{
  "bomFormat": "CycloneDX",
  "specVersion": "1.2",
  "serialNumber": "urn:uuid:84f30c18-1088-471e-b336-e4d7098ea230",
  "version": 1,
  "metadata": {
    "timestamp": "2021-08-19T00:30:03Z",
    "tools": [{
      "vendor": "CycloneDX",
      "name": "CycloneDX Maven plugin",
      "version": "2.0.0",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3f16922c19f6c87476afec19ccec7905"
        },
        {
          "alg": "SHA-1",
          "content": "072b6357a55c5c5e55cc955cd9f670a95aaea4db"
        },
        {
          "alg": "SHA-256",
          "content": "31744b750e5b1027178caf757cd7d0af111db1e6991128178557581ecfdd2d20"
        },
        {
          "alg": "SHA-384",
          "content": "682b5418defa0851619ebae6073de82f0a75f0ee03de3caaca2ab7c997a6e3be76f275e53aa9eafee39b001b990559e2"
        },
        {
          "alg": "SHA-512",
          "content": "63eabeffeaf253af418af621b884cbd00122499a8f9a6bddf99286733b1cf03acea13e1d29e687a9be0531b56d2abc7ce0a233100dd8a028b8eb6bcf82669ea5"
        },
        {
          "alg": "SHA3-256",
          "content": "8f885513cff462afac51f2459bcb8fbb71e33ad1abbf8c9ecd79ac143be61673"
        },
        {
          "alg": "SHA3-384",
          "content": "8f0df9ac6e80d5297c0a7b3069c6cb4bda6d563b31856fa7e8f8117bac7c1fd2b06c66c2bbee4bae20aaef9e1f2fa02c"
        },
        {
          "alg": "SHA3-512",
          "content": "52a3b3f62f18743f810133e59aef852656e26c5b289b3bae3b5d7a8b7864ae1014e496ecd4150a018858f96f448cb7f0776edcb36bf85ce62ba07bf63fbb9cfe"
        }
      ]
    }],
    "component": {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.5.2",
      "group": "org.cyclonedx",
      "name": "cyclonedx-maven-plugin",
      "version": "2.5.2",
      "licenses": [{"license": {
        "id": "Apache-2.0",
        "url": "http://www.apache.org/licenses/LICENSE-2.0"
      }}],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.5.2"
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar",
      "publisher": "CycloneDX",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "5.0.3",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eae3fd8c212f1af205297e13ba56df75"
        },
        {
          "alg": "SHA-1",
          "content": "4bd85a9ffdad002fa6fb924a3565523c60bc4044"
        },
        {
          "alg": "SHA-256",
          "content": "ba8b109b4cf6de3378233ca94b9bc2cd1919bd113c5049f0d0280c0ae5e8ccf3"
        },
        {
          "alg": "SHA-384",
          "content": "37d6e24c5c200f4972fe24950fd947a351d412c263abf263fbe2707b183dfcc286b916c007d1722424142f49385ab300"
        },
        {
          "alg": "SHA-512",
          "content": "ba0e6b239085b43d7dbce1ef68fa7026ce8dbc3b31fa23dea6d9d0eb70d46070788a1631c1a57cec47ae983756c983d84225d1f6f7e36fc3151be2b6b76f9319"
        },
        {
          "alg": "SHA3-256",
          "content": "58956dc45cbf183952a38e0fbf47d30b887af26c9cb16a2beeac510d24c9f821"
        },
        {
          "alg": "SHA3-384",
          "content": "84d1b9e64cc9411af9d806f8ea719582af59419f0206dc92f36912da7fced36824fe62971b5fff3e330701dc182d6437"
        },
        {
          "alg": "SHA3-512",
          "content": "d74ed9beb9751963771a60a7eeaacb635da3d9df517631bf156297608fa61c85cab3eb1f483b3e113baf96ff859eeddbe4b5083b9145e6a10b02c5385980c7eb"
        }
      ],
      "licenses": [{"license": {
        "id": "Apache-2.0",
        "url": "http://www.apache.org/licenses/LICENSE-2.0"
      }}],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://cyclonedx.org"
        },
        {
          "type": "build-system",
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type": "vcs",
          "url": "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.11.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg": "SHA-1",
          "content": "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg": "SHA-256",
          "content": "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg": "SHA-384",
          "content": "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg": "SHA-512",
          "content": "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg": "SHA3-256",
          "content": "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg": "SHA3-384",
          "content": "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg": "SHA3-512",
          "content": "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type": "vcs",
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type": "build-system",
          "url": "https://builds.apache.org/"
        },
        {
          "type": "mailing-list",
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.4.0",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72e2b308cf1757ffbe676f4bdb93cab4"
        },
        {
          "alg": "SHA-1",
          "content": "5b0bd20a9b4f01bcda741cbccf34af14819ecada"
        },
        {
          "alg": "SHA-256",
          "content": "fc7ab7ff3a33ae7bbf07df54987e85e48d26fc6c56e7948a695532228961718b"
        },
        {
          "alg": "SHA-384",
          "content": "e5b1ecbb708eaa324b30d180ff639c4f52dab6c6f545813d875a15872a31d6dda2491364c26acba0ccf70aa0e30d8a9a"
        },
        {
          "alg": "SHA-512",
          "content": "3592f3ab86880bbd2136b5c45d6a75aef21b7a9a10b8771675f5ffb5d7624927a07f8537c6c308ad33975465e2a6093833d9fbb144981cf89315b15640cfc2e0"
        },
        {
          "alg": "SHA3-256",
          "content": "31a9af068706121064fa83823c2ced159d34627ccbcaef87f66b78dd85332c63"
        },
        {
          "alg": "SHA3-384",
          "content": "d347829ccfc0ccfbd3a321e5ebf8d4fd79e8ed533b4a31ab6aaa7a59ef48b6d9802d17ed2b4feed1671f954c331f56c1"
        },
        {
          "alg": "SHA3-512",
          "content": "1ad5f3a3793b29ada8e911841154467a76fb98fb38c3edbdfd1241e88469ba5e2bb1cd92408528a6340f15f24005cd5fa1517321bd62273987301f25714319c6"
        }
      ],
      "licenses": [{"license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }}],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type": "vcs",
          "url": "https://github.com/package-url/packageurl-java.git"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.12.4",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b673a50c00821e79b44b870d5f1e00"
        },
        {
          "alg": "SHA-1",
          "content": "015c743856696c0239f2c51d8d19d9f97f034713"
        },
        {
          "alg": "SHA-256",
          "content": "4f9e98e3aaab049cfd67c410881031ccea2c2c289e8656499bc55187c80e5503"
        },
        {
          "alg": "SHA-384",
          "content": "3323b13c455a65e808fad441668185f1bb44a46c0a48453ab639e3a27350f59bab5377a40ca8edb197ed62538d1a63f1"
        },
        {
          "alg": "SHA-512",
          "content": "6553dd28fc67bbc92a164e25a5382610b5a011ba740156ea7ba97d95d5edd935b9ba2a3dfa910b1509e0e58272093c8f58c575e888ab22232f544d639e9fd68c"
        },
        {
          "alg": "SHA3-256",
          "content": "ce5adaf57de245c34e7f3f0fd74950fa7a9c4887d43878b02644f05c16beafd6"
        },
        {
          "alg": "SHA3-384",
          "content": "e6e4211e6242e92eaad5cdbeb0bcc42ce0e0b5ad40c494c2433a59c8fa5dc03f6df407f5a952dff8de3f5a17989c029a"
        },
        {
          "alg": "SHA3-512",
          "content": "6d9e835967770c97cc8a50dd9a3043eac2b9858e25bee8a1b8c47cbce5c8dbd0a572d802c475a85994b2cbd8e694be0df0547ff1c8f0b1a878e90173b07fd6c1"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type": "website",
          "url": "http://fasterxml.com/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/${project.artifactId}/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.12.4",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes": [
        {
          "alg": "MD5",
          "content": "58ffcb451f0bf6beb78e306cfe5d46f3"
        },
        {
          "alg": "SHA-1",
          "content": "006a1bd259b6c4e3f9219ec8ec0be55ed11eed0c"
        },
        {
          "alg": "SHA-256",
          "content": "3506ce47ec2604ae2d80d79505f7cb374f718060639415c07d144adadd2d68a3"
        },
        {
          "alg": "SHA-384",
          "content": "d14522335bb794675c557ee54320df2db3803d31f9d054a9299f738fe644a487d8837cd30395fd0cfc5cfdcee591fc45"
        },
        {
          "alg": "SHA-512",
          "content": "428e0ebb16dd4c74ab0adf712058fd0dc0cd788f6e6f90c60c627da6577b345fac60a30694e111f1cd4e3e8bf79a1f1b820d30ada114984b26c28e299e326eaa"
        },
        {
          "alg": "SHA3-256",
          "content": "47a188a6b932b7cec26907d4487d36c2e304f8d9b095d46834d5eed61c946efa"
        },
        {
          "alg": "SHA3-384",
          "content": "2e0e35f6d76e7166b782c4f121bac42f1f8ab67f1fd2acc8d5c1168fc85ea85bc74fb10c78871ad380abfe4f863d9216"
        },
        {
          "alg": "SHA3-512",
          "content": "0e7d6ac4aee2a4b6e6203059cbaddb85d26a797a27fb3397a95225a71f1f61b02bc1f9aa67c3242fc9f5107a3df7da692e5840e28019dcddc8fbcb7921a5662b"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/jackson-core"
        },
        {
          "type": "website",
          "url": "http://fasterxml.com/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/${project.artifactId}/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.12.4",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "16c7a1094270a27013fd58df7f6800f7"
        },
        {
          "alg": "SHA-1",
          "content": "752cf9a2562ac2c012e48057e3a4c17dad66c66e"
        },
        {
          "alg": "SHA-256",
          "content": "f6aa3706a875689b66cdac3334f65dfdb795ccfad4117bf072893b196ed1ec8e"
        },
        {
          "alg": "SHA-384",
          "content": "c8e65ce81c0f34aa01a83b3506247d28feff2765c234606657d77344ca85dbf9a38c447ae5dfcf1dfdc793f0582cc086"
        },
        {
          "alg": "SHA-512",
          "content": "6fdad6c5bb71a97331a662fe26265aacab6869f3307a710697d5c2f256fd48935764bfb0b3505a2cbb1605daf0b7350abdf84a1b1cf2bb1e91d9184565243c8e"
        },
        {
          "alg": "SHA3-256",
          "content": "a06fe4ccbda06d120d896ae0aafddcbbe308618d570ddd0fab79f6d4f2e88bff"
        },
        {
          "alg": "SHA3-384",
          "content": "fad11b5170fbc17ed65efcd52e15b83f77b1f810a368b855000b005a63e9f55b82cb3091971e140c282c958b7f2370f1"
        },
        {
          "alg": "SHA3-512",
          "content": "d215707c4becadfe5c4aa5ceafa88d2e532e705fa2cb31f35f6ca70868109bb24822097b5f8f108891eca356404cc5ab7ffb556f971b091c9774f580c522a3c4"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type": "website",
          "url": "http://fasterxml.com/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/${project.artifactId}/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.12.4",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7bf7ed4119602e8a7b23356dc0fba920"
        },
        {
          "alg": "SHA-1",
          "content": "069206e02e6a696034f06a59d3ddbfbba5a4cd81"
        },
        {
          "alg": "SHA-256",
          "content": "e99a7b4b89074bc689aabcd9eb1f2c1318b68cc5c34979daf3e34edc558c7a01"
        },
        {
          "alg": "SHA-384",
          "content": "6f6668716a3c339e6144c8c3d8c1ceeb26303d11263c501ed8d906694f4de1abc0c597839c57987e16b38005ec548046"
        },
        {
          "alg": "SHA-512",
          "content": "9f771e78af669b1e1683d6c5903bbf4790aaa88b6b420c2018437da318c3fa4220cd7fa726f3e42a1b8075def1fdbd3744937c15f3bcedfca3050199247363e8"
        },
        {
          "alg": "SHA3-256",
          "content": "cb8cdbb10ee9caace2346ba5f82cd001fbf262306ea322e841ebae055f04e48c"
        },
        {
          "alg": "SHA3-384",
          "content": "19c06e475f9f76d5264f1994bd51f68a608516e5c3263fb21e99f01345062a7693feda115734164282471b45985745b6"
        },
        {
          "alg": "SHA3-512",
          "content": "08fb3360dbc12adb60a532dd9224a1ef5b3aaf407c0a7efc5cc17fbce01814693530fe867014d679f0910b28089964261161f781d5098b716aa66e4b6eef4907"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type": "website",
          "url": "http://fasterxml.com/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/${project.artifactId}/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jaxb-annotations",
      "version": "2.12.4",
      "description": "Support for using JAXB annotations as an alternative to \"native\" Jackson annotations, for configuring data-binding.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "29ff9647ec16c8e897b29c380b7e87d7"
        },
        {
          "alg": "SHA-1",
          "content": "5e43703aae1a9843dfd7df0a0ad6cbfedcaff67f"
        },
        {
          "alg": "SHA-256",
          "content": "7a6063c76ba26f14f18b808ad50955f87fa20d2a5225a1d8dc5add63ce234f75"
        },
        {
          "alg": "SHA-384",
          "content": "d76c4d3ef5ef7b4c54ccfb5e3ea5d476c568111c45364e4eda4456eb2e06bcc4ae8a2bad58a46458996f055a793bff45"
        },
        {
          "alg": "SHA-512",
          "content": "1d2f21c485b5e5d84f369b65da9d467d1521c3c19d83fdbb49397ba33aaf811d0a39f94160ed21ad0d2ce997522324289607d0f0d0f678c22107d79d6f214bc6"
        },
        {
          "alg": "SHA3-256",
          "content": "70c61180f483a9376d1f4c0e07f2dd461c706f4ca635aea36e2334b5ca22c9bf"
        },
        {
          "alg": "SHA3-384",
          "content": "9951663349ed01f37a2c6ed000244be963b4d7a02514aa2ba12bfe080612572b2a04e085892301d0eee61f58d7ee43d9"
        },
        {
          "alg": "SHA3-512",
          "content": "f664f2b5cb774751cf8a50ca3618724c753b3449f201dc558fc45ceef51fcab94cf7f90eae29f64efc4a4ff76907434b2ce32151e6ef871a129714f52e3749ea"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/jackson-modules-base/issues"
        },
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/jackson-modules-base"
        },
        {
          "type": "website",
          "url": "http://fasterxml.com/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "2.3.2",
      "description": "JAXB (JSR 222) API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dabb40ba58199304c640b7bd8bb2fbac"
        },
        {
          "alg": "SHA-1",
          "content": "8d49996a4338670764d7ca4b85a1c4ccf7fe665d"
        },
        {
          "alg": "SHA-256",
          "content": "69156304079bdeed9fc0ae3b39389f19b3cc4ba4443bc80508995394ead742ea"
        },
        {
          "alg": "SHA-384",
          "content": "78c5131ed2926819aea1a8a59d78ca9a9fa7e5e8da05a0816608bca4768569202b15b9666e5d608ef1611ecd409dca90"
        },
        {
          "alg": "SHA-512",
          "content": "5a9a94fc323aecc9c5b28e9ac688aac8d09725d4cae660a57f5698914db91e351283dfe4909a2cc6de803890ac2b3b9f06af9d071d465031e55326a1085a11db"
        },
        {
          "alg": "SHA3-256",
          "content": "5fe06acf4a556c000d128a93f91374d080547c3c0f7946c5f42cb198c5de5764"
        },
        {
          "alg": "SHA3-384",
          "content": "cad8a0f18bd947886b832dbafec2e6bdb5c69c8694aba41c4f075ac54c5a8aabbcf32c3f981e0b657a390813a7cbc5bc"
        },
        {
          "alg": "SHA3-512",
          "content": "0301ccd4fd04c2e01c0ee9a6cff68f297689db0c3c3da44eb302dcf6b03f24c811bc132460079ce52ff8b522100df23a955c950b68c0a89e2ba25e34baf9bcd9"
        }
      ],
      "licenses": [{"license": {
        "name": "Eclipse Distribution License - v 1.0",
        "url": "http://www.eclipse.org/org/documents/edl-v10.php"
      }}],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type": "mailing-list",
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eclipse-ee4j/jaxb-api.git"
        },
        {
          "type": "website",
          "url": "https://www.eclipse.org"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.activation",
      "name": "jakarta.activation-api",
      "version": "1.2.1",
      "description": "${project.name}",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9b647398add993324d3d9e5effa6005a"
        },
        {
          "alg": "SHA-1",
          "content": "562a587face36ec7eff2db7f2fc95425c6602bc1"
        },
        {
          "alg": "SHA-256",
          "content": "8b0a0f52fa8b05c5431921a063ed866efaa41dadf2e3a7ee3e1961f2b0d9645b"
        },
        {
          "alg": "SHA-384",
          "content": "07422d64a103aacb8956c2067175f2cc257494d2cc8dbde29ddf8d93778a2d4b3903565b17173a0b5230b59d535bd474"
        },
        {
          "alg": "SHA-512",
          "content": "c60edc99f119b9e0df0cf527e2512f2b7ab9db0e17c54e83850695f80f652c981eaae90a296db671cf7ed88a044c150224e030df333feb30f346e8a31fb794c6"
        },
        {
          "alg": "SHA3-256",
          "content": "880a91ff9e978ac9208c84babd820dc2ded42e601d8a17688eb30883b598dec0"
        },
        {
          "alg": "SHA3-384",
          "content": "fe6be5e1fb1c0ee5236b2866c1e5058c84043fb4dc3dd5ad8f04e61c01c019c96e92ffdf1de0eaf7e657b2c02c6d898e"
        },
        {
          "alg": "SHA3-512",
          "content": "91c0b8cb956bdb06e79738a9db624022887b3d83838b708dd3c654f231ab6f9b4a27be2556fd14683cd6158bf8534b96acd2481054e0c946d6e9f641cc5af55b"
        }
      ],
      "licenses": [{"license": {
        "name": "EDL 1.0",
        "url": "http://www.eclipse.org/org/documents/edl-v10.php"
      }}],
      "purl": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eclipse-ee4j/jaf"
        },
        {
          "type": "website",
          "url": "https://www.eclipse.org"
        },
        {
          "type": "mailing-list",
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.1",
      "description": "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg": "SHA-1",
          "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg": "SHA-256",
          "content": "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg": "SHA-384",
          "content": "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg": "SHA-512",
          "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg": "SHA3-256",
          "content": "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg": "SHA3-384",
          "content": "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg": "SHA3-512",
          "content": "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses": [{"license": {
        "name": "The BSD License",
        "url": "http://www.opensource.org/licenses/bsd-license.php"
      }}],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://fasterxml.com"
        },
        {
          "type": "vcs",
          "url": "http://github.com/FasterXML/stax2-api"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/${project.artifactId}/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "6.2.4",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c72181f3fb82bda9aa724e6b0fed3395"
        },
        {
          "alg": "SHA-1",
          "content": "16b9f8ab972e67eb21872ea2c40046249d543989"
        },
        {
          "alg": "SHA-256",
          "content": "5fa734d5050f097405a801022d09377bbc81e811ef9a17cd0279ed3279f495a5"
        },
        {
          "alg": "SHA-384",
          "content": "7ea1a2dd9f37bf0229b88c6f8d20e92c38018e7680352469920b0712d96a4e7f51183f0d836fe12e2ebfaf5a2b638d46"
        },
        {
          "alg": "SHA-512",
          "content": "f235a53cbf3df547ab82fc27597f8d95a90b8373b3081558fd63fb9ef0dfec16e814a85ce1c2f00bbfe6fabdd8f74ef015a05ff32db450e1c37f91b13520d8ef"
        },
        {
          "alg": "SHA3-256",
          "content": "9955a67a92d9e8300f4a527b0b06e4edea748ce7b493c677e742e2c31c05b7c9"
        },
        {
          "alg": "SHA3-384",
          "content": "e7902b16033703fd2494bf197bdba687d0d9ac8fa5d1447defb93ce7af60e1bab19b8cf36d2b67959e29a130af0e34da"
        },
        {
          "alg": "SHA3-512",
          "content": "208fb2a3acb6c5b3755b48ffdb205bd01ad8a28054ec201c12fbbad8d4d689ef59712697f75f0e1e9333508a29bd1d1d65cbec4d93fa9d09cebc4f9c27aa9f37"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://fasterxml.com"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type": "vcs",
          "url": "https://github.com/FasterXML/woodstox"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.0.57",
      "description": "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5895e947ac9f632bab6925b6e6382466"
        },
        {
          "alg": "SHA-1",
          "content": "a2acac44350f055ba03f4a2e2c57967c12c58cc9"
        },
        {
          "alg": "SHA-256",
          "content": "b99e21146168ed9efd03ed0e0e7b9bf3a331a024a20ae475fee1b3b11d54dc08"
        },
        {
          "alg": "SHA-384",
          "content": "1521ab58bdd0f482c2e29dfecd99ae5056df3d5bbbcc3c95500e4b95462c17baa626a1d487ce55386425b7a98b068118"
        },
        {
          "alg": "SHA-512",
          "content": "f84d63393b3fea4a28833a3e6594a9548e076dc60c748cbe803e23bc7913ee027774742fc1e2397facea184fc3efca6dcf1b2bdbbcaef1d8c5295384452dd854"
        },
        {
          "alg": "SHA3-256",
          "content": "b426999c9e0a989e20dd6fe8d02381bb24d338ffb6e2cd6394977aa6618c6499"
        },
        {
          "alg": "SHA3-384",
          "content": "71c50544162de33ff39170f334d44aca8c6cde5ca16893b1e80d4c6ae7458e3dfa3134c1ac9e0535729f20d5faf2b4a2"
        },
        {
          "alg": "SHA3-512",
          "content": "5b901e5087fdbe285a32435d55465bc7cd904618808c2d3e440ec41145e2b2cff5b072c02fd4a3da25c225686472271f3a951c161d1944d237eba664b5aee064"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/networknt/json-schema-validator/issues"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.30",
      "description": "The slf4j API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f8be00da99bc4ab64c79ab1e2be7cb7c"
        },
        {
          "alg": "SHA-1",
          "content": "b5a4b6d16ab13e34a88fae84c35cd5d68cac922c"
        },
        {
          "alg": "SHA-256",
          "content": "cdba07964d1bb40a0761485c6b1e8c2f8fd9eb1d19c53928ac0d7f9510105c57"
        },
        {
          "alg": "SHA-384",
          "content": "d8061c2f86f33b813cb86d3d54c615d26aa89afb43cabf8d828ff6a3f4f8e63d4a3b27355033f67ba60c2cdf2558d9de"
        },
        {
          "alg": "SHA-512",
          "content": "e5435852569dda596ba46138af8ee9c4ecba8a7a43f4f1e7897aeb4430523a0f037088a7b63877df5734578f19d331f03d7b0f32d5ae6c425df211947b3e6173"
        },
        {
          "alg": "SHA3-256",
          "content": "7fd51c94b174d462a8c7ce103ea7b1858e2c0943da8d21b4407f71a250377c8e"
        },
        {
          "alg": "SHA3-384",
          "content": "9f0fcb3bab20dce3b4cd094145976ce7c9da8702c891ff6f3882072c5a0acc763aeb11c446ef08a80e1bec695b11cb60"
        },
        {
          "alg": "SHA3-512",
          "content": "a51d2d7d68a41e0ef1430c90d5b4f182d34be2233b92ad6fc32c1def5504b5089afcbda3349fd401df5d8accdbb0571096e91b2badadcec275bcf3bb0cacc7f7"
        }
      ],
      "licenses": [{"license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }}],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.qos.ch"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/qos-ch/slf4j"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "javax.json",
      "name": "javax.json-api",
      "version": "1.1.4",
      "description": "API module of JSR 374:Java API for Processing JSON",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128da383f9a4a45593650fc263a0998"
        },
        {
          "alg": "SHA-1",
          "content": "c8efa3cfaeee2b05c2dfd54cba21548a081b1746"
        },
        {
          "alg": "SHA-256",
          "content": "0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876"
        },
        {
          "alg": "SHA-384",
          "content": "67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089"
        },
        {
          "alg": "SHA-512",
          "content": "5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e"
        },
        {
          "alg": "SHA3-256",
          "content": "e4163d03ba00d439137c448baa853ca32543e5ab9873580d6dd3a96cabc0c0db"
        },
        {
          "alg": "SHA3-384",
          "content": "cc2797949bde1069ccaad3fc4a15c628dfce02393823bb25ccaae6ffa0d0222b193ccd1e9ff8fc71c98606d173d326bb"
        },
        {
          "alg": "SHA3-512",
          "content": "af54fa4e5fb9146097f18a9bc5acd492d118fa8b8ab292a864dcb8d1e37370d68b21f746ede20be060abe7cef6b02b575337445f858fc638485ef81795e7acb9"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.oracle.com"
        },
        {
          "type": "vcs",
          "url": "https://github.com/javaee/jsonp"
        },
        {
          "type": "distribution",
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "org.glassfish",
      "name": "javax.json",
      "version": "1.1.4",
      "description": "Default provider for JSR 374:Java API for Processing JSON",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ac67218fb9716fec512be8d0d877bde2"
        },
        {
          "alg": "SHA-1",
          "content": "943f240a509d3c70b448a55c6735591ecbd37c88"
        },
        {
          "alg": "SHA-256",
          "content": "17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955"
        },
        {
          "alg": "SHA-384",
          "content": "afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e"
        },
        {
          "alg": "SHA-512",
          "content": "63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d"
        },
        {
          "alg": "SHA3-256",
          "content": "755a7153b6feb575dd105166d615f81064e2d78d43aa497950852f6dcb282bac"
        },
        {
          "alg": "SHA3-384",
          "content": "d174b22190bb75a23dfce71ef70d692ea00a662aa49b96feb3fb4a7b41241f13fea8f3f3581442b35bfdf9645cac8f99"
        },
        {
          "alg": "SHA3-512",
          "content": "4a37342f7d9a787f46e4b891b24d3c4162f3d6f1f0985a65a2096355ef87831d608a5e2efac8c321581cbf626255b0e307fb2fcc13d39af9ee1922cf1acec357"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.oracle.com"
        },
        {
          "type": "vcs",
          "url": "https://github.com/javaee/jsonp"
        },
        {
          "type": "distribution",
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.15",
      "description": "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg": "SHA-1",
          "content": "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg": "SHA-256",
          "content": "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg": "SHA-384",
          "content": "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg": "SHA-512",
          "content": "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg": "SHA3-256",
          "content": "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg": "SHA3-384",
          "content": "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg": "SHA3-512",
          "content": "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/commons-codec"
        },
        {
          "type": "build-system",
          "url": "https://builds.apache.org/"
        },
        {
          "type": "mailing-list",
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.12.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "19fe50567358922bdad277959ea69545"
        },
        {
          "alg": "SHA-1",
          "content": "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg": "SHA-256",
          "content": "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg": "SHA-384",
          "content": "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg": "SHA-512",
          "content": "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg": "SHA3-256",
          "content": "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg": "SHA3-384",
          "content": "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg": "SHA3-512",
          "content": "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type": "vcs",
          "url": "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type": "build-system",
          "url": "https://builds.apache.org/"
        },
        {
          "type": "mailing-list",
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-core",
      "version": "3.8.2",
      "description": "Maven Core classes.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f6bf82f02cc49d12c9c62cceeb48e828"
        },
        {
          "alg": "SHA-1",
          "content": "060b576c1b45ed9b6a06fc81be25ef6398b894fd"
        },
        {
          "alg": "SHA-256",
          "content": "adfadb0dd7a794ae5d17b8753a726041a51e95be6da09f981c513d1c5f006dff"
        },
        {
          "alg": "SHA-384",
          "content": "3fb7f16c694826c358bbcc5e9e04462079d1fe047709ba9c1a63304a781a648eefb598994ca157becf262d5fb1052403"
        },
        {
          "alg": "SHA-512",
          "content": "76d54fa0ea756a3c06de251535733ef0407d7f1bcf610815052c9c96be43626f5adfe6a65170d01051d3cf32e4f728f237d309a5c1956a12a65db05a3673c4ab"
        },
        {
          "alg": "SHA3-256",
          "content": "8f89053b8a09ebb1c76fe86f188a3bc1cf438c062cf5f0cc852b7fbbe37deb48"
        },
        {
          "alg": "SHA3-384",
          "content": "a010d662b20a461e473cc2618e0e8e84b622ef73961a221d44308feed0fffe0648b60447e765016cef49d8037313b9f9"
        },
        {
          "alg": "SHA3-512",
          "content": "bba5e1c264547c0cd9fcf2f3994785daced0873b82de8a0f2489e848f49ee298425ecc8853ad667369862e8e2f433750ebd2a94e99ab8812b596bbe40a344ff2"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-model",
      "version": "3.8.2",
      "description": "Model for Maven POM (Project Object Model)",
      "hashes": [
        {
          "alg": "MD5",
          "content": "87a878560343d295c4945659cffb6e81"
        },
        {
          "alg": "SHA-1",
          "content": "f7c04cba819f964f13638ba40c782aee59bb135b"
        },
        {
          "alg": "SHA-256",
          "content": "8526329bb34b9dd24ff93bd7175c7a572f98351dcbe504c5d686838de871079e"
        },
        {
          "alg": "SHA-384",
          "content": "7b709b4cca9c8c4ae1e87895dc0d408f722470c5c2f789134a1d211cb8ad7d8c9c87ca9d5199d6608680f0080d0d4f03"
        },
        {
          "alg": "SHA-512",
          "content": "8b5d57158dbe4b124e5b55d8c2675f4ec66bbab1d8ccf1d1988e5b34c80a91c41fdf4cd2afb198fa76fb8ef3508b7ad0ff71d9b285aa907719de1e88322f28d2"
        },
        {
          "alg": "SHA3-256",
          "content": "0b0f0d8676f05aad15acdfda3cd2a013c7e88d26433d21f303224f7e3e71530c"
        },
        {
          "alg": "SHA3-384",
          "content": "8f698df6aa2e4d6e3eaf478586ef3c4f3a37794e680fe6d14e9130997988f7ccedd23b53fa1270806677f9e6f85988b7"
        },
        {
          "alg": "SHA3-512",
          "content": "c143fb6f034faf2b221b8bbc6b45a5f7120ddc04902169d8ef593201ed688de51e9c11d22bf307c51bf5086c35a38cbecdcabf8a3d73f1447d2aafb5e405814d"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-settings",
      "version": "3.8.2",
      "description": "Maven Settings model.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4e4e2a2d01c4c116ab52ef11a37da07c"
        },
        {
          "alg": "SHA-1",
          "content": "32c3d4031743b72045b27bfd8a111ec7957046c4"
        },
        {
          "alg": "SHA-256",
          "content": "d9440bbd99b48c4e2c924657a7580a33c8eab24d6d2c4551ae7791b00ea89792"
        },
        {
          "alg": "SHA-384",
          "content": "3b8287a4fc9ceac6066c077baa50d62dbe5589be8261138cb61ffeab9f42c30be5efa33cbafd986cfa12760b40a94a68"
        },
        {
          "alg": "SHA-512",
          "content": "8bbcd4747d2dfc5066ec6492c6d526c2dd003f2d91e00daf40efecb23e3a1508fc7ddc61f8790a8316f15b0d11c0819c20274ccbf452638644453027a3f43e81"
        },
        {
          "alg": "SHA3-256",
          "content": "6db49b88dd3c2d6d48aa830243032bd0733dd69f92765e640a3da764ec5b5b42"
        },
        {
          "alg": "SHA3-384",
          "content": "335a66d5adc5f26418449f4fffb39b6dcd2851c57caa57732e2c6e901e29759299e57943f2a5613f2a792b7edc6165a7"
        },
        {
          "alg": "SHA3-512",
          "content": "237bb0daea0e1cd6c76c5a3ba5c1e61f91ac7996e35c9ca582ad0f146618acff451da045abf21fd765143ced95d3d9936fa3156a84c4051d5b87e37370815616"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-settings-builder",
      "version": "3.8.2",
      "description": "The effective settings builder, with inheritance and password decryption.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2150f27cc0488ee7059a625cbca4c97d"
        },
        {
          "alg": "SHA-1",
          "content": "faa40efd308570a1791236b6f588262b9ca7a159"
        },
        {
          "alg": "SHA-256",
          "content": "eba839525d7755556f544dbad089ac28cc30d2ab1c9dc7891e57680bfa94b849"
        },
        {
          "alg": "SHA-384",
          "content": "a2eec4f483f416525031221b5a80a1487145a09aa42da8a1f74d349eee8016f0148150e360c5c3e606b6373ca67387c8"
        },
        {
          "alg": "SHA-512",
          "content": "b2e0352ad2d18201fba5e3aa9a5a7bca0c0f3f5e78ad5cdbca21567d9b6a3907842a53cbfcbeec20d956cf8e7bf199ceb7c38d94933c4ac912553a48e4e5846f"
        },
        {
          "alg": "SHA3-256",
          "content": "cffc62e19bd3bad76b47d143117be5c2e7ee0264dbb3da07c6d1b21071cded91"
        },
        {
          "alg": "SHA3-384",
          "content": "651fe372b70be793b1935ac05c342887914044add58e120d244de9fcf7aecc7b81753519bce8b689cbaa9433dc297fae"
        },
        {
          "alg": "SHA3-512",
          "content": "8b380ae6dca6886698d2c7ce74fa2567fcd449da7ffb7bb1bebf7b1fddf22cfb881a7ec97cc1375891ced380e06e939fbc63cfd2f331e149744077c40430f651"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-interpolation",
      "version": "1.25",
      "description": "The Plexus project provides a full software stack for creating and executing software projects.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "86cc99a26f3b3caa0fc2c8c77f4c03b0"
        },
        {
          "alg": "SHA-1",
          "content": "3b37b3335e6a97e11e690bbdc22ade1a5deb74d6"
        },
        {
          "alg": "SHA-256",
          "content": "e003802501574637f7abdc4e83e6d509a31e9ff825d12da6d1e419acf9688705"
        },
        {
          "alg": "SHA-384",
          "content": "1cd22e786470775e38c3d2a3fee6fe9d7115199e66052ba0eb8c83d5abe04b74ea108ea413c749329a33ff01013205ce"
        },
        {
          "alg": "SHA-512",
          "content": "fb647c1f159d17e16ae925bb407585e4a4b30c468518e60d3069ea4a75fa0f7122e789923534632125b22b7cef1cb44caf00700bba90282360f7c76e086b6699"
        },
        {
          "alg": "SHA3-256",
          "content": "815c0f95994eb8c9e7552ee389a3928da5661d472bbc2d567a85ae951ded2c32"
        },
        {
          "alg": "SHA3-384",
          "content": "7678d59689e8f479b259c06a52262a1deec374549e556dd3a4639ebb43d7a9ebb08505c357a7b9fdfdb8b31883c8a72c"
        },
        {
          "alg": "SHA3-512",
          "content": "e98ae04f2d4bf87eb5576af3582084e5cb4236ac91537c6ad22d174a9018dfc3e85f56c371352ded371201458f0a3cda26431b8aecae8b8bddcbcb26179c0d43"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "https://github.com/codehaus-plexus/plexus-interpolation/issues"
        },
        {
          "type": "vcs",
          "url": "http://github.com/codehaus-plexus/plexus-interpolation/tree/${project.scm.tag}/"
        },
        {
          "type": "website",
          "url": "http://codehaus-plexus.github.io/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "mailing-list",
          "url": "http://archive.plexus.codehaus.org/user"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "group": "org.sonatype.plexus",
      "name": "plexus-sec-dispatcher",
      "version": "1.4",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0a46e5bc9bc2fbd3b68091066aff2737"
        },
        {
          "alg": "SHA-1",
          "content": "43fde524e9b94c883727a9fddb8669181b890ea7"
        },
        {
          "alg": "SHA-256",
          "content": "da73e32b58132e64daf12269fd9d011c0b303f234840f179908725a632b6b57c"
        },
        {
          "alg": "SHA-384",
          "content": "8d6e72c364a12016aaa2ad1ae7dda8a83af32f47576696eff4fe1d3d7a8142f182beb71d65f9ca668ff38b470d40dd3f"
        },
        {
          "alg": "SHA-512",
          "content": "5b947edcb05a1c17648ec9fe53dd2c66b4a86dd2b950d989255f6edd636fd5d50d18b8f31b3a1736dadd9cff6790a3d0355f2ed896c3eb7f72e009199fe9957d"
        },
        {
          "alg": "SHA3-256",
          "content": "64a7cf888dbe8bb7d89cfed8089b1db4f63f88526f39d2463b23caa93a609158"
        },
        {
          "alg": "SHA3-384",
          "content": "76b890cebb7ddc14dae8854178b79b064d984df35cc65354ecbf97fa869d83c4d6e9093cbf317d1575855a638fc3ba56"
        },
        {
          "alg": "SHA3-512",
          "content": "194de7b0bdd4954ebae7982b8d91365864abfb86f16188880393089fa26122e9bc872c3181c4324b933b9faee90b7149140b97e72c552577e6c3447b06601f06"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.4"
        },
        {
          "type": "build-system",
          "url": "https://grid.sonatype.org/ci/view/Spice/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.sonatype.org/browse/SPICE"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-builder-support",
      "version": "3.8.2",
      "description": "Support for descriptor builders (model, setting, toolchains)",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d198e49af8575e3330e4cd40d954da6d"
        },
        {
          "alg": "SHA-1",
          "content": "965b20eee31bf2501f561cf62e403bb405e66593"
        },
        {
          "alg": "SHA-256",
          "content": "9818f9367aa5a48f4594b70f96a7bb4942ed3ceec3c3265ad141c560cb70550b"
        },
        {
          "alg": "SHA-384",
          "content": "f98dbb60063d3d6f00dd3806bd1b8ce448ececd38a6a66c9cc50627a77b7511abade20a763cc4cd86beda31d53772d93"
        },
        {
          "alg": "SHA-512",
          "content": "ac5a0947d04ac20c599fefb43ee02230d0d301e185f182b20cc159ed85020cd09cf3bf06b392a00d57cda3156cb75afa089ae1dce8990158245d7944dac14bbc"
        },
        {
          "alg": "SHA3-256",
          "content": "f39127eee3be83ffe8a9248e5b3d1abf7ea76255bd826d61a121ff70979f544e"
        },
        {
          "alg": "SHA3-384",
          "content": "35965bb5ab4eeffff274805ee4e09967142bcc34057096e56dcdb6da1de7e9820ad042672ea00e27374ae17a90afc871"
        },
        {
          "alg": "SHA3-512",
          "content": "5231d9f0a7022a3dd04eae632c009c16f18c96c1dd435c2a8c925119b4e97de5633cddc3311b51a28a62784fe18a40d43045b3513c7fc90491c56db0de72574b"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-repository-metadata",
      "version": "3.8.2",
      "description": "Per-directory local and remote repository metadata.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8a6822a90f18ab11363c6f3e5129225b"
        },
        {
          "alg": "SHA-1",
          "content": "c28411008f91c30966634896782e6b3d81a0f68d"
        },
        {
          "alg": "SHA-256",
          "content": "b7ab70df67c2ea2925235d902cbf3caf280c4c0c3117c119ac0bdf2ee20778dc"
        },
        {
          "alg": "SHA-384",
          "content": "336178512eb5533a95704c95c4c8440dc6abf21e2d94c765c47d7753478872c001d0b6075765d8d1fc0f0033e2412f82"
        },
        {
          "alg": "SHA-512",
          "content": "e905ab529c106c0930ade76837b3ee9731317d6895f18390c58e2c21b0e709233099b6acef76de6d3861245f16c165385342e8779b8b9ee41ef53e235aa9e1ea"
        },
        {
          "alg": "SHA3-256",
          "content": "792baa186741f9a649afd39c95b6b1557b00e513a365b471aff94415c9e1d442"
        },
        {
          "alg": "SHA3-384",
          "content": "87ba42b817cab98177f26e41db26d79884cc4e4b09125f10a0c789212848840560871d43c69bed9cab6c1c296a28eb52"
        },
        {
          "alg": "SHA3-512",
          "content": "383f6f6d573cb65f8b911403542249d5092bcf89b20becdd31e99a86d7472ebdb01d8cd0691c3cb491732af6c1be73df08adc815c66a2bf4cc9f67881b7732b7"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.8.2",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d846e40c5a8f797cdce87fffcdea4746"
        },
        {
          "alg": "SHA-1",
          "content": "e5a6e2a1500564d4f5fea0267829c28060a76a4c"
        },
        {
          "alg": "SHA-256",
          "content": "ba12863cfd1add12a59f92c475a28ba4eb3c127b039852b109d4099241f021b0"
        },
        {
          "alg": "SHA-384",
          "content": "2d2dcf4d92c53a66164d53f51c7df048c82e8a0894fbde9ed2ee7d781aa6529a978ae86657dc4fd8521b54ec4b014589"
        },
        {
          "alg": "SHA-512",
          "content": "8422277e5837ebff6360e982de87809d71ac4f5fdf9cd66c58209e4c9327a7cd7d595c84ef157c30e656392179c03b3d713eacddf2508793bca13579d27b9dbc"
        },
        {
          "alg": "SHA3-256",
          "content": "f31ae161fb20a61ed204b5149fd7e5bb35d2b6b88b6ead8ad4cbf15736e23e29"
        },
        {
          "alg": "SHA3-384",
          "content": "c3d4071cddebf129cd34f99992bc2199888150e9746eae268990d7cfe88185bddb903f5d9ae8c1f978b448da1fc93ada"
        },
        {
          "alg": "SHA3-512",
          "content": "87880b7edfb602bc34158c74a35e329d60faad570fddd8ef8ad9369124ec02dcfa70150eca70d07b35dd4ed56617a88695aa1190f06887173819b7de336378db"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-model-builder",
      "version": "3.8.2",
      "description": "The effective model builder, with inheritance, profile activation, interpolation, ...",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a4f67f17e41f61671296cf0e9b94da0a"
        },
        {
          "alg": "SHA-1",
          "content": "98175673cff7b1f0246f56570a11fe6acc0e070d"
        },
        {
          "alg": "SHA-256",
          "content": "ac0b0c2f6cabfd475bafaae111a3070a2390ee3e87f0a566eed97d9711cd9d91"
        },
        {
          "alg": "SHA-384",
          "content": "bcc0c6777f09634e470ffcd53db7aff8d8f51a65afcc80ad14a60013d6bf1caaad9726704db526da536eae9a3b0f3021"
        },
        {
          "alg": "SHA-512",
          "content": "bd02e02cebf67707578e190288f6e6242b1c5291dfed9ff989202e0c16a5a1606c38873de32b4401686be238d9e8d020b97fe948370470fe84fea8a969af71c1"
        },
        {
          "alg": "SHA3-256",
          "content": "06eb52377c8280e2578b2663a3ad73a87846e5f1fa4b1fdc443f2b6f97de99c2"
        },
        {
          "alg": "SHA3-384",
          "content": "659bd15f42a2dba40f25f74f11a5b2b7a1c39d01e8eae7d63ba2e0cc85783d381e0b0b3c8cdb4e4b91f712c11a325891"
        },
        {
          "alg": "SHA3-512",
          "content": "1286e671b88f3cc46b3bccf085a912a8985cc90cc151c7486764929ff121b7f4a16ec2d4f0357e8539f63d1dc44924f6301f7730b1d87577377a51862caaff75"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-resolver-provider",
      "version": "3.8.2",
      "description": "Extensions to Maven Resolver for utilizing Maven POM and repository metadata.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d1d01a1982cbd3393d5db4586a80cf5"
        },
        {
          "alg": "SHA-1",
          "content": "eeef49524643a739e2335d4e4c735364ea4379ab"
        },
        {
          "alg": "SHA-256",
          "content": "25cf1d7f7d4dcc32ce70625210722f954084218b4e31dfcabefcdb58b1bd6b41"
        },
        {
          "alg": "SHA-384",
          "content": "9cf3efb01a18e1ab3b3ce7304592f4bd866830639de2ab82fc998c38c04c547b32e1ca7cfd02150631197abe1f2abee8"
        },
        {
          "alg": "SHA-512",
          "content": "21b5e6c6b1fb6407262a2730c97d938c96b15793efa4da2238e39cd0e8f691d8970a328a577a681e36679325a04d7876abe4e9945d71e78d622e3700f9d7dea9"
        },
        {
          "alg": "SHA3-256",
          "content": "33899461285284e10a8adc13ac299ef3dc06f2b023fea8151c51ec9adfdf4a9a"
        },
        {
          "alg": "SHA3-384",
          "content": "4806f7e872e67eb1e4f201ea16eb24566e29c21eeb8786ba57550ea132cee7bce10ec9dc32f7f6d6a28d9f1f8c2aa38f"
        },
        {
          "alg": "SHA3-512",
          "content": "8a984975f66a7e774d888e5d7259ed9cb96170d281132d0a6f8bca9d2b196dfee5bf7907b71213e5678f1caad512b172ed83ce5b2a22caa5028bc3f7793bd8b6"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.resolver",
      "name": "maven-resolver-impl",
      "version": "1.6.3",
      "description": "An implementation of the repository system.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2145b5eb9ddd8bdf9f3171122c703d4b"
        },
        {
          "alg": "SHA-1",
          "content": "2714ffe60bd71259a41b3e4816122504b5f2db93"
        },
        {
          "alg": "SHA-256",
          "content": "17aaebe6e3e59df8cb5b4ec210196f7084637312b9bc4ff14cb77ad1ae3c381b"
        },
        {
          "alg": "SHA-384",
          "content": "37f1caeeb7f6b3a7358e457a2a9c6f2d0f037f2603f82d580a458d6e687a72335355d931885a2156ffc7b81abb715a82"
        },
        {
          "alg": "SHA-512",
          "content": "ef011e67152290379da6db1ce256b70dc436eb1596d58c38ee5bf9df65fbe75ed2ddc7768f6c61901c8cb83af88c42ad0b7bf24ad1775949eb4522511825280d"
        },
        {
          "alg": "SHA3-256",
          "content": "051baae5e07302175081aa2163a03364fe15d7bea230a81f13302552c47c7db7"
        },
        {
          "alg": "SHA3-384",
          "content": "200626d2ecc3736cdc13526c4ba88dcc664a1cc4305d8c9c03a9aefdd46759c956188a6908e7b845802fb30bc5818edf"
        },
        {
          "alg": "SHA3-512",
          "content": "c6c926e1d8ae8874b8467b9d9ee0fdf01655aa5591ed69fcc8051438d80ea848b318a56febd6995ce9c4b9e26e8edf1fa561cd46a84c3a6d12e307dc484ae5df"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-resolver/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.resolver",
      "name": "maven-resolver-api",
      "version": "1.6.3",
      "description": "The application programming interface for the repository system.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1f8b0046b6219ef49dbd73638ce33e2"
        },
        {
          "alg": "SHA-1",
          "content": "5ee235aa5ac5994b5dc847f8e78ffe9d77dd55d7"
        },
        {
          "alg": "SHA-256",
          "content": "d0b28ed944058ba4f9be4b54c25d6d5269cc4f3f3c49aa450d4dc2f7e0d552f6"
        },
        {
          "alg": "SHA-384",
          "content": "57a6cc8ea7620331169230771e7564837193d217e9dd6289a09cc874e05f87aeb84fb613d44917cf4835a783f9c572ee"
        },
        {
          "alg": "SHA-512",
          "content": "002cb75f6e07b27108e79a4d37d94fa882e89a2db30dd2ac69ecf0907cc548e13f579ebfbb5c019da6df4a950e3420b69dac3d49ae94b5646b7968ef7ea811ca"
        },
        {
          "alg": "SHA3-256",
          "content": "d883a9b0c67d5be1e4c2e52eb530d432e87565cdfa9df0a4b3e72ea9e080b766"
        },
        {
          "alg": "SHA3-384",
          "content": "1d303b3805945970de6d9bf3f4098e9582d79a6b5dcd126ee2af74fd2787c3469c693a125799323e9da3d5e5e1be54b3"
        },
        {
          "alg": "SHA3-512",
          "content": "c7c325a744e63c72fef9f31fdcb64343a6e315f7c780417479f502ac24d0e6f506519e358e0c82e809adc62223ec606c41be7156c2b27635722dd21e622d9c83"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-resolver/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.resolver",
      "name": "maven-resolver-spi",
      "version": "1.6.3",
      "description": "The service provider interface for repository system implementations and repository connectors.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "39ccba873cf05b2b5405d24a55133a37"
        },
        {
          "alg": "SHA-1",
          "content": "176425f73fe768bf9cdb8b5a742e7a00c1d8d178"
        },
        {
          "alg": "SHA-256",
          "content": "17441a39045ac19bc4a8068fb7284facebf6337754bf2bf8f26a76b5f98ed108"
        },
        {
          "alg": "SHA-384",
          "content": "e497fcbb12f4d64ad35a506c370ebf611c08a26b36bb592d9dc31a70b4244b06d57b10340912bb1d419e4791de4d746d"
        },
        {
          "alg": "SHA-512",
          "content": "2972b721213bfee654460468b2a2aa50546d7f1957be40d955728875af3a9801f8d78a2f796e832b9332d1f90ffb5ccb651289e7b5c8a175628b21b13594df43"
        },
        {
          "alg": "SHA3-256",
          "content": "79a77fc7ce9a0a1383e9636d34f2bd46cf16a7e65f808e199856c2551e26a5b4"
        },
        {
          "alg": "SHA3-384",
          "content": "92cc0dfd2087a4a33fffc796987753f36024d892db64fbe8f2a30a08de20cb7fff1204c65b1df0293d59a3204b70599b"
        },
        {
          "alg": "SHA3-512",
          "content": "af7b9a702626ba48d9f5ae50001831167f20c13b2a416e45c2241de7d96fcc113bdc75b04d21a8b2d88e86cf8629c72d9f0d46d19ee64d904c4cf52f479be58c"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-resolver/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.resolver",
      "name": "maven-resolver-util",
      "version": "1.6.3",
      "description": "A collection of utility classes to ease usage of the repository system.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "71d7fea851a889aae2cfd632e96d01c1"
        },
        {
          "alg": "SHA-1",
          "content": "07d5a6879037b34c61c2f527dfcfb59084e86ed0"
        },
        {
          "alg": "SHA-256",
          "content": "cdcad9355b625743f40e4cead9a96353404e010c39c808d23b044be331afa251"
        },
        {
          "alg": "SHA-384",
          "content": "1e7eb3fbead86751b552e75ea2fe853ac81b0c349f89d8d4cfdad9246091fb72f67192ef9c037e3be2de57e6ee8cea85"
        },
        {
          "alg": "SHA-512",
          "content": "45bd05eee2e2e606155916ec06efdb62e4a147af7ed0bb0b443b2a71b72576fec8e0ced0eee3ae3c86778198de227c1c7fe5d423cff0b96ba382fb563239694a"
        },
        {
          "alg": "SHA3-256",
          "content": "a1dba2a839537adff9bd0f166c893313c260d97b1b4e6dfdb69b2f4553c6808e"
        },
        {
          "alg": "SHA3-384",
          "content": "3439dd1e245d36fc026b74b31359c0271159b05612c05f9e06a6f2361ecdc48d9c864af103baa8cf9d343c0f951dee99"
        },
        {
          "alg": "SHA3-512",
          "content": "03d6b8f694bc7552c217128f6469571efc84566f6f49805c03d5ff64df2e2ed545a1aac141010a3e8bce4a731ec9c07acfec1e33d7ecb06282e4753cc74a4212"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-resolver/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MRESOLVER"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-resolver/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.shared",
      "name": "maven-shared-utils",
      "version": "3.3.4",
      "description": "Shared utilities for use by Maven core and plugins",
      "hashes": [
        {
          "alg": "MD5",
          "content": "908f2a0107ff330ac9b856356a0acaef"
        },
        {
          "alg": "SHA-1",
          "content": "f87a61adb1e12a00dcc6cc6005a51e693aa7c4ac"
        },
        {
          "alg": "SHA-256",
          "content": "7925d9c5a0e2040d24b8fae3f612eb399cbffe5838b33ba368777dc7bddf6dda"
        },
        {
          "alg": "SHA-384",
          "content": "bc5b42831ff598f42dda54738be004a619d60201a009b04cb3aaa0dc343d0e4fbc423b19739391eb7c33efcac3c08dd5"
        },
        {
          "alg": "SHA-512",
          "content": "c6693f8a061de74ac59c61d185f5b130cb574405cfc37febb8e73806ea64eea822a4a75c24098fb49b7871373091543a6f4c526c0842589e528cacad40e5554a"
        },
        {
          "alg": "SHA3-256",
          "content": "888fde30d4f9a9e1b7c4c5e4d61f9cf0499192e5bc1212538e2e3320688e44da"
        },
        {
          "alg": "SHA3-384",
          "content": "385bebb35d7ea13d92ae6a5afa9257b184a1fcf40cba077a103c7a91d39a4d3e0180a475febdba73ac75949968e77186"
        },
        {
          "alg": "SHA3-512",
          "content": "40b55bb907452777443b8162d456bf1d48e02bfd9124062faed9c9bf51e0f522d40b02f4c24eb39f760469ad226570876f0de6afecd74903112ec794f0aa9a78"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-shared-utils/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-shared-utils"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-shared-utils/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar",
      "publisher": "The Eclipse Foundation",
      "group": "org.eclipse.sisu",
      "name": "org.eclipse.sisu.plexus",
      "version": "0.3.4",
      "description": "Plexus-JSR330 adapter; adds Plexus support to the Sisu-Inject container",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a86bc488d167e59484298ef4c7b4168e"
        },
        {
          "alg": "SHA-1",
          "content": "f1335a3b7bc3fd23f67da88bd60cd5d4c3304ef3"
        },
        {
          "alg": "SHA-256",
          "content": "87e66ffad03aa18129ea0762d2c02f566a9480e6eee8d84e25e1b931f12ea831"
        },
        {
          "alg": "SHA-384",
          "content": "b733ce75c0a9d5f505cd4750d6acb3f800b21565ce722a88b591ab5f32aed66b8df0b0141de65b65bc36ccf9444807d9"
        },
        {
          "alg": "SHA-512",
          "content": "f76b33d4c0acfb90357736b8466016661924351332e1db6eaff5bd15398e7765acec328dd3e94d37b66c9881a54bbed23571590363c46ee78f5d1acbad36c95b"
        },
        {
          "alg": "SHA3-256",
          "content": "8c24ddfdde906e6b1a9b2c01b780003a667357435706092fe265267a86781d13"
        },
        {
          "alg": "SHA3-384",
          "content": "f15af3878b586ed49466a4176d8f093a4ca1899bd8158149a1d176464c31905028cc861072dc7fca7d98fadad8e5a94e"
        },
        {
          "alg": "SHA3-512",
          "content": "06547cb1ae277b36f64813842220d98e0ea5141f6e4360641142e5ff919d8f3ff2c9c24a913be194c75d2f43a7bdc48af9db313c1fd912d739b4002dc0be3186"
        }
      ],
      "licenses": [{"license": {"id": "EPL-1.0"}}],
      "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.eclipse.org/"
        },
        {
          "type": "build-system",
          "url": "https://hudson.eclipse.org/sisu/job/sisu-plexus-nightly/"
        },
        {
          "type": "issue-tracker",
          "url": "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Plexus&format=guided"
        },
        {
          "type": "mailing-list",
          "url": "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type": "vcs",
          "url": "http://git.eclipse.org/c/sisu/org.eclipse.sisu.plexus.git/tree/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "publisher": "Seam Framework",
      "group": "javax.enterprise",
      "name": "cdi-api",
      "version": "1.0",
      "description": "APIs for JSR-299: Contexts and Dependency Injection for Java EE",
      "hashes": [
        {
          "alg": "MD5",
          "content": "462c0959f0322016495f4598243bc0f2"
        },
        {
          "alg": "SHA-1",
          "content": "44c453f60909dfc223552ace63e05c694215156b"
        },
        {
          "alg": "SHA-256",
          "content": "1f10b2204cc77c919301f20ff90461c3df1b6e6cb148be1c2d22107f4851d423"
        },
        {
          "alg": "SHA-384",
          "content": "cff1b12eddd9d7c4e075ea91edf063bf22308dc1857e1ba19914baa5db0921828a8605c37a2a672af8a6e76116cbaf08"
        },
        {
          "alg": "SHA-512",
          "content": "3e326196a2cbf19375803ce37d743a9818c4fa2292914439e748060d6889c997fe33077f52e52d4dd61b60e7342aa31b446d7571a92ec864f44cead45ebd612b"
        },
        {
          "alg": "SHA3-256",
          "content": "494d37242e8348177200a539aa035802b9bb5cf9f1c8dfd04fac5b5f1432e216"
        },
        {
          "alg": "SHA3-384",
          "content": "4551179cf722d33b29627969865017905bbf793320adfe203c3f38f6e1453bb1456d81814c3e3249d1967d6a4139737a"
        },
        {
          "alg": "SHA3-512",
          "content": "27fc4a60df1a65feb497c9296d2ecd7ff9a93b28b6ec7cefd25dfe1b96735cbbeb2d7824f71903dc6ea273357ff24462a6420bdef0b82bf1e75bbc117d92032b"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://seamframework.org"
        },
        {
          "type": "build-system",
          "url": "http://hudson.jboss.org"
        },
        {
          "type": "issue-tracker",
          "url": "http://jira.jboss.org/browse/WELD"
        },
        {
          "type": "vcs",
          "url": "http://fisheye.jboss.org/browse/Weld/api/tags/1.0/build/tags/weld-parent-6/weld-api-bom"
        },
        {
          "type": "distribution",
          "url": "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "group": "javax.annotation",
      "name": "jsr250-api",
      "version": "1.0",
      "description": "JSR-250 Reference Implementation by Glassfish",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4cd56b2e4977e541186de69f5126b4a6"
        },
        {
          "alg": "SHA-1",
          "content": "5025422767732a1ab45d93abfea846513d742dcf"
        },
        {
          "alg": "SHA-256",
          "content": "a1a922d0d9b6d183ed3800dfac01d1e1eb159f0e8c6f94736931c1def54a941f"
        },
        {
          "alg": "SHA-384",
          "content": "33e45a556c20dfd05b0af34e58a651bcb3c79275694bf14b68a1e7a1116b722d5a5d3399f4bb304fef7fc296da61dd5d"
        },
        {
          "alg": "SHA-512",
          "content": "8b5dd24460e42763f3645205be4b4f80691e217d36bee5fc5b5df6ebc8782ed0f641fb9e2fe918a2d0eede32556656f6b61fe65d2cbec5086e61ef3d91e4d871"
        },
        {
          "alg": "SHA3-256",
          "content": "623ae141aa22b45010282c862e41eec3ed0dafabd8f1ee5591ba623a242375ab"
        },
        {
          "alg": "SHA3-384",
          "content": "5ab52f8a6f45849398f4a268cf498f7788adf8d0ad6ede2f9287814095051ce8529b05bea0a71c90718ce4c21d4594f5"
        },
        {
          "alg": "SHA3-512",
          "content": "d7edd7a76d88d466b310d71fdc10d7b289838391408f8b704620b6683b65e436c0fa411d8dd356b0792e29e2fef8fbb8a6658bb97e7046e1277404a3395a9a53"
        }
      ],
      "licenses": [{"license": {
        "name": "COMMON DEVELOPMENT AND DISTRIBUTION LICENSE (CDDL) Version 1.0",
        "url": "https://glassfish.dev.java.net/public/CDDLv1.0.html"
      }}],
      "purl": "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar",
      "externalReferences": [{
        "type": "distribution",
        "url": "http://jcp.org/aboutJava/communityprocess/final/jsr250/index.html"
      }]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar",
      "publisher": "The Eclipse Foundation",
      "group": "org.eclipse.sisu",
      "name": "org.eclipse.sisu.inject",
      "version": "0.3.4",
      "description": "JSR330-based container; supports classpath scanning, auto-binding, and dynamic auto-wiring",
      "hashes": [
        {
          "alg": "MD5",
          "content": "edf3eedbd99a0cd38c259a2daa2ea702"
        },
        {
          "alg": "SHA-1",
          "content": "fc3be144183f54dc6f5c55e34462c1c2d89d7d96"
        },
        {
          "alg": "SHA-256",
          "content": "8c0e6aa7f35593016f2c5e78b604b57f023cdaca3561fe2fe36f2b5dbbae1d16"
        },
        {
          "alg": "SHA-384",
          "content": "08de5e071ca35e5fd2e35ed49758ab64970e77b87cc7f8800fecf5875688ec68aebb9f0d692771dcfe906c593aaa2485"
        },
        {
          "alg": "SHA-512",
          "content": "cfd6be3e9f160258682662325757a8b95303045e37708f4226f40aaef01c8a5e4ff5a275715e4d740e2feae462e3b76f53c360507c1f738bec0157d2c226a46a"
        },
        {
          "alg": "SHA3-256",
          "content": "2ed984724809d0e6f46e847142e5b21d0e613db7e93814284d6f663c52db2ca0"
        },
        {
          "alg": "SHA3-384",
          "content": "ecdb27e767cfe54d094ef76196841f1b4c41db85177627728bb7c2acba91f895d50de57d481348d3d648877dea219c10"
        },
        {
          "alg": "SHA3-512",
          "content": "94c2a7e75bd0c253ecaf8c205dea5c2c9d83f9496f49d6495fd94f599707fe662eb5b061da7ddbce6e4f7b88429c79bd7671561ebc3b734632251e053203f075"
        }
      ],
      "licenses": [{"license": {"id": "EPL-1.0"}}],
      "purl": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.eclipse.org/"
        },
        {
          "type": "build-system",
          "url": "https://hudson.eclipse.org/sisu/job/sisu-inject-nightly/"
        },
        {
          "type": "issue-tracker",
          "url": "https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Sisu&component=Inject&format=guided"
        },
        {
          "type": "mailing-list",
          "url": "http://dev.eclipse.org/mhonarc/lists/sisu-dev/"
        },
        {
          "type": "vcs",
          "url": "http://git.eclipse.org/c/sisu/org.eclipse.sisu.inject.git/tree/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
      "group": "com.google.inject",
      "name": "guice",
      "version": "4.2.2",
      "hashes": [
        {
          "alg": "MD5",
          "content": "57d2b333c34d0f834189d54b6e59d1a6"
        },
        {
          "alg": "SHA-1",
          "content": "fa13659f9128f4c011c8e1d06f137083b4876377"
        },
        {
          "alg": "SHA-256",
          "content": "0f4f5fb28609a4d2b38b7f7128be7cf9b541f25283d71b4e56066d99683aafff"
        },
        {
          "alg": "SHA-384",
          "content": "b8dbffa5d7d5d747da5bcbf80c5642caf7d845210b6246b3fbe37fe35fb62296a143bd131c394c97a09d78c06e05c4f8"
        },
        {
          "alg": "SHA-512",
          "content": "78f17b090f34564db0fa6903c966e79d8002903d2604f9605a0d713e770a9c772c11d615a5e112dbb15464b9f8945edff6ac3d23ac84ccb08eb1657ec64d4442"
        },
        {
          "alg": "SHA3-256",
          "content": "d6c7802ae9da1ede2a1fd5bddaec3fadbe6cce96754ac1777abe23656da61616"
        },
        {
          "alg": "SHA3-384",
          "content": "77c03af1ee596ff17baf62893037dc7c3b2476a68f928811c94c19c6ef33df0098f6bb4bde97be887797442359a17205"
        },
        {
          "alg": "SHA3-512",
          "content": "a2f0e757d29e73175af02a00b34f35065080ffc9be10e2445e51df556180e2e10b68216277c384f07729cf4b326061a870d6ced32045ee545c43a7c6cb209821"
        }
      ],
      "purl": "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "group": "aopalliance",
      "name": "aopalliance",
      "version": "1.0",
      "description": "AOP Alliance",
      "hashes": [
        {
          "alg": "MD5",
          "content": "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg": "SHA-1",
          "content": "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg": "SHA-256",
          "content": "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg": "SHA-384",
          "content": "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg": "SHA-512",
          "content": "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg": "SHA3-256",
          "content": "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg": "SHA3-384",
          "content": "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg": "SHA3-512",
          "content": "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses": [{"license": {"name": "Public Domain"}}],
      "purl": "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@25.1-android?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "25.1-android",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b506eaec680c6d92d5f063fa1d57956d"
        },
        {
          "alg": "SHA-1",
          "content": "bdaab946ca5ad20253502d873ba0c3313d141036"
        },
        {
          "alg": "SHA-256",
          "content": "f7b8f8fed176b9cf6831b98cb07320d7fbe91d99b29999f752c3821dfe45bdc8"
        },
        {
          "alg": "SHA-384",
          "content": "c1b18ac69bb1a99766b701b470fa3dd560e5067deb273727cfacc083760f503443f555f41765fc9cea7c65a138742758"
        },
        {
          "alg": "SHA-512",
          "content": "c8f95af9f1e97dee807503c8fbb442c87eed2694e43ad0fd9fc2e62ba99c5e93d476d5ee8f4791f173cb8fdabc88abac0e8130a51de280af836a3e0c4eadaff6"
        },
        {
          "alg": "SHA3-256",
          "content": "ea0feef6c17ef154cc4f9adfd1ebe1b84fe7af7b03b993e6b3ae6da1fe279f59"
        },
        {
          "alg": "SHA3-384",
          "content": "acb8fdcce24abde49a5e093908c9a825b610388740d851f11d53ac17ab3e88bd4c81078de9e669b83f8be050ea9d8392"
        },
        {
          "alg": "SHA3-512",
          "content": "3d70e852e2047d6107b9fcfe941bbf84bd19df09d10bc02119ae82fdd48c4c5dfaef108b8b117090f92156f7284d6b4ca6ec2393beb596f3efb80a47c0f29056"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.google.guava/guava@25.1-android?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://travis-ci.org/google/guava"
        },
        {
          "type": "issue-tracker",
          "url": "https://github.com/google/guava/issues"
        },
        {
          "type": "vcs",
          "url": "https://github.com/google/guava"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://code.google.com/p/jsr-305/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-compat-qual",
      "version": "2.0.0",
      "description": "Checker Qual is the set of annotations (qualifiers) and supporting classes used by the Checker Framework to type check Java source code. Please see artifact: org.checkerframework:checker",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b6fb2610dacd211a3e2c3d8af1b60d0f"
        },
        {
          "alg": "SHA-1",
          "content": "fc89b03860d11d6213d0154a62bcd1c2f69b9efa"
        },
        {
          "alg": "SHA-256",
          "content": "a40b2ce6d8551e5b90b1bf637064303f32944d61b52ab2014e38699df573941b"
        },
        {
          "alg": "SHA-384",
          "content": "647d7bcbfaa000d0ed330eea0af4378e691303bc1d70fde3dc657c1cf0eceb0c2b0abd44745b879fdbd441131a056130"
        },
        {
          "alg": "SHA-512",
          "content": "fdecc20efd6943426e7f8bdfb8bef9d28258f9f934cf29090e2f5b297c501454606cc28593cd7d089a5c14f6d2dcafc59f4606053405d7f91d623a0e3202f4a8"
        },
        {
          "alg": "SHA3-256",
          "content": "6332c0be53250aaf67b95786e10337e1134ca645aed3b4cc596c68a3555c07fc"
        },
        {
          "alg": "SHA3-384",
          "content": "ce6f53807d1006ffc5b1a7db6581090d5a7ea40d5d6af4df8f2aa31b02e0a35b8441c97f8ebd3efc011798cb42e62198"
        },
        {
          "alg": "SHA3-512",
          "content": "74780f6c4d9e615c5be2f7149540721bfccd43e71b2d912054b98cf4f1a5ae5506497eca9c76f9e09f988d988bba8a1ec0588684379722044d894594dc787ea4"
        }
      ],
      "licenses": [
        {"license": {
          "name": "GNU General Public License, version 2 (GPL2), with the classpath exception",
          "url": "http://www.gnu.org/software/classpath/license.html"
        }},
        {"license": {"id": "MIT"}}
      ],
      "purl": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar",
      "externalReferences": [{
        "type": "vcs",
        "url": "https://github.com/typetools/checker-framework.git"
      }]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.1.3",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "hashes": [
        {
          "alg": "MD5",
          "content": "97504b36cf871722d81a4b9e114f2a16"
        },
        {
          "alg": "SHA-1",
          "content": "39b109f2cd352b2d71b52a3b5a1a9850e1dc304b"
        },
        {
          "alg": "SHA-256",
          "content": "03d0329547c13da9e17c634d1049ea2ead093925e290567e1a364fd6b1fc7ff8"
        },
        {
          "alg": "SHA-384",
          "content": "03ff39082a3cd3c64d679c3df3be10abc3a87d6a576f6e21585ac6a18439d136608f9293e370186388fc5c8854adb3eb"
        },
        {
          "alg": "SHA-512",
          "content": "bd2135cc9eb2c652658a2814ec9c565fa3e071d4cff590cbe17b853885c78c9f84c1b7b24ba736f4f30ed8cec60a6af983827fcbed61ff142f27ac808e97fc6b"
        },
        {
          "alg": "SHA3-256",
          "content": "5c7b2ffc8d4073700647681ed44dd783049648aa8e174f37d2510339a65f5466"
        },
        {
          "alg": "SHA3-384",
          "content": "02e686b3fbe3c3a728d1d9ee67fe7ad5f32688314e24f63efb1666302650d86ccaef4304f5750cd155729404603cfa00"
        },
        {
          "alg": "SHA3-512",
          "content": "3f05def83905268da5044c8bd6fbf62b89499d77351b56a357de8d27ef872c6c300385a6bca009590d61be90a39a0f417c4d8358a13b09847ba0452ef416db06"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/google/error-prone"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "1.1",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "49ae3204bb0bb9b2ac77062641f4a6d7"
        },
        {
          "alg": "SHA-1",
          "content": "ed28ded51a8b1c6b112568def5f4b455e6809019"
        },
        {
          "alg": "SHA-256",
          "content": "2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6"
        },
        {
          "alg": "SHA-384",
          "content": "8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181"
        },
        {
          "alg": "SHA-512",
          "content": "a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0"
        },
        {
          "alg": "SHA3-256",
          "content": "275370eeb5f02c15358168ea134c4eab1afed8d27750a8a326b9f9f506dfc9f2"
        },
        {
          "alg": "SHA3-384",
          "content": "a9906146d76704f64b1a1aad3d80be86e0d08a987fdb63d4d8d0399937e7e94076d9878a14593fb4465f3a5fccec0df5"
        },
        {
          "alg": "SHA3-512",
          "content": "d9e2a3943373e1eab933b45f49997b24e01466eb99a177c40f21c7107c9f21ebb135e14d191b0a5b699e3985d20de8e87662e92c0bf59e5e054d3da85fd777dd"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "vcs",
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar",
      "publisher": "Codehaus",
      "group": "org.codehaus.mojo",
      "name": "animal-sniffer-annotations",
      "version": "1.14",
      "description": "Animal Sniffer Parent project.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9d42e46845c874f1710a9f6a741f6c14"
        },
        {
          "alg": "SHA-1",
          "content": "775b7e22fb10026eed3f86e8dc556dfafe35f2d5"
        },
        {
          "alg": "SHA-256",
          "content": "2068320bd6bad744c3673ab048f67e30bef8f518996fa380033556600669905d"
        },
        {
          "alg": "SHA-384",
          "content": "f84c3a6589e4fd49764595bad99ef2ebb443f1c9a5f11177a2073b54156989979b5e97fac591714f18304fbcf26bb1c6"
        },
        {
          "alg": "SHA-512",
          "content": "9e5e3ea9e06e0ac9463869fd0e08ed38f7042784995a7b50c9bfd7f692a53f0e1430b9e1367dc772d0d4eafe5fd2beabbcc60da5008bd792f9e7ec8436c0f136"
        },
        {
          "alg": "SHA3-256",
          "content": "9b624360f936e928bc63bf44e475d8fd052148c0d0cc56c3c88c26429b430c08"
        },
        {
          "alg": "SHA3-384",
          "content": "1821c7ba68f3b43cb25b3038fa732631d1db6063ecc5c7f84b31fdadfa8ca43434dc960e602af02a2891237cd90b8c29"
        },
        {
          "alg": "SHA3-512",
          "content": "5f0a62a96445cfeaf101d2ddc56472621f5c3dafc54ad4b230a373012833b7da83e96af7c07b60a586768361b3bce3f3626ed2cc09fbbd84e840e0714d6344ee"
        }
      ],
      "licenses": [{"license": {
        "id": "MIT",
        "url": "https://opensource.org/licenses/MIT"
      }}],
      "purl": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://jira.codehaus.org/browse/MANIMALSNIFFER"
        },
        {
          "type": "vcs",
          "url": "http://fisheye.codehaus.org/browse/mojo/tags/animal-sniffer-parent-1.14"
        },
        {
          "type": "website",
          "url": "http://codehaus.org"
        },
        {
          "type": "build-system",
          "url": "http://bamboo.ci.codehaus.org/browse/MOJO"
        },
        {
          "type": "mailing-list",
          "url": "http://markmail.org/list/org.codehaus.mojo.dev"
        },
        {
          "type": "distribution",
          "url": "https://nexus.codehaus.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "group": "javax.inject",
      "name": "javax.inject",
      "version": "1",
      "description": "The javax.inject API",
      "hashes": [
        {
          "alg": "MD5",
          "content": "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg": "SHA-1",
          "content": "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg": "SHA-256",
          "content": "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg": "SHA-384",
          "content": "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg": "SHA-512",
          "content": "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg": "SHA3-256",
          "content": "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg": "SHA3-384",
          "content": "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg": "SHA3-512",
          "content": "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences": [{
        "type": "vcs",
        "url": "http://code.google.com/p/atinject/source/checkout"
      }]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.2.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a1b7cb2baeae4bb4c3a016417d5d3cb0"
        },
        {
          "alg": "SHA-1",
          "content": "13b015768e0d04849d2794e4c47eb02d01a0de32"
        },
        {
          "alg": "SHA-256",
          "content": "8d07b497bb8deb167ee5329cae87ef2043833bf52e4f15a5a9379cec447a5b2b"
        },
        {
          "alg": "SHA-384",
          "content": "cf78e1639fd2db660ace75bb9d97dc68843edd5bcd368951fa45cfd9f3ed66792a9d4582f8fe72f25e8ab094f7a7a565"
        },
        {
          "alg": "SHA-512",
          "content": "354f185cb3c6ade3f2d3f27c1a27a811922782ca4bd74a997c9c922dc7a2d44148ce6f141f16c0c1ab8f7988dd8a30602713d558606d088e8ba82a0ec1fb55a5"
        },
        {
          "alg": "SHA3-256",
          "content": "564639fa9188a1aed480cf33fa481ed2fb40ac9473bf6eef92b11ac5a4198d8a"
        },
        {
          "alg": "SHA3-384",
          "content": "9c7f355e5cd8f9977d0b59d0a827ab5e094a88178356e0dd838d4b4fb1cb824faa9ae85f71fe27ad23df60bb16eaa5ee"
        },
        {
          "alg": "SHA3-512",
          "content": "82f4d76e0f0aa5f17c173f939154be88e4b665c20f2269e04776421425b5119417b35df6e55ff6cc6d32dcda9ce42fea3eb891aa2a3e16b2b595ca4303fb454e"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type": "vcs",
          "url": "http://github.com/codehaus-plexus/plexus-utils"
        },
        {
          "type": "website",
          "url": "http://codehaus-plexus.github.io/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "mailing-list",
          "url": "http://archive.plexus.codehaus.org/user"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-classworlds",
      "version": "2.6.0",
      "description": "A class loader framework",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67e722b27e3a33b33c1b263b99dd7c43"
        },
        {
          "alg": "SHA-1",
          "content": "8587e80fcb38e70b70fae8d5914b6376bfad6259"
        },
        {
          "alg": "SHA-256",
          "content": "52f77c5ec49f787c9c417ebed5d6efd9922f44a202f217376e4f94c0d74f3549"
        },
        {
          "alg": "SHA-384",
          "content": "e839707ea5c4351f2703c6861ee4d58e08df0f7509110af13d4b3824e6ec5cfd65508fa80cc3f222baf5cf6c4ab5d5ac"
        },
        {
          "alg": "SHA-512",
          "content": "6a58048d9db54e603b9cfd35373cf695b66dd860bec878c663b4fc53b6b3d44dd5b0c92e7603654911b1f78e63ef277cf6b272fe069a360989138550545f274d"
        },
        {
          "alg": "SHA3-256",
          "content": "3aef41be29373137c58c415693b312c95e048731dce519ab88649eae9ba0e492"
        },
        {
          "alg": "SHA3-384",
          "content": "75389fc7ed9aa3ad33ff317b0d41851fe0073b37aa8c33081722bfafb851493fb0e3b9629f924026fc32841f01399695"
        },
        {
          "alg": "SHA3-512",
          "content": "312eff142f86b9e110131dcca69527fbec80478e463fed5a34e2bd628673bce7be9ddb6fe0cda7fab2a119d1f310629413740019e686e9162194984ab6e06bf4"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://github.com/codehaus-plexus/plexus-classworlds/issues"
        },
        {
          "type": "vcs",
          "url": "http://github.com/codehaus-plexus/plexus-classworlds/tree/${project.scm.tag}/"
        },
        {
          "type": "website",
          "url": "http://codehaus-plexus.github.io/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "mailing-list",
          "url": "http://archive.plexus.codehaus.org/user"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-component-annotations",
      "version": "2.1.0",
      "description": "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg": "SHA-1",
          "content": "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg": "SHA-256",
          "content": "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg": "SHA-384",
          "content": "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg": "SHA-512",
          "content": "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg": "SHA3-256",
          "content": "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg": "SHA3-384",
          "content": "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg": "SHA3-512",
          "content": "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type": "vcs",
          "url": "https://github.com/codehaus-plexus/plexus-containers"
        },
        {
          "type": "website",
          "url": "http://codehaus-plexus.github.io/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "mailing-list",
          "url": "http://archive.plexus.codehaus.org/user"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-plugin-api",
      "version": "3.8.2",
      "description": "The API for plugins - Mojos - development.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f82f9e14c2d6bc5a9bde68a46f0ba923"
        },
        {
          "alg": "SHA-1",
          "content": "8116f90945281e3993b6375a109682a031b0da69"
        },
        {
          "alg": "SHA-256",
          "content": "9e2a69ed06a1dcb9464ab8b0aa279884de7aa4737a0740838b64afafea0d3605"
        },
        {
          "alg": "SHA-384",
          "content": "fc11c6b77fea3bfc483f9782aedf16f1b596a33fc1daa4a70bc59f3dff0525ad10c7989cdcac6fbd5a4066248288fea0"
        },
        {
          "alg": "SHA-512",
          "content": "8c3a99894b071a5b4e8d8b3a2ae383a236ef99f4ba9ea199208a7b292cbe390788616314aa3af0d37e9cefe7553cdde2b37c553bfcf045f9937489f6d5566876"
        },
        {
          "alg": "SHA3-256",
          "content": "5a0e067eb139fed944014a7c461d25ce136ce1083537f1996eb13ceecd905fbb"
        },
        {
          "alg": "SHA3-384",
          "content": "b27eb30fb467dbef769c2279fc4f2ecf4cff5c9631875681bef1383a65739cc2d9faf66a24fc3006e3c57b09deeeb143"
        },
        {
          "alg": "SHA3-512",
          "content": "5f07bea07a72bba18d9fc1633f32974bc411192fe226457db611422af861c47238984eeb2704078e2c56bee1dadf4589012284311f48aac4f84d3e182f3ecdb7"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven/"
        },
        {
          "type": "distribution",
          "url": "https://maven.apache.org/download.html"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MNG"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.shared",
      "name": "maven-dependency-tree",
      "version": "3.1.0",
      "description": "A tree-based API for resolution of Maven project dependencies",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d229908dceffafd7cb27b13baa29c61e"
        },
        {
          "alg": "SHA-1",
          "content": "91164b932f3ea0bb7779f6f9c62078adf1b031ae"
        },
        {
          "alg": "SHA-256",
          "content": "d0e2bd3e0625d5d55226dcac0276fcb6ad59f8d993078a30003d67c7043ae7d9"
        },
        {
          "alg": "SHA-384",
          "content": "3c7e9f7f21166e049e2964cda1675147d9fbc7a10f119302d9145aad5b41027cd94bbb17e8773f3d87703107951f8ef6"
        },
        {
          "alg": "SHA-512",
          "content": "ca317cd2c5a3e13f442f494a18b8f55348018f9503980e7c46ba240b42ae79d97cec439797dbfc0c5b35fa873e30b14ddad2b6023551f35be04666f3c52ac621"
        },
        {
          "alg": "SHA3-256",
          "content": "7126dc90af1e3e27bf2695dba51dc7537041302df2264937c81bfd3d0df5fe5a"
        },
        {
          "alg": "SHA3-384",
          "content": "e0f8173b81e8d490ccc981159644a6db25c85429bdf3324ee26db734efd0388d2597e4c68f2c6de807eeff06db7bc0ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3b775f34f925c01453362fad0579ed751cd9a061417e6bd4eafb59a9517acb2dcab6a51d17170740588d7226aa464d7670ec3050ef972713e7d95b54d98c9114"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-dependency-tree/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "publisher": "The Eclipse Foundation",
      "group": "org.eclipse.aether",
      "name": "aether-util",
      "version": "1.1.0",
      "description": "A collection of utility classes to ease usage of the repository system.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "699bc0f3729d8b0a5bacf3e8e84ab010"
        },
        {
          "alg": "SHA-1",
          "content": "d0f84ba994f0133580e8b957a44593eaa03d42cd"
        },
        {
          "alg": "SHA-256",
          "content": "556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62"
        },
        {
          "alg": "SHA-384",
          "content": "35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef"
        },
        {
          "alg": "SHA-512",
          "content": "7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00"
        },
        {
          "alg": "SHA3-256",
          "content": "1a668d4561dac383db3caef99d481aba52f5fb28706afc6f60a19fef298a0d0c"
        },
        {
          "alg": "SHA3-384",
          "content": "be905c754735606a364c6fb568e1c471899a809f131fbad38c4eb5d64aae3e3cefcf5e68df6969a3d5a74e28ade9dd12"
        },
        {
          "alg": "SHA3-512",
          "content": "b15712c92d5c0c921ef89457f2bae1c0b70bf14b04db14a97434bdfc51d05e920a898e615b1a28cb22b8be84a8321f7578158c40442697e45833b59430f6a0b6"
        }
      ],
      "licenses": [{"license": {"id": "EPL-1.0"}}],
      "purl": "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.eclipse.org/"
        },
        {
          "type": "build-system",
          "url": "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type": "distribution",
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type": "issue-tracker",
          "url": "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type": "mailing-list",
          "url": "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.shared",
      "name": "maven-dependency-analyzer",
      "version": "1.11.3",
      "description": "Analyzes the dependencies of a project for undeclared or unused artifacts.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e28df0d51d96f17dfec13c053853cdcf"
        },
        {
          "alg": "SHA-1",
          "content": "45eb5697e704afccbc0bdcb579aaafa38ca59292"
        },
        {
          "alg": "SHA-256",
          "content": "2f5fbd8d43182764be89adb7c246244fb3f4d6ffc9528c68b475b6fa8bf8eb22"
        },
        {
          "alg": "SHA-384",
          "content": "a39467679f7686b9e929140feeded6172d9c41de845b666faa275dfce34b81df154a6df06e2dde891d865086f603d138"
        },
        {
          "alg": "SHA-512",
          "content": "36da9ce76275972be492a607225306d1408013e6c7a6847a286155d7ccb51bfb1742ac1436ced3dc3f4366e5150132843074b021b42d4b55b29d6a3bd91ac9ca"
        },
        {
          "alg": "SHA3-256",
          "content": "ace535ebd9dba37e9da8e3c08e569b43d1aa989475bc29fa40166d45b068e76b"
        },
        {
          "alg": "SHA3-384",
          "content": "5d27ebc46a260c810c5d2014ce6d0a91cceb9c648c18423acd4f8bc948c0ff075ad422155620d380360f072f6d85118d"
        },
        {
          "alg": "SHA3-512",
          "content": "3ddf90accfebd97b9fa58b1bd9cf8741e7ac0792abf015b53465a156f1b26143abf4b81a0c44d4a82082457c7f45eae665c86014893561c423b7ee2fc55ad4f8"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://builds.apache.org/job/maven-box/job/maven-dependency-analyzer/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-dependency-analyzer/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@8.0.1?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "8.0.1",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes": [
        {
          "alg": "MD5",
          "content": "72c74304fc162ae3b03e34ca6727e19f"
        },
        {
          "alg": "SHA-1",
          "content": "3f5199523fb95304b44563f5d56d9f5a07270669"
        },
        {
          "alg": "SHA-256",
          "content": "ca5b8d11569e53921b0e3486469e7c674361c79845dad3d514f38ab6e0c8c10a"
        },
        {
          "alg": "SHA-384",
          "content": "cec43bde02dab7e40b6af46675f1bc446048716ff4dd175e00cc1d647990fcb1ace2e1b8c1be29e870ae8f51f258a593"
        },
        {
          "alg": "SHA-512",
          "content": "05d6beeac94edc36cdc66b8c6330307b87d02c514bbd2a0c1848d7baf7baed0cc4e3a33930b7980e0628ea7e6a5bb74d5c938ee2c73280f91876d2999c4a0470"
        },
        {
          "alg": "SHA3-256",
          "content": "375eb246f1b8fa0ad2ac65b118fbc7712b116c06e9cf5fccaac837f069cf2be3"
        },
        {
          "alg": "SHA3-384",
          "content": "2087e8481d50c898fe982a5c705d6e03b03150ad00f0ffd21b33220c904badaa7081bbd99a149982193f4129331210a1"
        },
        {
          "alg": "SHA3-512",
          "content": "70932d4209d093db81572b4368ddd1b646567227a751038ca1b6af17bc033858471b809b115dab4cfcd26fb24124ace3476a5fb7c85c15634c3f5f8b9d37750e"
        }
      ],
      "licenses": [{"license": {
        "id": "BSD-3-Clause",
        "url": "https://opensource.org/licenses/BSD-3-Clause"
      }}],
      "purl": "pkg:maven/org.ow2.asm/asm@8.0.1?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.ow2.org/"
        },
        {
          "type": "issue-tracker",
          "url": "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type": "mailing-list",
          "url": "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type": "vcs",
          "url": "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-project",
      "version": "2.0.5",
      "description": "This library is used to not only read Maven project object model files, but to assemble inheritence and to retrieve remote models as required.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "eff1c0053aeac79da2908551426b6233"
        },
        {
          "alg": "SHA-1",
          "content": "266f5df997b41581df9b5071170259862f3fde37"
        },
        {
          "alg": "SHA-256",
          "content": "a4be814b58b80583e0d9d3b71f4f97fd681daa1ba054d4d8aa0bcf1bd4abea24"
        },
        {
          "alg": "SHA-384",
          "content": "8dff5cff57895b8b966913dd1a53bf927acc8dda3d389ac74915f22d4ade8f716aebce631e613581babd1618454e89ef"
        },
        {
          "alg": "SHA-512",
          "content": "e33c9356821a1ee01ed243eddb163870b6ef4bc1f22825ec360174e9688f3118beec42473f3471988e71def125d04230b448e548dcbd8e0bf35ddfbdb13e6ec5"
        },
        {
          "alg": "SHA3-256",
          "content": "b098eafdb74ae6e0e42c9985aaaf753a6986df4edb543e32cba617e8d8e097ed"
        },
        {
          "alg": "SHA3-384",
          "content": "de3eb5eee67e2c92000ee40c0b4c00aea440a26073932495e9bb4817fa724ee7b0c3238f2f84512647a5ecf39ff4c6f9"
        },
        {
          "alg": "SHA3-512",
          "content": "692dfb94547eb5e5da008c093417d1a83f6938e0df61124c422affddc760c3b971954927d49d054282d12031cf95b99f3e3de3c4d863d7ee6e6d0cf461d586a9"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type": "mailing-list",
          "url": "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type": "vcs",
          "url": "https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5"
        },
        {
          "type": "build-system",
          "url": "http://maven.zones.apache.org/continuum"
        },
        {
          "type": "website",
          "url": "http://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-profile",
      "version": "2.0.5",
      "description": "Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "7b2d159fb0d792348739fd69392f6570"
        },
        {
          "alg": "SHA-1",
          "content": "931f898855fbc85f65f24b331fde042f9d9ff6c3"
        },
        {
          "alg": "SHA-256",
          "content": "e82d7868fbd516aa6ed82d0f917676449c46f1a8db8ba6d01217a6d6c2ae4acf"
        },
        {
          "alg": "SHA-384",
          "content": "28529be0d9a2ba66bcc97d4b89322c52e47b617b3552af42c4296b0d4eae221a7c04c0de724e6736f03cd41e63ef1719"
        },
        {
          "alg": "SHA-512",
          "content": "ad7e11797193590ebac596e5e5b6afdfef5d8c415f7edf8e51b79287b9df8caaca895a620790cfba52dd7fdec6210967aa30d04d6aae1ed1e12438c677624d48"
        },
        {
          "alg": "SHA3-256",
          "content": "964b65ed663dd0d0cefb165afc4a8693d90f6464dcd6a6614248f11f6f89f1b5"
        },
        {
          "alg": "SHA3-384",
          "content": "1ee99ac85666494e202e57abe62e8b22e4ad39267892e6fb2ca0d71b44883942a66ca83dbad54d03673ff45e3d7c2556"
        },
        {
          "alg": "SHA3-512",
          "content": "0f6e1d2b9b3fa190c9cbb9264eccb713cf237a881aceed84c03e10838bb883eb9933f5e9eecea0da331a3f9529a63d19cac8d99bcdb3a5341b6373ac7df76ab2"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type": "mailing-list",
          "url": "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type": "vcs",
          "url": "https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5"
        },
        {
          "type": "build-system",
          "url": "http://maven.zones.apache.org/continuum"
        },
        {
          "type": "website",
          "url": "http://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact-manager",
      "version": "2.0.5",
      "description": "Maven is a project development management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e49c4ee2ea16041080e2b3119e96a047"
        },
        {
          "alg": "SHA-1",
          "content": "d40b64aa03faeb7338713fe2ee41f2a2d0357455"
        },
        {
          "alg": "SHA-256",
          "content": "511c45be7ffa5f037f4a8a0414cbb3afdc85571e81a891356810e36f746519f0"
        },
        {
          "alg": "SHA-384",
          "content": "6852d42f4b58dc388fbcaab9994423fe3a28b6059eb920dfc82aa1042bc56f859503d1d1a442d6cedfbb135829afe29b"
        },
        {
          "alg": "SHA-512",
          "content": "ce0900ee6d350cc0e6199c0255f3bef274f60b40bb2987a6bbff16ccf3a9dc4cbd64ec4178a088c4780603207a2dc8e4f5d8c55bbc5e71c625ca715f8c53dbd8"
        },
        {
          "alg": "SHA3-256",
          "content": "36cf93a8b983ae8b08575ed171da999176f17eff3c1a17f233415ef104f84d2f"
        },
        {
          "alg": "SHA3-384",
          "content": "7a5b2616dcaea59bfc32baec957e4f1548b0df611b812cd68e3043ac45b15439ebca406f9a105ea46dc7d0d44a542736"
        },
        {
          "alg": "SHA3-512",
          "content": "304fb611696e284053c497907a02010645ff8613bd037194fc1a340db6c7ff2b1ad4714a280f363790d50e2a7b47f03458bfc7175703aeedf27d447179ab66c8"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://jira.codehaus.org/browse/MNG"
        },
        {
          "type": "mailing-list",
          "url": "http://mail-archives.apache.org/mod_mbox/maven-users"
        },
        {
          "type": "vcs",
          "url": "https://svn.apache.org/repos/asf/maven/components/tags/maven-2.0.5"
        },
        {
          "type": "build-system",
          "url": "http://maven.zones.apache.org/continuum"
        },
        {
          "type": "website",
          "url": "http://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar",
      "publisher": "Apache Software Foundation",
      "group": "org.apache.maven.wagon",
      "name": "wagon-provider-api",
      "version": "1.0-beta-2",
      "description": "Maven Wagon API that defines the contract between different Wagon implementations",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f41eb4e07a725eea3332743a29057855"
        },
        {
          "alg": "SHA-1",
          "content": "abd1c9ace6e87c94a4b91f5176aeb09d954b23a3"
        },
        {
          "alg": "SHA-256",
          "content": "0ba6040074d1e193580bae9314392940f5ecd81e3b6d3b3381050360dce033ad"
        },
        {
          "alg": "SHA-384",
          "content": "3022d9c68f43b0e7ee5afa9168fcd32f28003ceb0720ce6f92e572377aa63dd4ad6e47cc4c064e14c984319fb143694d"
        },
        {
          "alg": "SHA-512",
          "content": "d0fea3b44922c6057846856998c5bac8d372d1b625343f1cffaa73ff85680d60e6331415ddfbf2ba20aa0970481c284a6d85d776926814d9965c623397b304ec"
        },
        {
          "alg": "SHA3-256",
          "content": "fbc36ac7bc6e0dd72e63faa74c13550f0ee0a35c2ca270b69bd22799163d495e"
        },
        {
          "alg": "SHA3-384",
          "content": "d75d1c791ddf0c45fbc841346e28dbb40f6cf7ec8f86ba02f136e476b8507172b429730b7c0191e134b9ddf770c5bc7c"
        },
        {
          "alg": "SHA3-512",
          "content": "3053d4090509d280651cecdf4d13c86fa487abfc9feda8cd3dd8faedd0851e645d7b13242a64dadefc0c2d30c5333d300532a7a5b746ca1325f1feebe6917c40"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar",
      "externalReferences": [
        {
          "type": "issue-tracker",
          "url": "http://jira.codehaus.org/browse/WAGON"
        },
        {
          "type": "mailing-list",
          "url": "http://mail-archives.apache.org/mod_mbox/maven-wagon-users/"
        },
        {
          "type": "vcs",
          "url": "https://svn.apache.org/repos/asf/maven/wagon/tags/wagon-1.0-beta-2"
        },
        {
          "type": "build-system",
          "url": "http://maven.zones.apache.org:8080/continuum"
        },
        {
          "type": "website",
          "url": "http://www.apache.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar",
      "publisher": "Codehaus",
      "group": "org.codehaus.plexus",
      "name": "plexus-container-default",
      "version": "1.0-alpha-9",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ab910f683a0b11c9ca7e0a95dd47f6a5"
        },
        {
          "alg": "SHA-1",
          "content": "50596183cd7b688d9d7b6d868a0193ca1a8a7b3d"
        },
        {
          "alg": "SHA-256",
          "content": "dccfc47a4245e2d648e3bdeadb7a4daf51efc70fbd8b7b456454377c9cc5584a"
        },
        {
          "alg": "SHA-384",
          "content": "e6fac28ef2d2d7578e7c87573727bf1999c029befb0df13f0f2befd84254bb48223772458e8db39d6e6acf9ef096c6c1"
        },
        {
          "alg": "SHA-512",
          "content": "e2a9da0bad9c28990839f7aecd77493d850e1588eb21fc5833739f83600c90e3a006ce9a294e536f6da9683c771977b3424c7fc5a5715d9860350bf61e201cad"
        },
        {
          "alg": "SHA3-256",
          "content": "eab1126ea5a11b99cfeb1584ba15d70a7141016916acab661bbf505e0c046c96"
        },
        {
          "alg": "SHA3-384",
          "content": "1043e3a3bbe1261d72d6e37f9c54bbc2a3dc30711c541ced3cd86c120f78bbb9eaef2eba376170207419214c118ba696"
        },
        {
          "alg": "SHA3-512",
          "content": "ea5e9064b0266ee8d5baebd66c2f73797fcbcf56a5fb2eed33cbb083c6667d7b37cd4158e348950dfc4262c0f6a85560eb058320533187fe95999a01a3a9623f"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.codehaus.org/"
        },
        {
          "type": "mailing-list",
          "url": "http://lists.codehaus.org/pipermail/plexus-dev/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar",
      "publisher": "The Codehaus",
      "group": "classworlds",
      "name": "classworlds",
      "version": "1.1-alpha-2",
      "description": "",
      "hashes": [
        {
          "alg": "MD5",
          "content": "82cacb7d9724c4a4e4d20f004884d4da"
        },
        {
          "alg": "SHA-1",
          "content": "05adf2e681c57d7f48038b602f3ca2254ee82d47"
        },
        {
          "alg": "SHA-256",
          "content": "2bf4e59f3acd106fea6145a9a88fe8956509f8b9c0fdd11eb96fee757269e3f3"
        },
        {
          "alg": "SHA-384",
          "content": "91938ab97d335046d8c58bae4e236ac56086e31ee399fa7a843ab366c0eb9a4ccad0a227ac213f31a58d682de40ca5d9"
        },
        {
          "alg": "SHA-512",
          "content": "eb7752c709ec703764de895099661df36536ff4bd2380bd68726d0cdb40bd27c8cf775ee98fd2ce7b3cfbd07b100c782513d964a2c9c82f33c56909212e5b8cd"
        },
        {
          "alg": "SHA3-256",
          "content": "689a7e9270d574f6573909f34eb8aa24a0bb0fded368fb6af03b17cec716653f"
        },
        {
          "alg": "SHA3-384",
          "content": "39415912b33aa58e2f80607fd170d6717dfbbd5174e4ac85159d9197c9dbaac5b972368351fb807ff777e3f870d87659"
        },
        {
          "alg": "SHA3-512",
          "content": "78d195f4c9bdab4f8b321a7b1d8458cccd4ed329a499b1d54dd5023e87ef86e0f90eb2285788d43c002d22215af40d20bbcaa7ac20d9499f9f6377131475a379"
        }
      ],
      "licenses": [],
      "purl": "pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://codehaus.org/"
        },
        {
          "type": "mailing-list",
          "url": "http://lists.codehaus.org/pipermail/classworlds-user/"
        },
        {
          "type": "vcs",
          "url": "http://cvs.classworlds.codehaus.org/"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven.plugin-tools",
      "name": "maven-plugin-annotations",
      "version": "3.6.1",
      "description": "Java annotations to use in Mojos",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e280f952f836ee93b89e374d36fac07"
        },
        {
          "alg": "SHA-1",
          "content": "a77768d3ca934b5394451e2b4a00fa320554e1a9"
        },
        {
          "alg": "SHA-256",
          "content": "39ee9e01945b25201ab4490d33813c2394334e4e3d14102ddea3d781d2040a48"
        },
        {
          "alg": "SHA-384",
          "content": "0839b5cc9b72fc51ba59d71fcd3e354ee9f270f7dcaf6bc2a0fc616e69d5430aed9ba1f6e3270bee198d4f28bd06ffa3"
        },
        {
          "alg": "SHA-512",
          "content": "d7d8075358687b942efaf34ae39120a5e43fd5a78455f75a1c39870b736c2f7cb956845c6478e56695dd5c3bc5632d8a794bdd81ff08b91e934071f558737cd4"
        },
        {
          "alg": "SHA3-256",
          "content": "cd4312a9204b594a89f4606c8f9c9417edb52d5c6dd395722a296252c5858006"
        },
        {
          "alg": "SHA3-384",
          "content": "666fb6125d48eb213546bfd48c2040ae38fc442acc31434bc03f64abd91d86b06d3797df28a94b527e313163ebff997f"
        },
        {
          "alg": "SHA3-512",
          "content": "590c884a51c7d14af1775b874bd946a17c17d15b968e3381c9bced7e1fa7774c2cd55250ed78d2ee2befdf74836ddb0ac54231e00a75a92ea8795429faf4b2ff"
        }
      ],
      "licenses": [{"license": {"id": "Apache-2.0"}}],
      "purl": "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar",
      "externalReferences": [
        {
          "type": "build-system",
          "url": "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-plugin-tools/"
        },
        {
          "type": "issue-tracker",
          "url": "https://issues.apache.org/jira/browse/MPLUGIN"
        },
        {
          "type": "vcs",
          "url": "https://github.com/apache/maven-plugin-tools/tree/${project.scm.tag}"
        },
        {
          "type": "mailing-list",
          "url": "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type": "website",
          "url": "https://www.apache.org/"
        },
        {
          "type": "distribution",
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/junit/junit@4.11?type=jar",
      "publisher": "JUnit",
      "group": "junit",
      "name": "junit",
      "version": "4.11",
      "description": "JUnit is a regression testing framework written by Erich Gamma and Kent Beck. It is used by the developer who implements unit tests in Java.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3c42be5ea7cbf3635716abbb429cb90d"
        },
        {
          "alg": "SHA-1",
          "content": "4e031bb61df09069aeb2bffb4019e7a5034a4ee0"
        },
        {
          "alg": "SHA-256",
          "content": "90a8e1603eeca48e7e879f3afbc9560715322985f39a274f6f6070b43f9d06fe"
        },
        {
          "alg": "SHA-384",
          "content": "0f9ec06229184455e388ffa929bdc3a532d1b61ae22a51655fac91fca093b26695ecb48a040e869135aa4d69fff3840a"
        },
        {
          "alg": "SHA-512",
          "content": "a0de3a1d9924b8703736f27a0e02e243e9f50add113c8fb3477cd8d8e31505df1609755d79ba8f1e1f43c6b5201b409c116ad184978383da6613382727bedc6b"
        },
        {
          "alg": "SHA3-256",
          "content": "57a3a358ca4ab3cc2636cfc7531920afeee3f347e221673edb7c4946b08e8a33"
        },
        {
          "alg": "SHA3-384",
          "content": "50333b7f876d6660b89a29382a96d10077ee50d568fddbb61c83a241666893f04d3992f7a402fd49d97305acf318e877"
        },
        {
          "alg": "SHA3-512",
          "content": "25a71bd3d476e67a4967fc81388432f55ef4d2816c28343ac4b517a4b963f51515a855d1c0ec8a23bf31b416b72774f3852cd226f8f158d16aa69e8e21b74e0c"
        }
      ],
      "licenses": [{"license": {
        "name": "Common Public License Version 1.0",
        "url": "http://www.opensource.org/licenses/cpl1.0.txt"
      }}],
      "purl": "pkg:maven/junit/junit@4.11?type=jar",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.junit.org"
        },
        {
          "type": "mailing-list",
          "url": "http://tech.groups.yahoo.com/group/junit/"
        },
        {
          "type": "vcs",
          "url": "http://github.com/KentBeck/junit/tree/master"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "group": "org.hamcrest",
      "name": "hamcrest-core",
      "version": "1.3",
      "description": "This is the core API of hamcrest matcher framework to be used by third-party framework providers. This includes the a foundation set of matcher implementations for common operations.",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6393363b47ddcbba82321110c3e07519"
        },
        {
          "alg": "SHA-1",
          "content": "42a25dc3219429f0e5d060061f71acb49bf010a0"
        },
        {
          "alg": "SHA-256",
          "content": "66fdef91e9739348df7a096aa384a5685f4e875584cce89386a7a47251c4d8e9"
        },
        {
          "alg": "SHA-384",
          "content": "4b5297d2a12cc32b824153afc83f1ba9f1869ca288330f0a2f759659d09e4c420eb6ba4a1efbfa0657b625edd41293d5"
        },
        {
          "alg": "SHA-512",
          "content": "e237ae735aac4fa5a7253ec693191f42ef7ddce384c11d29fbf605981c0be077d086757409acad53cb5b9e53d86a07cc428d459ff0f5b00d32a8cbbca390be49"
        },
        {
          "alg": "SHA3-256",
          "content": "f679af77deedf69b3c3066f7916583848c6fd32a950f9c0b0e2ef1da121717ba"
        },
        {
          "alg": "SHA3-384",
          "content": "b14d34985c0a78cf0ba19b5a18bffd403e08adcb2afde228ddef6e16121c7046dbebf58c04d3419311c4496c48aa93be"
        },
        {
          "alg": "SHA3-512",
          "content": "bca821931e438a1977b7b4356b5f8cebf485634f82159d505c48267c34e6a0f4fde9c2917331365f66dc0e52e2ca3a2db5256863584110c27ecebefc28741f63"
        }
      ],
      "licenses": [{"license": {"id": "BSD-3-Clause"}}],
      "purl": "pkg:maven/org.hamcrest/hamcrest-core@1.3?type=jar",
      "externalReferences": [{
        "type": "vcs",
        "url": "https://github.com/hamcrest/JavaHamcrest"
      }]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@5.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar",
        "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
        "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"
      ]
    },
    {"ref": "pkg:maven/commons-io/commons-io@2.11.0?type=jar"},
    {"ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.0?type=jar"},
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.12.4?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"
      ]
    },
    {"ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4?type=jar"},
    {"ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4?type=jar"},
    {"ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.4?type=jar"},
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"
      ]
    },
    {"ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.2?type=jar"},
    {"ref": "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.1?type=jar"},
    {"ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"},
    {"ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.4?type=jar"},
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.0.57?type=jar",
      "dependsOn": ["pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"]
    },
    {"ref": "pkg:maven/org.slf4j/slf4j-api@1.7.30?type=jar"},
    {"ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar"},
    {"ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"},
    {"ref": "pkg:maven/commons-codec/commons-codec@1.15?type=jar"},
    {"ref": "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven/maven-core@3.8.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar",
        "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar",
        "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar",
        "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
        "pkg:maven/javax.inject/javax.inject@1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
      ]
    },
    {"ref": "pkg:maven/org.apache.maven/maven-model@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-settings@3.8.2?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven/maven-settings-builder@3.8.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar",
        "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"
      ]
    },
    {"ref": "pkg:maven/org.codehaus.plexus/plexus-interpolation@1.25?type=jar"},
    {"ref": "pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.4?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-builder-support@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-repository-metadata@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-artifact@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-model-builder@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-resolver-provider@3.8.2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-impl@1.6.3?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-api@1.6.3?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-spi@1.6.3?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.resolver/maven-resolver-util@1.6.3?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.shared/maven-shared-utils@3.3.4?type=jar"},
    {
      "ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.plexus@0.3.4?type=jar",
      "dependsOn": ["pkg:maven/javax.enterprise/cdi-api@1.0?type=jar"]
    },
    {
      "ref": "pkg:maven/javax.enterprise/cdi-api@1.0?type=jar",
      "dependsOn": ["pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"]
    },
    {"ref": "pkg:maven/javax.annotation/jsr250-api@1.0?type=jar"},
    {"ref": "pkg:maven/org.eclipse.sisu/org.eclipse.sisu.inject@0.3.4?type=jar"},
    {
      "ref": "pkg:maven/com.google.inject/guice@4.2.2?classifier=no_aop&type=jar",
      "dependsOn": [
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@25.1-android?type=jar"
      ]
    },
    {"ref": "pkg:maven/aopalliance/aopalliance@1.0?type=jar"},
    {
      "ref": "pkg:maven/com.google.guava/guava@25.1-android?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar",
        "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"
      ]
    },
    {"ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"},
    {"ref": "pkg:maven/org.checkerframework/checker-compat-qual@2.0.0?type=jar"},
    {"ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.1.3?type=jar"},
    {"ref": "pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"},
    {"ref": "pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.14?type=jar"},
    {"ref": "pkg:maven/javax.inject/javax.inject@1?type=jar"},
    {"ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.2.1?type=jar"},
    {"ref": "pkg:maven/org.codehaus.plexus/plexus-classworlds@2.6.0?type=jar"},
    {"ref": "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"},
    {"ref": "pkg:maven/org.apache.maven/maven-plugin-api@3.8.2?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
      "dependsOn": ["pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"]
    },
    {"ref": "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.11.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@8.0.1?type=jar",
        "pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar"
      ]
    },
    {"ref": "pkg:maven/org.ow2.asm/asm@8.0.1?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven/maven-project@2.0.5?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar",
        "pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar"
      ]
    },
    {"ref": "pkg:maven/org.apache.maven/maven-profile@2.0.5?type=jar"},
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact-manager@2.0.5?type=jar",
      "dependsOn": ["pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar"]
    },
    {"ref": "pkg:maven/org.apache.maven.wagon/wagon-provider-api@1.0-beta-2?type=jar"},
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-container-default@1.0-alpha-9?type=jar",
      "dependsOn": ["pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar"]
    },
    {"ref": "pkg:maven/classworlds/classworlds@1.1-alpha-2?type=jar"},
    {"ref": "pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.1?type=jar"}
  ]
}