{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.3",
  "serialNumber" : "urn:uuid:106f8332-bdd8-4007-a638-d81868cbf538",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-01-30T20:06:05Z",
    "tools" : [
      {
        "vendor" : "CycloneDX",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.5.1",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1a5528adfeb75e1fef6264a90a0de94b"
          },
          {
            "alg" : "SHA-1",
            "content" : "bcbf4d76880f8b7b9008bd08fb72454e7f666957"
          },
          {
            "alg" : "SHA-256",
            "content" : "42fc254f37585624de9ed2dd9e1701d44e34cb5856433075afc851f4ae37857e"
          },
          {
            "alg" : "SHA-384",
            "content" : "6dc2adf4e002def6c49f1593f3d490c8ef5de6df77b390f0177ee84637fa9263e6948c0bb8daaef6f352a2f5f06714b6"
          },
          {
            "alg" : "SHA-512",
            "content" : "d456791aeac58ab6ec7e28312d0f57c7307cfd63542358e63a145260b82d60ce5a17a950a5808563f0f72d95e431ac83eb14fd245ad9b68b81a63286503c8368"
          }
        ]
      }
    ],
    "component" : {
      "group" : "org.owasp.antisamy",
      "name" : "antisamy",
      "version" : "1.6.4",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.owasp.antisamy/antisamy@1.6.4?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.6.4?type=jar"
    }
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "https://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "group" : "net.sourceforge.nekohtml",
      "name" : "nekohtml",
      "version" : "1.9.22",
      "description" : "An HTML parser and tag balancer.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a97dfe2d0ceb81ffbdd15436961b0f23"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f54af68ecb345f2453fb6884672ad08414154e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "452978e8b6667c7b8357fd3f0a2f2f405e4560a7148143a69181735da5d19045"
        },
        {
          "alg" : "SHA-384",
          "content" : "d86652044b39b57cc4824d54d5ad180c3299066cff2d7407e0a377819cf499bb89b846abca94e6b724d0b97df81546f1"
        },
        {
          "alg" : "SHA-512",
          "content" : "7050af64354bcc0f38692e1858294de01815c1103554a38b206c31d70f493f64ed4a7176f46f1fa76ad4cea36304b682347d1d5a4a2438c0b677b67bc3f5e749"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://nekohtml.svn.sourceforge.net/viewvc/nekohtml/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.14",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b3991eda121042765a5ee299556c200"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b"
        },
        {
          "alg" : "SHA-512",
          "content" : "f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-css",
      "version" : "1.14",
      "description" : "Batik CSS engine",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7ddd4cfd4b3ab7576c3e1ae116fd8ff8"
        },
        {
          "alg" : "SHA-1",
          "content" : "3118d46f4879ec08c6c6471c7c0825652ed659ee"
        },
        {
          "alg" : "SHA-256",
          "content" : "968ba271cab6dfdd0458eb9ff42cc51e258d471499225b9063edbda61becbe17"
        },
        {
          "alg" : "SHA-384",
          "content" : "f6e4e9711224723334bf20cb6c16333b1b2bebe5f1062a81cfe71fdca2aed3f1c3a6dd7e078e52e4952a0710277b60fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "1cb0993d79793be9d66e9cb346abecc15a0fe27ca39290a3a2a9627b8b77f438590097c3d1ec1c37b112c28eb13700853586a000d244c1b2b06e03410da2b52a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-shared-resources",
      "version" : "1.14",
      "description" : "Batik Shared Resources",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d89a3feed01c06eea83a5ad83c3f7f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "42e9d6345952575e8b2f4ee26108b2811c334305"
        },
        {
          "alg" : "SHA-256",
          "content" : "987ceb566e2101418465bb3227ec60812b71e7c4b2c3e842d977efa732fa90f5"
        },
        {
          "alg" : "SHA-384",
          "content" : "006c0742391f0746cce22f5beb50383e43c5c8d81abd5d93cea25437a0ec2b28eac5442f03ae135b1133024f51c28d4d"
        },
        {
          "alg" : "SHA-512",
          "content" : "53fe996f79f97a2b4c8d2fb88d0765954e5676ddf9701147d20c06f08254554620fb87ae9ffe72652f351867f7d56af101301414d7b68260ac091a854b08b198"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-util",
      "version" : "1.14",
      "description" : "Batik utility library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "42b3f763e59956a088b2d7764471158b"
        },
        {
          "alg" : "SHA-1",
          "content" : "7ca55c864e5ddd690ba07f44e3ba8e68e9048a02"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad76103ecb3fcad91aac1cd0a34f6d46cd1e4224d0406a5d58b269a64f6c3788"
        },
        {
          "alg" : "SHA-384",
          "content" : "643ef2c755ad374f008f719e886d0099b9e66ae624ea984e1d3b9d7fc3624cf898962b4074f7ea5c90b1d5386b827bac"
        },
        {
          "alg" : "SHA-512",
          "content" : "6dca37c52f954c677ca003e6f7c7c43a553d73883d936a71497fb3484d277def9a13bda35e857ff61ff724c8dfb257e636a9d11d9163f1cd313d86394fe6d176"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-constants",
      "version" : "1.14",
      "description" : "Batik constants library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7110a6bd56690a1730a1227ac5afec90"
        },
        {
          "alg" : "SHA-1",
          "content" : "371acf696982f1c8e2689f5899b4e8453ccd74ff"
        },
        {
          "alg" : "SHA-256",
          "content" : "7882eb789257905413bcb0adcb1562dd50b8103cadef9534c33612bf51527990"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d1fca5420108efc37a8124cb5977e9195d63f10254771cd195a6c85756aa4a8e218cd46b0aeb27bdcb516bbdd67cbc7"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6e859e4cdb0c6f338955d5aacf26b08a24dea4ee043258a2e1ea84690f5c4fa219c1f5cabb7bc40499144a0c4fdcd964479c0afe7e09eac471490b67cb40bc8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-i18n",
      "version" : "1.14",
      "description" : "Batik i18n library",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aa98b2f42450d4767d5345b4cf7c37a0"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4e7b0cda9132904f21b25ab29a0b73e1867e7fd"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb1ad02ccaa36f5a60c4115316e15ac071386f96445e5d89bdad0c7e45da9560"
        },
        {
          "alg" : "SHA-384",
          "content" : "f667e97fe7a9eed9939da67d0dd88c99857c25ba20629170a8aef52fc4267b4c1f6919daf54fe12ab2f77675bf773099"
        },
        {
          "alg" : "SHA-512",
          "content" : "1631b8ccf27ea201c595cdf11f78a6ab0bbafd89e1e2ca2c55a4a5dd8ea200d09128fd5464a1c03ff9813a431407d6e21dc1c0351dfd1812d9af63bb24a8c111"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.14?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "xmlgraphics-commons",
      "version" : "2.6",
      "description" : "Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e10f2ebebd7e2790add49a7303ac630f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8779b8d8f426f24fdb4a512f8bc4248cb3775bd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "25f21c93462d767d05e340f1dc754862995b9bf8b4618ab5b07cd703d400d413"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd0d14c05ebefb7404eb89eda06ccbdec5033e36ec2756c79a87d32f93db7b037c6a77f3ca2a0ea33a1ceb8602a1c656"
        },
        {
          "alg" : "SHA-512",
          "content" : "7df1eb0cd5a73ad78259f4905b8363610711cc660f3590133da8376f771ec5990e8dbea1b4d7e3a8264df17c632713a66610538916291a3ce91506de6d3a023c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-general/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xmlgraphics/commons/trunk/?root=Apache-SVN"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "1.3.1",
      "description" : "Commons-IO contains utility classes, stream implementations, file filters, and endian classes.",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2e55c05d3386889af97caae4517ac9df"
        },
        {
          "alg" : "SHA-1",
          "content" : "b90b6ac57cf27a2858eaa490d02ba7945d18ca7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "3307319ddc221f1b23e8a1445aef10d2d2308e0ec46977b3f17cbb15c0ef335b"
        },
        {
          "alg" : "SHA-384",
          "content" : "f274993847fd46b8aa27e96c812fae0aacd0934fcd5670ba366b451b74079a21f295bb62ff676e7c7bdca13fe536d723"
        },
        {
          "alg" : "SHA-512",
          "content" : "fbefc32530253cc3fe5638da036a85567cdce9c9f748522725f58b349b07a37b474e16cec329b333b7f720e3c385a2ff7024d51d0a93bc26d201726f559e42f1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/io/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/io/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@1.3.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.31",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f92092e637556fe40f2739281d60234"
        },
        {
          "alg" : "SHA-1",
          "content" : "9545c9cb71de4c18d97a91e32ef0be6f3f6661b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "cda862aa69683ac072ee2afd0b93d070ceab291ef5b857d318b24c1595b36b8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8683fa86729c91e1c0464fb2ed902459046a562d749dab54afd5b41652b45ec4f1b8820de18b89e4cc5f792e55045b40"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2c58b5a5d8adc6990557af546547bbf6af9826cd8924a6685ad80973cc8fc622c2378a4bde2fad668263ca3b52fcbf0780ace164d1f1d002f56c5d35abd53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.31?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.31?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.31",
      "description" : "SLF4J Simple binding",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8e767f875f05b1db79c1fb1437e9792b"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf5df9007f6fb85f04728eec1dd96de73533fec7"
        },
        {
          "alg" : "SHA-256",
          "content" : "007c0d399e1379fbf86247c30a42d10d6180941468f4acbe9aee14bb642ac1dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bc416e06da3cc05f1ea2eee130204f810b0ee1c2fcfe33408218e90490167800a10cda6c498595d5bbf770720621563"
        },
        {
          "alg" : "SHA-512",
          "content" : "0005dc3e910fbd47c667f9632b6d3815c05340cb4502913ca9f160010180aa38ae0c16496b1d66f232021e41b171f98ee93d7a98843afa03018f6a046f9ca760"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.31?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.qos.ch"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.31?type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.1",
      "description" : "Xerces2 is the next generation of high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces introduces the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 is a fully conforming XML Schema 1.0 processor. A partial experimental implementation of the XML Schema 1.1 Structures and Datatypes Working Drafts (December 2009) and an experimental implementation of the XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010) are provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f82c362c893779109c1de812c5d4deb"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a206b25679f598a03374afd4e0410d8849b088b"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae0c329a3187178c8e7b0369a5346845e426062ffbb8a08fc68ced6affe6c626"
        },
        {
          "alg" : "SHA-384",
          "content" : "7616e23994d49f782b0753868f1fcae8c51aa439551aa20aa87a0716ed48f9bfe6fc5c1b11d7cc48be02b71de1b33782"
        },
        {
          "alg" : "SHA-512",
          "content" : "811afd85cdd19545785fde7fb39511f1e171e1d021a96117d105e2b2f37715536e17259e6ad0ce897b4c7c8a5bd1e88c9fa0825b0a2ef9f3956cd82944a33957"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.1?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.1?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "xml-apis",
      "name" : "xml-apis-ext",
      "version" : "1.3.04",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcb07d3b8d2397db7a3013b6465d347b"
        },
        {
          "alg" : "SHA-1",
          "content" : "41a8b86b358e87f3f13cf46069721719105aff66"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646"
        },
        {
          "alg" : "SHA-384",
          "content" : "b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "externalReferences" : [
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_3_04/"
        },
        {
          "type" : "website",
          "url" : "http://www.apache.org/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.3.0",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce4d02e35312b0a42bfae49f1168f430"
        },
        {
          "alg" : "SHA-1",
          "content" : "19a64425ee20f522d5c802bca4e0043da1c01f2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ae576422c3a090adc372a4542214a38e195f62ada906184e773a8916d83ec386"
        },
        {
          "alg" : "SHA-384",
          "content" : "9d5e220626e2118440df294d339332e322c19fac47825c89b5e7051c3dd2556cf44f94cc58a5afc2af623da7ead17ba8"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8dfa3958596d12b5d9917960eede3a9e0ae98c8d3a82d6d8b56ada05219127c2fafa54f68f44b3a47bf354173f494daddc3a31cb1873ac22ad281d3ff9865b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.3.0?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.6.4?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-css@1.14?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.31?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.31?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.1?type=jar",
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.sourceforge.nekohtml/nekohtml@1.9.22?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.14?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-util@1.14?type=jar",
        "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-constants@1.14?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.14?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.31?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.31?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}