a48f56313acc02d8051c617afc99464da75c5c2d46f1454</hash>
       </hashes>
       <licenses>
         <license>
@@ -417,9 +372,6 @@
         <hash alg="SHA-256">69a4537045ddbcaed4c68eef074462eb12d324d7953f62c5ecd35df645e8aec9</hash>
         <hash alg="SHA-512">5148ca86d6a28bd85f7ee4922d405d58fd3e61204f70b1ac3a755fa34455227ffe29f04e710596e43c48d1bce3e9c9379ca2c6fedabbc65dab7e00b4ae995823</hash>
         <hash alg="SHA-384">083794a57d718dd04eda74b7994ed7608ee14b8c84034e775def46aa7242e332b45007975fecb19922b8a3a2e7a00493</hash>
-        <hash alg="SHA3-384">239cf654b22d97ad28224912400f635a06fe5ec7e3562f19bb38c3f3006e7b19ff3036221867c4c721184e84b880cb9c</hash>
-        <hash alg="SHA3-256">89cb985a9228aea9e192246c7033de3414692cfe5ae131be1e9768a8bd28f152</hash>
-        <hash alg="SHA3-512">68c3b32dbd60054abfa8fc73b32d14a921b76652d739585a18ec1f7209bf9190c17cee9936219b2d49c49556b3295b571f406d6d071225fcbc0012b116b7ec89</hash>
       </hashes>
       <licenses>
         <license>
@@ -442,9 +394,6 @@
         <hash alg="SHA-256">0818930dc8d7debb403204611691da58e49d42c50b6ffcfdce02dadb7c3c2b6c</hash>
         <hash alg="SHA-512">069e6ddce79617e37d61758120c7e68348ee62f255781948937f7bec3058e46244026d7f6a11e90fbc15cd4288c4bb1acee4f242af521c721a9e68a05e64d526</hash>
         <hash alg="SHA-384">fd6f7ad85d02ac63cd1a586c8bb158c1fc000495f512f097731ea9f749b5da2637615b821294962805ba312c738f40aa</hash>
-        <hash alg="SHA3-384">17cd61f59a162250b52a89c7c56eb60da253b776210500313c7b82744483ff84717946f969251fb4d76f9bb12a2458fe</hash>
-        <hash alg="SHA3-256">9dcb04582c64c79e788f9191195834ec75bb3457133d22a176a0ccb069b97103</hash>
-        <hash alg="SHA3-512">990faffa454598a3fa82affe30f1323db769d2e1fff20d9c7163ef6fd95ac7a0874c06a634207a2eaed9e5afbdee68b225138fc75018717ba97efe3ffe92c88a</hash>
       </hashes>
       <licenses>
         <license>
@@ -468,9 +417,6 @@
         <hash alg="SHA-256">62ae28187ed2b062813da6a9d567bfee733c341582699b62dd980230729a0313</hash>
         <hash alg="SHA-512">984b32c7902a0c46c855faf13857db897f6bea25a116fbaf7b0934bc2787dccdb47470c43d9e74e0506c725271265dd39c74ae197e504d6d8de3cbf0973f6b37</hash>
         <hash alg="SHA-384">cc951ce091b638fb2cd5e482c7b3238317e589e225e75688cf7a1c4d70a995d8a16806d4cd5add2f260b08116a03731c</hash>
-        <hash alg="SHA3-384">7dcaea87fab5a5f59789ec2bdd76b59f5233ff653c582c6641fe73071e310c25387f07a8aaf177bb73488c950d0c90e6</hash>
-        <hash alg="SHA3-256">69352d198d19a57e9da6495f3500e206d156cf5eb164b8c8117ccdcf7b7117eb</hash>
-        <hash alg="SHA3-512">a9c4798b67e929cecaf7a4dd34f920868d46434b954d0fe75d198134e58049e247d06dc88871f4a1bb7a8443300af08b1bb9c66fbd6b21dcc85adb42bff7ce37</hash>
       </hashes>
       <licenses>
         <license>
