{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,25 +1,22 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:de4b22e7-e552-451f-aed8-dd91e4631621\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:01200a29-3900-4e36-bb55-bc312e35438d\" version=\"1\">\n   <metadata>\n-    <timestamp>2022-05-26T13:55:54Z</timestamp>\n+    <timestamp>2025-01-31T23:01:20Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>OWASP Foundation</vendor>\n         <name>CycloneDX Maven plugin</name>\n         <version>2.6.1</version>\n         <hashes>\n           <hash alg=\"MD5\">c31373a2f4276beba7de6dfab877b85b</hash>\n           <hash alg=\"SHA-1\">8d6e08152ed0f8fb511f237be7e6e53db2d8f1d6</hash>\n           <hash alg=\"SHA-256\">4265a10877121df5add55a9d49fea53f55f218929c286b4aa536d22a36ea0bcc</hash>\n           <hash alg=\"SHA-384\">990c98865e1c9d6d1cb3ae19d846881c9fff022c36cf9497b6e2112b689e16dc9e4bfa575cb9d7fe7e8328438d629840</hash>\n           <hash alg=\"SHA-512\">1ebbf8ecd80d82817d1f1e78aa6324807f2dd3d49f0135026f4b7902a1cea58ea7489f2a21d8c44d09e09581290aeb1621a3763993be651342018ec13c91be88</hash>\n-          <hash alg=\"SHA3-256\">6e033e8b0def1b64bb9e99802ff03fd7f8a5ead6783b1c2be3ebb22ee760abfc</hash>\n-          <hash alg=\"SHA3-384\">e8effa904f74b1e8b6b293c31111a8e30b1c56a601b8490feaa530dae5f304d61eed41e6561750ec3f1d6af1cd126949</hash>\n-          <hash alg=\"SHA3-512\">4e33380044566e085752c65a90647a367cc0e3c63ccb265f6091bc9daba41aaba297de524f458a63b11439ab23b4f7e3c707b1532de47121d73ce129136af384</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.0?type=maven-plugin\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.cyclonedx</group>\n       <name>cyclonedx-maven-plugin</name>\n@@ -61,17 +58,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">6183f51edd1d799a49d98cb10c365a59</hash>\n         <hash alg=\"SHA-1\">e0acafed3c0f41f312dda0d7927e7256b28f50da</hash>\n         <hash alg=\"SHA-256\">311ef7d1d2802ab0f0d3babc4345117153599061716692fe61d736b659a00c48</hash>\n         <hash alg=\"SHA-384\">f017823b617ffd8fbba4332c25fe5a4c75cf80467fdc5c9b2b13fd5bfa43d5b79c3d948565bc053c5d6a57708bd89ef3</hash>\n         <hash alg=\"SHA-512\">7131bd1c60c53664778a94cf646c88061e4ed3b149eef75e3d511f2dc3218e480b2504fc4131ef6b0d5a737cd937c4531b2cf79209947b3a12443dec6e981191</hash>\n-        <hash alg=\"SHA3-256\">0e4e350512419fd0ffe3fe7cf0688c7f4b42ffd06a821106b7f48cebaa7ecf5d</hash>\n-        <hash alg=\"SHA3-384\">3009dbe6edc6408683bd71f91f4e703c6cb860a1e774419d61c960384dd4fd290d92c84306084deee7825804045d2463</hash>\n-        <hash alg=\"SHA3-512\">4bdd5884c27027f154a7235685ded29987c1c105fe429ef5fb3e12787250725ebc3c1ce7634351db2b4a2c24471f426a8f3cbdd168b35da8c9c32d417e5b6c31</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n@@ -104,17 +98,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n         <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n         <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n         <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n         <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n@@ -148,17 +139,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f8b3a23e6402d317b612251c83d292e7</hash>\n         <hash alg=\"SHA-1\">0a0d1009191c1cf6b04f40d26e4717596f3a90e0</hash>\n         <hash alg=\"SHA-256\">8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2</hash>\n         <hash alg=\"SHA-384\">791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3</hash>\n         <hash alg=\"SHA-512\">ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b</hash>\n-        <hash alg=\"SHA3-256\">29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3</hash>\n-        <hash alg=\"SHA3-384\">c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6</hash>\n-        <hash alg=\"SHA3-512\">3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -187,17 +175,14 @@\n alternative support for serializing POJOs as XML and deserializing XML as pojos.</description>\n       <hashes>\n         <hash alg=\"MD5\">e88d4f53cf4e3d671436ad5732e28645</hash>\n         <hash alg=\"SHA-1\">cb6a722f128ff0ce2494384d419b6ff20fad25ab</hash>\n         <hash alg=\"SHA-256\">8ea46758e5720695ab0fd9455d33ba698784a079248057a34148f2c23fe2f4b0</hash>\n         <hash alg=\"SHA-384\">422792c224b9581b69501c8e67e13860e08895b46672cca077341124cf88fad1ea4a410741bc591eed5193c8e50db8ae</hash>\n         <hash alg=\"SHA-512\">90f560e01dc4b2f46b6cb8c0f30ca3e159ea5dcf892f5d660878703bf5c43ce942eb67ac7cc084fd82f71aa777273f1d1f4d8d0d85481cd82d06839b3ce95dc4</hash>\n-        <hash alg=\"SHA3-256\">b0b21165b3c2255ebf4518161b35296976e7f2cfc02e7b095208fcdc3c1e81e5</hash>\n-        <hash alg=\"SHA3-384\">dafa41415f124ca98c61689403b1d492eceed2d06991281fb00420c981a83a4fe08cbe0181dfe664badbe288fbad1f59</hash>\n-        <hash alg=\"SHA3-512\">cdf926890be6be22ab30414f37f026752bdf8b94dbfa4b61a867648638e46e46cd39e085da1672a1244fee93e82eced1329f611badc5e0582192d13c522575b4</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.2?type=jar</purl>\n@@ -221,17 +206,14 @@\n       <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n       <hashes>\n         <hash alg=\"MD5\">c56433d75479665998ccbd50678480fa</hash>\n         <hash alg=\"SHA-1\">0a6a0e0620d51833feffc67bccb51937b2345763</hash>\n         <hash alg=\"SHA-256\">9bfa278ad05179fb68087851caf607652702ca25424bec8358a3716e751405c8</hash>\n         <hash alg=\"SHA-384\">b0782e4b1f4486d7ff10cea5dc3e67a4bcc557af770698d41783c91fd023ad00e63ea5af6c1565dee48cfc15d2cfaf06</hash>\n         <hash alg=\"SHA-512\">c5451f5c22d09f892ff22b840e46929f4d1f5dcd4022b4170f3262d8d85d0819d87432c8eca86215fdce7b5cd10eb99ef4b2cd498af5ff5cf2b48a2701181abc</hash>\n-        <hash alg=\"SHA3-256\">4d05dff4543b8ee7c21c6847dd715c2ca479ea3165c9a8d785204334e224d564</hash>\n-        <hash alg=\"SHA3-384\">1474a077534ee52eb75c53618bb504ff43d9c1c29e83c036f62edd2a85a98e425ffbc5576b607b9a4f14bde0cbfbad11</hash>\n-        <hash alg=\"SHA3-512\">961b99eae0b246e505965f43f2826588bfa27a48dad3472d167054491952ee75b6981051ac7208ba4d7518687973f4d288f84da218d6ac0f2bebf1e52d082768</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?type=jar</purl>\n@@ -255,17 +237,14 @@\n       <description>Core annotations used for value types, used by Jackson data binding package.</description>\n       <hashes>\n         <hash alg=\"MD5\">2352a291fc39d23cfe5c100728de1ea7</hash>\n         <hash alg=\"SHA-1\">ec18851f1976d5b810ae1a5fcc32520d2d38f77a</hash>\n         <hash alg=\"SHA-256\">7d3df5aafa2dc61ad1dbad30f411548c0184ed92d94628c63168721f08237cd4</hash>\n         <hash alg=\"SHA-384\">10a9917d2331845b923f43e723ccd8ad75dd54b03afad1225b06fb04f0670b65857d49f4fef5ff58b5b74eea224f3ae5</hash>\n         <hash alg=\"SHA-512\">8da374687872fe37a0948e6f1b506ae7ad05c75006105c944182b3db8ce676f32794517953eb28beeba100e1ad8a059fd00164b43a19b026d3bf1b9743b5968b</hash>\n-        <hash alg=\"SHA3-256\">88086fb723bdd8630b0798c1068c192da2f3edd470240e2cb7a81fa42c9e4c82</hash>\n-        <hash alg=\"SHA3-384\">811a4d45d3ed98e9d0186c7c1b8fc5d47b35ff7b4276ed35816dbd8ed0bec8bbba6614b72e99157f1ace4b89478e1644</hash>\n-        <hash alg=\"SHA3-512\">b1367a2b6a297fec04eff93808ddb34bc375d044c30c5165c3d55f28660e3b3086c0467ff4160343f62ce6f6bbaf4c90e4656ca72f14df72d03a8bd116931894</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?type=jar</purl>\n@@ -289,17 +268,14 @@\n       <description>General data-binding functionality for Jackson: works on core streaming API</description>\n       <hashes>\n         <hash alg=\"MD5\">307ceaef2394e6ec9cfae77045546778</hash>\n         <hash alg=\"SHA-1\">926e48c451166a291f1ce6c6276d9abbefa7c00f</hash>\n         <hash alg=\"SHA-256\">0d5459b7f18184c4ce8f07264b1b7feced51529e550a098d6f9e2dfe091138ad</hash>\n         <hash alg=\"SHA-384\">b828e6577fa3ec2acf8c17de23fe33a52658d235518e557a30372324f4e6ac7640edccba9443f7adc7146edbb668f85b</hash>\n         <hash alg=\"SHA-512\">533d5f76f80e54cbf2f764af3823c1f5ed6e6a924dddbaf67120c1b29a2df44cce6ffc18bf24bc5d276cbfda39727a3625180ccbb0fc278982dcc5531dfc05ee</hash>\n-        <hash alg=\"SHA3-256\">e29f04f1a9c6c44f85a6e87f45114705dc8dc44fa5df887374bf515e9386e068</hash>\n-        <hash alg=\"SHA3-384\">dae1cbf402d9adc1cd626e1c00a2556e2754e4b755979f2d58b76bed363ee70ef6790fa034cb9de43f6d0dc87d6a512f</hash>\n-        <hash alg=\"SHA3-512\">521ece2d40e3dfd116b16af322905972c23e8e35338ab6f548e8abff5c3fca4b3290eb41cee17311ac689807936628eb8eac87343c3dc53954bea3956fd24d3d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2?type=jar</purl>\n@@ -323,17 +299,14 @@\n       <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>\n       <hashes>\n         <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n         <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n         <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n         <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n         <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n-        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n-        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n-        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <name>The BSD License</name>\n           <url>http://www.opensource.org/licenses/bsd-license.php</url>\n         </license>\n       </licenses>\n@@ -359,17 +332,14 @@\n SAX2 and Stax2 APIs</description>\n       <hashes>\n         <hash alg=\"MD5\">098c3f8d7d3dd78284086bbfa1a12d05</hash>\n         <hash alg=\"SHA-1\">86622cfd0a9933628b6b876d0c92589148d3b42e</hash>\n         <hash alg=\"SHA-256\">dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037</hash>\n         <hash alg=\"SHA-384\">4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae</hash>\n         <hash alg=\"SHA-512\">25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075</hash>\n-        <hash alg=\"SHA3-256\">497c702aad9280c9778628cc8bb675aaf991855cc79cad4e65920d000ca84137</hash>\n-        <hash alg=\"SHA3-384\">5d80d5487972ce3dfdf9a277a1ee262fcbeeb354b32cf89c8380a937f7413007b23f3663780045f790efdc355cd78fbd</hash>\n-        <hash alg=\"SHA3-512\">1335fa8dc00060690670704e2f46ee752f39673e1f8c7af2b775fdbb973f4174e6d2cadb0f066d86d248747118a69315fabd570e682a60104ddaa26706265342</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar</purl>\n@@ -395,17 +365,14 @@\n       <description>A json schema validator that supports draft v4, v6, v7 and v2019-09</description>\n       <hashes>\n         <hash alg=\"MD5\">ac5b1612e3a19f57502371b9bc2a679d</hash>\n         <hash alg=\"SHA-1\">689fadf1019ac28ba988031f5eeb49eab6c05b9b</hash>\n         <hash alg=\"SHA-256\">00481ccebf8edc8aeed4d9962d385687bfb29eee8dd64d2169b49c20ea5dda4b</hash>\n         <hash alg=\"SHA-384\">3a93fc5f36a2725401949240076cb8fbc9bcc491cabfce8950e63f99db2f375b75946852368a89fd3fc51b7126811f02</hash>\n         <hash alg=\"SHA-512\">b4458b0904674fda7485630919929354abcc347e88cb87a5c6a6f8e2a5ce85af45542ed05df3494768669b6109a06a93a52a42c6a1fbc257eb36a0446a068f7e</hash>\n-        <hash alg=\"SHA3-256\">782cbb239a1124ef952ed069399c046f5061cf8178c44c68b0ddf1faa9e83950</hash>\n-        <hash alg=\"SHA3-384\">0b52c1a2054c8ebf3be3a7c4997a3bba8c8b1ff89f635482997ae53016d352fdd5a8c4d052d2f20e1a64e36471f16ce8</hash>\n-        <hash alg=\"SHA3-512\">8287240261027d004e0d017e9a98dfa5d6c79a44cbf137adb76b4eeecd3991a96e362e4840f3299ca684857ea5ea3c4f765a095be4beaf377941f81318c76e0c</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.networknt/json-schema-validator@1.0.69?type=jar</purl>\n@@ -425,17 +392,14 @@\n       <description>Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format</description>\n       <hashes>\n         <hash alg=\"MD5\">324a8ca9b01f44dc2a376b81d6f8e329</hash>\n         <hash alg=\"SHA-1\">a30f897caa066b37d574af237eebdac7638e0fb2</hash>\n         <hash alg=\"SHA-256\">2fa82963daf8a91678f7ed3859c756e95d24a571ac4ba57a1a6b78bb68567156</hash>\n         <hash alg=\"SHA-384\">0078f848c16ccc16f85699f6b282af47c3250f1889b636eda9328a00dadc2ac79b45b9929e86114c49d91b3556212aa9</hash>\n         <hash alg=\"SHA-512\">15038003f36f85638fd7c165bae374b08952b610682feba2c2aaadc7d50a793bb66055685b5288751fa9fefc9abc10f3ed022b41f5a5dce78094bd676454cc4c</hash>\n-        <hash alg=\"SHA3-256\">d954aaf4ce13a9810a0e1e5f2066e67582cc92e735813c953699e4a131c06bff</hash>\n-        <hash alg=\"SHA3-384\">7081323f8764f3c1ed9e1ab027d58fc8767ee5c65e49e87bf416eb5c668df73051848614207ef581db152102bc00f937</hash>\n-        <hash alg=\"SHA3-512\">eb1f9dae8c963113b1c5f60f7bd396ef064b3d13fdefd8725c16a3d700278baea9d9dc54c083a7916bbf4ae43e1eb384ed9794b68530357e0c0209a9c9039746</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.ethlo.time/itu@1.5.1?type=jar</purl>\n@@ -457,17 +421,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n         <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n         <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n         <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n         <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n@@ -503,17 +464,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">19fe50567358922bdad277959ea69545</hash>\n         <hash alg=\"SHA-1\">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>\n         <hash alg=\"SHA-256\">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>\n         <hash alg=\"SHA-384\">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>\n         <hash alg=\"SHA-512\">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>\n-        <hash alg=\"SHA3-256\">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>\n-        <hash alg=\"SHA3-384\">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>\n-        <hash alg=\"SHA3-512\">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>\n@@ -548,17 +506,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">3ae76ff0195ada460d495efe1fb50d17</hash>\n         <hash alg=\"SHA-1\">cf43b5391de623b36fe066a21127baef82c64022</hash>\n         <hash alg=\"SHA-256\">76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce</hash>\n         <hash alg=\"SHA-384\">27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e</hash>\n         <hash alg=\"SHA-512\">a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64</hash>\n-        <hash alg=\"SHA3-256\">364bfb131dab58736c995ac4484d9eab53b1e62129a99ed55e9c12ed39079dc6</hash>\n-        <hash alg=\"SHA3-384\">16af5ee2b4f8710fa14bbd977ef3630466c51c4ed6bf9886ac0ea9c74bd23dedbbce60beae5217fab686777108c2e54d</hash>\n-        <hash alg=\"SHA3-512\">4687c5ca8bb73d6880132d7d886733d0a5ce7a873c7b5b68d9d46066ee7e1f6c11f0510a70f313ca2563550bfcf6e81cf37a0c4ceef247bab55d6aadc49fae59</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar</purl>\n@@ -589,17 +544,14 @@\n     standard annotations instead of javadoc annotations.</description>\n       <hashes>\n         <hash alg=\"MD5\">141fd7a2ae613cb17d25ecd54b43eb3f</hash>\n         <hash alg=\"SHA-1\">2f2147a6cc6a119a1b51a96f31d45c557f6244b9</hash>\n         <hash alg=\"SHA-256\">bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac</hash>\n         <hash alg=\"SHA-384\">dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f</hash>\n         <hash alg=\"SHA-512\">cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88</hash>\n-        <hash alg=\"SHA3-256\">2e9f44d1c5df160563d3cedaf01929682fb3e0432beca7c782d8ba0324fb32b1</hash>\n-        <hash alg=\"SHA3-384\">2b335733d7683e8bae312b0608af7c17b1aa22a1b9cbc4cc11549faf6bacc51c7591f1073aac99e5d70fdea31c6253c4</hash>\n-        <hash alg=\"SHA3-512\">5051e4210310ec60fae9f32284a93da3cff63bf43a7dda30eaf2715d24cfc7f2353a6c2731521f4d6ef32e7a3e2526b6a41c8a11b0889c8dbf7ffc7914812641</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar</purl>\n@@ -629,17 +581,14 @@\n       <description>The slf4j API</description>\n       <hashes>\n         <hash alg=\"MD5\">fbcf58513bc25b80f075d812aad3e3cf</hash>\n         <hash alg=\"SHA-1\">cdcff33940d9f2de763bc41ea05a0be5941176c3</hash>\n         <hash alg=\"SHA-256\">3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be</hash>\n         <hash alg=\"SHA-384\">c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0</hash>\n         <hash alg=\"SHA-512\">4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1</hash>\n-        <hash alg=\"SHA3-256\">f6a3b253b2c5a06a9559fd9f21e36d04198e660d4e9437ddeb78245969f03fe4</hash>\n-        <hash alg=\"SHA3-384\">b08f2d668d9233a3380c37c028486014db65000e918aa1c59e2db35fb5661b3a40183e51677b73a5d96a308f9c2346c0</hash>\n-        <hash alg=\"SHA3-512\">0a45c046c106cf88a510bde208b1ac92d7b3dc547b2516583afdbb829219ec31b0bba9fc4b7fd240d2ef859abb722ce307f9572d87409d261887130a5df6827d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -665,17 +614,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">82da305317d2a98366d6dfbb2538eaeb</hash>\n         <hash alg=\"SHA-1\">7113c9022b3bf660ffc6462f9450081d83bb48a0</hash>\n         <hash alg=\"SHA-256\">328b4baa813834f2b7fb674521e463521ce357db5eacc5139a0fc7a385ad8486</hash>\n         <hash alg=\"SHA-384\">3bd138b3f27ca03caa8ecc3efb6c01ebacf4a8db325f6209ff7394346f3513864cf2f04bb2812d85397267405e064798</hash>\n         <hash alg=\"SHA-512\">2bbe4337bbdc39c3df7ba750b50f797bfe82be979280fe0412d3cfd1544e3f78a481f7eefb3951cc3d6bbf923bbb254147cb7699559c8a4628edb474412361ac</hash>\n-        <hash alg=\"SHA3-256\">27ef35a041ee56968b5f3d6ca5f593c0fec0c4a852e411ed9b3e63a2ac138c62</hash>\n-        <hash alg=\"SHA3-384\">8de28f85feb49d498a08c7613068943d5ba520dc1e17576a7f3725ffaf5c2338705ee5c526ffaff33a4de70967c3cf11</hash>\n-        <hash alg=\"SHA3-512\">6efe4cc15486101ff69170618eace963b1a7de15b006e0824ead5cfa324e32d0fa4526257fa05b5c9a06b309195e830b75d84eaca6c9f64404e62058d4705829</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.1?type=jar</purl>\n@@ -705,17 +651,14 @@\n       <description>A collection of utility classes to ease usage of the repository system.</description>\n       <hashes>\n         <hash alg=\"MD5\">699bc0f3729d8b0a5bacf3e8e84ab010</hash>\n         <hash alg=\"SHA-1\">d0f84ba994f0133580e8b957a44593eaa03d42cd</hash>\n         <hash alg=\"SHA-256\">556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62</hash>\n         <hash alg=\"SHA-384\">35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef</hash>\n         <hash alg=\"SHA-512\">7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00</hash>\n-        <hash alg=\"SHA3-256\">1a668d4561dac383db3caef99d481aba52f5fb28706afc6f60a19fef298a0d0c</hash>\n-        <hash alg=\"SHA3-384\">be905c754735606a364c6fb568e1c471899a809f131fbad38c4eb5d64aae3e3cefcf5e68df6969a3d5a74e28ade9dd12</hash>\n-        <hash alg=\"SHA3-512\">b15712c92d5c0c921ef89457f2bae1c0b70bf14b04db14a97434bdfc51d05e920a898e615b1a28cb22b8be84a8321f7578158c40442697e45833b59430f6a0b6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>EPL-1.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar</purl>\n@@ -746,17 +689,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">a6e053568deb23f5d61c74ba7b8ac5a5</hash>\n         <hash alg=\"SHA-1\">5b607715b42e93c8d10c56b53d861180a4221835</hash>\n         <hash alg=\"SHA-256\">aeb48f4560c7086bbdb1dcb0ae24241f8c27c4b3000d502f7a5eb32731ba5813</hash>\n         <hash alg=\"SHA-384\">b771427e421d5a699a6367c7ab87b0d58a6f328eb044d31cc774cd8d1b453b5787735e7eca4853ee93f6098b2ef73441</hash>\n         <hash alg=\"SHA-512\">f94c3517cd72c9a8b596bded4cd97e296b8d32f13020df68b17c191c08c63160bf340832ffd7525a775ad0d14c38585ca22a73c6f87bebb0f9b11374b710e8c4</hash>\n-        <hash alg=\"SHA3-256\">ca2433540d1346ca29fffe15ed79a8961df2c12412a80d0b45498c9ad1bd757a</hash>\n-        <hash alg=\"SHA3-384\">77d949f704a47609f3fd5529ee2c6cfba250743995713410ba6df2ffdc98330c03cc519dc02f3bccd59e027dedcd6745</hash>\n-        <hash alg=\"SHA3-512\">84da975bde59f91c0ca1f652809b9525544507880794a0ee6fea763e2dbd81cba26f03149e4125c67d6c24c7fd9ca34f62be334bd4375fae6ba081ba6e560e64</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar</purl>\n@@ -786,17 +726,14 @@\n       <description>ASM, a very small and fast Java bytecode manipulation framework</description>\n       <hashes>\n         <hash alg=\"MD5\">8f184dce9b1bedc675d4a3640d43ddf0</hash>\n         <hash alg=\"SHA-1\">81a03f76019c67362299c40e0ba13405f5467bff</hash>\n         <hash alg=\"SHA-256\">b9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5</hash>\n         <hash alg=\"SHA-384\">b2c18b3d70723daab996f109a95e75dfedce5a3833bf540a53d485847860db24d57ca4302c73b6882de855475ecb5fbd</hash>\n         <hash alg=\"SHA-512\">876eac7406e60ab8b9bd6cd3c221960eaa53febea176a88ae02f4fa92dbcfe80a3c764ba390d96b909c87269a30a69b1ee037a4c642c2f535df4ea2e0dd499f2</hash>\n-        <hash alg=\"SHA3-256\">db5f04847b2d40a4a2b5ea5d3621adf09448c4eb98960daf1cde86e72f722c25</hash>\n-        <hash alg=\"SHA3-384\">f5cc30cec4da47a4bc5728ad48c31feb2cc1a22b3c32aaade4152ebe4daf4c3f96b9a314256dc8eb12dd7c1faa994f17</hash>\n-        <hash alg=\"SHA3-512\">7ca9d699b26792d21d00333db03ddb18fc06011160ab7dd9ccf74b23c280952c69bb1bb6638650ef8dea97bca8a1f5c74397bbdb3a662c590f580e81375bc720</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>BSD-3-Clause</id>\n           <url>https://opensource.org/licenses/BSD-3-Clause</url>\n         </license>\n       </licenses>\n"}]}