{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.3",
  "serialNumber" : "urn:uuid:778d393c-0c71-4777-b7e6-5a5cf763b10b",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2022-05-03T02:39:50Z",
    "tools" : [
      {
        "vendor" : "CycloneDX",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.5.3",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "4f7d894200ad695fc9f0aad66d7da40a"
          },
          {
            "alg" : "SHA-1",
            "content" : "c044d9b726650cbea3adeb5cc1715c67d8356c0a"
          },
          {
            "alg" : "SHA-256",
            "content" : "b9a385e430e1f5efd9b835a084c195dde4d5e1bc79e469a8187ec58275c15313"
          },
          {
            "alg" : "SHA-384",
            "content" : "d96f68ef4b8830d70dc2eb5f2de5211d96b70dd1169da641f34474265c06a5321b63d2c80fe2d82d74c767391225e480"
          },
          {
            "alg" : "SHA-512",
            "content" : "1d7d1129cdc8604772b3c454d8dff98d936f85af705c95705e3263a038c0bb58fdd58c0b90efa3f56b4ce8ef9c84d3154b74b8451e0470f856f4d688489704b0"
          },
          {
            "alg" : "SHA3-256",
            "content" : "44231962fe0c1e5501ca38ad3320f9223ea5e8d62aa8aad170577818801ce349"
          },
          {
            "alg" : "SHA3-384",
            "content" : "99659ce3e58d8416f9e28d6b87c800442a79c4a5703fb657f6a9da87495d1d9d3b9788e06a3d6ea0e1b659a4681a4c92"
          },
          {
            "alg" : "SHA3-512",
            "content" : "8d5c3f0ee5a53cc714c4d829ccc07688f951a6b6655ad1e6435b8ab1c281bc38a78073b329bdaaf4887114b6843723ac8b5176a5f954581960a43662c688a95a"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-maven-plugin",
      "version" : "2.6.1",
      "description" : "The CycloneDX Maven plugin creates an aggregate of all dependencies and transitive dependencies of a project and creates a valid CycloneDX Software Bill of Material (SBOM) from the results.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.6.1?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.6.1?type=maven-plugin"
    }
  },
  "components" : [
    {
      "publisher" : "CycloneDX",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "7.1.3",
      "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2481e798327aea23771f2dd6b6b9f004"
        },
        {
          "alg" : "SHA-1",
          "content" : "f48289ab90db59ae74a88ae4467cc1b3e7010063"
        },
        {
          "alg" : "SHA-256",
          "content" : "0fca988739bc7224b836bd0cf190c9b0010b12e705dd5c58c3dd9e8048cc2320"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b093216cf036b0c6ac7f730c8de3c81ecb568f549c6d65d527ea22833edf7d12d96021a24ac4ccfb575f4f5073de691"
        },
        {
          "alg" : "SHA-512",
          "content" : "afa75d8f8876c34d50ee9780c355d0a60efee3c639e062d7a3a5e918ada58c802ccbac7aeae49bc45748d82c9b4c9829e10da84cc05c4715405c156cf1a7f149"
        },
        {
          "alg" : "SHA3-256",
          "content" : "da41fecb030ee5c71600ab0e096cd4d2fe1ae53f99f202b06ecfaa08ea93ce52"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8708f46ad6e0c07379e71279e524e2c2d674a3151f78596a6f0b2619f3babc19f45bd8c1b0cbe5c7554b5ede0834bdc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a2fa3ca54c91a88eaf3adf608aba1941b91bb50b7077103cd35a29425292746775eb34b1441b18bdd3cdf8b9d9168614fb1fe9ec424836911a2121e6d15c9fe3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cyclonedx.org"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.13.1",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d4a2f34e36be20a18ee9ca05631d6cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "bcc5e3a3056e6e98020856b52e53895ad5fdfc4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "caf277893c33a22cef27f657a2a08d37b9c560dd2ba11caf627eefa8edafd8bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "6201bd0ff32c7a8a5bc162a9644544585a5797313a6f68c4d077a359ab01e22cb286298b7d0d359cb86268856b94ceac"
        },
        {
          "alg" : "SHA-512",
          "content" : "7530cc4646e76e2941850ad30639382608ad3e24588900a5856fb4d0bcf8738e77f011cf7b02ff04eb9a5cf074ff1a75c8bcd06d4093db6484b0a03a286c2914"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bc1849baca38f699db935d9034037db2a19c75b38a21cbfef62675654de529b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "564531f74a7b5ba8e9a8c53b0ae59f8a556fe4ecbdc513301df552d80911ba900508f1460b11621ad2dc439c93b2a930"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5278e00144fb81699176fde8ede6a6b551a4b8a9f812cdc23a26f81f71eda52059ce45ff61b5430f626268eef6204511d3ed023dc3bcf45e423a019558fe294d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b5cf9290dc96e215e77f274794d5238e"
        },
        {
          "alg" : "SHA-1",
          "content" : "51ae921a2ed1e06ca8876f12f32f265e83c0b2b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "8be6935cd8f9673ac684a589aaa1caecd57dee7c37ed1443d17924325799003d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c2f35993eea6e4ceed39018b4f6257524907978cce7088628b9aa4c3b1ebb9f2e1e7d415d6d0c2f45f3fc9bf74b4943"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4e6890da21978dcca5ff5ad1807e19533c0638973d3d293e3271ad31664ca7713beb69a462bfb6535dd1b2a1fa5d2741ddfcce94e51167fcf9a1df119f4b92d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e940c4cf840936bb465e195213331d3a444999573b272a201523f5cc385a9c82"
        },
        {
          "alg" : "SHA3-384",
          "content" : "deabe1d678acecdd35963f70bd653834112982fc5c772d139304d1621e507585b83f85aab7b9582f98ef3937b0b5879d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2f59a6eb97da6f2afe49bca38d68c9ee6148c28b2234e4e30178a855b81fd18e89e2a066bcf67360f571bd236f1f1e58e738df8b0c6329e83bda0b32cf3eb1ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.1",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e2bb0894ba131c20c874331c9c04adc"
        },
        {
          "alg" : "SHA-1",
          "content" : "1cbcbe4623113e6af92ccaa89884a345270f1a87"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab607939d288e22bff4cb97acc6b25e841d82681f2bc40ce67bb35cb0ffdb06d"
        },
        {
          "alg" : "SHA-384",
          "content" : "af889d93559c60d4c2de16a22468e192b69a601b2f22be04bae88c880e0553aa12b74d60a251fe62d6ab2adfd6db00c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "c031040352d4b219e89d7d8989c51931a09820345edd58ae9f575f8b1e27be000215dcbe6c06ff9fa758b7baf59461d04a70100eade8156b4b18af2bb2d20728"
        },
        {
          "alg" : "SHA3-256",
          "content" : "34ba346a7ace4bb73f9791df4348b7b2f91057d410ae4ac15a5868414c61c5b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "500febef47227e3a2b8c75818614c5c7e43d8a75e91e8139f94e3b1988942c3659bef821b85f8e2a5e8523ca32277848"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e8c450af2a9e6ee25e0d2741e894dba0115750780d0ae5944b72b4b0e76aebff2ed18b2084eef2e156128753577da45fc3009414a25dd034372eb663d27894f6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15699c52197c95cd66fb722ac93fc07c"
        },
        {
          "alg" : "SHA-1",
          "content" : "698b2d2b15d9a1b7aae025f1d9f576842285e7f6"
        },
        {
          "alg" : "SHA-256",
          "content" : "56cfbdc9e1736b5c56b43757f6cf546ee6d49393c79383c4e495c4f7047cb506"
        },
        {
          "alg" : "SHA-384",
          "content" : "8feea2cd04ad6db9c7b5600fcb2cd98b487536d9e7f54d86420aa98173bddde00a66af31dbe9fca2bafbb6406a396d51"
        },
        {
          "alg" : "SHA-512",
          "content" : "ef7a1a434a89d286612688d18f52036a400c85ea115cc7d5bf6f9e066881b49eb9d1bee9ef6466767ea35e565f717d853c727bd87d6e05df7064e57537ea218a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5243d92a55077eb3c21c042b164cfde85f68278d329d56125f4fd384f439000a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2f99dce211999b9b9a35478e17e01c8ada2a6c18ef86575110a912934a872827ca2a7dd9dbd851684e963239773bd1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58a10ce7506e8871896a1083ef944dcebdd7169efb35174c99371980bb93e5256f61bdb977d47d310491fae88d737ef119eefdf7a7c38d337bdeff1bb4c2d3c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.7",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "098c3f8d7d3dd78284086bbfa1a12d05"
        },
        {
          "alg" : "SHA-1",
          "content" : "86622cfd0a9933628b6b876d0c92589148d3b42e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075"
        },
        {
          "alg" : "SHA3-256",
          "content" : "497c702aad9280c9778628cc8bb675aaf991855cc79cad4e65920d000ca84137"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d80d5487972ce3dfdf9a277a1ee262fcbeeb354b32cf89c8380a937f7413007b23f3663780045f790efdc355cd78fbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1335fa8dc00060690670704e2f46ee752f39673e1f8c7af2b775fdbb973f4174e6d2cadb0f066d86d248747118a69315fabd570e682a60104ddaa26706265342"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.66",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21b0b965f6d0ceecce1dda5c9d55e80a"
        },
        {
          "alg" : "SHA-1",
          "content" : "cee2241cb0f24d37c4b08f585b12889e41c79b61"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc64dbb0b42bd6d0be068e276b93ee9753477f677b506b1ff32531dbc7ec69a4"
        },
        {
          "alg" : "SHA-384",
          "content" : "05a8fba0c2c52575fbff0267213a6e0792269cc7923d5b1d7300dd8a2ba05d77b160f85997232060da21f5b455e369d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "e99e2f023ea16ad3b2bea8cb2132f641f2c07e749218578591a340e39eb93f963d3db10004e3036f493a876bf509602445f81bf09161641bccc6f1a2ee3044f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "98bfcc8383c13f08700f595a1a6bfafe4d3ce2a0aaa6da5cfa370f921c233c6a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6dcf1212d5ca9efd957c0aefff08c52052cfa63f45995c6d35c733073138f5e02d66d46f46f072d6eb371c6dbaa87cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ea82dd9bd33132ffb734b50c5c2e07a026d6bc63953d9764c0c08e905126ec4ed6f3669c700091f51831d54bbceea940c76e7fe10371dcbbdb66bb1996de97a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.66?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.66?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.3.0",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ae76ff0195ada460d495efe1fb50d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf43b5391de623b36fe066a21127baef82c64022"
        },
        {
          "alg" : "SHA-256",
          "content" : "76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e"
        },
        {
          "alg" : "SHA-512",
          "content" : "a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "364bfb131dab58736c995ac4484d9eab53b1e62129a99ed55e9c12ed39079dc6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "16af5ee2b4f8710fa14bbd977ef3630466c51c4ed6bf9886ac0ea9c74bd23dedbbce60beae5217fab686777108c2e54d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4687c5ca8bb73d6880132d7d886733d0a5ce7a873c7b5b68d9d46066ee7e1f6c11f0510a70f313ca2563550bfcf6e81cf37a0c4ceef247bab55d6aadc49fae59"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.32",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbcf58513bc25b80f075d812aad3e3cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cdcff33940d9f2de763bc41ea05a0be5941176c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be"
        },
        {
          "alg" : "SHA-384",
          "content" : "c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-tree",
      "version" : "3.1.0",
      "description" : "A tree-based API for resolution of Maven project dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d229908dceffafd7cb27b13baa29c61e"
        },
        {
          "alg" : "SHA-1",
          "content" : "91164b932f3ea0bb7779f6f9c62078adf1b031ae"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0e2bd3e0625d5d55226dcac0276fcb6ad59f8d993078a30003d67c7043ae7d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "3c7e9f7f21166e049e2964cda1675147d9fbc7a10f119302d9145aad5b41027cd94bbb17e8773f3d87703107951f8ef6"
        },
        {
          "alg" : "SHA-512",
          "content" : "ca317cd2c5a3e13f442f494a18b8f55348018f9503980e7c46ba240b42ae79d97cec439797dbfc0c5b35fa873e30b14ddad2b6023551f35be04666f3c52ac621"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7126dc90af1e3e27bf2695dba51dc7537041302df2264937c81bfd3d0df5fe5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e0f8173b81e8d490ccc981159644a6db25c85429bdf3324ee26db734efd0388d2597e4c68f2c6de807eeff06db7bc0ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b775f34f925c01453362fad0579ed751cd9a061417e6bd4eafb59a9517acb2dcab6a51d17170740588d7226aa464d7670ec3050ef972713e7d95b54d98c9114"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.1.0",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "699bc0f3729d8b0a5bacf3e8e84ab010"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0f84ba994f0133580e8b957a44593eaa03d42cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62"
        },
        {
          "alg" : "SHA-384",
          "content" : "35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a668d4561dac383db3caef99d481aba52f5fb28706afc6f60a19fef298a0d0c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be905c754735606a364c6fb568e1c471899a809f131fbad38c4eb5d64aae3e3cefcf5e68df6969a3d5a74e28ade9dd12"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b15712c92d5c0c921ef89457f2bae1c0b70bf14b04db14a97434bdfc51d05e920a898e615b1a28cb22b8be84a8321f7578158c40442697e45833b59430f6a0b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-analyzer",
      "version" : "1.12.0",
      "description" : "Analyzes the dependencies of a project for undeclared or unused artifacts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6e053568deb23f5d61c74ba7b8ac5a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b607715b42e93c8d10c56b53d861180a4221835"
        },
        {
          "alg" : "SHA-256",
          "content" : "aeb48f4560c7086bbdb1dcb0ae24241f8c27c4b3000d502f7a5eb32731ba5813"
        },
        {
          "alg" : "SHA-384",
          "content" : "b771427e421d5a699a6367c7ab87b0d58a6f328eb044d31cc774cd8d1b453b5787735e7eca4853ee93f6098b2ef73441"
        },
        {
          "alg" : "SHA-512",
          "content" : "f94c3517cd72c9a8b596bded4cd97e296b8d32f13020df68b17c191c08c63160bf340832ffd7525a775ad0d14c38585ca22a73c6f87bebb0f9b11374b710e8c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ca2433540d1346ca29fffe15ed79a8961df2c12412a80d0b45498c9ad1bd757a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "77d949f704a47609f3fd5529ee2c6cfba250743995713410ba6df2ffdc98330c03cc519dc02f3bccd59e027dedcd6745"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84da975bde59f91c0ca1f652809b9525544507880794a0ee6fea763e2dbd81cba26f03149e4125c67d6c24c7fd9ca34f62be334bd4375fae6ba081ba6e560e64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-analyzer/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.2",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8f184dce9b1bedc675d4a3640d43ddf0"
        },
        {
          "alg" : "SHA-1",
          "content" : "81a03f76019c67362299c40e0ba13405f5467bff"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2c18b3d70723daab996f109a95e75dfedce5a3833bf540a53d485847860db24d57ca4302c73b6882de855475ecb5fbd"
        },
        {
          "alg" : "SHA-512",
          "content" : "876eac7406e60ab8b9bd6cd3c221960eaa53febea176a88ae02f4fa92dbcfe80a3c764ba390d96b909c87269a30a69b1ee037a4c642c2f535df4ea2e0dd499f2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "db5f04847b2d40a4a2b5ea5d3621adf09448c4eb98960daf1cde86e72f722c25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5cc30cec4da47a4bc5728ad48c31feb2cc1a22b3c32aaade4152ebe4daf4c3f96b9a314256dc8eb12dd7c1faa994f17"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ca9d699b26792d21d00333db03ddb18fc06011160ab7dd9ccf74b23c280952c69bb1bb6638650ef8dea97bca8a1f5c74397bbdb3a662c590f580e81375bc720"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.6.1?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.3?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.3?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.66?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.66?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}