<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.2" serialNumber="urn:uuid:84f30c18-1088-471e-b336-e4d7098ea230" version="1">
    <metadata>
        <timestamp>2021-08-19T00:30:03Z</timestamp>
        <tools>
            <tool>
                <vendor>CycloneDX</vendor>
                <name>CycloneDX Maven plugin</name>
                <version>2.0.0</version>
                <hashes>
                    <hash alg="MD5">3f16922c19f6c87476afec19ccec7905</hash>
                    <hash alg="SHA-1">072b6357a55c5c5e55cc955cd9f670a95aaea4db</hash>
                    <hash alg="SHA-256">31744b750e5b1027178caf757cd7d0af111db1e6991128178557581ecfdd2d20</hash>
                    <hash alg="SHA-384">682b5418defa0851619ebae6073de82f0a75f0ee03de3caaca2ab7c997a6e3be76f275e53aa9eafee39b001b990559e2</hash>
                    <hash alg="SHA-512">63eabeffeaf253af418af621b884cbd00122499a8f9a6bddf99286733b1cf03acea13e1d29e687a9be0531b56d2abc7ce0a233100dd8a028b8eb6bcf82669ea5</hash>
                    <hash alg="SHA3-256">8f885513cff462afac51f2459bcb8fbb71e33ad1abbf8c9ecd79ac143be61673</hash>
                    <hash alg="SHA3-384">8f0df9ac6e80d5297c0a7b3069c6cb4bda6d563b31856fa7e8f8117bac7c1fd2b06c66c2bbee4bae20aaef9e1f2fa02c</hash>
                    <hash alg="SHA3-512">52a3b3f62f18743f810133e59aef852656e26c5b289b3bae3b5d7a8b7864ae1014e496ecd4150a018858f96f448cb7f0776edcb36bf85ce62ba07bf63fbb9cfe</hash>
                </hashes>
            </tool>
        </tools>
        <component bom-ref="pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.5.2" type="library">
            <group>org.cyclonedx</group>
            <name>cyclonedx-maven-plugin</name>
            <version>2.5.2</version>
            <scope>required</scope>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                    <url>http://www.apache.org/licenses/LICENSE-2.0</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.5.2</purl>
        </component>
    </metadata>
    <components>
        <component bom-ref="pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar" type="library">
            <publisher>CycloneDX</publisher>
            <group>org.cyclonedx</group>
            <name>cyclonedx-core-java</name>
            <version>5.0.3</version>
            <description>
                <![CDATA[The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">eae3fd8c212f1af205297e13ba56df75</hash>
                <hash alg="SHA-1">4bd85a9ffdad002fa6fb924a3565523c60bc4044</hash>
                <hash alg="SHA-256">ba8b109b4cf6de3378233ca94b9bc2cd1919bd113c5049f0d0280c0ae5e8ccf3</hash>
                <hash alg="SHA-384">37d6e24c5c200f4972fe24950fd947a351d412c263abf263fbe2707b183dfcc286b916c007d1722424142f49385ab300</hash>
                <hash alg="SHA-512">ba0e6b239085b43d7dbce1ef68fa7026ce8dbc3b31fa23dea6d9d0eb70d46070788a1631c1a57cec47ae983756c983d84225d1f6f7e36fc3151be2b6b76f9319</hash>
                <hash alg="SHA3-256">58956dc45cbf183952a38e0fbf47d30b887af26c9cb16a2beeac510d24c9f821</hash>
                <hash alg="SHA3-384">84d1b9e64cc9411af9d806f8ea719582af59419f0206dc92f36912da7fced36824fe62971b5fff3e330701dc182d6437</hash>
                <hash alg="SHA3-512">d74ed9beb9751963771a60a7eeaacb635da3d9df517631bf156297608fa61c85cab3eb1f483b3e113baf96ff859eeddbe4b5083b9145e6a10b02c5385980c7eb</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                    <url>http://www.apache.org/licenses/LICENSE-2.0</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>https://cyclonedx.org</url>
                </reference>
                <reference type="build-system">
                    <url>https://github.com/CycloneDX/cyclonedx-core-java/actions</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://github.com/CycloneDX/cyclonedx-core-java/issues</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/CycloneDX/cyclonedx-core-java.git</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>commons-io</group>
            <name>commons-io</name>
            <version>2.11.0</version>
            <description>
                <![CDATA[The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
                <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
                <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
                <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
                <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
                <hash alg="SHA3-256">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>
                <hash alg="SHA3-384">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>
                <hash alg="SHA3-512">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/IO</url>
                </reference>
                <reference type="vcs">
                    <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
                </reference>
                <reference type="build-system">
                    <url>https://builds.apache.org/</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar" type="library">
            <group>com.github.package-url</group>
            <name>packageurl-java</name>
            <version>1.4.0</version>
            <description>
                <![CDATA[The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a "mostly universal" URL.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">72e2b308cf1757ffbe676f4bdb93cab4</hash>
                <hash alg="SHA-1">5b0bd20a9b4f01bcda741cbccf34af14819ecada</hash>
                <hash alg="SHA-256">fc7ab7ff3a33ae7bbf07df54987e85e48d26fc6c56e7948a695532228961718b</hash>
                <hash alg="SHA-384">e5b1ecbb708eaa324b30d180ff639c4f52dab6c6f545813d875a15872a31d6dda2491364c26acba0ccf70aa0e30d8a9a</hash>
                <hash alg="SHA-512">3592f3ab86880bbd2136b5c45d6a75aef21b7a9a10b8771675f5ffb5d7624927a07f8537c6c308ad33975465e2a6093833d9fbb144981cf89315b15640cfc2e0</hash>
                <hash alg="SHA3-256">31a9af068706121064fa83823c2ced159d34627ccbcaef87f66b78dd85332c63</hash>
                <hash alg="SHA3-384">d347829ccfc0ccfbd3a321e5ebf8d4fd79e8ed533b4a31ab6aaa7a59ef48b6d9802d17ed2b4feed1671f954c331f56c1</hash>
                <hash alg="SHA3-512">1ad5f3a3793b29ada8e911841154467a76fb98fb38c3edbdfd1241e88469ba5e2bb1cd92408528a6340f15f24005cd5fa1517321bd62273987301f25714319c6</hash>
            </hashes>
            <licenses>
                <license>
                    <id>MIT</id>
                    <url>https://opensource.org/licenses/MIT</url>
                </license>
            </licenses>
            <purl>pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://travis-ci.com/package-url/packageurl-java</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://github.com/package-url/packageurl-java/issues</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/package-url/packageurl-java.git</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.jackson.dataformat</group>
            <name>jackson-dataformat-xml</name>
            <version>2.12.4</version>
            <description>
                <![CDATA[Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">d2b673a50c00821e79b44b870d5f1e00</hash>
                <hash alg="SHA-1">015c743856696c0239f2c51d8d19d9f97f034713</hash>
                <hash alg="SHA-256">4f9e98e3aaab049cfd67c410881031ccea2c2c289e8656499bc55187c80e5503</hash>
                <hash alg="SHA-384">3323b13c455a65e808fad441668185f1bb44a46c0a48453ab639e3a27350f59bab5377a40ca8edb197ed62538d1a63f1</hash>
                <hash alg="SHA-512">6553dd28fc67bbc92a164e25a5382610b5a011ba740156ea7ba97d95d5edd935b9ba2a3dfa910b1509e0e58272093c8f58c575e888ab22232f544d639e9fd68c</hash>
                <hash alg="SHA3-256">ce5adaf57de245c34e7f3f0fd74950fa7a9c4887d43878b02644f05c16beafd6</hash>
                <hash alg="SHA3-384">e6e4211e6242e92eaad5cdbeb0bcc42ce0e0b5ad40c494c2433a59c8fa5dc03f6df407f5a952dff8de3f5a17989c029a</hash>
                <hash alg="SHA3-512">6d9e835967770c97cc8a50dd9a3043eac2b9858e25bee8a1b8c47cbce5c8dbd0a572d802c475a85994b2cbd8e694be0df0547ff1c8f0b1a878e90173b07fd6c1</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/jackson-dataformat-xml</url>
                </reference>
                <reference type="website">
                    <url>http://fasterxml.com/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.jackson.core</group>
            <name>jackson-core</name>
            <version>2.12.4</version>
            <description>
                <![CDATA[Core Jackson processing abstractions (aka Streaming API), implementation for JSON]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">58ffcb451f0bf6beb78e306cfe5d46f3</hash>
                <hash alg="SHA-1">006a1bd259b6c4e3f9219ec8ec0be55ed11eed0c</hash>
                <hash alg="SHA-256">3506ce47ec2604ae2d80d79505f7cb374f718060639415c07d144adadd2d68a3</hash>
                <hash alg="SHA-384">d14522335bb794675c557ee54320df2db3803d31f9d054a9299f738fe644a487d8837cd30395fd0cfc5cfdcee591fc45</hash>
                <hash alg="SHA-512">428e0ebb16dd4c74ab0adf712058fd0dc0cd788f6e6f90c60c627da6577b345fac60a30694e111f1cd4e3e8bf79a1f1b820d30ada114984b26c28e299e326eaa</hash>
                <hash alg="SHA3-256">47a188a6b932b7cec26907d4487d36c2e304f8d9b095d46834d5eed61c946efa</hash>
                <hash alg="SHA3-384">2e0e35f6d76e7166b782c4f121bac42f1f8ab67f1fd2acc8d5c1168fc85ea85bc74fb10c78871ad380abfe4f863d9216</hash>
                <hash alg="SHA3-512">0e7d6ac4aee2a4b6e6203059cbaddb85d26a797a27fb3397a95225a71f1f61b02bc1f9aa67c3242fc9f5107a3df7da692e5840e28019dcddc8fbcb7921a5662b</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/jackson-core</url>
                </reference>
                <reference type="website">
                    <url>http://fasterxml.com/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.jackson.core</group>
            <name>jackson-annotations</name>
            <version>2.12.4</version>
            <description>
                <![CDATA[Core annotations used for value types, used by Jackson data binding package.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">16c7a1094270a27013fd58df7f6800f7</hash>
                <hash alg="SHA-1">752cf9a2562ac2c012e48057e3a4c17dad66c66e</hash>
                <hash alg="SHA-256">f6aa3706a875689b66cdac3334f65dfdb795ccfad4117bf072893b196ed1ec8e</hash>
                <hash alg="SHA-384">c8e65ce81c0f34aa01a83b3506247d28feff2765c234606657d77344ca85dbf9a38c447ae5dfcf1dfdc793f0582cc086</hash>
                <hash alg="SHA-512">6fdad6c5bb71a97331a662fe26265aacab6869f3307a710697d5c2f256fd48935764bfb0b3505a2cbb1605daf0b7350abdf84a1b1cf2bb1e91d9184565243c8e</hash>
                <hash alg="SHA3-256">a06fe4ccbda06d120d896ae0aafddcbbe308618d570ddd0fab79f6d4f2e88bff</hash>
                <hash alg="SHA3-384">fad11b5170fbc17ed65efcd52e15b83f77b1f810a368b855000b005a63e9f55b82cb3091971e140c282c958b7f2370f1</hash>
                <hash alg="SHA3-512">d215707c4becadfe5c4aa5ceafa88d2e532e705fa2cb31f35f6ca70868109bb24822097b5f8f108891eca356404cc5ab7ffb556f971b091c9774f580c522a3c4</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/jackson-annotations</url>
                </reference>
                <reference type="website">
                    <url>http://fasterxml.com/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.jackson.core</group>
            <name>jackson-databind</name>
            <version>2.12.4</version>
            <description>
                <![CDATA[General data-binding functionality for Jackson: works on core streaming API]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">7bf7ed4119602e8a7b23356dc0fba920</hash>
                <hash alg="SHA-1">069206e02e6a696034f06a59d3ddbfbba5a4cd81</hash>
                <hash alg="SHA-256">e99a7b4b89074bc689aabcd9eb1f2c1318b68cc5c34979daf3e34edc558c7a01</hash>
                <hash alg="SHA-384">6f6668716a3c339e6144c8c3d8c1ceeb26303d11263c501ed8d906694f4de1abc0c597839c57987e16b38005ec548046</hash>
                <hash alg="SHA-512">9f771e78af669b1e1683d6c5903bbf4790aaa88b6b420c2018437da318c3fa4220cd7fa726f3e42a1b8075def1fdbd3744937c15f3bcedfca3050199247363e8</hash>
                <hash alg="SHA3-256">cb8cdbb10ee9caace2346ba5f82cd001fbf262306ea322e841ebae055f04e48c</hash>
                <hash alg="SHA3-384">19c06e475f9f76d5264f1994bd51f68a608516e5c3263fb21e99f01345062a7693feda115734164282471b45985745b6</hash>
                <hash alg="SHA3-512">08fb3360dbc12adb60a532dd9224a1ef5b3aaf407c0a7efc5cc17fbce01814693530fe867014d679f0910b28089964261161f781d5098b716aa66e4b6eef4907</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/jackson-databind</url>
                </reference>
                <reference type="website">
                    <url>http://fasterxml.com/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.jackson.module</group>
            <name>jackson-module-jaxb-annotations</name>
            <version>2.12.4</version>
            <description>
                <![CDATA[Support for using JAXB annotations as an alternative to "native" Jackson annotations, for configuring data-binding.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">29ff9647ec16c8e897b29c380b7e87d7</hash>
                <hash alg="SHA-1">5e43703aae1a9843dfd7df0a0ad6cbfedcaff67f</hash>
                <hash alg="SHA-256">7a6063c76ba26f14f18b808ad50955f87fa20d2a5225a1d8dc5add63ce234f75</hash>
                <hash alg="SHA-384">d76c4d3ef5ef7b4c54ccfb5e3ea5d476c568111c45364e4eda4456eb2e06bcc4ae8a2bad58a46458996f055a793bff45</hash>
                <hash alg="SHA-512">1d2f21c485b5e5d84f369b65da9d467d1521c3c19d83fdbb49397ba33aaf811d0a39f94160ed21ad0d2ce997522324289607d0f0d0f678c22107d79d6f214bc6</hash>
                <hash alg="SHA3-256">70c61180f483a9376d1f4c0e07f2dd461c706f4ca635aea36e2334b5ca22c9bf</hash>
                <hash alg="SHA3-384">9951663349ed01f37a2c6ed000244be963b4d7a02514aa2ba12bfe080612572b2a04e085892301d0eee61f58d7ee43d9</hash>
                <hash alg="SHA3-512">f664f2b5cb774751cf8a50ca3618724c753b3449f201dc558fc45ceef51fcab94cf7f90eae29f64efc4a4ff76907434b2ce32151e6ef871a129714f52e3749ea</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://github.com/FasterXML/jackson-modules-base/issues</url>
                </reference>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/jackson-modules-base</url>
                </reference>
                <reference type="website">
                    <url>http://fasterxml.com/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar" type="library">
            <publisher>Eclipse Foundation</publisher>
            <group>jakarta.xml.bind</group>
            <name>jakarta.xml.bind-api</name>
            <version>2.3.2</version>
            <description>
                <![CDATA[JAXB (JSR 222) API]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">dabb40ba58199304c640b7bd8bb2fbac</hash>
                <hash alg="SHA-1">8d49996a4338670764d7ca4b85a1c4ccf7fe665d</hash>
                <hash alg="SHA-256">69156304079bdeed9fc0ae3b39389f19b3cc4ba4443bc80508995394ead742ea</hash>
                <hash alg="SHA-384">78c5131ed2926819aea1a8a59d78ca9a9fa7e5e8da05a0816608bca4768569202b15b9666e5d608ef1611ecd409dca90</hash>
                <hash alg="SHA-512">5a9a94fc323aecc9c5b28e9ac688aac8d09725d4cae660a57f5698914db91e351283dfe4909a2cc6de803890ac2b3b9f06af9d071d465031e55326a1085a11db</hash>
                <hash alg="SHA3-256">5fe06acf4a556c000d128a93f91374d080547c3c0f7946c5f42cb198c5de5764</hash>
                <hash alg="SHA3-384">cad8a0f18bd947886b832dbafec2e6bdb5c69c8694aba41c4f075ac54c5a8aabbcf32c3f981e0b657a390813a7cbc5bc</hash>
                <hash alg="SHA3-512">0301ccd4fd04c2e01c0ee9a6cff68f297689db0c3c3da44eb302dcf6b03f24c811bc132460079ce52ff8b522100df23a955c950b68c0a89e2ba25e34baf9bcd9</hash>
            </hashes>
            <licenses>
                <license>
                    <name>Eclipse Distribution License - v 1.0</name>
                    <url>http://www.eclipse.org/org/documents/edl-v10.php</url>
                </license>
            </licenses>
            <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/eclipse-ee4j/jaxb-api.git</url>
                </reference>
                <reference type="website">
                    <url>https://www.eclipse.org</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar" type="library">
            <publisher>Eclipse Foundation</publisher>
            <group>jakarta.activation</group>
            <name>jakarta.activation-api</name>
            <version>1.2.1</version>
            <description>
                <![CDATA[${project.name}]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">9b647398add993324d3d9e5effa6005a</hash>
                <hash alg="SHA-1">562a587face36ec7eff2db7f2fc95425c6602bc1</hash>
                <hash alg="SHA-256">8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b</hash>
                <hash alg="SHA-384">07422d64a103aacb8956c2067175f2cc257494d2cc8dbde29ddf8d93778a2d4b3903565b17173a0b5230b59d535bd474</hash>
                <hash alg="SHA-512">c60edc99f119b9e0df0cf527e2512f2b7ab9db0e17c54e83850695f80f652c981eaae90a296db671cf7ed88a044c150224e030df333feb30f346e8a31fb794c6</hash>
                <hash alg="SHA3-256">880a91ff9e978ac9208c84babd820dc2ded42e601d8a17688eb30883b598dec0</hash>
                <hash alg="SHA3-384">fe6be5e1fb1c0ee5236b2866c1e5058c84043fb4dc3dd5ad8f04e61c01c019c96e92ffdf1de0eaf7e657b2c02c6d898e</hash>
                <hash alg="SHA3-512">91c0b8cb956bdb06e79738a9db624022887b3d83838b708dd3c654f231ab6f9b4a27be2556fd14683cd6158bf8534b96acd2481054e0c946d6e9f641cc5af55b</hash>
            </hashes>
            <licenses>
                <license>
                    <name>EDL 1.0</name>
                    <url>http://www.eclipse.org/org/documents/edl-v10.php</url>
                </license>
            </licenses>
            <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/eclipse-ee4j/jaf</url>
                </reference>
                <reference type="website">
                    <url>https://www.eclipse.org</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar" type="library">
            <publisher>fasterxml.com</publisher>
            <group>org.codehaus.woodstox</group>
            <name>stax2-api</name>
            <version>4.2.1</version>
            <description>
                <![CDATA[tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
                <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
                <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
                <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
                <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
                <hash alg="SHA3-256">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>
                <hash alg="SHA3-384">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>
                <hash alg="SHA3-512">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>
            </hashes>
            <licenses>
                <license>
                    <name>The BSD License</name>
                    <url>http://www.opensource.org/licenses/bsd-license.php</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://fasterxml.com</url>
                </reference>
                <reference type="vcs">
                    <url>http://github.com/FasterXML/stax2-api</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar" type="library">
            <publisher>FasterXML</publisher>
            <group>com.fasterxml.woodstox</group>
            <name>woodstox-core</name>
            <version>6.2.4</version>
            <description>
                <![CDATA[Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">c72181f3fb82bda9aa724e6b0fed3395</hash>
                <hash alg="SHA-1">16b9f8ab972e67eb21872ea2c40046249d543989</hash>
                <hash alg="SHA-256">5fa734d5050f097405a801022d09377bbc81e811ef9a17cd0279ed3279f495a5</hash>
                <hash alg="SHA-384">7ea1a2dd9f37bf0229b88c6f8d20e92c38018e7680352469920b0712d96a4e7f51183f0d836fe12e2ebfaf5a2b638d46</hash>
                <hash alg="SHA-512">f235a53cbf3df547ab82fc27597f8d95a90b8373b3081558fd63fb9ef0dfec16e814a85ce1c2f00bbfe6fabdd8f74ef015a05ff32db450e1c37f91b13520d8ef</hash>
                <hash alg="SHA3-256">9955a67a92d9e8300f4a527b0b06e4edea748ce7b493c677e742e2c31c05b7c9</hash>
                <hash alg="SHA3-384">e7902b16033703fd2494bf197bdba687d0d9ac8fa5d1447defb93ce7af60e1bab19b8cf36d2b67959e29a130af0e34da</hash>
                <hash alg="SHA3-512">208fb2a3acb6c5b3755b48ffdb205bd01ad8a28054ec201c12fbbad8d4d689ef59712697f75f0e1e9333508a29bd1d1d65cbec4d93fa9d09cebc4f9c27aa9f37</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://fasterxml.com</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://github.com/FasterXML/woodstox/issues</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/FasterXML/woodstox</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar" type="library">
            <group>com.networknt</group>
            <name>json-schema-validator</name>
            <version>1.0.57</version>
            <description>
                <![CDATA[A json schema validator that supports draft v4, v6, v7 and v2019-09]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">5895e947ac9f632bab6925b6e6382466</hash>
                <hash alg="SHA-1">a2acac44350f055ba03f4a2e2c57967c12c58cc9</hash>
                <hash alg="SHA-256">b99e21146168ed9efd03ed0e0e7b9bf3a331a024a20ae475fee1b3b11d54dc08</hash>
                <hash alg="SHA-384">1521ab58bdd0f482c2e29dfecd99ae5056df3d5bbbcc3c95500e4b95462c17baa626a1d487ce55386425b7a98b068118</hash>
                <hash alg="SHA-512">f84d63393b3fea4a28833a3e6594a9548e076dc60c748cbe803e23bc7913ee027774742fc1e2397facea184fc3efca6dcf1b2bdbbcaef1d8c5295384452dd854</hash>
                <hash alg="SHA3-256">b426999c9e0a989e20dd6fe8d02381bb24d338ffb6e2cd6394977aa6618c6499</hash>
                <hash alg="SHA3-384">71c50544162de33ff39170f334d44aca8c6cde5ca16893b1e80d4c6ae7458e3dfa3134c1ac9e0535729f20d5faf2b4a2</hash>
                <hash alg="SHA3-512">5b901e5087fdbe285a32435d55465bc7cd904618808c2d3e440ec41145e2b2cff5b072c02fd4a3da25c225686472271f3a951c161d1944d237eba664b5aee064</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar</purl>
            <externalReferences>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://github.com/networknt/json-schema-validator/issues</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar" type="library">
            <publisher>QOS.ch</publisher>
            <group>org.slf4j</group>
            <name>slf4j-api</name>
            <version>1.7.30</version>
            <description>
                <![CDATA[The slf4j API]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">f8be00da99bc4ab64c79ab1e2be7cb7c</hash>
                <hash alg="SHA-1">b5a4b6d16ab13e34a88fae84c35cd5d68cac922c</hash>
                <hash alg="SHA-256">cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57</hash>
                <hash alg="SHA-384">d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de</hash>
                <hash alg="SHA-512">e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173</hash>
                <hash alg="SHA3-256">7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e</hash>
                <hash alg="SHA3-384">9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60</hash>
                <hash alg="SHA3-512">a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7</hash>
            </hashes>
            <licenses>
                <license>
                    <id>MIT</id>
                    <url>https://opensource.org/licenses/MIT</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.qos.ch</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/qos-ch/slf4j</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/javax.json/javax.json-api@1.1.4?type=jar" type="library">
            <publisher>Oracle</publisher>
            <group>javax.json</group>
            <name>javax.json-api</name>
            <version>1.1.4</version>
            <description>
                <![CDATA[API module of JSR 374:Java API for Processing JSON]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">6128da383f9a4a45593650fc263a0998</hash>
                <hash alg="SHA-1">c8efa3cfaeee2b05c2dfd54cba21548a081b1746</hash>
                <hash alg="SHA-256">0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876</hash>
                <hash alg="SHA-384">67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089</hash>
                <hash alg="SHA-512">5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e</hash>
                <hash alg="SHA3-256">e4163d03ba00d439137c448baa853ca32543e5ab9873580d6dd3a96cabc0c0db</hash>
                <hash alg="SHA3-384">cc2797949bde1069ccaad3fc4a15c628dfce02393823bb25ccaae6ffa0d0222b193ccd1e9ff8fc71c98606d173d326bb</hash>
                <hash alg="SHA3-512">af54fa4e5fb9146097f18a9bc5acd492d118fa8b8ab292a864dcb8d1e37370d68b21f746ede20be060abe7cef6b02b575337445f858fc638485ef81795e7acb9</hash>
            </hashes>
            <purl>pkg:maven/javax.json/javax.json-api@1.1.4?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.oracle.com</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/javaee/jsonp</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar" type="library">
            <publisher>Oracle</publisher>
            <group>org.glassfish</group>
            <name>javax.json</name>
            <version>1.1.4</version>
            <description>
                <![CDATA[Default provider for JSR 374:Java API for Processing JSON]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">ac67218fb9716fec512be8d0d877bde2</hash>
                <hash alg="SHA-1">943f240a509d3c70b448a55c6735591ecbd37c88</hash>
                <hash alg="SHA-256">17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955</hash>
                <hash alg="SHA-384">afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e</hash>
                <hash alg="SHA-512">63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d</hash>
                <hash alg="SHA3-256">755a7153b6feb575dd105166d615f81064e2d78d43aa497950852f6dcb282bac</hash>
                <hash alg="SHA3-384">d174b22190bb75a23dfce71ef70d692ea00a662aa49b96feb3fb4a7b41241f13fea8f3f3581442b35bfdf9645cac8f99</hash>
                <hash alg="SHA3-512">4a37342f7d9a787f46e4b891b24d3c4162f3d6f1f0985a65a2096355ef87831d608a5e2efac8c321581cbf626255b0e307fb2fcc13d39af9ee1922cf1acec357</hash>
            </hashes>
            <purl>pkg:maven/org.glassfish/javax.json@1.1.4?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.oracle.com</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/javaee/jsonp</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>commons-codec</group>
            <name>commons-codec</name>
            <version>1.15</version>
            <description>
                <![CDATA[The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
                <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
                <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
                <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
                <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
                <hash alg="SHA3-256">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>
                <hash alg="SHA3-384">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>
                <hash alg="SHA3-512">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/CODEC</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/apache/commons-codec</url>
                </reference>
                <reference type="build-system">
                    <url>https://builds.apache.org/</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.commons</group>
            <name>commons-lang3</name>
            <version>3.12.0</version>
            <description>
                <![CDATA[Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
                <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
                <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
                <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
                <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
                <hash alg="SHA3-256">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>
                <hash alg="SHA3-384">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>
                <hash alg="SHA3-512">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/LANG</url>
                </reference>
                <reference type="vcs">
                    <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
                </reference>
                <reference type="build-system">
                    <url>https://builds.apache.org/</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-core</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Maven Core classes.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">f6bf82f02cc49d12c9c62cceeb48e828</hash>
                <hash alg="SHA-1">060b576c1b45ed9b6a06fc81be25ef6398b894fd</hash>
                <hash alg="SHA-256">adfadb0dd7a794ae5d17b8753a726041a51e95be6da09f981c513d1c5f006dff</hash>
                <hash alg="SHA-384">3fb7f16c694826c358bbcc5e9e04462079d1fe047709ba9c1a63304a781a648eefb598994ca157becf262d5fb1052403</hash>
                <hash alg="SHA-512">76d54fa0ea756a3c06de251535733ef0407d7f1bcf610815052c9c96be43626f5adfe6a65170d01051d3cf32e4f728f237d309a5c1956a12a65db05a3673c4ab</hash>
                <hash alg="SHA3-256">8f89053b8a09ebb1c76fe86f188a3bc1cf438c062cf5f0cc852b7fbbe37deb48</hash>
                <hash alg="SHA3-384">a010d662b20a461e473cc2618e0e8e84b622ef73961a221d44308feed0fffe0648b60447e765016cef49d8037313b9f9</hash>
                <hash alg="SHA3-512">bba5e1c264547c0cd9fcf2f3994785daced0873b82de8a0f2489e848f49ee298425ecc8853ad667369862e8e2f433750ebd2a94e99ab8812b596bbe40a344ff2</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-model</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Model for Maven POM (Project Object Model)]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">87a878560343d295c4945659cffb6e81</hash>
                <hash alg="SHA-1">f7c04cba819f964f13638ba40c782aee59bb135b</hash>
                <hash alg="SHA-256">8526329bb34b9dd24ff93bd7175c7a572f98351dcbe504c5d686838de871079e</hash>
                <hash alg="SHA-384">7b709b4cca9c8c4ae1e87895dc0d408f722470c5c2f789134a1d211cb8ad7d8c9c87ca9d5199d6608680f0080d0d4f03</hash>
                <hash alg="SHA-512">8b5d57158dbe4b124e5b55d8c2675f4ec66bbab1d8ccf1d1988e5b34c80a91c41fdf4cd2afb198fa76fb8ef3508b7ad0ff71d9b285aa907719de1e88322f28d2</hash>
                <hash alg="SHA3-256">0b0f0d8676f05aad15acdfda3cd2a013c7e88d26433d21f303224f7e3e71530c</hash>
                <hash alg="SHA3-384">8f698df6aa2e4d6e3eaf478586ef3c4f3a37794e680fe6d14e9130997988f7ccedd23b53fa1270806677f9e6f85988b7</hash>
                <hash alg="SHA3-512">c143fb6f034faf2b221b8bbc6b45a5f7120ddc04902169d8ef593201ed688de51e9c11d22bf307c51bf5086c35a38cbecdcabf8a3d73f1447d2aafb5e405814d</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-settings</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Maven Settings model.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">4e4e2a2d01c4c116ab52ef11a37da07c</hash>
                <hash alg="SHA-1">32c3d4031743b72045b27bfd8a111ec7957046c4</hash>
                <hash alg="SHA-256">d9440bbd99b48c4e2c924657a7580a33c8eab24d6d2c4551ae7791b00ea89792</hash>
                <hash alg="SHA-384">3b8287a4fc9ceac6066c077baa50d62dbe5589be8261138cb61ffeab9f42c30be5efa33cbafd986cfa12760b40a94a68</hash>
                <hash alg="SHA-512">8bbcd4747d2dfc5066ec6492c6d526c2dd003f2d91e00daf40efecb23e3a1508fc7ddc61f8790a8316f15b0d11c0819c20274ccbf452638644453027a3f43e81</hash>
                <hash alg="SHA3-256">6db49b88dd3c2d6d48aa830243032bd0733dd69f92765e640a3da764ec5b5b42</hash>
                <hash alg="SHA3-384">335a66d5adc5f26418449f4fffb39b6dcd2851c57caa57732e2c6e901e29759299e57943f2a5613f2a792b7edc6165a7</hash>
                <hash alg="SHA3-512">237bb0daea0e1cd6c76c5a3ba5c1e61f91ac7996e35c9ca582ad0f146618acff451da045abf21fd765143ced95d3d9936fa3156a84c4051d5b87e37370815616</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-settings-builder</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[The effective settings builder, with inheritance and password decryption.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">2150f27cc0488ee7059a625cbca4c97d</hash>
                <hash alg="SHA-1">faa40efd308570a1791236b6f588262b9ca7a159</hash>
                <hash alg="SHA-256">eba839525d7755556f544dbad089ac28cc30d2ab1c9dc7891e57680bfa94b849</hash>
                <hash alg="SHA-384">a2eec4f483f416525031221b5a80a1487145a09aa42da8a1f74d349eee8016f0148150e360c5c3e606b6373ca67387c8</hash>
                <hash alg="SHA-512">b2e0352ad2d18201fba5e3aa9a5a7bca0c0f3f5e78ad5cdbca21567d9b6a3907842a53cbfcbeec20d956cf8e7bf199ceb7c38d94933c4ac912553a48e4e5846f</hash>
                <hash alg="SHA3-256">cffc62e19bd3bad76b47d143117be5c2e7ee0264dbb3da07c6d1b21071cded91</hash>
                <hash alg="SHA3-384">651fe372b70be793b1935ac05c342887914044add58e120d244de9fcf7aecc7b81753519bce8b689cbaa9433dc297fae</hash>
                <hash alg="SHA3-512">8b380ae6dca6886698d2c7ce74fa2567fcd449da7ffb7bb1bebf7b1fddf22cfb881a7ec97cc1375891ced380e06e939fbc63cfd2f331e149744077c40430f651</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar" type="library">
            <publisher>Codehaus Plexus</publisher>
            <group>org.codehaus.plexus</group>
            <name>plexus-interpolation</name>
            <version>1.25</version>
            <description>
                <![CDATA[The Plexus project provides a full software stack for creating and executing software projects.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">86cc99a26f3b3caa0fc2c8c77f4c03b0</hash>
                <hash alg="SHA-1">3b37b3335e6a97e11e690bbdc22ade1a5deb74d6</hash>
                <hash alg="SHA-256">e003802501574637f7abdc4e83e6d509a31e9ff825d12da6d1e419acf9688705</hash>
                <hash alg="SHA-384">1cd22e786470775e38c3d2a3fee6fe9d7115199e66052ba0eb8c83d5abe04b74ea108ea413c749329a33ff01013205ce</hash>
                <hash alg="SHA-512">fb647c1f159d17e16ae925bb407585e4a4b30c468518e60d3069ea4a75fa0f7122e789923534632125b22b7cef1cb44caf00700bba90282360f7c76e086b6699</hash>
                <hash alg="SHA3-256">815c0f95994eb8c9e7552ee389a3928da5661d472bbc2d567a85ae951ded2c32</hash>
                <hash alg="SHA3-384">7678d59689e8f479b259c06a52262a1deec374549e556dd3a4639ebb43d7a9ebb08505c357a7b9fdfdb8b31883c8a72c</hash>
                <hash alg="SHA3-512">e98ae04f2d4bf87eb5576af3582084e5cb4236ac91537c6ad22d174a9018dfc3e85f56c371352ded371201458f0a3cda26431b8aecae8b8bddcbcb26179c0d43</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>https://github.com/codehaus-plexus/plexus-interpolation/issues</url>
                </reference>
                <reference type="website">
                    <url>http://codehaus-plexus.github.io/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://archive.plexus.codehaus.org/user</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar" type="library">
            <group>org.sonatype.plexus</group>
            <name>plexus-sec-dispatcher</name>
            <version>1.4</version>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">0a46e5bc9bc2fbd3b68091066aff2737</hash>
                <hash alg="SHA-1">43fde524e9b94c883727a9fddb8669181b890ea7</hash>
                <hash alg="SHA-256">da73e32b58132e64daf12269fd9d011c0b303f234840f179908725a632b6b57c</hash>
                <hash alg="SHA-384">8d6e72c364a12016aaa2ad1ae7dda8a83af32f47576696eff4fe1d3d7a8142f182beb71d65f9ca668ff38b470d40dd3f</hash>
                <hash alg="SHA-512">5b947edcb05a1c17648ec9fe53dd2c66b4a86dd2b950d989255f6edd636fd5d50d18b8f31b3a1736dadd9cff6790a3d0355f2ed896c3eb7f72e009199fe9957d</hash>
                <hash alg="SHA3-256">64a7cf888dbe8bb7d89cfed8089b1db4f63f88526f39d2463b23caa93a609158</hash>
                <hash alg="SHA3-384">76b890cebb7ddc14dae8854178b79b064d984df35cc65354ecbf97fa869d83c4d6e9093cbf317d1575855a638fc3ba56</hash>
                <hash alg="SHA3-512">194de7b0bdd4954ebae7982b8d91365864abfb86f16188880393089fa26122e9bc872c3181c4324b933b9faee90b7149140b97e72c552577e6c3447b06601f06</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.4</url>
                </reference>
                <reference type="build-system">
                    <url>https://grid.sonatype.org/ci/view/Spice/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.sonatype.org/browse/SPICE</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-builder-support</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Support for descriptor builders (model, setting, toolchains)]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">d198e49af8575e3330e4cd40d954da6d</hash>
                <hash alg="SHA-1">965b20eee31bf2501f561cf62e403bb405e66593</hash>
                <hash alg="SHA-256">9818f9367aa5a48f4594b70f96a7bb4942ed3ceec3c3265ad141c560cb70550b</hash>
                <hash alg="SHA-384">f98dbb60063d3d6f00dd3806bd1b8ce448ececd38a6a66c9cc50627a77b7511abade20a763cc4cd86beda31d53772d93</hash>
                <hash alg="SHA-512">ac5a0947d04ac20c599fefb43ee02230d0d301e185f182b20cc159ed85020cd09cf3bf06b392a00d57cda3156cb75afa089ae1dce8990158245d7944dac14bbc</hash>
                <hash alg="SHA3-256">f39127eee3be83ffe8a9248e5b3d1abf7ea76255bd826d61a121ff70979f544e</hash>
                <hash alg="SHA3-384">35965bb5ab4eeffff274805ee4e09967142bcc34057096e56dcdb6da1de7e9820ad042672ea00e27374ae17a90afc871</hash>
                <hash alg="SHA3-512">5231d9f0a7022a3dd04eae632c009c16f18c96c1dd435c2a8c925119b4e97de5633cddc3311b51a28a62784fe18a40d43045b3513c7fc90491c56db0de72574b</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-repository-metadata</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Per-directory local and remote repository metadata.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">8a6822a90f18ab11363c6f3e5129225b</hash>
                <hash alg="SHA-1">c28411008f91c30966634896782e6b3d81a0f68d</hash>
                <hash alg="SHA-256">b7ab70df67c2ea2925235d902cbf3caf280c4c0c3117c119ac0bdf2ee20778dc</hash>
                <hash alg="SHA-384">336178512eb5533a95704c95c4c8440dc6abf21e2d94c765c47d7753478872c001d0b6075765d8d1fc0f0033e2412f82</hash>
                <hash alg="SHA-512">e905ab529c106c0930ade76837b3ee9731317d6895f18390c58e2c21b0e709233099b6acef76de6d3861245f16c165385342e8779b8b9ee41ef53e235aa9e1ea</hash>
                <hash alg="SHA3-256">792baa186741f9a649afd39c95b6b1557b00e513a365b471aff94415c9e1d442</hash>
                <hash alg="SHA3-384">87ba42b817cab98177f26e41db26d79884cc4e4b09125f10a0c789212848840560871d43c69bed9cab6c1c296a28eb52</hash>
                <hash alg="SHA3-512">383f6f6d573cb65f8b911403542249d5092bcf89b20becdd31e99a86d7472ebdb01d8cd0691c3cb491732af6c1be73df08adc815c66a2bf4cc9f67881b7732b7</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-artifact</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">d846e40c5a8f797cdce87fffcdea4746</hash>
                <hash alg="SHA-1">e5a6e2a1500564d4f5fea0267829c28060a76a4c</hash>
                <hash alg="SHA-256">ba12863cfd1add12a59f92c475a28ba4eb3c127b039852b109d4099241f021b0</hash>
                <hash alg="SHA-384">2d2dcf4d92c53a66164d53f51c7df048c82e8a0894fbde9ed2ee7d781aa6529a978ae86657dc4fd8521b54ec4b014589</hash>
                <hash alg="SHA-512">8422277e5837ebff6360e982de87809d71ac4f5fdf9cd66c58209e4c9327a7cd7d595c84ef157c30e656392179c03b3d713eacddf2508793bca13579d27b9dbc</hash>
                <hash alg="SHA3-256">f31ae161fb20a61ed204b5149fd7e5bb35d2b6b88b6ead8ad4cbf15736e23e29</hash>
                <hash alg="SHA3-384">c3d4071cddebf129cd34f99992bc2199888150e9746eae268990d7cfe88185bddb903f5d9ae8c1f978b448da1fc93ada</hash>
                <hash alg="SHA3-512">87880b7edfb602bc34158c74a35e329d60faad570fddd8ef8ad9369124ec02dcfa70150eca70d07b35dd4ed56617a88695aa1190f06887173819b7de336378db</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-model-builder</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[The effective model builder, with inheritance, profile activation, interpolation, ...]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">a4f67f17e41f61671296cf0e9b94da0a</hash>
                <hash alg="SHA-1">98175673cff7b1f0246f56570a11fe6acc0e070d</hash>
                <hash alg="SHA-256">ac0b0c2f6cabfd475bafaae111a3070a2390ee3e87f0a566eed97d9711cd9d91</hash>
                <hash alg="SHA-384">bcc0c6777f09634e470ffcd53db7aff8d8f51a65afcc80ad14a60013d6bf1caaad9726704db526da536eae9a3b0f3021</hash>
                <hash alg="SHA-512">bd02e02cebf67707578e190288f6e6242b1c5291dfed9ff989202e0c16a5a1606c38873de32b4401686be238d9e8d020b97fe948370470fe84fea8a969af71c1</hash>
                <hash alg="SHA3-256">06eb52377c8280e2578b2663a3ad73a87846e5f1fa4b1fdc443f2b6f97de99c2</hash>
                <hash alg="SHA3-384">659bd15f42a2dba40f25f74f11a5b2b7a1c39d01e8eae7d63ba2e0cc85783d381e0b0b3c8cdb4e4b91f712c11a325891</hash>
                <hash alg="SHA3-512">1286e671b88f3cc46b3bccf085a912a8985cc90cc151c7486764929ff121b7f4a16ec2d4f0357e8539f63d1dc44924f6301f7730b1d87577377a51862caaff75</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-resolver-provider</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[Extensions to Maven Resolver for utilizing Maven POM and repository metadata.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">1d1d01a1982cbd3393d5db4586a80cf5</hash>
                <hash alg="SHA-1">eeef49524643a739e2335d4e4c735364ea4379ab</hash>
                <hash alg="SHA-256">25cf1d7f7d4dcc32ce70625210722f954084218b4e31dfcabefcdb58b1bd6b41</hash>
                <hash alg="SHA-384">9cf3efb01a18e1ab3b3ce7304592f4bd866830639de2ab82fc998c38c04c547b32e1ca7cfd02150631197abe1f2abee8</hash>
                <hash alg="SHA-512">21b5e6c6b1fb6407262a2730c97d938c96b15793efa4da2238e39cd0e8f691d8970a328a577a681e36679325a04d7876abe4e9945d71e78d622e3700f9d7dea9</hash>
                <hash alg="SHA3-256">33899461285284e10a8adc13ac299ef3dc06f2b023fea8151c51ec9adfdf4a9a</hash>
                <hash alg="SHA3-384">4806f7e872e67eb1e4f201ea16eb24566e29c21eeb8786ba57550ea132cee7bce10ec9dc32f7f6d6a28d9f1f8c2aa38f</hash>
                <hash alg="SHA3-512">8a984975f66a7e774d888e5d7259ed9cb96170d281132d0a6f8bca9d2b196dfee5bf7907b71213e5678f1caad512b172ed83ce5b2a22caa5028bc3f7793bd8b6</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.resolver</group>
            <name>maven-resolver-impl</name>
            <version>1.6.3</version>
            <description>
                <![CDATA[An implementation of the repository system.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">2145b5eb9ddd8bdf9f3171122c703d4b</hash>
                <hash alg="SHA-1">2714ffe60bd71259a41b3e4816122504b5f2db93</hash>
                <hash alg="SHA-256">17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b</hash>
                <hash alg="SHA-384">37f1caeeb7f6b3a7358e457a2a9c6f2d0f037f2603f82d580a458d6e687a72335355d931885a2156ffc7b81abb715a82</hash>
                <hash alg="SHA-512">ef011e67152290379da6db1ce256b70dc436eb1596d58c38ee5bf9df65fbe75ed2ddc7768f6c61901c8cb83af88c42ad0b7bf24ad1775949eb4522511825280d</hash>
                <hash alg="SHA3-256">051baae5e07302175081aa2163a03364fe15d7bea230a81f13302552c47c7db7</hash>
                <hash alg="SHA3-384">200626d2ecc3736cdc13526c4ba88dcc664a1cc4305d8c9c03a9aefdd46759c956188a6908e7b845802fb30bc5818edf</hash>
                <hash alg="SHA3-512">c6c926e1d8ae8874b8467b9d9ee0fdf01655aa5591ed69fcc8051438d80ea848b318a56febd6995ce9c4b9e26e8edf1fa561cd46a84c3a6d12e307dc484ae5df</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.resolver</group>
            <name>maven-resolver-api</name>
            <version>1.6.3</version>
            <description>
                <![CDATA[The application programming interface for the repository system.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">c1f8b0046b6219ef49dbd73638ce33e2</hash>
                <hash alg="SHA-1">5ee235aa5ac5994b5dc847f8e78ffe9d77dd55d7</hash>
                <hash alg="SHA-256">d0b28ed944058ba4f9be4b54c25d6d5269cc4f3f3c49aa450d4dc2f7e0d552f6</hash>
                <hash alg="SHA-384">57a6cc8ea7620331169230771e7564837193d217e9dd6289a09cc874e05f87aeb84fb613d44917cf4835a783f9c572ee</hash>
                <hash alg="SHA-512">002cb75f6e07b27108e79a4d37d94fa882e89a2db30dd2ac69ecf0907cc548e13f579ebfbb5c019da6df4a950e3420b69dac3d49ae94b5646b7968ef7ea811ca</hash>
                <hash alg="SHA3-256">d883a9b0c67d5be1e4c2e52eb530d432e87565cdfa9df0a4b3e72ea9e080b766</hash>
                <hash alg="SHA3-384">1d303b3805945970de6d9bf3f4098e9582d79a6b5dcd126ee2af74fd2787c3469c693a125799323e9da3d5e5e1be54b3</hash>
                <hash alg="SHA3-512">c7c325a744e63c72fef9f31fdcb64343a6e315f7c780417479f502ac24d0e6f506519e358e0c82e809adc62223ec606c41be7156c2b27635722dd21e622d9c83</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.resolver</group>
            <name>maven-resolver-spi</name>
            <version>1.6.3</version>
            <description>
                <![CDATA[The service provider interface for repository system implementations and repository connectors.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">39ccba873cf05b2b5405d24a55133a37</hash>
                <hash alg="SHA-1">176425f73fe768bf9cdb8b5a742e7a00c1d8d178</hash>
                <hash alg="SHA-256">17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108</hash>
                <hash alg="SHA-384">e497fcbb12f4d64ad35a506c370ebf611c08a26b36bb592d9dc31a70b4244b06d57b10340912bb1d419e4791de4d746d</hash>
                <hash alg="SHA-512">2972b721213bfee654460468b2a2aa50546d7f1957be40d955728875af3a9801f8d78a2f796e832b9332d1f90ffb5ccb651289e7b5c8a175628b21b13594df43</hash>
                <hash alg="SHA3-256">79a77fc7ce9a0a1383e9636d34f2bd46cf16a7e65f808e199856c2551e26a5b4</hash>
                <hash alg="SHA3-384">92cc0dfd2087a4a33fffc796987753f36024d892db64fbe8f2a30a08de20cb7fff1204c65b1df0293d59a3204b70599b</hash>
                <hash alg="SHA3-512">af7b9a702626ba48d9f5ae50001831167f20c13b2a416e45c2241de7d96fcc113bdc75b04d21a8b2d88e86cf8629c72d9f0d46d19ee64d904c4cf52f479be58c</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.resolver</group>
            <name>maven-resolver-util</name>
            <version>1.6.3</version>
            <description>
                <![CDATA[A collection of utility classes to ease usage of the repository system.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">71d7fea851a889aae2cfd632e96d01c1</hash>
                <hash alg="SHA-1">07d5a6879037b34c61c2f527dfcfb59084e86ed0</hash>
                <hash alg="SHA-256">cdcad9355b625743f40e4cead9a96353404e010c39c808d23b044be331afa251</hash>
                <hash alg="SHA-384">1e7eb3fbead86751b552e75ea2fe853ac81b0c349f89d8d4cfdad9246091fb72f67192ef9c037e3be2de57e6ee8cea85</hash>
                <hash alg="SHA-512">45bd05eee2e2e606155916ec06efdb62e4a147af7ed0bb0b443b2a71b72576fec8e0ced0eee3ae3c86778198de227c1c7fe5d423cff0b96ba382fb563239694a</hash>
                <hash alg="SHA3-256">a1dba2a839537adff9bd0f166c893313c260d97b1b4e6dfdb69b2f4553c6808e</hash>
                <hash alg="SHA3-384">3439dd1e245d36fc026b74b31359c0271159b05612c05f9e06a6f2361ecdc48d9c864af103baa8cf9d343c0f951dee99</hash>
                <hash alg="SHA3-512">03d6b8f694bc7552c217128f6469571efc84566f6f49805c03d5ff64df2e2ed545a1aac141010a3e8bce4a731ec9c07acfec1e33d7ecb06282e4753cc74a4212</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MRESOLVER</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.shared</group>
            <name>maven-shared-utils</name>
            <version>3.3.4</version>
            <description>
                <![CDATA[Shared utilities for use by Maven core and plugins]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">908f2a0107ff330ac9b856356a0acaef</hash>
                <hash alg="SHA-1">f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac</hash>
                <hash alg="SHA-256">7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda</hash>
                <hash alg="SHA-384">bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5</hash>
                <hash alg="SHA-512">c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a</hash>
                <hash alg="SHA3-256">888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da</hash>
                <hash alg="SHA3-384">385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186</hash>
                <hash alg="SHA3-512">40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar" type="library">
            <publisher>The Eclipse Foundation</publisher>
            <group>org.eclipse.sisu</group>
            <name>org.eclipse.sisu.plexus</name>
            <version>0.3.4</version>
            <description>
                <![CDATA[Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">a86bc488d167e59484298ef4c7b4168e</hash>
                <hash alg="SHA-1">f1335a3b7bc3fd23f67da88bd60cd5d4c3304ef3</hash>
                <hash alg="SHA-256">87e66ffad03aa18129ea0762d2c02f566a9480e6eee8d84e25e1b931f12ea831</hash>
                <hash alg="SHA-384">b733ce75c0a9d5f505cd4750d6acb3f800b21565ce722a88b591ab5f32aed66b8df0b0141de65b65bc36ccf9444807d9</hash>
                <hash alg="SHA-512">f76b33d4c0acfb90357736b8466016661924351332e1db6eaff5bd15398e7765acec328dd3e94d37b66c9881a54bbed23571590363c46ee78f5d1acbad36c95b</hash>
                <hash alg="SHA3-256">8c24ddfdde906e6b1a9b2c01b780003a667357435706092fe265267a86781d13</hash>
                <hash alg="SHA3-384">f15af3878b586ed49466a4176d8f093a4ca1899bd8158149a1d176464c31905028cc861072dc7fca7d98fadad8e5a94e</hash>
                <hash alg="SHA3-512">06547cb1ae277b36f64813842220d98e0ea5141f6e4360641142e5ff919d8f3ff2c9c24a913be194c75d2f43a7bdc48af9db313c1fd912d739b4002dc0be3186</hash>
            </hashes>
            <licenses>
                <license>
                    <id>EPL-1.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.eclipse.org/</url>
                </reference>
                <reference type="build-system">
                    <url>https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Plexus&amp;format=guided</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
                </reference>
                <reference type="vcs">
                    <url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar" type="library">
            <publisher>Seam Framework</publisher>
            <group>javax.enterprise</group>
            <name>cdi-api</name>
            <version>1.0</version>
            <description>
                <![CDATA[APIs for JSR-299: Contexts and Dependency Injection for Java EE]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">462c0959f0322016495f4598243bc0f2</hash>
                <hash alg="SHA-1">44c453f60909dfc223552ace63e05c694215156b</hash>
                <hash alg="SHA-256">1f10b2204cc77c919301f20ff90461c3df1b6e6cb148be1c2d22107f4851d423</hash>
                <hash alg="SHA-384">cff1b12eddd9d7c4e075ea91edf063bf22308dc1857e1ba19914baa5db0921828a8605c37a2a672af8a6e76116cbaf08</hash>
                <hash alg="SHA-512">3e326196a2cbf19375803ce37d743a9818c4fa2292914439e748060d6889c997fe33077f52e52d4dd61b60e7342aa31b446d7571a92ec864f44cead45ebd612b</hash>
                <hash alg="SHA3-256">494d37242e8348177200a539aa035802b9bb5cf9f1c8dfd04fac5b5f1432e216</hash>
                <hash alg="SHA3-384">4551179cf722d33b29627969865017905bbf793320adfe203c3f38f6e1453bb1456d81814c3e3249d1967d6a4139737a</hash>
                <hash alg="SHA3-512">27fc4a60df1a65feb497c9296d2ecd7ff9a93b28b6ec7cefd25dfe1b96735cbbeb2d7824f71903dc6ea273357ff24462a6420bdef0b82bf1e75bbc117d92032b</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/javax.enterprise/cdi-api@1.0?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://seamframework.org</url>
                </reference>
                <reference type="build-system">
                    <url>http://hudson.jboss.org</url>
                </reference>
                <reference type="issue-tracker">
                    <url>http://jira.jboss.org/browse/WELD</url>
                </reference>
                <reference type="vcs">
                    <url>http://fisheye.jboss.org/browse/Weld/api/tags/1.0/build/tags/weld-parent-6/weld-api-bom</url>
                </reference>
                <reference type="distribution">
                    <url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar" type="library">
            <group>javax.annotation</group>
            <name>jsr250-api</name>
            <version>1.0</version>
            <description>
                <![CDATA[JSR-250 Reference Implementation by Glassfish]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">4cd56b2e4977e541186de69f5126b4a6</hash>
                <hash alg="SHA-1">5025422767732a1ab45d93abfea846513d742dcf</hash>
                <hash alg="SHA-256">a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f</hash>
                <hash alg="SHA-384">33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d</hash>
                <hash alg="SHA-512">8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871</hash>
                <hash alg="SHA3-256">623ae141aa22b45010282c862e41eec3ed0dafabd8f1ee5591ba623a242375ab</hash>
                <hash alg="SHA3-384">5ab52f8a6f45849398f4a268cf498f7788adf8d0ad6ede2f9287814095051ce8529b05bea0a71c90718ce4c21d4594f5</hash>
                <hash alg="SHA3-512">d7edd7a76d88d466b310d71fdc10d7b289838391408f8b704620b6683b65e436c0fa411d8dd356b0792e29e2fef8fbb8a6658bb97e7046e1277404a3395a9a53</hash>
            </hashes>
            <licenses>
                <license>
                    <name>COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0</name>
                    <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
                </license>
            </licenses>
            <purl>pkg:maven/javax.annotation/jsr250-api@1.0?type=jar</purl>
            <externalReferences>
                <reference type="distribution">
                    <url>http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar" type="library">
            <publisher>The Eclipse Foundation</publisher>
            <group>org.eclipse.sisu</group>
            <name>org.eclipse.sisu.inject</name>
            <version>0.3.4</version>
            <description>
                <![CDATA[JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">edf3eedbd99a0cd38c259a2daa2ea702</hash>
                <hash alg="SHA-1">fc3be144183f54dc6f5c55e34462c1c2d89d7d96</hash>
                <hash alg="SHA-256">8c0e6aa7f35593016f2c5e78b604b57f023cdaca3561fe2fe36f2b5dbbae1d16</hash>
                <hash alg="SHA-384">08de5e071ca35e5fd2e35ed49758ab64970e77b87cc7f8800fecf5875688ec68aebb9f0d692771dcfe906c593aaa2485</hash>
                <hash alg="SHA-512">cfd6be3e9f160258682662325757a8b95303045e37708f4226f40aaef01c8a5e4ff5a275715e4d740e2feae462e3b76f53c360507c1f738bec0157d2c226a46a</hash>
                <hash alg="SHA3-256">2ed984724809d0e6f46e847142e5b21d0e613db7e93814284d6f663c52db2ca0</hash>
                <hash alg="SHA3-384">ecdb27e767cfe54d094ef76196841f1b4c41db85177627728bb7c2acba91f895d50de57d481348d3d648877dea219c10</hash>
                <hash alg="SHA3-512">94c2a7e75bd0c253ecaf8c205dea5c2c9d83f9496f49d6495fd94f599707fe662eb5b061da7ddbce6e4f7b88429c79bd7671561ebc3b734632251e053203f075</hash>
            </hashes>
            <licenses>
                <license>
                    <id>EPL-1.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.eclipse.org/</url>
                </reference>
                <reference type="build-system">
                    <url>https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&amp;component=Inject&amp;format=guided</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://dev.eclipse.org/mhonarc/lists/sisu-dev/</url>
                </reference>
                <reference type="vcs">
                    <url>http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar" type="library">
            <group>com.google.inject</group>
            <name>guice</name>
            <version>4.2.2</version>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">57d2b333c34d0f834189d54b6e59d1a6</hash>
                <hash alg="SHA-1">fa13659f9128f4c011c8e1d06f137083b4876377</hash>
                <hash alg="SHA-256">0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff</hash>
                <hash alg="SHA-384">b8dbffa5d7d5d747da5bcbf80c5642caf7d845210b6246b3fbe37fe35fb62296a143bd131c394c97a09d78c06e05c4f8</hash>
                <hash alg="SHA-512">78f17b090f34564db0fa6903c966e79d8002903d2604f9605a0d713e770a9c772c11d615a5e112dbb15464b9f8945edff6ac3d23ac84ccb08eb1657ec64d4442</hash>
                <hash alg="SHA3-256">d6c7802ae9da1ede2a1fd5bddaec3fadbe6cce96754ac1777abe23656da61616</hash>
                <hash alg="SHA3-384">77c03af1ee596ff17baf62893037dc7c3b2476a68f928811c94c19c6ef33df0098f6bb4bde97be887797442359a17205</hash>
                <hash alg="SHA3-512">a2f0e757d29e73175af02a00b34f35065080ffc9be10e2445e51df556180e2e10b68216277c384f07729cf4b326061a870d6ced32045ee545c43a7c6cb209821</hash>
            </hashes>
            <purl>pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar</purl>
        </component>
        <component bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar" type="library">
            <group>aopalliance</group>
            <name>aopalliance</name>
            <version>1.0</version>
            <description>
                <![CDATA[AOP Alliance]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
                <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
                <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
                <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
                <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
                <hash alg="SHA3-256">d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0</hash>
                <hash alg="SHA3-384">2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1</hash>
                <hash alg="SHA3-512">830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc</hash>
            </hashes>
            <licenses>
                <license>
                    <name>Public Domain</name>
                </license>
            </licenses>
            <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
        </component>
        <component bom-ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar" type="library">
            <group>com.google.guava</group>
            <name>guava</name>
            <version>25.1-android</version>
            <description>
                <![CDATA[Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">b506eaec680c6d92d5f063fa1d57956d</hash>
                <hash alg="SHA-1">bdaab946ca5ad20253502d873ba0c3313d141036</hash>
                <hash alg="SHA-256">f7b8f8fed176b9cf6831b98cb07320d7fbe91d99b29999f752c3821dfe45bdc8</hash>
                <hash alg="SHA-384">c1b18ac69bb1a99766b701b470fa3dd560e5067deb273727cfacc083760f503443f555f41765fc9cea7c65a138742758</hash>
                <hash alg="SHA-512">c8f95af9f1e97dee807503c8fbb442c87eed2694e43ad0fd9fc2e62ba99c5e93d476d5ee8f4791f173cb8fdabc88abac0e8130a51de280af836a3e0c4eadaff6</hash>
                <hash alg="SHA3-256">ea0feef6c17ef154cc4f9adfd1ebe1b84fe7af7b03b993e6b3ae6da1fe279f59</hash>
                <hash alg="SHA3-384">acb8fdcce24abde49a5e093908c9a825b610388740d851f11d53ac17ab3e88bd4c81078de9e669b83f8be050ea9d8392</hash>
                <hash alg="SHA3-512">3d70e852e2047d6107b9fcfe941bbf84bd19df09d10bc02119ae82fdd48c4c5dfaef108b8b117090f92156f7284d6b4ca6ec2393beb596f3efb80a47c0f29056</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.google.guava/guava@25.1-android?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://travis-ci.org/google/guava</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://github.com/google/guava/issues</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/google/guava</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" type="library">
            <group>com.google.code.findbugs</group>
            <name>jsr305</name>
            <version>3.0.2</version>
            <description>
                <![CDATA[JSR305 Annotations for Findbugs]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
                <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
                <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
                <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
                <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
                <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
                <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
                <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>https://code.google.com/p/jsr-305/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar" type="library">
            <group>org.checkerframework</group>
            <name>checker-compat-qual</name>
            <version>2.0.0</version>
            <description>
                <![CDATA[Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">b6fb2610dacd211a3e2c3d8af1b60d0f</hash>
                <hash alg="SHA-1">fc89b03860d11d6213d0154a62bcd1c2f69b9efa</hash>
                <hash alg="SHA-256">a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b</hash>
                <hash alg="SHA-384">647d7bcbfaa000d0ed330eea0af4378e691303bc1d70fde3dc657c1cf0eceb0c2b0abd44745b879fdbd441131a056130</hash>
                <hash alg="SHA-512">fdecc20efd6943426e7f8bdfb8bef9d28258f9f934cf29090e2f5b297c501454606cc28593cd7d089a5c14f6d2dcafc59f4606053405d7f91d623a0e3202f4a8</hash>
                <hash alg="SHA3-256">6332c0be53250aaf67b95786e10337e1134ca645aed3b4cc596c68a3555c07fc</hash>
                <hash alg="SHA3-384">ce6f53807d1006ffc5b1a7db6581090d5a7ea40d5d6af4df8f2aa31b02e0a35b8441c97f8ebd3efc011798cb42e62198</hash>
                <hash alg="SHA3-512">74780f6c4d9e615c5be2f7149540721bfccd43e71b2d912054b98cf4f1a5ae5506497eca9c76f9e09f988d988bba8a1ec0588684379722044d894594dc787ea4</hash>
            </hashes>
            <licenses>
                <license>
                    <name>GNU General Public License, version 2 (GPL2), with the classpath exception</name>
                    <url>http://www.gnu.org/software/classpath/license.html</url>
                </license>
                <license>
                    <id>MIT</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>https://github.com/typetools/checker-framework.git</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar" type="library">
            <group>com.google.errorprone</group>
            <name>error_prone_annotations</name>
            <version>2.1.3</version>
            <description>
                <![CDATA[Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">97504b36cf871722d81a4b9e114f2a16</hash>
                <hash alg="SHA-1">39b109f2cd352b2d71b52a3b5a1a9850e1dc304b</hash>
                <hash alg="SHA-256">03d0329547c13da9e17c634d1049ea2ead093925e290567e1a364fd6b1fc7ff8</hash>
                <hash alg="SHA-384">03ff39082a3cd3c64d679c3df3be10abc3a87d6a576f6e21585ac6a18439d136608f9293e370186388fc5c8854adb3eb</hash>
                <hash alg="SHA-512">bd2135cc9eb2c652658a2814ec9c565fa3e071d4cff590cbe17b853885c78c9f84c1b7b24ba736f4f30ed8cec60a6af983827fcbed61ff142f27ac808e97fc6b</hash>
                <hash alg="SHA3-256">5c7b2ffc8d4073700647681ed44dd783049648aa8e174f37d2510339a65f5466</hash>
                <hash alg="SHA3-384">02e686b3fbe3c3a728d1d9ee67fe7ad5f32688314e24f63efb1666302650d86ccaef4304f5750cd155729404603cfa00</hash>
                <hash alg="SHA3-512">3f05def83905268da5044c8bd6fbf62b89499d77351b56a357de8d27ef872c6c300385a6bca009590d61be90a39a0f417c4d8358a13b09847ba0452ef416db06</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>https://github.com/google/error-prone</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar" type="library">
            <group>com.google.j2objc</group>
            <name>j2objc-annotations</name>
            <version>1.1</version>
            <description>
                <![CDATA[A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">49ae3204bb0bb9b2ac77062641f4a6d7</hash>
                <hash alg="SHA-1">ed28ded51a8b1c6b112568def5f4b455e6809019</hash>
                <hash alg="SHA-256">2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6</hash>
                <hash alg="SHA-384">8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181</hash>
                <hash alg="SHA-512">a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0</hash>
                <hash alg="SHA3-256">275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2</hash>
                <hash alg="SHA3-384">a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5</hash>
                <hash alg="SHA3-512">d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar</purl>
            <externalReferences>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="vcs">
                    <url>http://svn.sonatype.org/spice/tags/oss-parent-7</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar" type="library">
            <publisher>Codehaus</publisher>
            <group>org.codehaus.mojo</group>
            <name>animal-sniffer-annotations</name>
            <version>1.14</version>
            <description>
                <![CDATA[Animal Sniffer Parent project.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">9d42e46845c874f1710a9f6a741f6c14</hash>
                <hash alg="SHA-1">775b7e22fb10026eed3f86e8dc556dfafe35f2d5</hash>
                <hash alg="SHA-256">2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d</hash>
                <hash alg="SHA-384">f84c3a6589e4fd49764595bad99ef2ebb443f1c9a5f11177a2073b54156989979b5e97fac591714f18304fbcf26bb1c6</hash>
                <hash alg="SHA-512">9e5e3ea9e06e0ac9463869fd0e08ed38f7042784995a7b50c9bfd7f692a53f0e1430b9e1367dc772d0d4eafe5fd2beabbcc60da5008bd792f9e7ec8436c0f136</hash>
                <hash alg="SHA3-256">9b624360f936e928bc63bf44e475d8fd052148c0d0cc56c3c88c26429b430c08</hash>
                <hash alg="SHA3-384">1821c7ba68f3b43cb25b3038fa732631d1db6063ecc5c7f84b31fdadfa8ca43434dc960e602af02a2891237cd90b8c29</hash>
                <hash alg="SHA3-512">5f0a62a96445cfeaf101d2ddc56472621f5c3dafc54ad4b230a373012833b7da83e96af7c07b60a586768361b3bce3f3626ed2cc09fbbd84e840e0714d6344ee</hash>
            </hashes>
            <licenses>
                <license>
                    <id>MIT</id>
                    <url>https://opensource.org/licenses/MIT</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://jira.codehaus.org/browse/MANIMALSNIFFER</url>
                </reference>
                <reference type="vcs">
                    <url>http://fisheye.codehaus.org/browse/mojo/tags/animal-sniffer-parent-1.14</url>
                </reference>
                <reference type="website">
                    <url>http://codehaus.org</url>
                </reference>
                <reference type="build-system">
                    <url>http://bamboo.ci.codehaus.org/browse/MOJO</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://markmail.org/list/org.codehaus.mojo.dev</url>
                </reference>
                <reference type="distribution">
                    <url>https://nexus.codehaus.org/service/local/staging/deploy/maven2/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar" type="library">
            <group>javax.inject</group>
            <name>javax.inject</name>
            <version>1</version>
            <description>
                <![CDATA[The javax.inject API]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
                <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
                <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
                <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
                <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
                <hash alg="SHA3-256">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>
                <hash alg="SHA3-384">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>
                <hash alg="SHA3-512">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>http://code.google.com/p/atinject/source/checkout</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar" type="library">
            <publisher>Codehaus Plexus</publisher>
            <group>org.codehaus.plexus</group>
            <name>plexus-utils</name>
            <version>3.2.1</version>
            <description>
                <![CDATA[A collection of various utility classes to ease working with strings, files, command lines, XML and more.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">a1b7cb2baeae4bb4c3a016417d5d3cb0</hash>
                <hash alg="SHA-1">13b015768e0d04849d2794e4c47eb02d01a0de32</hash>
                <hash alg="SHA-256">8d07b497bb8deb167ee5329cae87ef2043833bf52e4f15a5a9379cec447a5b2b</hash>
                <hash alg="SHA-384">cf78e1639fd2db660ace75bb9d97dc68843edd5bcd368951fa45cfd9f3ed66792a9d4582f8fe72f25e8ab094f7a7a565</hash>
                <hash alg="SHA-512">354f185cb3c6ade3f2d3f27c1a27a811922782ca4bd74a997c9c922dc7a2d44148ce6f141f16c0c1ab8f7988dd8a30602713d558606d088e8ba82a0ec1fb55a5</hash>
                <hash alg="SHA3-256">564639fa9188a1aed480cf33fa481ed2fb40ac9473bf6eef92b11ac5a4198d8a</hash>
                <hash alg="SHA3-384">9c7f355e5cd8f9977d0b59d0a827ab5e094a88178356e0dd838d4b4fb1cb824faa9ae85f71fe27ad23df60bb16eaa5ee</hash>
                <hash alg="SHA3-512">82f4d76e0f0aa5f17c173f939154be88e4b665c20f2269e04776421425b5119417b35df6e55ff6cc6d32dcda9ce42fea3eb891aa2a3e16b2b595ca4303fb454e</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://github.com/codehaus-plexus/plexus-utils/issues</url>
                </reference>
                <reference type="vcs">
                    <url>http://github.com/codehaus-plexus/plexus-utils</url>
                </reference>
                <reference type="website">
                    <url>http://codehaus-plexus.github.io/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://archive.plexus.codehaus.org/user</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar" type="library">
            <publisher>Codehaus Plexus</publisher>
            <group>org.codehaus.plexus</group>
            <name>plexus-classworlds</name>
            <version>2.6.0</version>
            <description>
                <![CDATA[A class loader framework]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">67e722b27e3a33b33c1b263b99dd7c43</hash>
                <hash alg="SHA-1">8587e80fcb38e70b70fae8d5914b6376bfad6259</hash>
                <hash alg="SHA-256">52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549</hash>
                <hash alg="SHA-384">e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac</hash>
                <hash alg="SHA-512">6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d</hash>
                <hash alg="SHA3-256">3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492</hash>
                <hash alg="SHA3-384">75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695</hash>
                <hash alg="SHA3-512">312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://github.com/codehaus-plexus/plexus-classworlds/issues</url>
                </reference>
                <reference type="website">
                    <url>http://codehaus-plexus.github.io/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://archive.plexus.codehaus.org/user</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar" type="library">
            <publisher>Codehaus Plexus</publisher>
            <group>org.codehaus.plexus</group>
            <name>plexus-component-annotations</name>
            <version>2.1.0</version>
            <description>
                <![CDATA[Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">141fd7a2ae613cb17d25ecd54b43eb3f</hash>
                <hash alg="SHA-1">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>
                <hash alg="SHA-256">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>
                <hash alg="SHA-384">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>
                <hash alg="SHA-512">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>
                <hash alg="SHA3-256">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>
                <hash alg="SHA3-384">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>
                <hash alg="SHA3-512">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://github.com/codehaus-plexus/plexus-containers/issues</url>
                </reference>
                <reference type="vcs">
                    <url>https://github.com/codehaus-plexus/plexus-containers</url>
                </reference>
                <reference type="website">
                    <url>http://codehaus-plexus.github.io/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://archive.plexus.codehaus.org/user</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-plugin-api</name>
            <version>3.8.2</version>
            <description>
                <![CDATA[The API for plugins - Mojos - development.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">f82f9e14c2d6bc5a9bde68a46f0ba923</hash>
                <hash alg="SHA-1">8116f90945281e3993b6375a109682a031b0da69</hash>
                <hash alg="SHA-256">9e2a69ed06a1dcb9464ab8b0aa279884de7aa4737a0740838b64afafea0d3605</hash>
                <hash alg="SHA-384">fc11c6b77fea3bfc483f9782aedf16f1b596a33fc1daa4a70bc59f3dff0525ad10c7989cdcac6fbd5a4066248288fea0</hash>
                <hash alg="SHA-512">8c3a99894b071a5b4e8d8b3a2ae383a236ef99f4ba9ea199208a7b292cbe390788616314aa3af0d37e9cefe7553cdde2b37c553bfcf045f9937489f6d5566876</hash>
                <hash alg="SHA3-256">5a0e067eb139fed944014a7c461d25ce136ce1083537f1996eb13ceecd905fbb</hash>
                <hash alg="SHA3-384">b27eb30fb467dbef769c2279fc4f2ecf4cff5c9631875681bef1383a65739cc2d9faf66a24fc3006e3c57b09deeeb143</hash>
                <hash alg="SHA3-512">5f07bea07a72bba18d9fc1633f32974bc411192fe226457db611422af861c47238984eeb2704078e2c56bee1dadf4589012284311f48aac4f84d3e182f3ecdb7</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven/</url>
                </reference>
                <reference type="distribution">
                    <url>https://maven.apache.org/download.html</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.shared</group>
            <name>maven-dependency-tree</name>
            <version>3.1.0</version>
            <description>
                <![CDATA[A tree-based API for resolution of Maven project dependencies]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">d229908dceffafd7cb27b13baa29c61e</hash>
                <hash alg="SHA-1">91164b932f3ea0bb7779f6f9c62078adf1b031ae</hash>
                <hash alg="SHA-256">d0e2bd3e0625d5d55226dcac0276fcb6ad59f8d993078a30003d67c7043ae7d9</hash>
                <hash alg="SHA-384">3c7e9f7f21166e049e2964cda1675147d9fbc7a10f119302d9145aad5b41027cd94bbb17e8773f3d87703107951f8ef6</hash>
                <hash alg="SHA-512">ca317cd2c5a3e13f442f494a18b8f55348018f9503980e7c46ba240b42ae79d97cec439797dbfc0c5b35fa873e30b14ddad2b6023551f35be04666f3c52ac621</hash>
                <hash alg="SHA3-256">7126dc90af1e3e27bf2695dba51dc7537041302df2264937c81bfd3d0df5fe5a</hash>
                <hash alg="SHA3-384">e0f8173b81e8d490ccc981159644a6db25c85429bdf3324ee26db734efd0388d2597e4c68f2c6de807eeff06db7bc0ff</hash>
                <hash alg="SHA3-512">3b775f34f925c01453362fad0579ed751cd9a061417e6bd4eafb59a9517acb2dcab6a51d17170740588d7226aa464d7670ec3050ef972713e7d95b54d98c9114</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar" type="library">
            <publisher>The Eclipse Foundation</publisher>
            <group>org.eclipse.aether</group>
            <name>aether-util</name>
            <version>1.1.0</version>
            <description>
                <![CDATA[A collection of utility classes to ease usage of the repository system.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">699bc0f3729d8b0a5bacf3e8e84ab010</hash>
                <hash alg="SHA-1">d0f84ba994f0133580e8b957a44593eaa03d42cd</hash>
                <hash alg="SHA-256">556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62</hash>
                <hash alg="SHA-384">35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef</hash>
                <hash alg="SHA-512">7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00</hash>
                <hash alg="SHA3-256">1a668d4561dac383db3caef99d481aba52f5fb28706afc6f60a19fef298a0d0c</hash>
                <hash alg="SHA3-384">be905c754735606a364c6fb568e1c471899a809f131fbad38c4eb5d64aae3e3cefcf5e68df6969a3d5a74e28ade9dd12</hash>
                <hash alg="SHA3-512">b15712c92d5c0c921ef89457f2bae1c0b70bf14b04db14a97434bdfc51d05e920a898e615b1a28cb22b8be84a8321f7578158c40442697e45833b59430f6a0b6</hash>
            </hashes>
            <licenses>
                <license>
                    <id>EPL-1.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.eclipse.org/</url>
                </reference>
                <reference type="build-system">
                    <url>https://hudson.eclipse.org/aether/job/aether-core/</url>
                </reference>
                <reference type="distribution">
                    <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;bug_status=__open__&amp;product=Aether</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.shared</group>
            <name>maven-dependency-analyzer</name>
            <version>1.11.3</version>
            <description>
                <![CDATA[Analyzes the dependencies of a project for undeclared or unused artifacts.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">e28df0d51d96f17dfec13c053853cdcf</hash>
                <hash alg="SHA-1">45eb5697e704afccbc0bdcb579aaafa38ca59292</hash>
                <hash alg="SHA-256">2f5fbd8d43182764be89adb7c246244fb3f4d6ffc9528c68b475b6fa8bf8eb22</hash>
                <hash alg="SHA-384">a39467679f7686b9e929140feeded6172d9c41de845b666faa275dfce34b81df154a6df06e2dde891d865086f603d138</hash>
                <hash alg="SHA-512">36da9ce76275972be492a607225306d1408013e6c7a6847a286155d7ccb51bfb1742ac1436ced3dc3f4366e5150132843074b021b42d4b55b29d6a3bd91ac9ca</hash>
                <hash alg="SHA3-256">ace535ebd9dba37e9da8e3c08e569b43d1aa989475bc29fa40166d45b068e76b</hash>
                <hash alg="SHA3-384">5d27ebc46a260c810c5d2014ce6d0a91cceb9c648c18423acd4f8bc948c0ff075ad422155620d380360f072f6d85118d</hash>
                <hash alg="SHA3-512">3ddf90accfebd97b9fa58b1bd9cf8741e7ac0792abf015b53465a156f1b26143abf4b81a0c44d4a82082457c7f45eae665c86014893561c423b7ee2fc55ad4f8</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://builds.apache.org/job/maven-box/job/maven-dependency-analyzer/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.ow2.asm/asm@8.0.1?type=jar" type="library">
            <publisher>OW2</publisher>
            <group>org.ow2.asm</group>
            <name>asm</name>
            <version>8.0.1</version>
            <description>
                <![CDATA[ASM, a very small and fast Java bytecode manipulation framework]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">72c74304fc162ae3b03e34ca6727e19f</hash>
                <hash alg="SHA-1">3f5199523fb95304b44563f5d56d9f5a07270669</hash>
                <hash alg="SHA-256">ca5b8d11569e53921b0e3486469e7c674361c79845dad3d514f38ab6e0c8c10a</hash>
                <hash alg="SHA-384">cec43bde02dab7e40b6af46675f1bc446048716ff4dd175e00cc1d647990fcb1ace2e1b8c1be29e870ae8f51f258a593</hash>
                <hash alg="SHA-512">05d6beeac94edc36cdc66b8c6330307b87d02c514bbd2a0c1848d7baf7baed0cc4e3a33930b7980e0628ea7e6a5bb74d5c938ee2c73280f91876d2999c4a0470</hash>
                <hash alg="SHA3-256">375eb246f1b8fa0ad2ac65b118fbc7712b116c06e9cf5fccaac837f069cf2be3</hash>
                <hash alg="SHA3-384">2087e8481d50c898fe982a5c705d6e03b03150ad00f0ffd21b33220c904badaa7081bbd99a149982193f4129331210a1</hash>
                <hash alg="SHA3-512">70932d4209d093db81572b4368ddd1b646567227a751038ca1b6af17bc033858471b809b115dab4cfcd26fb24124ace3476a5fb7c85c15634c3f5f8b9d37750e</hash>
            </hashes>
            <licenses>
                <license>
                    <id>BSD-3-Clause</id>
                    <url>https://opensource.org/licenses/BSD-3-Clause</url>
                </license>
            </licenses>
            <purl>pkg:maven/org.ow2.asm/asm@8.0.1?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.ow2.org/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://gitlab.ow2.org/asm/asm/issues</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://mail.ow2.org/wws/arc/asm/</url>
                </reference>
                <reference type="vcs">
                    <url>https://gitlab.ow2.org/asm/asm/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar" type="library">
            <publisher>Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-project</name>
            <version>2.0.5</version>
            <description>
                <![CDATA[This library is used to not only read Maven project object model files, but to assemble inheritence and to retrieve remote models as required.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">eff1c0053aeac79da2908551426b6233</hash>
                <hash alg="SHA-1">266f5df997b41581df9b5071170259862f3fde37</hash>
                <hash alg="SHA-256">a4be814b58b80583e0d9d3b71f4f97fd681daa1ba054d4d8aa0bcf1bd4abea24</hash>
                <hash alg="SHA-384">8dff5cff57895b8b966913dd1a53bf927acc8dda3d389ac74915f22d4ade8f716aebce631e613581babd1618454e89ef</hash>
                <hash alg="SHA-512">e33c9356821a1ee01ed243eddb163870b6ef4bc1f22825ec360174e9688f3118beec42473f3471988e71def125d04230b448e548dcbd8e0bf35ddfbdb13e6ec5</hash>
                <hash alg="SHA3-256">b098eafdb74ae6e0e42c9985aaaf753a6986df4edb543e32cba617e8d8e097ed</hash>
                <hash alg="SHA3-384">de3eb5eee67e2c92000ee40c0b4c00aea440a26073932495e9bb4817fa724ee7b0c3238f2f84512647a5ecf39ff4c6f9</hash>
                <hash alg="SHA3-512">692dfb94547eb5e5da008c093417d1a83f6938e0df61124c422affddc760c3b971954927d49d054282d12031cf95b99f3e3de3c4d863d7ee6e6d0cf461d586a9</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://jira.codehaus.org/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://mail-archives.apache.org/mod_mbox/maven-users</url>
                </reference>
                <reference type="vcs">
                    <url>https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5</url>
                </reference>
                <reference type="build-system">
                    <url>http://maven.zones.apache.org/continuum</url>
                </reference>
                <reference type="website">
                    <url>http://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar" type="library">
            <publisher>Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-profile</name>
            <version>2.0.5</version>
            <description>
                <![CDATA[Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">7b2d159fb0d792348739fd69392f6570</hash>
                <hash alg="SHA-1">931f898855fbc85f65f24b331fde042f9d9ff6c3</hash>
                <hash alg="SHA-256">e82d7868fbd516aa6ed82d0f917676449c46f1a8db8ba6d01217a6d6c2ae4acf</hash>
                <hash alg="SHA-384">28529be0d9a2ba66bcc97d4b89322c52e47b617b3552af42c4296b0d4eae221a7c04c0de724e6736f03cd41e63ef1719</hash>
                <hash alg="SHA-512">ad7e11797193590ebac596e5e5b6afdfef5d8c415f7edf8e51b79287b9df8caaca895a620790cfba52dd7fdec6210967aa30d04d6aae1ed1e12438c677624d48</hash>
                <hash alg="SHA3-256">964b65ed663dd0d0cefb165afc4a8693d90f6464dcd6a6614248f11f6f89f1b5</hash>
                <hash alg="SHA3-384">1ee99ac85666494e202e57abe62e8b22e4ad39267892e6fb2ca0d71b44883942a66ca83dbad54d03673ff45e3d7c2556</hash>
                <hash alg="SHA3-512">0f6e1d2b9b3fa190c9cbb9264eccb713cf237a881aceed84c03e10838bb883eb9933f5e9eecea0da331a3f9529a63d19cac8d99bcdb3a5341b6373ac7df76ab2</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://jira.codehaus.org/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://mail-archives.apache.org/mod_mbox/maven-users</url>
                </reference>
                <reference type="vcs">
                    <url>https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5</url>
                </reference>
                <reference type="build-system">
                    <url>http://maven.zones.apache.org/continuum</url>
                </reference>
                <reference type="website">
                    <url>http://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar" type="library">
            <publisher>Apache Software Foundation</publisher>
            <group>org.apache.maven</group>
            <name>maven-artifact-manager</name>
            <version>2.0.5</version>
            <description>
                <![CDATA[Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">e49c4ee2ea16041080e2b3119e96a047</hash>
                <hash alg="SHA-1">d40b64aa03faeb7338713fe2ee41f2a2d0357455</hash>
                <hash alg="SHA-256">511c45be7ffa5f037f4a8a0414cbb3afdc85571e81a891356810e36f746519f0</hash>
                <hash alg="SHA-384">6852d42f4b58dc388fbcaab9994423fe3a28b6059eb920dfc82aa1042bc56f859503d1d1a442d6cedfbb135829afe29b</hash>
                <hash alg="SHA-512">ce0900ee6d350cc0e6199c0255f3bef274f60b40bb2987a6bbff16ccf3a9dc4cbd64ec4178a088c4780603207a2dc8e4f5d8c55bbc5e71c625ca715f8c53dbd8</hash>
                <hash alg="SHA3-256">36cf93a8b983ae8b08575ed171da999176f17eff3c1a17f233415ef104f84d2f</hash>
                <hash alg="SHA3-384">7a5b2616dcaea59bfc32baec957e4f1548b0df611b812cd68e3043ac45b15439ebca406f9a105ea46dc7d0d44a542736</hash>
                <hash alg="SHA3-512">304fb611696e284053c497907a02010645ff8613bd037194fc1a340db6c7ff2b1ad4714a280f363790d50e2a7b47f03458bfc7175703aeedf27d447179ab66c8</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://jira.codehaus.org/browse/MNG</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://mail-archives.apache.org/mod_mbox/maven-users</url>
                </reference>
                <reference type="vcs">
                    <url>https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5</url>
                </reference>
                <reference type="build-system">
                    <url>http://maven.zones.apache.org/continuum</url>
                </reference>
                <reference type="website">
                    <url>http://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar" type="library">
            <publisher>Apache Software Foundation</publisher>
            <group>org.apache.maven.wagon</group>
            <name>wagon-provider-api</name>
            <version>1.0-beta-2</version>
            <description>
                <![CDATA[Maven Wagon API that defines the contract between different Wagon implementations]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">f41eb4e07a725eea3332743a29057855</hash>
                <hash alg="SHA-1">abd1c9ace6e87c94a4b91f5176aeb09d954b23a3</hash>
                <hash alg="SHA-256">0ba6040074d1e193580bae9314392940f5ecd81e3b6d3b3381050360dce033ad</hash>
                <hash alg="SHA-384">3022d9c68f43b0e7ee5afa9168fcd32f28003ceb0720ce6f92e572377aa63dd4ad6e47cc4c064e14c984319fb143694d</hash>
                <hash alg="SHA-512">d0fea3b44922c6057846856998c5bac8d372d1b625343f1cffaa73ff85680d60e6331415ddfbf2ba20aa0970481c284a6d85d776926814d9965c623397b304ec</hash>
                <hash alg="SHA3-256">fbc36ac7bc6e0dd72e63faa74c13550f0ee0a35c2ca270b69bd22799163d495e</hash>
                <hash alg="SHA3-384">d75d1c791ddf0c45fbc841346e28dbb40f6cf7ec8f86ba02f136e476b8507172b429730b7c0191e134b9ddf770c5bc7c</hash>
                <hash alg="SHA3-512">3053d4090509d280651cecdf4d13c86fa487abfc9feda8cd3dd8faedd0851e645d7b13242a64dadefc0c2d30c5333d300532a7a5b746ca1325f1feebe6917c40</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar</purl>
            <externalReferences>
                <reference type="issue-tracker">
                    <url>http://jira.codehaus.org/browse/WAGON</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://mail-archives.apache.org/mod_mbox/maven-wagon-users/</url>
                </reference>
                <reference type="vcs">
                    <url>https://svn.apache.org/repos/asf/maven/wagon/tags/wagon-1.0-beta-2</url>
                </reference>
                <reference type="build-system">
                    <url>http://maven.zones.apache.org:8080/continuum</url>
                </reference>
                <reference type="website">
                    <url>http://www.apache.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar" type="library">
            <publisher>Codehaus</publisher>
            <group>org.codehaus.plexus</group>
            <name>plexus-container-default</name>
            <version>1.0-alpha-9</version>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">ab910f683a0b11c9ca7e0a95dd47f6a5</hash>
                <hash alg="SHA-1">50596183cd7b688d9d7b6d868a0193ca1a8a7b3d</hash>
                <hash alg="SHA-256">dccfc47a4245e2d648e3bdeadb7a4daf51efc70fbd8b7b456454377c9cc5584a</hash>
                <hash alg="SHA-384">e6fac28ef2d2d7578e7c87573727bf1999c029befb0df13f0f2befd84254bb48223772458e8db39d6e6acf9ef096c6c1</hash>
                <hash alg="SHA-512">e2a9da0bad9c28990839f7aecd77493d850e1588eb21fc5833739f83600c90e3a006ce9a294e536f6da9683c771977b3424c7fc5a5715d9860350bf61e201cad</hash>
                <hash alg="SHA3-256">eab1126ea5a11b99cfeb1584ba15d70a7141016916acab661bbf505e0c046c96</hash>
                <hash alg="SHA3-384">1043e3a3bbe1261d72d6e37f9c54bbc2a3dc30711c541ced3cd86c120f78bbb9eaef2eba376170207419214c118ba696</hash>
                <hash alg="SHA3-512">ea5e9064b0266ee8d5baebd66c2f73797fcbcf56a5fb2eed33cbb083c6667d7b37cd4158e348950dfc4262c0f6a85560eb058320533187fe95999a01a3a9623f</hash>
            </hashes>
            <purl>pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.codehaus.org/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://lists.codehaus.org/pipermail/plexus-dev/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar" type="library">
            <publisher>The Codehaus</publisher>
            <group>classworlds</group>
            <name>classworlds</name>
            <version>1.1-alpha-2</version>
            <description/>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">82cacb7d9724c4a4e4d20f004884d4da</hash>
                <hash alg="SHA-1">05adf2e681c57d7f48038b602f3ca2254ee82d47</hash>
                <hash alg="SHA-256">2bf4e59f3acd106fea6145a9a88fe8956509f8b9c0fdd11eb96fee757269e3f3</hash>
                <hash alg="SHA-384">91938ab97d335046d8c58bae4e236ac56086e31ee399fa7a843ab366c0eb9a4ccad0a227ac213f31a58d682de40ca5d9</hash>
                <hash alg="SHA-512">eb7752c709ec703764de895099661df36536ff4bd2380bd68726d0cdb40bd27c8cf775ee98fd2ce7b3cfbd07b100c782513d964a2c9c82f33c56909212e5b8cd</hash>
                <hash alg="SHA3-256">689a7e9270d574f6573909f34eb8aa24a0bb0fded368fb6af03b17cec716653f</hash>
                <hash alg="SHA3-384">39415912b33aa58e2f80607fd170d6717dfbbd5174e4ac85159d9197c9dbaac5b972368351fb807ff777e3f870d87659</hash>
                <hash alg="SHA3-512">78d195f4c9bdab4f8b321a7b1d8458cccd4ed329a499b1d54dd5023e87ef86e0f90eb2285788d43c002d22215af40d20bbcaa7ac20d9499f9f6377131475a379</hash>
            </hashes>
            <purl>pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://codehaus.org/</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://lists.codehaus.org/pipermail/classworlds-user/</url>
                </reference>
                <reference type="vcs">
                    <url>http://cvs.classworlds.codehaus.org/</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar" type="library">
            <publisher>The Apache Software Foundation</publisher>
            <group>org.apache.maven.plugin-tools</group>
            <name>maven-plugin-annotations</name>
            <version>3.6.1</version>
            <description>
                <![CDATA[Java annotations to use in Mojos]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">5e280f952f836ee93b89e374d36fac07</hash>
                <hash alg="SHA-1">a77768d3ca934b5394451e2b4a00fa320554e1a9</hash>
                <hash alg="SHA-256">39ee9e01945b25201ab4490d33813c2394334e4e3d14102ddea3d781d2040a48</hash>
                <hash alg="SHA-384">0839b5cc9b72fc51ba59d71fcd3e354ee9f270f7dcaf6bc2a0fc616e69d5430aed9ba1f6e3270bee198d4f28bd06ffa3</hash>
                <hash alg="SHA-512">d7d8075358687b942efaf34ae39120a5e43fd5a78455f75a1c39870b736c2f7cb956845c6478e56695dd5c3bc5632d8a794bdd81ff08b91e934071f558737cd4</hash>
                <hash alg="SHA3-256">cd4312a9204b594a89f4606c8f9c9417edb52d5c6dd395722a296252c5858006</hash>
                <hash alg="SHA3-384">666fb6125d48eb213546bfd48c2040ae38fc442acc31434bc03f64abd91d86b06d3797df28a94b527e313163ebff997f</hash>
                <hash alg="SHA3-512">590c884a51c7d14af1775b874bd946a17c17d15b968e3381c9bced7e1fa7774c2cd55250ed78d2ee2befdf74836ddb0ac54231e00a75a92ea8795429faf4b2ff</hash>
            </hashes>
            <licenses>
                <license>
                    <id>Apache-2.0</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar</purl>
            <externalReferences>
                <reference type="build-system">
                    <url>https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/</url>
                </reference>
                <reference type="issue-tracker">
                    <url>https://issues.apache.org/jira/browse/MPLUGIN</url>
                </reference>
                <reference type="mailing-list">
                    <url>https://lists.apache.org/list.html?users@maven.apache.org</url>
                </reference>
                <reference type="website">
                    <url>https://www.apache.org/</url>
                </reference>
                <reference type="distribution">
                    <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/junit/junit@4.11?type=jar" type="library">
            <publisher>JUnit</publisher>
            <group>junit</group>
            <name>junit</name>
            <version>4.11</version>
            <description>
                <![CDATA[JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">3c42be5ea7cbf3635716abbb429cb90d</hash>
                <hash alg="SHA-1">4e031bb61df09069aeb2bffb4019e7a5034a4ee0</hash>
                <hash alg="SHA-256">90a8e1603eeca48e7e879f3afbc9560715322985f39a274f6f6070b43f9d06fe</hash>
                <hash alg="SHA-384">0f9ec06229184455e388ffa929bdc3a532d1b61ae22a51655fac91fca093b26695ecb48a040e869135aa4d69fff3840a</hash>
                <hash alg="SHA-512">a0de3a1d9924b8703736f27a0e02e243e9f50add113c8fb3477cd8d8e31505df1609755d79ba8f1e1f43c6b5201b409c116ad184978383da6613382727bedc6b</hash>
                <hash alg="SHA3-256">57a3a358ca4ab3cc2636cfc7531920afeee3f347e221673edb7c4946b08e8a33</hash>
                <hash alg="SHA3-384">50333b7f876d6660b89a29382a96d10077ee50d568fddbb61c83a241666893f04d3992f7a402fd49d97305acf318e877</hash>
                <hash alg="SHA3-512">25a71bd3d476e67a4967fc81388432f55ef4d2816c28343ac4b517a4b963f51515a855d1c0ec8a23bf31b416b72774f3852cd226f8f158d16aa69e8e21b74e0c</hash>
            </hashes>
            <licenses>
                <license>
                    <name>Common Public License Version 1.0</name>
                    <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
                </license>
            </licenses>
            <purl>pkg:maven/junit/junit@4.11?type=jar</purl>
            <externalReferences>
                <reference type="website">
                    <url>http://www.junit.org</url>
                </reference>
                <reference type="mailing-list">
                    <url>http://tech.groups.yahoo.com/group/junit/</url>
                </reference>
                <reference type="vcs">
                    <url>http://github.com/KentBeck/junit/tree/master</url>
                </reference>
            </externalReferences>
        </component>
        <component bom-ref="pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar" type="library">
            <group>org.hamcrest</group>
            <name>hamcrest-core</name>
            <version>1.3</version>
            <description>
                <![CDATA[This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.]]>
            </description>
            <scope>required</scope>
            <hashes>
                <hash alg="MD5">6393363b47ddcbba82321110c3e07519</hash>
                <hash alg="SHA-1">42a25dc3219429f0e5d060061f71acb49bf010a0</hash>
                <hash alg="SHA-256">66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9</hash>
                <hash alg="SHA-384">4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5</hash>
                <hash alg="SHA-512">e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49</hash>
                <hash alg="SHA3-256">f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba</hash>
                <hash alg="SHA3-384">b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be</hash>
                <hash alg="SHA3-512">bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63</hash>
            </hashes>
            <licenses>
                <license>
                    <id>BSD-3-Clause</id>
                </license>
            </licenses>
            <purl>pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar</purl>
            <externalReferences>
                <reference type="vcs">
                    <url>https://github.com/hamcrest/JavaHamcrest</url>
                </reference>
            </externalReferences>
        </component>
    </components>
    <dependencies>
        <dependency ref="pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar">
            <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
            <dependency ref="pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar"/>
            <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar"/>
            <dependency ref="pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar"/>
            <dependency ref="pkg:maven/javax.json/javax.json-api@1.1.4?type=jar"/>
            <dependency ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
        <dependency ref="pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar"/>
        <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar">
            <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"/>
            <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"/>
            <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar"/>
            <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
            <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"/>
        <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"/>
        <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar"/>
        <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar">
            <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar"/>
            <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar"/>
        <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
        <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"/>
        <dependency ref="pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar">
            <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"/>
        <dependency ref="pkg:maven/javax.json/javax.json-api@1.1.4?type=jar"/>
        <dependency ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"/>
        <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
        <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar">
            <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
            <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar"/>
            <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar"/>
            <dependency ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar"/>
            <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar">
            <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
            <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"/>
        <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"/>
        <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar">
            <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/javax.enterprise/cdi-api@1.0?type=jar">
            <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"/>
        <dependency ref="pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar"/>
        <dependency ref="pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&amp;type=jar">
            <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
            <dependency ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
        <dependency ref="pkg:maven/com.google.guava/guava@25.1-android?type=jar">
            <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
            <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar"/>
            <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar"/>
            <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
        <dependency ref="pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar"/>
        <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar"/>
        <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"/>
        <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar">
            <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar">
            <dependency ref="pkg:maven/org.ow2.asm/asm@8.0.1?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.ow2.asm/asm@8.0.1?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar">
            <dependency ref="pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar"/>
            <dependency ref="pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar"/>
            <dependency ref="pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar">
            <dependency ref="pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar"/>
        <dependency ref="pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar">
            <dependency ref="pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar"/>
        </dependency>
        <dependency ref="pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar"/>
        <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar"/>
    </dependencies>
</bom>
