--- results/org.cyclonedx/cyclonedx-core-java/9.0.2/oss-rebuild-improved-2/reference/cyclonedx-core-java-9.0.2-cyclonedx.xml:bom.xml	2025-04-06 13:43:08.748055949 +0000
+++ results/org.cyclonedx/cyclonedx-core-java/9.0.2/oss-rebuild-improved-2/rebuild/cyclonedx-core-java-9.0.2-cyclonedx.xml:bom.xml	2025-04-06 13:43:16.939927137 +0000
@@ -17,9 +17,6 @@
           <hash alg="SHA-256">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>
           <hash alg="SHA-512">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>
           <hash alg="SHA-384">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>
-          <hash alg="SHA3-384">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>
-          <hash alg="SHA3-256">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>
-          <hash alg="SHA3-512">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>
         </hashes>
       </tool>
     </tools>
@@ -61,9 +58,6 @@
         <hash alg="SHA-256">f700de80ac270d0344fdea7468201d8b9c805e5c648331c3619f2ee067ccfc59</hash>
         <hash alg="SHA-512">cb9c3b2055d0b31d106293f0bc3696f90a11a30953e5b05a1a3c453e98a563475c93d7c6d1707e75f59d0806fba5fd8e4486b8bd72e58bb6ae995bdbbeeb7e17</hash>
         <hash alg="SHA-384">a0fd174b2f8a21b43828371a7ee03c915b79e69d7b0e16cfe6367f794e2f8e6bbebc261e8a4ba35a79779b2338a774a4</hash>
-        <hash alg="SHA3-384">803fb227bd6770cc21c701b9529606f95ba05c30ea3d807b18b3681fde0c7cabd0e2f40ab36567832f63e0c42b77d0f2</hash>
-        <hash alg="SHA3-256">41b9b86fd0b19ff44d19d108302d7b0111ed86d07a65a90efe1023537fad8748</hash>
-        <hash alg="SHA3-512">eaacc9eafccf4bda0c72c5151dbd7e99954842782c91b501af8c7ca462a04b6c59d7ab8e1ef43b3ebc1b12ca62f4574544bc31df10f33f4a15cd3c3399bd808b</hash>
       </hashes>
       <licenses>
         <license>
@@ -88,9 +82,6 @@
         <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
         <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
         <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
-        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
-        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
-        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
       </hashes>
       <licenses>
         <license>
@@ -116,9 +107,6 @@
         <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
         <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
         <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
-        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
-        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
-        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
       </hashes>
       <licenses>
         <license>
@@ -142,9 +130,6 @@
         <hash alg="SHA-256">1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1</hash>
         <hash alg="SHA-512">5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f</hash>
         <hash alg="SHA-384">74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46</hash>
-        <hash alg="SHA3-384">15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f</hash>
-        <hash alg="SHA3-256">1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5</hash>
-        <hash alg="SHA3-512">c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5</hash>
       </hashes>
       <licenses>
         <license>
@@ -167,9 +152,6 @@
         <hash alg="SHA-256">e45551727707acc0c56ac62d56964332ea0f138d6cc3656d988b9369150f5247</hash>
         <hash alg="SHA-512">8064df400154caa110b8845bd17e6cea2683307e575ce88e40d7c0c8965ea0af6c150a376d8b9ba7354676c41b52c94535f30c6e830447613299ccf5fc7aa959</hash>
         <hash alg="SHA-384">0597100022f72e020c9d929bf57ecef91af7574610fb03b4019feba4b25f491a076f03577be2009e66d9001c4c0f8ab0</hash>
-        <hash alg="SHA3-384">bbdd55a31a4755ef589bcb176283fe03e3c9089d315eab577fef3a9c2d02e632c6ac3fdebbc90a2f0f8ed7974b9f397c</hash>
-        <hash alg="SHA3-256">c9881b69bde35ea6ff4006877b9fbf91462f911b5b142aa699a45a00867d413a</hash>
-        <hash alg="SHA3-512">2b9caf58deef687a9bf01abd61a7af4abdb61247a8a966683a18157ee948f1ea424602598dc8f665bf24f7e1e516866298ef0507e9d697cb20dcf60eff2095ca</hash>
       </hashes>
       <licenses>
         <license>
@@ -194,9 +176,6 @@
         <hash alg="SHA-256">bf90159666e64d2b4a43f411552ac0fcdc26fa7c3d2de50533031b05c19b6359</hash>
         <hash alg="SHA-512">82efd284346872042b9abe77705d3698727d1327510e64da77fc83d6270c434def1110ab966e57051f7c84d8a038c3ed098e09e75661a781f82596810aa51afb</hash>
         <hash alg="SHA-384">5545ff3ba7ad0188441b46fce651850ec6b9cba9da44dbb8b71ec8b876f5fa5f1446f395314525eb15084e1d82e9c418</hash>
-        <hash alg="SHA3-384">729dcef762dfd3fdea5d8191a597839fc856f1c170a8ab539e40acb91a06e0114630707882cd4a2ddfff43842f036800</hash>
-        <hash alg="SHA3-256">04091c73e32a65919905213a90f9501c17e6486e3833948c11b4e239a51b1875</hash>
-        <hash alg="SHA3-512">f80f3cc160510a6d017985c3d017d034732b97618e35a7d58e2e193a59e1c50b416f5ab6eeb159d721780924d7767ad5b7930f5928ceaf36acd60ef2b61de572</hash>
       </hashes>
       <licenses>
         <license>
@@ -219,9 +198,6 @@
         <hash alg="SHA-256">ddb26c8a1f1a84535e8213c48b35b253370434e3287b3cf15777856fc4e58ce6</hash>
         <hash alg="SHA-512">5ea2d50e0807082e01574df591567022f98a8366efae1ac9dd7085c3fb8508ea1cc39bf578bbd5d6e109e9116370062a96d1703e2d501b6c5884f54c3be4f171</hash>
         <hash alg="SHA-384">1009a8e6db52c3de411d70380ee2b8f8b569e2beba5145fd788f8783bc866fb14cee757a5e0bcf51fc3e1692bd024f29</hash>
-        <hash alg="SHA3-384">9d81565f61a363c89e87f11e3645fd747cd065b60d01607ecc8cef2ca8a9dab6540a77cc1d2587808824ab72782457e4</hash>
-        <hash alg="SHA3-256">a30bb87fe658889b753394eff933ebcfc646656cc7ab99c13d3e6aae13681d14</hash>
-        <hash alg="SHA3-512">e95c5a29de2ab54909272363503130b3e57e7ac01e98223b1d7c00cb16f38ca64ef4a2834e419482b11b08bea1b7fe16a7d5fc42a43a2f5c060227343b36a7a2</hash>
       </hashes>
       <licenses>
         <license>
@@ -244,9 +220,6 @@
         <hash alg="SHA-256">fccad82e13172c0e4384db71577219c9b8631c0820f4b18daaa57016fb661c76</hash>
         <hash alg="SHA-512">d3edb04cffb0a7c3349c7dc1dcd154ff0a16686155b13e5e674adedbb07d6eaca156a5b0bec2857496dec8c3669dae7d04b3debce6b324ffcfdb278ea0fcc0fe</hash>
         <hash alg="SHA-384">df95479d6e84ea028ee42d491336d0fb69100dcbeb2b828fd1794c272c33bb16e4a7dfffee82bff09fc4119ba4669a5d</hash>
-        <hash alg="SHA3-384">a84cb1dda50488ac552cfcb372ca0f313f39577100b208209b337c22a0bb0a5c6185b78ed38a998991ddb01234bb3346</hash>
-        <hash alg="SHA3-256">2ed3dfad7ad53ac0b835fb4c2b1fa8bff1b68d3be86c9a93b67ffe369305ad29</hash>
-        <hash alg="SHA3-512">79213b46cb73f63e4839b2840e418c8648acb39c3c27a87c075eda08cfc342354c73a45ee7a303eb8234c914a60d152180cb29eabad71e2b4f7d44140b3059a7</hash>
       </hashes>
       <licenses>
         <license>
@@ -269,9 +242,6 @@
         <hash alg="SHA-256">b6ca2f7d5b1ab245cec5495ec339773d2d90554c48592590673fb18f4400a948</hash>
         <hash alg="SHA-512">ca3fa3b21047c8762b5b806f82de712a353f30880af00297fce1f4fec90471435a25d93aa0925961a34f4fa18e0d973f4611d5cb2c53d3d0b28f00ac1b9b6462</hash>
         <hash alg="SHA-384">e6d921331272972f4c6cd1f72b5dd4c0ede8f0eb4f3da0ae1cb7ee12ed64ceb6d7693a8f52601bc8df0ad8b3fa7cb45c</hash>
-        <hash alg="SHA3-384">c21aee49a0131f017692f0749a4988759da20a791d327b2e33c2f6277aed192d082868369d6fbceb541d5483c6dbe399</hash>
-        <hash alg="SHA3-256">e656bb7d5f0df07c47dcba4658b18843e4b3a4a12ca3b521a7e8607b48795d80</hash>
-        <hash alg="SHA3-512">b833061dcb9c159a5063ccb554051818c7969fd2967160aaa9e7f3c45981a3a43e8053bfc2997b83774a950837425f9410f6f9b9a6eb37b7d5f8608081726fe1</hash>
       </hashes>
       <licenses>
         <license>
@@ -294,9 +264,6 @@
         <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
         <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
         <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
-        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
-        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
-        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
       </hashes>
       <licenses>
         <license>
@@ -320,9 +287,6 @@
         <hash alg="SHA-256">8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896</hash>
         <hash alg="SHA-512">00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703</hash>
         <hash alg="SHA-384">80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9</hash>
-        <hash alg="SHA3-384">9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40</hash>
-        <hash alg="SHA3-256">9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b</hash>
-        <hash alg="SHA3-512">f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf</hash>
       </hashes>
       <licenses>
         <license>
@@ -344,9 +308,6 @@
         <hash alg="SHA-256">5d7b6ce4c7b2a3ed189511cbaa913808c7cd2b570d70b923426352785bffbdd0</hash>
         <hash alg="SHA-512">e156aeb4b603023dd55c599315f22cbcbfdb00a2037c01b346324dceba583922dad29b20570a244863373545f5b77a311c0f740d3598dc4978bec6298cc613ba</hash>
         <hash alg="SHA-384">5313166403f1c62732d41283f946418dec1971cdd6530a8e4495b84f67d60b96f7c50a2b8b6a63905767bea1ab0780b5</hash>
-        <hash alg="SHA3-384">a7cc84c4ecff22d04fa3da5d56dda9ca6253b87ab71479932c2e3da1edcfebfe176250b82abb66a9325907ab79309f96</hash>
-        <hash alg="SHA3-256">a45ff1fdc732d5e7c626072e84e8ba24eb0102d26380d918b8ef8707ea307c3a</hash>
-        <hash alg="SHA3-512">7164adfc8d496253af3d4841150fff7335f72d29523696cbcb15fb7dec2c18a74e731ad55db6c3392aee895f2b4f055a2f83414bc9ab292a49b47e17401aac55</hash>
       </hashes>
       <licenses>
         <license>
@@ -368,9 +329,6 @@
         <hash alg="SHA-256">a9a567da9bf8bdcd4710fb5c4c7bc155658bb964a91637664ed7bd6e77b050c5</hash>
         <hash alg="SHA-512">7df8d7b78c76e3d4c11be0b45e18561177245b0494d67dfd95be13a10b0f026cfae870fdbae7bae34bb278be73d8f28d02c175ba43863a712a73306d89b1e710</hash>
         <hash alg="SHA-384">3433a20e764a82fb9ff48a4a6337b492f329015b9416465508650782db090ab275c44166a6f9a407adb3d39c0fdb7554</hash>
-        <hash alg="SHA3-384">863a2245e786b5906d3d9d2c59af6366a1b5a53b1770c5f2c4ac07cb9cb65e213a0695c81329ebf19cceaec289bc3fa2</hash>
-        <hash alg="SHA3-256">de376611b8d84c8f0b9017604d3b00bc0750f6a4b3e887bc4ea379ffbca61b56</hash>
-        <hash alg="SHA3-512">de8d24c29486eb900c313109662800c41f029c6b7e0246b59a0da30150d8641f121445f52df64066e51dbf083e23fe3d2f10a8b44e5a48fe7c25b52216938425</hash>
       </hashes>
       <licenses>
         <license>
@@ -393,9 +351,6 @@
         <hash alg="SHA-256">2dd70a080e8542dc5ee727387abed963fc24122cd784ab38355f87d0e08d9772</hash>
         <hash alg="SHA-512">1e00f24d41a85ea0bb21ca08b1964acaf66ede60347df9bfd5de9c90e7d08dc59530cb7d6c0c138f44bbd75406ae3c0c1e7f031716a7c3d30e6cc5db14071345</hash>
         <hash alg="SHA-384">8a3be2087d79b469470138b2d17fae342a57e3e7dde0aeaec9ae385b473ac2cfd871f81fd12879c41372002ccea52a3e</hash>
-        <hash alg="SHA3-384">701069df05a5567cb23ec1748433d76044de4ff63c5bcb07e9b145651500325910cc15b94a1a3c9aa9bd96cbed5fe168</hash>
-        <hash alg="SHA3-256">c73d7bbb271d9eeac7677064f1abf1879455f665df96a25acec456568c4d59e7</hash>
-        <hash alg="SHA3-512">3d82cb5931a382cbc87ba69fc0118af92720396cbfa6414021964b1a4799f855760243b684ee7bfd7a48f56313acc02d8051c617afc99464da75c5c2d46f1454</hash>
       </hashes>
       <licenses>
         <license>
@@ -417,9 +372,6 @@
         <hash alg="SHA-256">69a4537045ddbcaed4c68eef074462eb12d324d7953f62c5ecd35df645e8aec9</hash>
         <hash alg="SHA-512">5148ca86d6a28bd85f7ee4922d405d58fd3e61204f70b1ac3a755fa34455227ffe29f04e710596e43c48d1bce3e9c9379ca2c6fedabbc65dab7e00b4ae995823</hash>
         <hash alg="SHA-384">083794a57d718dd04eda74b7994ed7608ee14b8c84034e775def46aa7242e332b45007975fecb19922b8a3a2e7a00493</hash>
-        <hash alg="SHA3-384">239cf654b22d97ad28224912400f635a06fe5ec7e3562f19bb38c3f3006e7b19ff3036221867c4c721184e84b880cb9c</hash>
-        <hash alg="SHA3-256">89cb985a9228aea9e192246c7033de3414692cfe5ae131be1e9768a8bd28f152</hash>
-        <hash alg="SHA3-512">68c3b32dbd60054abfa8fc73b32d14a921b76652d739585a18ec1f7209bf9190c17cee9936219b2d49c49556b3295b571f406d6d071225fcbc0012b116b7ec89</hash>
       </hashes>
       <licenses>
         <license>
@@ -442,9 +394,6 @@
         <hash alg="SHA-256">0818930dc8d7debb403204611691da58e49d42c50b6ffcfdce02dadb7c3c2b6c</hash>
         <hash alg="SHA-512">069e6ddce79617e37d61758120c7e68348ee62f255781948937f7bec3058e46244026d7f6a11e90fbc15cd4288c4bb1acee4f242af521c721a9e68a05e64d526</hash>
         <hash alg="SHA-384">fd6f7ad85d02ac63cd1a586c8bb158c1fc000495f512f097731ea9f749b5da2637615b821294962805ba312c738f40aa</hash>
-        <hash alg="SHA3-384">17cd61f59a162250b52a89c7c56eb60da253b776210500313c7b82744483ff84717946f969251fb4d76f9bb12a2458fe</hash>
-        <hash alg="SHA3-256">9dcb04582c64c79e788f9191195834ec75bb3457133d22a176a0ccb069b97103</hash>
-        <hash alg="SHA3-512">990faffa454598a3fa82affe30f1323db769d2e1fff20d9c7163ef6fd95ac7a0874c06a634207a2eaed9e5afbdee68b225138fc75018717ba97efe3ffe92c88a</hash>
       </hashes>
       <licenses>
         <license>
