{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,25 +1,22 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:9efa1c5a-8d63-48c7-a327-8104d15f1a34\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:e9a6667e-ca6a-48bf-a6b6-e08fd6e37d01\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-01-04T20:25:04Z</timestamp>\n+    <timestamp>2025-01-31T22:57:28Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>OWASP Foundation</vendor>\n         <name>CycloneDX Maven plugin</name>\n         <version>2.7.2</version>\n         <hashes>\n           <hash alg=\"MD5\">f4f0e5aa6c0d5f709b304511547647a6</hash>\n           <hash alg=\"SHA-1\">13a77f9af6a286c9bfc8c00e5d75ff6e9920d4ce</hash>\n           <hash alg=\"SHA-256\">d565f805cfd5e57af6a345e537e78b42ffd56fad094c74443e2a197a4e097538</hash>\n           <hash alg=\"SHA-512\">92ff49fbb954b0341c38daddb30965fd9e8bb909e7e8a66dc65da5d6a958d021c6fe611c0b12314ae02f849de95101efe5b93470050dfb8090a459481ffa736a</hash>\n           <hash alg=\"SHA-384\">e15a47303e035e6612c37f08ebc105674f84cafd779ab52398ce263e67ce93d9d5e4c7c2ddda2f73584b6071a9f1a9da</hash>\n-          <hash alg=\"SHA3-384\">8c54133eb43f71bcdc52986159725cd32efef65047f8635a48d160a2d5f274f71c76e61cecbf3d47e3ca7929c3dbe736</hash>\n-          <hash alg=\"SHA3-256\">7be4af15b7a685431c5252752c34b509c0d43a146db6844da9afbed2e4baa908</hash>\n-          <hash alg=\"SHA3-512\">0025064deb5d9eb463a142bc4129c41f3387b18bd7aa54e5c923ed2c2f488616d198a65e952f7f2a1dea371387235f135c29643fb00f95366f7f6007d6327a31</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.cyclonedx/cyclonedx-maven-plugin@2.7.4?type=maven-plugin\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.cyclonedx</group>\n       <name>cyclonedx-maven-plugin</name>\n@@ -61,17 +58,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">8bf5ed26fce41ce6d915e7b0c04fdf87</hash>\n         <hash alg=\"SHA-1\">e891a609eae79267a05c0ccb6719adbf15eef28c</hash>\n         <hash alg=\"SHA-256\">b986fe2f48e693398f674824087b258af7ee2dd70cafe3aa845d5972cf348b9e</hash>\n         <hash alg=\"SHA-512\">627e5de00e84a53fb49dfd621a29af02b2e408ab21a0c1d238f1d11a0085b3b01d6d46aedaa23e4844574487d3b148d0e588df3a2ab6b00f388ef37e4990b098</hash>\n         <hash alg=\"SHA-384\">cbada8f468bad7e1af02d3bce693880349a79819f27910864434412b213695504965c21c585a192881735e4cf9276a44</hash>\n-        <hash alg=\"SHA3-384\">a3e2a88996fb05b86b68be680b44a6c41dfc7c59a0986762af327570f2f9e9016932535038ed1f70ad9d8c01e7a546ed</hash>\n-        <hash alg=\"SHA3-256\">49b23cf323ec77c1b538aa322955640b06c2e898a7ea236bc9296871435c8914</hash>\n-        <hash alg=\"SHA3-512\">26c9a776217af36e554aa7a8603d2b35015be151c80044f5123c780d740c5fd4bee0082b98620ffb5138160e75689ca3fb0f82ab2df02e463cbbaf4dfa79f47e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n@@ -104,17 +98,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n         <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n         <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n         <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n         <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n@@ -148,17 +139,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f8b3a23e6402d317b612251c83d292e7</hash>\n         <hash alg=\"SHA-1\">0a0d1009191c1cf6b04f40d26e4717596f3a90e0</hash>\n         <hash alg=\"SHA-256\">8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2</hash>\n         <hash alg=\"SHA-512\">ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b</hash>\n         <hash alg=\"SHA-384\">791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3</hash>\n-        <hash alg=\"SHA3-384\">c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6</hash>\n-        <hash alg=\"SHA3-256\">29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3</hash>\n-        <hash alg=\"SHA3-512\">3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -187,17 +175,14 @@\n alternative support for serializing POJOs as XML and deserializing XML as pojos.</description>\n       <hashes>\n         <hash alg=\"MD5\">c95952b32a6b42880ec626e5f2bc8563</hash>\n         <hash alg=\"SHA-1\">ccd98bd674080338a6ca4bcdd52be7fb465cec1d</hash>\n         <hash alg=\"SHA-256\">90fa6199c194cf3bad58073d3913b3e8a812d06a5db16faa554ba10f5d859436</hash>\n         <hash alg=\"SHA-512\">f5a8a6f445c157eb9b4615566a01cbf5f903301e4b496dcbc84138161dc606224d7324b30a0c851cbfa6f2b9ac7e53d07376735d3192a0f98b8c419c79a46006</hash>\n         <hash alg=\"SHA-384\">e0e29643d970e756b3aa734c161c5ef6db7aa0839a9510362a89a75cd5787b83a00df867eaeb93f80cdebccf84a46776</hash>\n-        <hash alg=\"SHA3-384\">3c5c0abd5a5107dcb2948a7a5dafd781629351f7f4af14397a4ab7796ee5b0fe31cadcfd93351648860900887f183c2d</hash>\n-        <hash alg=\"SHA3-256\">7ffb7673f5fc74bf2289ce78ed131d952bd2a21c01e22ae37299120094e6810d</hash>\n-        <hash alg=\"SHA3-512\">321af4d6fe0a4e3ce404101ec509ec07ecbf1c7df039667dadb52b66f3a28c2b274cfe95ce31087c368f0fca47bdbfcda06c859a8aa60bf1edd514a872dca741</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.14.1?type=jar</purl>\n@@ -221,17 +206,14 @@\n       <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>\n       <hashes>\n         <hash alg=\"MD5\">f9604a5f31129cdb7db4bdec90111850</hash>\n         <hash alg=\"SHA-1\">7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3</hash>\n         <hash alg=\"SHA-256\">0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526</hash>\n         <hash alg=\"SHA-512\">7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c</hash>\n         <hash alg=\"SHA-384\">fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665</hash>\n-        <hash alg=\"SHA3-384\">761066454385f5892b0bf1fadfcebd9b8a13d61677df0294ca68dfa4317b3c61e21c429027c7ac6d8272ba80e12a166d</hash>\n-        <hash alg=\"SHA3-256\">5302084471ac0959b67c640165eb595007371ebebd4646b81d9a76b26d9f6920</hash>\n-        <hash alg=\"SHA3-512\">0733c8d5b752ceabd35bd396470289d3773b804bdcd8b292c3a834394d810e095542a077edb5c7014bb70a8f9ebd7df18553df2cb7947436fbdad8ed7ede0851</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar</purl>\n@@ -255,17 +237,14 @@\n       <description>Core annotations used for value types, used by Jackson data binding package.</description>\n       <hashes>\n         <hash alg=\"MD5\">da4742ba6aeb24bf1bd29382fd95647b</hash>\n         <hash alg=\"SHA-1\">2a6ad504d591a7903ffdec76b5b7252819a2d162</hash>\n         <hash alg=\"SHA-256\">d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7</hash>\n         <hash alg=\"SHA-512\">80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d</hash>\n         <hash alg=\"SHA-384\">1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53</hash>\n-        <hash alg=\"SHA3-384\">1f5eb50fb9c3681daf3103d041f2cc6dfa938d8038f1945871260fcb2a8e417c8366f346f916898a0099c36cdfb964d1</hash>\n-        <hash alg=\"SHA3-256\">4f2842ab076e5107fad346f0a79c3f87a75f5667b400e7087c6fee7951a37cdb</hash>\n-        <hash alg=\"SHA3-512\">60038ae7eeb69fca94e497dda74649e53e9b406d13fa03ef6833bff46f59605b53d17a4004c45b7edaf04ab329b08a6c70e50e177362eb147c2ad70f98b2eee2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar</purl>\n@@ -289,17 +268,14 @@\n       <description>General data-binding functionality for Jackson: works on core streaming API</description>\n       <hashes>\n         <hash alg=\"MD5\">3e3e7aab8799ccc169b10f244e6fb5b4</hash>\n         <hash alg=\"SHA-1\">268524b9056cae1211b9f1f52560ef19347f4d17</hash>\n         <hash alg=\"SHA-256\">423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773</hash>\n         <hash alg=\"SHA-512\">e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54</hash>\n         <hash alg=\"SHA-384\">14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a</hash>\n-        <hash alg=\"SHA3-384\">4349a433aa87807ef2af5f214dcb154e3bbd5a884c226d5cdefba54feaf2170aee7e169a2e381fa377a6a33f53c0f44c</hash>\n-        <hash alg=\"SHA3-256\">3f32d8ce6fb9ef44408817f1416c8dd445d25e871a63cc4b598a7ddb2d3138ff</hash>\n-        <hash alg=\"SHA3-512\">c00ab62eebc416880851bd5276ef238b3afa8deb6ed0553fbfd6670a44071f362f794cba69c950f53e17a77dcc471a2a1519436910439e08a359e82e58054d43</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar</purl>\n@@ -323,17 +299,14 @@\n       <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>\n       <hashes>\n         <hash alg=\"MD5\">af8377bc7882332e22456616a9f164f6</hash>\n         <hash alg=\"SHA-1\">a3f7325c52240418c2ba257b103c3c550e140c83</hash>\n         <hash alg=\"SHA-256\">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>\n         <hash alg=\"SHA-512\">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>\n         <hash alg=\"SHA-384\">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>\n-        <hash alg=\"SHA3-384\">683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f</hash>\n-        <hash alg=\"SHA3-256\">5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c</hash>\n-        <hash alg=\"SHA3-512\">d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>BSD-4-Clause</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>\n@@ -358,17 +331,14 @@\n SAX2 and Stax2 APIs</description>\n       <hashes>\n         <hash alg=\"MD5\">afcba1114fca8199ef26346dd6011e90</hash>\n         <hash alg=\"SHA-1\">c47579857bbf12c85499f431d4ecf27d77976b7c</hash>\n         <hash alg=\"SHA-256\">d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279</hash>\n         <hash alg=\"SHA-512\">7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6</hash>\n         <hash alg=\"SHA-384\">6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516</hash>\n-        <hash alg=\"SHA3-384\">d384bf82404b7642340eb1a3f88e2d1e366bf3282534943f98c5f4946656f7e6ea86ba6c7bfeed7c4fda1678afdd282e</hash>\n-        <hash alg=\"SHA3-256\">7d1e5fbd3f4197fcf6f4d097bc742a0b3f02fe9ae36ef4385362afab6cc85bee</hash>\n-        <hash alg=\"SHA3-512\">6020db3580dac2d5c0b7656a062b982d234952fc3feac5dfbb12f91bc019b6af430123ad46e5b5de28d7cb9562aec582febdbbfae8ce35ebc2ce0b837a335af6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar</purl>\n@@ -394,17 +364,14 @@\n       <description>A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12</description>\n       <hashes>\n         <hash alg=\"MD5\">81fc3f05098632d2e6e4c8902027dc45</hash>\n         <hash alg=\"SHA-1\">bcaecaa0de78979a48960876c92e64977e5df840</hash>\n         <hash alg=\"SHA-256\">09b74dae3ce9f8be1e7949bdefd31642ddda583e2eb356439d29f9411301eae0</hash>\n         <hash alg=\"SHA-512\">6f95ca290811883bf1d587b0fa3ba4dcf9371d382458ead539c0ea3bedf281d4b87e6b513a6aa9c60ac796eed722b67744600534c896df58bbc9dab1d235ad71</hash>\n         <hash alg=\"SHA-384\">45d3ec697f2fadd0544a0b6b03cd8152e764f2445a7307b62f894c295cd09fa289bc2913d765ea1fd21f8e5a0888e6e3</hash>\n-        <hash alg=\"SHA3-384\">a23ab061a0ecfa415de4fdb7b652b86182caef98db2fd6cac7cfa6e67d13562e09a4a7323bda07aa8ccd223809e7d3b0</hash>\n-        <hash alg=\"SHA3-256\">b61dc5ac7869a1d05cc937907360250144b6de1b5199e4b4b37dd9bde310b12b</hash>\n-        <hash alg=\"SHA3-512\">3fca676b6ccfbbf7efc83ca354ad8f2eca20a87569967fdd645cea646d94fba63b3de19684c7c7a2c8402fb6fd6b60f222942ee5bb9df7c0aa952d0d8faf3bf2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.networknt/json-schema-validator@1.0.76?type=jar</purl>\n@@ -424,17 +391,14 @@\n       <description>Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format</description>\n       <hashes>\n         <hash alg=\"MD5\">4f9277e3108caa3314836d8f20f9cf94</hash>\n         <hash alg=\"SHA-1\">00c6977b9d42efa3f8c95c31db5313a96ffc1724</hash>\n         <hash alg=\"SHA-256\">55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7</hash>\n         <hash alg=\"SHA-512\">b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8</hash>\n         <hash alg=\"SHA-384\">f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a</hash>\n-        <hash alg=\"SHA3-384\">f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e</hash>\n-        <hash alg=\"SHA3-256\">37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d</hash>\n-        <hash alg=\"SHA3-512\">f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.ethlo.time/itu@1.7.0?type=jar</purl>\n@@ -456,17 +420,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">303baf002ce6d382198090aedd9d79a2</hash>\n         <hash alg=\"SHA-1\">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>\n         <hash alg=\"SHA-256\">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>\n         <hash alg=\"SHA-512\">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>\n         <hash alg=\"SHA-384\">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>\n-        <hash alg=\"SHA3-384\">12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be</hash>\n-        <hash alg=\"SHA3-256\">87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e</hash>\n-        <hash alg=\"SHA3-512\">8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>\n@@ -502,17 +463,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">19fe50567358922bdad277959ea69545</hash>\n         <hash alg=\"SHA-1\">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>\n         <hash alg=\"SHA-256\">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>\n         <hash alg=\"SHA-512\">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>\n         <hash alg=\"SHA-384\">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>\n-        <hash alg=\"SHA3-384\">8ad6ebe7754bf0caa8cda7e59c0e95360d76e06a7ad6aeec5637985519dbd1dd06e7eed04711039f36ec4c49de280def</hash>\n-        <hash alg=\"SHA3-256\">18ef639b2aeeb5aedffb18dbf20c79f33e300d99fb31b131689639cc470e6e4c</hash>\n-        <hash alg=\"SHA3-512\">fbea96114dcf4f31cfaaa99987be756ddda3a6c74f8c835461997df794d54b92da1f60fe5c3f1f2a43cb8c5f5db7f4048bef77c70993673c7a93f3660fffc8da</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>\n@@ -544,17 +502,14 @@\n       <description>The javax.inject API</description>\n       <hashes>\n         <hash alg=\"MD5\">289075e48b909e9e74e6c915b3631d2e</hash>\n         <hash alg=\"SHA-1\">6975da39a7040257bd51d21a231b76c915872d38</hash>\n         <hash alg=\"SHA-256\">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>\n         <hash alg=\"SHA-512\">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>\n         <hash alg=\"SHA-384\">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>\n-        <hash alg=\"SHA3-384\">fca090ecb1edeacb9fe865dc515cd1d109b323cd742d4a9733ff199a96ee96e0db4f924079520b9c189ef750f255475d</hash>\n-        <hash alg=\"SHA3-256\">5b0054e39e522de0e0ffc4034d12f72270291fb24d94d5ffc9c4d69c25035fc6</hash>\n-        <hash alg=\"SHA3-512\">fb290f5a70b1efc1dff12f40a0b2d7b94019f66da42e78010c0b8e61f222c4f267b67e356a9e9c346eb801e5515e36243888f280c5cb95c2dd69016a30cadeb9</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>\n@@ -573,17 +528,14 @@\n     more.</description>\n       <hashes>\n         <hash alg=\"MD5\">89d7dce81b0f90f469c7eec197ce299c</hash>\n         <hash alg=\"SHA-1\">9b41b2b76b1bfe3774411fe22f5868058a9fc822</hash>\n         <hash alg=\"SHA-256\">4b570fcdbe5a894f249d2eb9b929358a9c88c3e548d227a80010461930222f2a</hash>\n         <hash alg=\"SHA-512\">eb63a68de5f48cb33f9ad7dd2a94969db2341ba05d385656a301c7c2de392cabb960ee442bd1a4b19cbc3ebde5b7b00a95b7ee4d7766309053e9e937b007eb0d</hash>\n         <hash alg=\"SHA-384\">9b309b0ec1ef0ac3804cb674942294cde9d9bbde8cd2b509694b4bbc4522baaf9a8e7ec889277e1006179b0bde3bd63e</hash>\n-        <hash alg=\"SHA3-384\">944b1e4dd6285146a0d967caeb6db6f09b77d2730098be02c1ac6e2e3cdbba51c94e0076ed51f731abec53a06d437c1c</hash>\n-        <hash alg=\"SHA3-256\">a1e550db832875a7c9f1380b8ef82b52c03042da70212b35c58d650f96ff440a</hash>\n-        <hash alg=\"SHA3-512\">d3b59642f89bd923b1112a0cbbe0ad97393b36f40c15e9d77d71be0f2fd63f145797cb82169969839e61fbcf4b1dbaaf4a6c2e03b4933f91e99c6e642af8e0ad</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.3.1?type=jar</purl>\n@@ -613,17 +565,14 @@\n       <description>The slf4j API</description>\n       <hashes>\n         <hash alg=\"MD5\">872da51f5de7f3923da4de871d57fd85</hash>\n         <hash alg=\"SHA-1\">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>\n         <hash alg=\"SHA-256\">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>\n         <hash alg=\"SHA-512\">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>\n         <hash alg=\"SHA-384\">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>\n-        <hash alg=\"SHA3-384\">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>\n-        <hash alg=\"SHA3-256\">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>\n-        <hash alg=\"SHA3-512\">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -649,17 +598,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">2e01f1c5625ee40761f01c50c521f90d</hash>\n         <hash alg=\"SHA-1\">864b4c49c862b95946fafe9338bbbbcde6e4b692</hash>\n         <hash alg=\"SHA-256\">482811ea38f339d2b0867a7852a195b56e329fdb37066b2f3035a209c111a2bc</hash>\n         <hash alg=\"SHA-512\">212b02334fac4f84a29f19c8b52de94a80014c34440daacd590239afef87aa808677cf180fa2533f40e5cb14980f041123a1b2ad9ed8281c8b89422fad81da50</hash>\n         <hash alg=\"SHA-384\">02b8d7a271cdec0d2305c80586e0c807481aada03b90dd554d4e3c3ea28a2c691630188c2f5cccf0b9aa8e2c7ede2a8f</hash>\n-        <hash alg=\"SHA3-384\">e23d7cba9fa103361ed54c4f36e2e864d78ff6c302a87b227aecf92bfc455d6290c379c8f7050ca9600413e4d83b4207</hash>\n-        <hash alg=\"SHA3-256\">bbccef00f7209ebc0e7dcaae85dc9a6a9ce438ca915f3ed2015b766775f48e01</hash>\n-        <hash alg=\"SHA3-512\">8f9a56b979677d95dc2b26fce85674ea114c943272d269bfc38e2740ee1ad6e439846a328d6643c2366e87a72b4333df6e131d885014daaa257728d7676deeaf</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.2.1?type=jar</purl>\n@@ -689,17 +635,14 @@\n       <description>A collection of utility classes to ease usage of the repository system.</description>\n       <hashes>\n         <hash alg=\"MD5\">08495ee7ecf90f0b528e7d65471532af</hash>\n         <hash alg=\"SHA-1\">7df5ba98ce8b78985d75fdd8c2981fe69234ef85</hash>\n         <hash alg=\"SHA-256\">aff0951639837c4e3a4699a421fa79f410032f603f5c6a5bba435e98531f3984</hash>\n         <hash alg=\"SHA-512\">ec43fd01a81d7f8e027603c4627d50eff58eb53e970b6888b0fe07d2963876075d05fc9a5e39f957904b4bc9bd6d729b9d17a15852064939b7a59f322830747e</hash>\n         <hash alg=\"SHA-384\">f6cb988a67a2d93ddcae222408b43d92fe6ede0bbc3646115a246a9a088a418ec50be729efd9eed4cada828eaa171946</hash>\n-        <hash alg=\"SHA3-384\">a7f597f411b6993c91db48a33e0588f83b25a8d065a15a59d71510771a0c55473b9d63719bcadbae09a4ea6dfc20a50b</hash>\n-        <hash alg=\"SHA3-256\">c381aa336fff73f9c0cee17ebdce8605ac0c6fe1a548768b58b1f854e8db473b</hash>\n-        <hash alg=\"SHA3-512\">1d7b47331f01856f80ee1adfd0293350747e6e8640c725ce928c4415c64df57f71ef783bbfcdcdc505c53b7f02f4a48a4258be30eb2b7b32afcd547216e8a587</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>EPL-1.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.eclipse.aether/aether-util@1.0.0.v20140518?type=jar</purl>\n@@ -732,17 +675,14 @@\n       <description>The application programming interface for the repository system.</description>\n       <hashes>\n         <hash alg=\"MD5\">b05ef5410dad83a4e9ba50e08e0dbbf4</hash>\n         <hash alg=\"SHA-1\">be68e917f454dcd841865ad7cf9b7615b26a51f7</hash>\n         <hash alg=\"SHA-256\">84b98521684ab22f9528470fa6d8ab68a230e1b211623c989ba7016c306eb773</hash>\n         <hash alg=\"SHA-512\">41addf7be0094decb6b4d6c11811b7a7edcc280d60f8a5cb3346d963422cacea84b6dcba7a00fa4a93c69a44b7dc5afd0960b8f56e60ae36f6c8e97ab52ffb5e</hash>\n         <hash alg=\"SHA-384\">44e821c90b238407402910a378e17ff3d845f26252bc74ad4b62c4f04bec6aa0a68ecc068eb8ed98ecd11d1b3b628d1f</hash>\n-        <hash alg=\"SHA3-384\">284850d6126cbf7ecd63c54970fa1e359c17d7c720a2a56ac37d45a091a46506fb9e5c95bcfd4104534e0efd7d3bd802</hash>\n-        <hash alg=\"SHA3-256\">46af39fc94d4514f2f3705bf8980a98c8a6dbb5d254919eb694518411f0e561b</hash>\n-        <hash alg=\"SHA3-512\">37fabd5b33c819b890186116a31d127e5737282a1422eb2f42a330b59fab518f6a9f31f1e744521ae1d2a6addf61817eae36c1f8e1db06437484da6e23728d1b</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>EPL-1.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.eclipse.aether/aether-api@1.0.0.v20140518?type=jar</purl>\n@@ -776,17 +716,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">2199773ce7bc3ac8f013f218e88834d3</hash>\n         <hash alg=\"SHA-1\">bfa2abe32ed2db005675e722cdb25d0839744d7d</hash>\n         <hash alg=\"SHA-256\">de94746420db9dd6febb8fdc602d79234e476b23150ad7eed8ba9a70e2aecaa9</hash>\n         <hash alg=\"SHA-512\">8d76abb41b6bee19e94b25a117b386d6f24a80f9ca28f9ff008c6b97bcdd8ed50b923901442cd6d5bd5d8462a28c74570cc5eadc7d4f97f800010e920de01012</hash>\n         <hash alg=\"SHA-384\">6de5dce0255a9096ac18c652ee24b8b79d4318f35d32056aa9562b434984dc4c37ee5ce9e4d7c9bb50f044b3ff5dd865</hash>\n-        <hash alg=\"SHA3-384\">79668c9bb18913370a1c126984b65238c9cc81001079ef518932c777301c2c1255139125425c4efd32eb892b2d148329</hash>\n-        <hash alg=\"SHA3-256\">91d2a193cc5cc9c3cdc4e2a1dad553def480baafa7e4c11cc31089334b438cb2</hash>\n-        <hash alg=\"SHA3-512\">9d58f89a4e5955e1efc9758c68a4c6264220cc8466a723931683a696d78af143aff0390994f4102aa68bd01f42ca62d3a3d2995c7a3ea3677ab4b061dfcd6672</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.maven.shared/maven-dependency-analyzer@1.13.0?type=jar</purl>\n@@ -816,17 +753,14 @@\n       <description>ASM, a very small and fast Java bytecode manipulation framework</description>\n       <hashes>\n         <hash alg=\"MD5\">e1c3b96035117ab516ffe0de9bd696e0</hash>\n         <hash alg=\"SHA-1\">8e6300ef51c1d801a7ed62d07cd221aca3a90640</hash>\n         <hash alg=\"SHA-256\">1263369b59e29c943918de11d6d6152e2ec6085ce63e5710516f8c67d368e4bc</hash>\n         <hash alg=\"SHA-512\">04362f50a2b66934c2635196bf8e6bd2adbe4435f312d1d97f4733c911e070f5693941a70f586928437043d01d58994325e63744e71886ae53a62c824927a4d4</hash>\n         <hash alg=\"SHA-384\">304aa6673d587a68a06dd8601c6db0dc4d387f89a058b7600459522d94780e9e8d87a2778604fc41b81c43a57bf49ad6</hash>\n-        <hash alg=\"SHA3-384\">9744884ed03ced46ed36c68c7bb1f523678bcbb4f32ebeaa220157b8631e862d6573066dfc2092ed77dc7826ad17aef2</hash>\n-        <hash alg=\"SHA3-256\">2be2d22fdbafe87b7cdda0498fc4f45db8d77a720b63ec1f7ffe8351e173b77b</hash>\n-        <hash alg=\"SHA3-512\">a3ff403dd3eefbb7511d2360ab1ca3d1bf33b2f9d1c5738284be9d132eb6ad869f2d97e790ed0969132af30271e544d3725c02252267fe55e0339f89f3669ce1</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>BSD-3-Clause</id>\n           <url>https://opensource.org/licenses/BSD-3-Clause</url>\n         </license>\n       </licenses>\n"}]}