{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:01200a29-3900-4e36-bb55-bc312e35438d",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-01-31T23:01:20Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.6.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "c31373a2f4276beba7de6dfab877b85b"
          },
          {
            "alg" : "SHA-1",
            "content" : "8d6e08152ed0f8fb511f237be7e6e53db2d8f1d6"
          },
          {
            "alg" : "SHA-256",
            "content" : "4265a10877121df5add55a9d49fea53f55f218929c286b4aa536d22a36ea0bcc"
          },
          {
            "alg" : "SHA-384",
            "content" : "990c98865e1c9d6d1cb3ae19d846881c9fff022c36cf9497b6e2112b689e16dc9e4bfa575cb9d7fe7e8328438d629840"
          },
          {
            "alg" : "SHA-512",
            "content" : "1ebbf8ecd80d82817d1f1e78aa6324807f2dd3d49f0135026f4b7902a1cea58ea7489f2a21d8c44d09e09581290aeb1621a3763993be651342018ec13c91be88"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-maven-plugin",
      "version" : "2.7.0",
      "description" : "The CycloneDX Maven plugin generates CycloneDX Software Bill of Materials (SBOM) containing the aggregate of all direct and transitive dependencies of a project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.0?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.0?type=maven-plugin"
    }
  },
  "components" : [
    {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "7.1.4",
      "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6183f51edd1d799a49d98cb10c365a59"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0acafed3c0f41f312dda0d7927e7256b28f50da"
        },
        {
          "alg" : "SHA-256",
          "content" : "311ef7d1d2802ab0f0d3babc4345117153599061716692fe61d736b659a00c48"
        },
        {
          "alg" : "SHA-384",
          "content" : "f017823b617ffd8fbba4332c25fe5a4c75cf80467fdc5c9b2b13fd5bfa43d5b79c3d948565bc053c5d6a57708bd89ef3"
        },
        {
          "alg" : "SHA-512",
          "content" : "7131bd1c60c53664778a94cf646c88061e4ed3b149eef75e3d511f2dc3218e480b2504fc4131ef6b0d5a737cd937c4531b2cf79209947b3a12443dec6e981191"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.13.2",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e88d4f53cf4e3d671436ad5732e28645"
        },
        {
          "alg" : "SHA-1",
          "content" : "cb6a722f128ff0ce2494384d419b6ff20fad25ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ea46758e5720695ab0fd9455d33ba698784a079248057a34148f2c23fe2f4b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "422792c224b9581b69501c8e67e13860e08895b46672cca077341124cf88fad1ea4a410741bc591eed5193c8e50db8ae"
        },
        {
          "alg" : "SHA-512",
          "content" : "90f560e01dc4b2f46b6cb8c0f30ca3e159ea5dcf892f5d660878703bf5c43ce942eb67ac7cc084fd82f71aa777273f1d1f4d8d0d85481cd82d06839b3ce95dc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c56433d75479665998ccbd50678480fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a6a0e0620d51833feffc67bccb51937b2345763"
        },
        {
          "alg" : "SHA-256",
          "content" : "9bfa278ad05179fb68087851caf607652702ca25424bec8358a3716e751405c8"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0782e4b1f4486d7ff10cea5dc3e67a4bcc557af770698d41783c91fd023ad00e63ea5af6c1565dee48cfc15d2cfaf06"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5451f5c22d09f892ff22b840e46929f4d1f5dcd4022b4170f3262d8d85d0819d87432c8eca86215fdce7b5cd10eb99ef4b2cd498af5ff5cf2b48a2701181abc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2352a291fc39d23cfe5c100728de1ea7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec18851f1976d5b810ae1a5fcc32520d2d38f77a"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d3df5aafa2dc61ad1dbad30f411548c0184ed92d94628c63168721f08237cd4"
        },
        {
          "alg" : "SHA-384",
          "content" : "10a9917d2331845b923f43e723ccd8ad75dd54b03afad1225b06fb04f0670b65857d49f4fef5ff58b5b74eea224f3ae5"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da374687872fe37a0948e6f1b506ae7ad05c75006105c944182b3db8ce676f32794517953eb28beeba100e1ad8a059fd00164b43a19b026d3bf1b9743b5968b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "307ceaef2394e6ec9cfae77045546778"
        },
        {
          "alg" : "SHA-1",
          "content" : "926e48c451166a291f1ce6c6276d9abbefa7c00f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d5459b7f18184c4ce8f07264b1b7feced51529e550a098d6f9e2dfe091138ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "b828e6577fa3ec2acf8c17de23fe33a52658d235518e557a30372324f4e6ac7640edccba9443f7adc7146edbb668f85b"
        },
        {
          "alg" : "SHA-512",
          "content" : "533d5f76f80e54cbf2f764af3823c1f5ed6e6a924dddbaf67120c1b29a2df44cce6ffc18bf24bc5d276cbfda39727a3625180ccbb0fc278982dcc5531dfc05ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.7",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "098c3f8d7d3dd78284086bbfa1a12d05"
        },
        {
          "alg" : "SHA-1",
          "content" : "86622cfd0a9933628b6b876d0c92589148d3b42e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.69",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac5b1612e3a19f57502371b9bc2a679d"
        },
        {
          "alg" : "SHA-1",
          "content" : "689fadf1019ac28ba988031f5eeb49eab6c05b9b"
        },
        {
          "alg" : "SHA-256",
          "content" : "00481ccebf8edc8aeed4d9962d385687bfb29eee8dd64d2169b49c20ea5dda4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a93fc5f36a2725401949240076cb8fbc9bcc491cabfce8950e63f99db2f375b75946852368a89fd3fc51b7126811f02"
        },
        {
          "alg" : "SHA-512",
          "content" : "b4458b0904674fda7485630919929354abcc347e88cb87a5c6a6f8e2a5ce85af45542ed05df3494768669b6109a06a93a52a42c6a1fbc257eb36a0446a068f7e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.69?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.69?type=jar"
    },
    {
      "group" : "com.ethlo.time",
      "name" : "itu",
      "version" : "1.5.1",
      "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "324a8ca9b01f44dc2a376b81d6f8e329"
        },
        {
          "alg" : "SHA-1",
          "content" : "a30f897caa066b37d574af237eebdac7638e0fb2"
        },
        {
          "alg" : "SHA-256",
          "content" : "2fa82963daf8a91678f7ed3859c756e95d24a571ac4ba57a1a6b78bb68567156"
        },
        {
          "alg" : "SHA-384",
          "content" : "0078f848c16ccc16f85699f6b282af47c3250f1889b636eda9328a00dadc2ac79b45b9929e86114c49d91b3556212aa9"
        },
        {
          "alg" : "SHA-512",
          "content" : "15038003f36f85638fd7c165bae374b08952b610682feba2c2aaadc7d50a793bb66055685b5288751fa9fefc9abc10f3ed022b41f5a5dce78094bd676454cc4c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.3.0",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3ae76ff0195ada460d495efe1fb50d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf43b5391de623b36fe066a21127baef82c64022"
        },
        {
          "alg" : "SHA-256",
          "content" : "76d174792540e2775af94d03d10fb2d3c776e2cd0ac0ebf427d3e570072bb9ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "27742e2c82c13ffe947c6ce8750b1989491e8a5d7554cc3fa240a952c9d3a22fe006516041c66650e71972275c06565e"
        },
        {
          "alg" : "SHA-512",
          "content" : "a93038005cd9793476c913beaea7c8c170d1853dddf39bf6794ad6446165eaf538c2c3c2314baa9d919d6b0bda78e5ea3cd987d5dbacf8e3b98e315bcfa7db64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-component-annotations",
      "version" : "2.1.0",
      "description" : "Plexus Component \"Java 5\" Annotations, to describe plexus components properties in java sources with standard annotations instead of javadoc annotations.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "141fd7a2ae613cb17d25ecd54b43eb3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f2147a6cc6a119a1b51a96f31d45c557f6244b9"
        },
        {
          "alg" : "SHA-256",
          "content" : "bde3617ce9b5bcf9584126046080043af6a4b3baea40a3b153f02e7bbc32acac"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd102351fada419b7e66f38b62868db4141cf93863b8117926564dd883b4a3960d9c9682b346f7106cdaa2a4138c794f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cc534fda54272f074fe9edd581a6c3e1ea98127340c7f852c4b4953a44dad048ace22dfa10f30d6adcdfc15efd319dac778a03ebbe20de7779fd1df640506e88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-containers/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/codehaus-plexus/plexus-containers"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.32",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbcf58513bc25b80f075d812aad3e3cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "cdcff33940d9f2de763bc41ea05a0be5941176c3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be"
        },
        {
          "alg" : "SHA-384",
          "content" : "c95aa5a652533b3b54e721b7f20c4ef19a022ac6c8cd353b032bfd65f636b1adc3eb2e5ca0b409f19456e265cbfd3cb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "4ca4045775a879c3ce3021908db7b4778235a322fd8e2567da960156f24b9da86e6812a4956c8dc19920cd83e4c61141168c580829f43f10bbac925d465c3fd1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-tree",
      "version" : "3.1.1",
      "description" : "A tree-based API for resolution of Maven project dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "82da305317d2a98366d6dfbb2538eaeb"
        },
        {
          "alg" : "SHA-1",
          "content" : "7113c9022b3bf660ffc6462f9450081d83bb48a0"
        },
        {
          "alg" : "SHA-256",
          "content" : "328b4baa813834f2b7fb674521e463521ce357db5eacc5139a0fc7a385ad8486"
        },
        {
          "alg" : "SHA-384",
          "content" : "3bd138b3f27ca03caa8ecc3efb6c01ebacf4a8db325f6209ff7394346f3513864cf2f04bb2812d85397267405e064798"
        },
        {
          "alg" : "SHA-512",
          "content" : "2bbe4337bbdc39c3df7ba750b50f797bfe82be979280fe0412d3cfd1544e3f78a481f7eefb3951cc3d6bbf923bbb254147cb7699559c8a4628edb474412361ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.1?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.1.0",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "699bc0f3729d8b0a5bacf3e8e84ab010"
        },
        {
          "alg" : "SHA-1",
          "content" : "d0f84ba994f0133580e8b957a44593eaa03d42cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "556f083dd35fe7f430ac4a7705784191e39df6df89abc31b30cb538f53828d62"
        },
        {
          "alg" : "SHA-384",
          "content" : "35071ce698b4e800dec79c8d8be6e0994197bb36ec25588b13c77dd191efc8997c88fcc7ceffcf7b1afb35974512e9ef"
        },
        {
          "alg" : "SHA-512",
          "content" : "7d5d135eca891032708069378ca41e6e333813510837a6e620a0f6462ff292842127544bda1e8a80bbd92a80f3d17a0bd6c721bd741a40e66897474799f7bd00"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-analyzer",
      "version" : "1.12.0",
      "description" : "Analyzes the dependencies of a project for undeclared or unused artifacts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6e053568deb23f5d61c74ba7b8ac5a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b607715b42e93c8d10c56b53d861180a4221835"
        },
        {
          "alg" : "SHA-256",
          "content" : "aeb48f4560c7086bbdb1dcb0ae24241f8c27c4b3000d502f7a5eb32731ba5813"
        },
        {
          "alg" : "SHA-384",
          "content" : "b771427e421d5a699a6367c7ab87b0d58a6f328eb044d31cc774cd8d1b453b5787735e7eca4853ee93f6098b2ef73441"
        },
        {
          "alg" : "SHA-512",
          "content" : "f94c3517cd72c9a8b596bded4cd97e296b8d32f13020df68b17c191c08c63160bf340832ffd7525a775ad0d14c38585ca22a73c6f87bebb0f9b11374b710e8c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/Maven/job/maven-box/job/maven-dependency-analyzer/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.2",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8f184dce9b1bedc675d4a3640d43ddf0"
        },
        {
          "alg" : "SHA-1",
          "content" : "81a03f76019c67362299c40e0ba13405f5467bff"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9d4fe4d71938df38839f0eca42aaaa64cf8b313d678da036f0cb3ca199b47f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2c18b3d70723daab996f109a95e75dfedce5a3833bf540a53d485847860db24d57ca4302c73b6882de855475ecb5fbd"
        },
        {
          "alg" : "SHA-512",
          "content" : "876eac7406e60ab8b9bd6cd3c221960eaa53febea176a88ae02f4fa92dbcfe80a3c764ba390d96b909c87269a30a69b1ee037a4c642c2f535df4ea2e0dd499f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.0?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.4?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.1?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.2?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.69?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.69?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ethlo.time/itu@1.5.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-component-annotations@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.32?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.12.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}