{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:32349e89-c381-4b44-9495-eab20e2d5789",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2022-10-10T14:24:15Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.6.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "c31373a2f4276beba7de6dfab877b85b"
          },
          {
            "alg" : "SHA-1",
            "content" : "8d6e08152ed0f8fb511f237be7e6e53db2d8f1d6"
          },
          {
            "alg" : "SHA-256",
            "content" : "4265a10877121df5add55a9d49fea53f55f218929c286b4aa536d22a36ea0bcc"
          },
          {
            "alg" : "SHA-384",
            "content" : "990c98865e1c9d6d1cb3ae19d846881c9fff022c36cf9497b6e2112b689e16dc9e4bfa575cb9d7fe7e8328438d629840"
          },
          {
            "alg" : "SHA-512",
            "content" : "1ebbf8ecd80d82817d1f1e78aa6324807f2dd3d49f0135026f4b7902a1cea58ea7489f2a21d8c44d09e09581290aeb1621a3763993be651342018ec13c91be88"
          },
          {
            "alg" : "SHA3-256",
            "content" : "6e033e8b0def1b64bb9e99802ff03fd7f8a5ead6783b1c2be3ebb22ee760abfc"
          },
          {
            "alg" : "SHA3-384",
            "content" : "e8effa904f74b1e8b6b293c31111a8e30b1c56a601b8490feaa530dae5f304d61eed41e6561750ec3f1d6af1cd126949"
          },
          {
            "alg" : "SHA3-512",
            "content" : "4e33380044566e085752c65a90647a367cc0e3c63ccb265f6091bc9daba41aaba297de524f458a63b11439ab23b4f7e3c707b1532de47121d73ce129136af384"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-maven-plugin",
      "version" : "2.7.2",
      "description" : "The CycloneDX Maven plugin generates CycloneDX Software Bill of Materials (SBOM) containing the aggregate of all direct and transitive dependencies of a project.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.2?type=maven-plugin",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-maven-plugin.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.2?type=maven-plugin"
    }
  },
  "components" : [
    {
      "publisher" : "OWASP Foundation",
      "group" : "org.cyclonedx",
      "name" : "cyclonedx-core-java",
      "version" : "7.2.0",
      "description" : "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf745e75e722f91d6da7d004144e884e"
        },
        {
          "alg" : "SHA-1",
          "content" : "23cd84b44a118a3c72792c9ab412dea4a4491c08"
        },
        {
          "alg" : "SHA-256",
          "content" : "59a245a4b0e295bf3464f69891da1428a66556db7279be4e495e4c564e362acb"
        },
        {
          "alg" : "SHA-384",
          "content" : "34216f40846a2e950fbbae58d8879f14bbed0fcea07528363e1fd56af533f65205bb03ae5738c12815fb07471c31eb3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "306c66d93b81242edfa08a67bbc699e383ecfdbf780d2270d427eccf4b95b4a7a91deee52988593698de43b28cbdbf1ba69ff048c3232cd5da8c14b88446f402"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b26059dee77002ae579f942b02cbdda617a68c326e6400ba010025a2cef1edc0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8cfb45a82a3719ce9550dc033514cc25e58bbb48bf5bd4200c258f072781dd675c0278a7319841b223234aaf2fbc417d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e900c64ccfd2d609418aa09814a9b3c78115b868de0f2fd13242c95d3666c0cf805e39ec8bf0b70137595d998208fb378e4976a2a04d55eacfc3e0019d83c010"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://owasp.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/CycloneDX/cyclonedx-core-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "group" : "com.github.package-url",
      "name" : "packageurl-java",
      "version" : "1.4.1",
      "description" : "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \"mostly universal\" URL.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg" : "SHA-256",
          "content" : "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://travis-ci.com/package-url/packageurl-java"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/package-url/packageurl-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/package-url/packageurl-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.dataformat",
      "name" : "jackson-dataformat-xml",
      "version" : "2.13.3",
      "description" : "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d2215f4b13497b9cced1f981ada9d6f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec52dc41977a927a6ff175042576d716cd55c7c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab7aa994b1c514ca37e9721f0e79bb20d9aa31df9f9d8286cbd2b9e71235e44e"
        },
        {
          "alg" : "SHA-384",
          "content" : "224ea9166e185c8abe942bc691c3756cd41794ae46772fb0f4eb523ea21333d1b25498af75881bc5010d7a2fe56214df"
        },
        {
          "alg" : "SHA-512",
          "content" : "778b2358401997b03416998b534a99545c26d1256478e1992977cadea250a7796d09e63fd908ddd68362a11de563fe9ef6d6d064fd9f95c83c673080599f58c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d02ee619d2d504baa4bcc90216df3e699b888d9dda2b6c65240e3e42750dc7b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dbb5e1bf4bd50577e8956ed3159dbf81f06e759286d3999f92d68e4da93c3cfaa32d112139bd0d1aeeeff18c71f433d5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6be9b0ff0c814a5068174c1f99da215328cf2089accf43927f248ebf2c540ab4c502787ac6a93ae16bc1d72b4e890d704f6c4dfaade99c6ce26dd27a01cf6c3a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-dataformat-xml"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.13.3",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9a6679e6a2f7d601a9f212576fda550c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a27014716e4421684416e5fa83d896ddb87002da"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab119a8ea3cc69472ebc0e870b849bfbbe536ad57d613dc38453ccd592ca6a3d"
        },
        {
          "alg" : "SHA-384",
          "content" : "7b96a15f15eb9a44795c632313503677e0e65615d31922861138ee059defb1db31dbd98144a6474c25fa69de1c60f7d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "d5337db908b2c56dcb911e3d1a5f671456c13f254fe8d2a620823bc15b2db6aaa8325a86b436b5d181f2584b533158fd14d140b98305ac252f8dfd9a627da859"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4511d609261102f213a9704d71541f813360699b81c44ec795a8fb88bd087daf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "da78b678f4ebdbc9f61efd9475b67d35dc7ff5f2aa80bedaed8e9fbeecc2a96f2c793009abd1e4d5f27ae8fd2a81ad7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0d26e27d5d8920a856c7e8be48236bafae837994da1f8daced1078a1acde2ff1007e2849c9b007365e67541e1e881a18c1f7c66ed11fbc9fcdb91b8ea69dffa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.13.3",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fb8ee542a62a113fa7474fe88bb97e8"
        },
        {
          "alg" : "SHA-1",
          "content" : "7198b3aac15285a49e218e08441c5f70af00fc51"
        },
        {
          "alg" : "SHA-256",
          "content" : "5326a6fbcde7cf8817f36c254101cd45f6acea4258518cd3c80ee5b89f4e4b9b"
        },
        {
          "alg" : "SHA-384",
          "content" : "245c29f5dff5e7677c7f614df69de1072dbb56717fe88890128dfd6479994bb9a81a9917d41a2831a9a96e6d12aa3bb1"
        },
        {
          "alg" : "SHA-512",
          "content" : "7f89b142068879b5fd96e4cb947313b3b39c1dbead43480307360a212fdb5347046b14fbc9b94c480034a4826fdd2a821686ebd121d774d55795326eaa1c95fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "69aa8638b7dee54ed7d676e90054977ffedc0e7e19acd82ae6a2ca28ed706b03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "14086ba58917fddf8b86e16db4a865d6550c3368e7c4ac11f14a29e60165c1a85cece76c03fa046ff6482af4c96618bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74121eb8b75529ebf01a8af81348efa889a9d13914620c95c23548a4dc42babac9f33556b0f668c66610f95db5854ced45fc5c0518147ec233af37213aa9c858"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-annotations"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.13.3",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e35e2adf33b2eed8e9f538a911244175"
        },
        {
          "alg" : "SHA-1",
          "content" : "56deb9ea2c93a7a556b3afbedd616d342963464e"
        },
        {
          "alg" : "SHA-256",
          "content" : "6444bf08d8cd4629740afc3db1276938f494728deb663ce585c4e91f6b45eb84"
        },
        {
          "alg" : "SHA-384",
          "content" : "38a8c81bc7a37315428697ab761f4c12b409046247414532fc68e37bb2a70e0d0a50b555dd20a251c6f63a85dfe536bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "dd6daeb7481bab4641adf71552774dd143039dc856aa6e3e5805c1964fecc69eb18a2fd8201e16ebebb92549edb7f10d1f9a50391ed9a120f867b675a6d4d4ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3f1bca51b619ada05e6a4f88ff37d65625e9fb9e5a4b3c017834c6594c964bb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "27936164e28773f942663edb22e1022bcf061ab1b4afcb45e6705b30a4e17cd668066edc094a8bd8bc44b82852313909"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc93eb45e2c1997db9b78b38db68f2648493c1ea79932ad076dfcbc5e5edfd8015798ff5d99a9f06f9e7dca745c53406b8954ec1ffc626a61ece429c30a06f47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/jackson-databind"
        },
        {
          "type" : "website",
          "url" : "http://fasterxml.com/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "The BSD License",
            "url" : "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.2.7",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "098c3f8d7d3dd78284086bbfa1a12d05"
        },
        {
          "alg" : "SHA-1",
          "content" : "86622cfd0a9933628b6b876d0c92589148d3b42e"
        },
        {
          "alg" : "SHA-256",
          "content" : "dda9dd5cf9fbf5b69f58b4c16ab068b7bca1f428158d29722e00e8005d457037"
        },
        {
          "alg" : "SHA-384",
          "content" : "4a681dc8ee81e8055dd289753526f39f8c250efc8b072b61a1fc4c95b4656c0147acc07cc0b6dd5b37c675c68c80cbae"
        },
        {
          "alg" : "SHA-512",
          "content" : "25fc1f002fb6dbabb67c34c3245831a5205b572e91f6a8b24ec2ebfc4d266ec231f6956dee7b26f947b9955da0f83b16b24a99cbdcea0a5207e77bd16593f075"
        },
        {
          "alg" : "SHA3-256",
          "content" : "497c702aad9280c9778628cc8bb675aaf991855cc79cad4e65920d000ca84137"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d80d5487972ce3dfdf9a277a1ee262fcbeeb354b32cf89c8380a937f7413007b23f3663780045f790efdc355cd78fbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1335fa8dc00060690670704e2f46ee752f39673e1f8c7af2b775fdbb973f4174e6d2cadb0f066d86d248747118a69315fabd570e682a60104ddaa26706265342"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://fasterxml.com"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
    },
    {
      "group" : "com.networknt",
      "name" : "json-schema-validator",
      "version" : "1.0.72",
      "description" : "A json schema validator that supports draft v4, v6, v7 and v2019-09",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0d10b124bc1e23a5a52c6c2bd899571"
        },
        {
          "alg" : "SHA-1",
          "content" : "77c4f5ced04d846a2134b9e56325e8b9cfc01724"
        },
        {
          "alg" : "SHA-256",
          "content" : "260647c459cc7de269b2a8f576e5693e434df888fd4801e92365fe18b9992cbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "03ad63243f87279fc76bae1e892f70fc99906fc47933b8eccef10df10d04d6b9a5a43d9e07f3bba0b02a9146db24a341"
        },
        {
          "alg" : "SHA-512",
          "content" : "4dcb973a48d89e0cae94ec56540e5e872997fa9c6f0f8822e2343001c696654798aa565b9dffcd33e63be4dee5c6aefd7fd502c33619b216a8ccd907d9e4e13f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f9042b73d2ac2c46dd51ea777e2ad0429fc29d61ead5e0587490c91699424758"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e7e362fd290ab06155785240dfb7ba86dd2470757061276b2f17480bc8752ef0a551825865bbc4762297d12ecd2cb1d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "71bb66d470c40bab75e0e7e436486027a45758083e1eceda2df518a65aaceb92d5f6a22a00f787f8b5c460417db61299aff0377e2f49720679fb08c12e6f7fca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.networknt/json-schema-validator@1.0.72?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/networknt/json-schema-validator/issues"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.72?type=jar"
    },
    {
      "group" : "com.ethlo.time",
      "name" : "itu",
      "version" : "1.7.0",
      "description" : "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4f9277e3108caa3314836d8f20f9cf94"
        },
        {
          "alg" : "SHA-1",
          "content" : "00c6977b9d42efa3f8c95c31db5313a96ffc1724"
        },
        {
          "alg" : "SHA-256",
          "content" : "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7"
        },
        {
          "alg" : "SHA-384",
          "content" : "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.12.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19fe50567358922bdad277959ea69545"
        },
        {
          "alg" : "SHA-1",
          "content" : "c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e"
        },
        {
          "alg" : "SHA-384",
          "content" : "c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81"
        },
        {
          "alg" : "SHA3-256",
          "content" : "18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"
    },
    {
      "group" : "javax.inject",
      "name" : "javax.inject",
      "version" : "1",
      "description" : "The javax.inject API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "289075e48b909e9e74e6c915b3631d2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6975da39a7040257bd51d21a231b76c915872d38"
        },
        {
          "alg" : "SHA-256",
          "content" : "91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190"
        },
        {
          "alg" : "SHA-512",
          "content" : "e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/atinject/source/checkout"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar"
    },
    {
      "publisher" : "Codehaus Plexus",
      "group" : "org.codehaus.plexus",
      "name" : "plexus-utils",
      "version" : "3.3.1",
      "description" : "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "89d7dce81b0f90f469c7eec197ce299c"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b41b2b76b1bfe3774411fe22f5868058a9fc822"
        },
        {
          "alg" : "SHA-256",
          "content" : "4b570fcdbe5a894f249d2eb9b929358a9c88c3e548d227a80010461930222f2a"
        },
        {
          "alg" : "SHA-384",
          "content" : "9b309b0ec1ef0ac3804cb674942294cde9d9bbde8cd2b509694b4bbc4522baaf9a8e7ec889277e1006179b0bde3bd63e"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb63a68de5f48cb33f9ad7dd2a94969db2341ba05d385656a301c7c2de392cabb960ee442bd1a4b19cbc3ebde5b7b00a95b7ee4d7766309053e9e937b007eb0d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1e550db832875a7c9f1380b8ef82b52c03042da70212b35c58d650f96ff440a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "944b1e4dd6285146a0d967caeb6db6f09b77d2730098be02c1ac6e2e3cdbba51c94e0076ed51f731abec53a06d437c1c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d3b59642f89bd923b1112a0cbbe0ad97393b36f40c15e9d77d71be0f2fd63f145797cb82169969839e61fbcf4b1dbaaf4a6c2e03b4933f91e99c6e642af8e0ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/codehaus-plexus/plexus-utils/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/codehaus-plexus/plexus-utils"
        },
        {
          "type" : "website",
          "url" : "http://codehaus-plexus.github.io/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://archive.plexus.codehaus.org/user"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-tree",
      "version" : "3.2.0",
      "description" : "A tree-based API for resolution of Maven project dependencies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ba689823847f668283077c69726d0a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc1dcdfbfbcca93ab165880538badd3d748bf59d"
        },
        {
          "alg" : "SHA-256",
          "content" : "03d3102672863761c2a39da09c444cc7dea74cc4a9efa2107f8f0bfd2519d330"
        },
        {
          "alg" : "SHA-384",
          "content" : "b7d9a2137a0f751d1aa1a27a15e31a1ec646b17f8e9bf51c0bef36811762f10ca2e608d7f35bfea891de9e442b495fb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "74c003551104c454ae40169fffe622c22330a64900c57633a6be6e242650a8a68626ab355f96f70c489e252d73c01e92f046e0fc969fddb99955804dbd02e72e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41d8e9d726c28363f282effc7087f72c245c32126efdc9880a0e4da81442aa6d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ff88cae2c02dad2ededf52e2c2bc358d0f52b1cec1cb71c74c30151ae15ade1c0b1ab2d2aa99a509dcee9976f2dbd8d3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "383080eb4016e12bb4394bee89b064585d17e06b92c3bf83e70bf3bcb4250510bb0646df2338030b60bbfafc5009a9c18e03b093ef53634b8cd1cf6cd4731251"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-tree/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project+%3D+MSHARED+AND+component+%3D+maven-dependency-tree"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.0?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-util",
      "version" : "1.0.0.v20140518",
      "description" : "A collection of utility classes to ease usage of the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "08495ee7ecf90f0b528e7d65471532af"
        },
        {
          "alg" : "SHA-1",
          "content" : "7df5ba98ce8b78985d75fdd8c2981fe69234ef85"
        },
        {
          "alg" : "SHA-256",
          "content" : "aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c381aa336fff73f9c0cee17ebdce8605ac0c6fe1a548768b58b1f854e8db473b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a7f597f411b6993c91db48a33e0588f83b25a8d065a15a59d71510771a0c55473b9d63719bcadbae09a4ea6dfc20a50b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d7b47331f01856f80ee1adfd0293350747e6e8640c725ce928c4415c64df57f71ef783bbfcdcdc505c53b7f02f4a48a4258be30eb2b7b32afcd547216e8a587"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Eclipse Foundation",
      "group" : "org.eclipse.aether",
      "name" : "aether-api",
      "version" : "1.0.0.v20140518",
      "description" : "The application programming interface for the repository system.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b05ef5410dad83a4e9ba50e08e0dbbf4"
        },
        {
          "alg" : "SHA-1",
          "content" : "be68e917f454dcd841865ad7cf9b7615b26a51f7"
        },
        {
          "alg" : "SHA-256",
          "content" : "84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773"
        },
        {
          "alg" : "SHA-384",
          "content" : "44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46af39fc94d4514f2f3705bf8980a98c8a6dbb5d254919eb694518411f0e561b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "284850d6126cbf7ecd63c54970fa1e359c17d7c720a2a56ac37d45a091a46506fb9e5c95bcfd4104534e0efd7d3bd802"
        },
        {
          "alg" : "SHA3-512",
          "content" : "37fabd5b33c819b890186116a31d127e5737282a1422eb2f42a330b59fab518f6a9f31f1e744521ae1d2a6addf61817eae36c1f8e1db06437484da6e23728d1b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.eclipse.org/aether/job/aether-core/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&bug_status=__open__&product=Aether"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/aether-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.eclipse.org/c/aether/aether-core.git/tree/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.maven.shared",
      "name" : "maven-dependency-analyzer",
      "version" : "1.13.0",
      "description" : "Analyzes the dependencies of a project for undeclared or unused artifacts.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2199773ce7bc3ac8f013f218e88834d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "bfa2abe32ed2db005675e722cdb25d0839744d7d"
        },
        {
          "alg" : "SHA-256",
          "content" : "de94746420db9dd6febb8fdc602d79234e476b23150ad7eed8ba9a70e2aecaa9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6de5dce0255a9096ac18c652ee24b8b79d4318f35d32056aa9562b434984dc4c37ee5ce9e4d7c9bb50f044b3ff5dd865"
        },
        {
          "alg" : "SHA-512",
          "content" : "8d76abb41b6bee19e94b25a117b386d6f24a80f9ca28f9ff008c6b97bcdd8ed50b923901442cd6d5bd5d8462a28c74570cc5eadc7d4f97f800010e920de01012"
        },
        {
          "alg" : "SHA3-256",
          "content" : "91d2a193cc5cc9c3cdc4e2a1dad553def480baafa7e4c11cc31089334b438cb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "79668c9bb18913370a1c126984b65238c9cc81001079ef518932c777301c2c1255139125425c4efd32eb892b2d148329"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d58f89a4e5955e1efc9758c68a4c6264220cc8466a723931683a696d78af143aff0390994f4102aa68bd01f42ca62d3a3d2995c7a3ea3677ab4b061dfcd6672"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "build-system",
          "url" : "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven-dependency-analyzer/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/issues/?jql=project%20%3D%20MSHARED%20AND%20component%20%3D%20maven-dependency-analyzer"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@maven.apache.org"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar"
    },
    {
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.3",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e1c3b96035117ab516ffe0de9bd696e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e6300ef51c1d801a7ed62d07cd221aca3a90640"
        },
        {
          "alg" : "SHA-256",
          "content" : "1263369b59e29c943918de11d6d6152e2ec6085ce63e5710516f8c67d368e4bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "304aa6673d587a68a06dd8601c6db0dc4d387f89a058b7600459522d94780e9e8d87a2778604fc41b81c43a57bf49ad6"
        },
        {
          "alg" : "SHA-512",
          "content" : "04362f50a2b66934c2635196bf8e6bd2adbe4435f312d1d97f4733c911e070f5693941a70f586928437043d01d58994325e63744e71886ae53a62c824927a4d4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2be2d22fdbafe87b7cdda0498fc4f45db8d77a720b63ec1f7ffe8351e173b77b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9744884ed03ced46ed36c68c7bb1f523678bcbb4f32ebeaa220157b8631e862d6573066dfc2092ed77dc7826ad17aef2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3ff403dd3eefbb7511d2360ab1ca3d1bf33b2f9d1c5738284be9d132eb6ad869f2d97e790ed0969132af30271e544d3725c02252267fe55e0339f89f3669ce1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.ow2.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.3?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.2?type=maven-plugin",
      "dependsOn" : [
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.2.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.0?type=jar",
        "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cyclonedx/cyclonedx-core-java@7.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.72?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.13.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.13.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.13.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.13.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.2.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.networknt/json-schema-validator@1.0.72?type=jar",
      "dependsOn" : [
        "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.inject/javax.inject@1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.3?type=jar",
      "dependsOn" : [ ]
    }
  ]
}