{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -1,25 +1,22 @@\n <?xml version=\"1.0\" encoding=\"utf-8\"?>\n-<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:77af99ee-24cf-4065-ad4b-9bf07e5b60e9\" version=\"1\">\n+<bom xmlns=\"http://cyclonedx.org/schema/bom/1.4\" serialNumber=\"urn:uuid:6b7a3564-f307-47b1-b80a-48dc5cd617da\" version=\"1\">\n   <metadata>\n-    <timestamp>2023-04-12T13:10:23Z</timestamp>\n+    <timestamp>2025-01-30T20:05:38Z</timestamp>\n     <tools>\n       <tool>\n         <vendor>OWASP Foundation</vendor>\n         <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>\n         <version>2.7.6</version>\n         <hashes>\n           <hash alg=\"MD5\">639c35c7f79c5514f3abe11247999b70</hash>\n           <hash alg=\"SHA-1\">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>\n           <hash alg=\"SHA-256\">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>\n           <hash alg=\"SHA-512\">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>\n           <hash alg=\"SHA-384\">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>\n-          <hash alg=\"SHA3-384\">93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1</hash>\n-          <hash alg=\"SHA3-256\">4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b</hash>\n-          <hash alg=\"SHA3-512\">c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.owasp.antisamy/antisamy@1.7.3?type=jar\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.owasp.antisamy</group>\n       <name>antisamy</name>\n@@ -55,17 +52,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">251ee8813d0e1367e1db923cf7573362</hash>\n         <hash alg=\"SHA-1\">171a7dbb3c6b503f18cfe3d3c1d841a1893b687d</hash>\n         <hash alg=\"SHA-256\">0b3e34dd8a9bfa8c4178873fa6729fa0c1a589e80a8efcc3f57511b0e4151ef4</hash>\n         <hash alg=\"SHA-512\">d671b3b5558eb08342197a69fc14aad4b4c7d599ee4e6e39fda88b4d4c5adad2d3d566a7722e97e1469ae4bbc84af416ecc08018f23bf19cbebe5431d842eab0</hash>\n         <hash alg=\"SHA-384\">61c64162b723816e32657416e466ba5cdfdcab47bd7b958cdb380b892e1df09e61c65cc744a87e85303fd22973ee5098</hash>\n-        <hash alg=\"SHA3-384\">10ff5d67c2cbcd75f797e98be002b1167818f43ccfc0cb96a845e11bf6dd31ec7c498c77068571ccd6abca45ec587f2f</hash>\n-        <hash alg=\"SHA3-256\">4900b9674d168689e336949c017f192ee0a315faee00fa4f377e090ed1ec415b</hash>\n-        <hash alg=\"SHA3-512\">7c1c76b19d913795f27806f1d7bb038d7e6516164c406dc8d28a09db4c7f87c16729a895f1c9e321e8c67f5c7065be4853fa46b54526ae3c7d299d4f24cd1d8d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.htmlunit/neko-htmlunit@3.1.0?type=jar</purl>\n@@ -96,17 +90,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">fbbefc687f2e0c55b34b77edf53d486a</hash>\n         <hash alg=\"SHA-1\">0c900514d3446d9ce5d9dbd90c21192048125440</hash>\n         <hash alg=\"SHA-256\">9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51</hash>\n         <hash alg=\"SHA-512\">0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b</hash>\n         <hash alg=\"SHA-384\">b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54</hash>\n-        <hash alg=\"SHA3-384\">8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361</hash>\n-        <hash alg=\"SHA3-256\">6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35</hash>\n-        <hash alg=\"SHA3-512\">e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar</purl>\n@@ -136,17 +127,14 @@\n       <description>Apache HttpComponents HTTP/2 Core Components</description>\n       <hashes>\n         <hash alg=\"MD5\">272112133e0dd0559efdd8f5e615a344</hash>\n         <hash alg=\"SHA-1\">698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16</hash>\n         <hash alg=\"SHA-256\">5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578</hash>\n         <hash alg=\"SHA-512\">3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1</hash>\n         <hash alg=\"SHA-384\">a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63</hash>\n-        <hash alg=\"SHA3-384\">13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256</hash>\n-        <hash alg=\"SHA3-256\">62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d</hash>\n-        <hash alg=\"SHA3-512\">3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar</purl>\n@@ -177,17 +165,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">90f0d73505e1b488fdc5343d6f58f07e</hash>\n         <hash alg=\"SHA-1\">d3c4651d321df233ee7278da66657aa95cfe612f</hash>\n         <hash alg=\"SHA-256\">6ac7c52a4cbbb6de73370f3f0886be02781002bc07c88197b7c488e6138ae924</hash>\n         <hash alg=\"SHA-512\">066454aa84e37d109fb1977570e91395f818d979641b758fb984e1f362e528e6031a3df9cac67901413b913d72e3b29e979a071e5c42a504c7edcddd81210b49</hash>\n         <hash alg=\"SHA-384\">d2f32d4ba2a1bdde90fb5a8e9a7df6562910f4bad7a7a981f2ae8c7dbad565f06e4ed9f2747b0bf4abb57f35cffb3d92</hash>\n-        <hash alg=\"SHA3-384\">8fefd747831a42a3e2381fc312dba16eabab7e07f4905b02a81d8484b4e2fc449598c43c1db305f740ef5c46d4a14c3c</hash>\n-        <hash alg=\"SHA3-256\">45c9405279b3667ce69c545eaef43ba12b79a056e0023685fb972b6571596065</hash>\n-        <hash alg=\"SHA3-512\">14f7dcddc7cd575d8a490dd2e6486a0b4a1a51c60b31ecdd0233eba9247badaf0de74bae33aba6c9c87cf2bde5e7c615b483ab6a4ec99f83499da816718581a4</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.1?type=jar</purl>\n@@ -218,17 +203,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">018b3911720074464552b09acb09187e</hash>\n         <hash alg=\"SHA-1\">9151bffd3799b8f55fb27b81f06156183ffeb307</hash>\n         <hash alg=\"SHA-256\">1f7e51c703813f21de58e9be4e6d907cef3a5540d23047507af9c4c5dc396419</hash>\n         <hash alg=\"SHA-512\">7c371ec694972c9b7c8b305e76bfbf5540e0a83264bb5a3e5470fcacd9203d42933bc9fae24a37ee5a3c4b2a1cca0d31d6659886c5952ba067796e04720b0ed9</hash>\n         <hash alg=\"SHA-384\">fd089b3081f7a536666e11a8bfc756962ff35a22cac992e1d177826ce628cee28bddc0ac65c53fffdb38ec28e9011bb2</hash>\n-        <hash alg=\"SHA3-384\">2d97b8c5b690712b042478a61195e61e259cb2b2a5da0167e76ed41820840a8a2014158138883815043d7b58dd3cbd70</hash>\n-        <hash alg=\"SHA3-256\">6b22bd393ae688399e18ee6a98907adcd247db8d2043210c556aa4397491a288</hash>\n-        <hash alg=\"SHA3-512\">b7c40cce573ae34e424b01d0390571ab1589dc2a2d5a94ab8d0406ac8ca92ccc225824c9f7c25ef4df528134bacf02ab6afcaf4f6732f12c35a8cbd13a7c160e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-css@1.16?type=jar</purl>\n@@ -252,17 +234,14 @@\n       <description>Batik Shared Resources</description>\n       <hashes>\n         <hash alg=\"MD5\">d6b1e374064c15ad7cd1a5b06d9ee1a9</hash>\n         <hash alg=\"SHA-1\">75809160dd805a8ce29b655671cd29e47da43efd</hash>\n         <hash alg=\"SHA-256\">318543fe05ee0d118938d9302b2fce137d040f31d71e042d2ca02406e386974a</hash>\n         <hash alg=\"SHA-512\">f011a34625828ccea3d36aaa3b8b617e38925d4fd69ecbffcb8bc45de2221fbf44d1b8c52d7e49c84f9c2dd4b1306787c559fe924500096e588ed6c0226239f1</hash>\n         <hash alg=\"SHA-384\">06f8d25f9d2d2b77d31da5ee018952bb3f68be61fa8fce1d942f4d2400fb9a967b9cfa090956411ba03f7974f3873ea4</hash>\n-        <hash alg=\"SHA3-384\">c1d1f1300e11b7845db945e2a5569b30bdc65e05923c12c525f3e6536af10401c261c77f61c31e1222f73ac57afc0f2f</hash>\n-        <hash alg=\"SHA3-256\">8b478dc8b3730db651a06fa6df0c7cb5a876eed69fe0b9207953f09895c7cfe3</hash>\n-        <hash alg=\"SHA3-512\">8e63a68822f41eaccd99767462f06cd0f961822774577ac800247430e0859355dd87f2a3fcd7f08622d082d2fbbaaec74a253cdf3540353dd5503efa60f889ec</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar</purl>\n@@ -286,17 +265,14 @@\n       <description>Batik utility library</description>\n       <hashes>\n         <hash alg=\"MD5\">d8f93a8809db85573d4f8c576ff2ad2f</hash>\n         <hash alg=\"SHA-1\">cc144a6a69fac333e5ed10ac3169768ceff2b840</hash>\n         <hash alg=\"SHA-256\">a8306eda7a840685da7a730cdd99a63f8145ceb543017779d438c9d67550bfa2</hash>\n         <hash alg=\"SHA-512\">3919d53c027545139c4fb98870f3bc658fc34f9f4010ff50ba5c067b00445592977b713d59a08807faa37a05917e750b46621cd18a885680aac2c1e624bf64a0</hash>\n         <hash alg=\"SHA-384\">c7a4d92678dcd4866056a454a8b4b2f33ee3e27569a125b20e30cc366866989bea71e04e76bcdeaac05d9e978512185d</hash>\n-        <hash alg=\"SHA3-384\">807d9051e9e342ebd82423c9a52046adb7a27a3a6973dd1350e5ccaa31be9528e89f16f2d170adeebf143b4c64aaec08</hash>\n-        <hash alg=\"SHA3-256\">864b8f715499543eed891ae7c7805820d380997a6a922d69dd8a08737da324a1</hash>\n-        <hash alg=\"SHA3-512\">912f5433facda742be0037d43fa4ba2bedb7aac8031e9f931da32e3fdd9b1250a5dfa917c8353050ba8a4f8e6762f127ceb1ad222ce78bdacb015c3140fcf40e</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-util@1.16?type=jar</purl>\n@@ -320,17 +296,14 @@\n       <description>Batik constants library</description>\n       <hashes>\n         <hash alg=\"MD5\">dbb70585ab60d60fee6b42b814756023</hash>\n         <hash alg=\"SHA-1\">924370bb08a8ef1d3983d5ea587a17c7845d9af6</hash>\n         <hash alg=\"SHA-256\">0bdc9ac3e0b93f26cafd3fd8e3065d13fe678865115fc162f4d627fa0af35ad5</hash>\n         <hash alg=\"SHA-512\">7b0078656946d300c0d25b24e76c16134c1a96d7fd1ddf5193db648aee638311acced4e2d7cd3752e4d6f55ace9dab01cb850650657b852f976baa35105ebcd8</hash>\n         <hash alg=\"SHA-384\">dc9755ae6387bbc9b4f005a5c352fe1b1eb4e5c51d4e63f2fb9356b06fe7ebb61a650cc4a7c0d40a6ee117006748cc39</hash>\n-        <hash alg=\"SHA3-384\">61635aee15fd9f98ebbb046e88c1460b0ffd8c2475da1698c0cfcf4997b84ed19fb1c81ab13e9dc4148bd08a9c8fd6c9</hash>\n-        <hash alg=\"SHA3-256\">acdcf90c16e74c351981561f2952ee8da3b682c27d8dd6eb249af0dbc4a3c396</hash>\n-        <hash alg=\"SHA3-512\">d7bb1249aa53628e0d3e5f976ebcf12caaf37a844de8f23a32dba073b6672b04dbcc70a603092d3284e9ddd05d4cc6cf09c9a90e3ef33699673ab57cc5c4c68d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-constants@1.16?type=jar</purl>\n@@ -354,17 +327,14 @@\n       <description>Batik i18n library</description>\n       <hashes>\n         <hash alg=\"MD5\">b2ac749b22077fb0f46ec912da8bfdde</hash>\n         <hash alg=\"SHA-1\">6e45a40b5e67f89d528bb511d7d938c161dcbc1f</hash>\n         <hash alg=\"SHA-256\">94fc90806f7cb823dabc0d292012ed97d637207329dc8d2f351f52e0a9107d9a</hash>\n         <hash alg=\"SHA-512\">1d97e816134f440a056460661ac0322790e09a6a33a8a7f47d557a9f6e9250ef57075815266fe4ba1deacb23825e764d28cde54346d430c45e872382b8f02a6f</hash>\n         <hash alg=\"SHA-384\">a27387bc399991314ce40f74e202febdf258bf43b888466247175cf4df1e46ddf8d1580a58681188f1e6d15ce11f2836</hash>\n-        <hash alg=\"SHA3-384\">cca4e312ae38ca31d702c68357e2de0feb089de941946c178163ceb28ecc581b7d5123c708a3aed67fd61ac1f41b1f7c</hash>\n-        <hash alg=\"SHA3-256\">bb8950e3c13aee8746c10febc00b49cade11de6597ba5c7df4a6c2b4267fffba</hash>\n-        <hash alg=\"SHA3-512\">4dc19cabde3375f03dc7334446524df41b9b227fb5c01f2a134595c6e1da646692bafac648fc13cc702fd61f240dd02bc61cdca83e26c07acc714d7ae05db63b</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-i18n@1.16?type=jar</purl>\n@@ -390,17 +360,14 @@\n     can easily be used separately outside the domains of SVG and XSL-FO.</description>\n       <hashes>\n         <hash alg=\"MD5\">ec712218e2391e64672fd8ed1e9e1d71</hash>\n         <hash alg=\"SHA-1\">336ddd6d0a244cdebf26a298fb7c3a5fd45449db</hash>\n         <hash alg=\"SHA-256\">1fe37a1927bdd699730f0ad39f50a699c9ab4dff0ad047dff1e846cb120ae2b1</hash>\n         <hash alg=\"SHA-512\">5feaa2272225b0fed3632e06b447c310da36531927c00ca833bf37b1d0490b5cc2cfe9d06ee26d61e9dc5e97e6a3a9aea7f1831255a5bbd63bc152f4950ece33</hash>\n         <hash alg=\"SHA-384\">c7ee684b23daba1ef0b98340460ce9cf58d0c0407942ed494d4fa2fdf32bad7ef9ec251c1e2b426bdaeeafb310e2bac4</hash>\n-        <hash alg=\"SHA3-384\">e6d856bea79493897e928428403bd5bc9c34679fb56eb4cf4fc20f7add3ca3c1d461cd579a8292fe8d6b3232777a1973</hash>\n-        <hash alg=\"SHA3-256\">0c90fd0813ddf8e7d8ed7655b8b3440deb66bf6bbabe2c4e45e03814709edc09</hash>\n-        <hash alg=\"SHA3-512\">d6bd04bfd59b989c6b3155c0bfb77e703d734e64b03254c0235bc9e01432b9ca61312cb55863c5068f6c839fafb6fb65dad00c86dbcdc55620bafaf4ba490429</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.7?type=jar</purl>\n@@ -429,17 +396,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">3b4b7ccfaeceeac240b804839ee1a1ca</hash>\n         <hash alg=\"SHA-1\">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>\n         <hash alg=\"SHA-256\">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>\n         <hash alg=\"SHA-512\">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>\n         <hash alg=\"SHA-384\">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>\n-        <hash alg=\"SHA3-384\">80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d</hash>\n-        <hash alg=\"SHA3-256\">5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c</hash>\n-        <hash alg=\"SHA3-512\">7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>\n@@ -473,17 +437,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">403dffa46cdd2e3c82da19df4f394a4c</hash>\n         <hash alg=\"SHA-1\">41eb7184ea9d556f23e18b5cb99cad1f8581fc00</hash>\n         <hash alg=\"SHA-256\">5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4</hash>\n         <hash alg=\"SHA-512\">216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8</hash>\n         <hash alg=\"SHA-384\">c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d</hash>\n-        <hash alg=\"SHA3-384\">f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1</hash>\n-        <hash alg=\"SHA3-256\">6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b</hash>\n-        <hash alg=\"SHA3-512\">ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -516,17 +477,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>\n         <hash alg=\"SHA-1\">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>\n         <hash alg=\"SHA-256\">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>\n         <hash alg=\"SHA-512\">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>\n         <hash alg=\"SHA-384\">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>\n-        <hash alg=\"SHA3-384\">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>\n-        <hash alg=\"SHA3-256\">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>\n-        <hash alg=\"SHA3-512\">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>\n@@ -554,17 +512,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>\n         <hash alg=\"SHA-1\">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>\n         <hash alg=\"SHA-256\">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>\n         <hash alg=\"SHA-512\">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>\n         <hash alg=\"SHA-384\">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>\n-        <hash alg=\"SHA3-384\">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>\n-        <hash alg=\"SHA3-256\">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>\n-        <hash alg=\"SHA3-512\">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n         <license>\n           <id>SAX-PD</id>\n@@ -607,17 +562,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">bcb07d3b8d2397db7a3013b6465d347b</hash>\n         <hash alg=\"SHA-1\">41a8b86b358e87f3f13cf46069721719105aff66</hash>\n         <hash alg=\"SHA-256\">d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646</hash>\n         <hash alg=\"SHA-512\">ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc</hash>\n         <hash alg=\"SHA-384\">b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd</hash>\n-        <hash alg=\"SHA3-384\">dc9b68500d2c845967652f5e04883a6ba3146c51bbfcd7d14cbaf0eaa44df3240e41af8d03b63aa536f4c21d503b4a79</hash>\n-        <hash alg=\"SHA3-256\">7d3d773a1d7c1cd6cb37a98985f1e119574844a31fa48e890c2fa1f1d0fae72a</hash>\n-        <hash alg=\"SHA3-512\">d7da19e6fe75a236e7be635927d32f9d0aaf864ad648f831414d0f296c9cdbdcabeb9886d190d3eaaf8bcaea24a417f71de13e8e9cd21513b83f0a671c339f36</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar</purl>\n@@ -647,17 +599,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">a70cfa500f3d66e6bd7ecb7cfe671ce2</hash>\n         <hash alg=\"SHA-1\">46fb4f0ae2e69eafa963711cc5c3369ac81aa31f</hash>\n         <hash alg=\"SHA-256\">c0fd1ac2e22acdd46913a2ff74551b71f124457199688698204af4bf3d43165d</hash>\n         <hash alg=\"SHA-512\">47a9596641e37f75cfba6c690c2ed8bf45e28619bb5fb13493108330b0c7efe785e5eea1390953852c7a9961f63164e08bd71dd61ab8bed5f2699e1bf032ca76</hash>\n         <hash alg=\"SHA-384\">e59214b34da8049c03510134fefc9f0e9b25a90fe6dc3755ed7cd7c052da869f0b3990057c5f669630a6381e57a41f62</hash>\n-        <hash alg=\"SHA3-384\">5577b1a6d32682968b87beb3fda5824a04520040ae160a03bf97fb940db7ef6123778aadd40079ac53bb4f1c7feffd2c</hash>\n-        <hash alg=\"SHA3-256\">223b0e8681421828f9f4e322abdaa25457ecbef7452f3aabb2baa7a0a942a171</hash>\n-        <hash alg=\"SHA3-512\">3dcf225f14d1a6e6cb1f4375894e79205b27f438750ce8c4c7c435363aba38bc7ceed9c81e01fbdaa1f1da23590d31f094a202c647724faa2c6acfffe95a3f75</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>LGPL-2.1-only</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar</purl>\n@@ -677,17 +626,14 @@\n       <description>JSR305 Annotations for Findbugs</description>\n       <hashes>\n         <hash alg=\"MD5\">dd83accb899363c32b07d7a1b2e4ce40</hash>\n         <hash alg=\"SHA-1\">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>\n         <hash alg=\"SHA-256\">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>\n         <hash alg=\"SHA-512\">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>\n         <hash alg=\"SHA-384\">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>\n-        <hash alg=\"SHA3-384\">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>\n-        <hash alg=\"SHA3-256\">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>\n-        <hash alg=\"SHA3-512\">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>\n"}]}