{ "bomFormat" : "CycloneDX", "specVersion" : "1.4", "serialNumber" : "urn:uuid:77af99ee-24cf-4065-ad4b-9bf07e5b60e9", "version" : 1, "metadata" : { "timestamp" : "2023-04-12T13:10:23Z", "tools" : [ { "vendor" : "OWASP Foundation", "name" : "CycloneDX Maven plugin makeBom compile+provided+runtime+system", "version" : "2.7.6", "hashes" : [ { "alg" : "MD5", "content" : "639c35c7f79c5514f3abe11247999b70" }, { "alg" : "SHA-1", "content" : "649239e622d8d454bb9ab6fafd6746c85cd11b7d" }, { "alg" : "SHA-256", "content" : "1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3" }, { "alg" : "SHA-512", "content" : "894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd" }, { "alg" : "SHA-384", "content" : "3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e" }, { "alg" : "SHA3-384", "content" : "93695160055039f4791ecebd61c7aa6130f074f50a823de6e5aff7217c35548062829ec2b930658c2702cd47ea3118a1" }, { "alg" : "SHA3-256", "content" : "4c9f5d3ab2b6ab9b4b4a8968a7ee2373b85a496bec34eefd96ed7c8260d2a45b" }, { "alg" : "SHA3-512", "content" : "c2af46fe07c4be746fdc0b54e9eb3285231055c5401bcfb34c2d9392efe27fe9c16a0edd91615970bfae3f4a59846e89c3d88a6a36d4ba110a6d140a04fe184d" } ] } ], "component" : { "publisher" : "OWASP Foundation", "group" : "org.owasp.antisamy", "name" : "antisamy", "version" : "1.7.3", "description" : "A library for performing fast, configurable cleansing of HTML coming from untrusted sources.", "licenses" : [ { "license" : { "id" : "BSD-3-Clause", "url" : "https://opensource.org/licenses/BSD-3-Clause" } } ], "purl" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://github.com/nahsra/antisamy" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "scm:git:git@github.com:nahsra/antisamy.git" } ], "type" : "library", "bom-ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.3?type=jar" } }, "components" : [ { "publisher" : "HtmlUnit", "group" : "org.htmlunit", "name" : "neko-htmlunit", "version" : "3.1.0", "description" : "NekoHtml is the Html parser used by HtmlUnit.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "251ee8813d0e1367e1db923cf7573362" }, { "alg" : "SHA-1", "content" : "171a7dbb3c6b503f18cfe3d3c1d841a1893b687d" }, { "alg" : "SHA-256", "content" : "0b3e34dd8a9bfa8c4178873fa6729fa0c1a589e80a8efcc3f57511b0e4151ef4" }, { "alg" : "SHA-512", "content" : "d671b3b5558eb08342197a69fc14aad4b4c7d599ee4e6e39fda88b4d4c5adad2d3d566a7722e97e1469ae4bbc84af416ecc08018f23bf19cbebe5431d842eab0" }, { "alg" : "SHA-384", "content" : "61c64162b723816e32657416e466ba5cdfdcab47bd7b958cdb380b892e1df09e61c65cc744a87e85303fd22973ee5098" }, { "alg" : "SHA3-384", "content" : "10ff5d67c2cbcd75f797e98be002b1167818f43ccfc0cb96a845e11bf6dd31ec7c498c77068571ccd6abca45ec587f2f" }, { "alg" : "SHA3-256", "content" : "4900b9674d168689e336949c017f192ee0a315faee00fa4f377e090ed1ec415b" }, { "alg" : "SHA3-512", "content" : "7c1c76b19d913795f27806f1d7bb038d7e6516164c406dc8d28a09db4c7f87c16729a895f1c9e321e8c67f5c7065be4853fa46b54526ae3c7d299d4f24cd1d8d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.htmlunit/neko-htmlunit@3.1.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://www.htmlunit.org" }, { "type" : "build-system", "url" : "https://jenkins.wetator.org/view/HtmlUnit/" }, { "type" : "distribution", "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://github.com/HtmlUnit/neko-htmlunit/issues/" }, { "type" : "vcs", "url" : "https://github.com/htmlunit" } ], "type" : "library", "bom-ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.1.0?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.client5", "name" : "httpclient5", "version" : "5.2.1", "description" : "Apache HttpComponents Client", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "fbbefc687f2e0c55b34b77edf53d486a" }, { "alg" : "SHA-1", "content" : "0c900514d3446d9ce5d9dbd90c21192048125440" }, { "alg" : "SHA-256", "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51" }, { "alg" : "SHA-512", "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b" }, { "alg" : "SHA-384", "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54" }, { "alg" : "SHA3-384", "content" : "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361" }, { "alg" : "SHA3-256", "content" : "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35" }, { "alg" : "SHA3-512", "content" : "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.2.1/httpclient5/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-client/tree/5.2.1/httpclient5" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5-h2", "version" : "5.2", "description" : "Apache HttpComponents HTTP/2 Core Components", "hashes" : [ { "alg" : "MD5", "content" : "272112133e0dd0559efdd8f5e615a344" }, { "alg" : "SHA-1", "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16" }, { "alg" : "SHA-256", "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578" }, { "alg" : "SHA-512", "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1" }, { "alg" : "SHA-384", "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63" }, { "alg" : "SHA3-384", "content" : "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256" }, { "alg" : "SHA3-256", "content" : "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d" }, { "alg" : "SHA3-512", "content" : "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5-h2/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.2/httpcore5-h2" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "org.apache.httpcomponents.core5", "name" : "httpcore5", "version" : "5.2.1", "description" : "Apache HttpComponents HTTP/1.1 core components", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "90f0d73505e1b488fdc5343d6f58f07e" }, { "alg" : "SHA-1", "content" : "d3c4651d321df233ee7278da66657aa95cfe612f" }, { "alg" : "SHA-256", "content" : "6ac7c52a4cbbb6de73370f3f0886be02781002bc07c88197b7c488e6138ae924" }, { "alg" : "SHA-512", "content" : "066454aa84e37d109fb1977570e91395f818d979641b758fb984e1f362e528e6031a3df9cac67901413b913d72e3b29e979a071e5c42a504c7edcddd81210b49" }, { "alg" : "SHA-384", "content" : "d2f32d4ba2a1bdde90fb5a8e9a7df6562910f4bad7a7a981f2ae8c7dbad565f06e4ed9f2747b0bf4abb57f35cffb3d92" }, { "alg" : "SHA3-384", "content" : "8fefd747831a42a3e2381fc312dba16eabab7e07f4905b02a81d8484b4e2fc449598c43c1db305f740ef5c46d4a14c3c" }, { "alg" : "SHA3-256", "content" : "45c9405279b3667ce69c545eaef43ba12b79a056e0023685fb972b6571596065" }, { "alg" : "SHA3-512", "content" : "14f7dcddc7cd575d8a490dd2e6486a0b4a1a51c60b31ecdd0233eba9247badaf0de74bae33aba6c9c87cf2bde5e7c615b483ab6a4ec99f83499da816718581a4" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.1?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2.1/httpcore5/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/HTTPCORE" }, { "type" : "mailing-list", "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org" }, { "type" : "vcs", "url" : "https://github.com/apache/httpcomponents-core/tree/5.2.1/httpcore5" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.1?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "batik-css", "version" : "1.16", "description" : "Batik CSS engine", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "018b3911720074464552b09acb09187e" }, { "alg" : "SHA-1", "content" : "9151bffd3799b8f55fb27b81f06156183ffeb307" }, { "alg" : "SHA-256", "content" : "1f7e51c703813f21de58e9be4e6d907cef3a5540d23047507af9c4c5dc396419" }, { "alg" : "SHA-512", "content" : "7c371ec694972c9b7c8b305e76bfbf5540e0a83264bb5a3e5470fcacd9203d42933bc9fae24a37ee5a3c4b2a1cca0d31d6659886c5952ba067796e04720b0ed9" }, { "alg" : "SHA-384", "content" : "fd089b3081f7a536666e11a8bfc756962ff35a22cac992e1d177826ce628cee28bddc0ac65c53fffdb38ec28e9011bb2" }, { "alg" : "SHA3-384", "content" : "2d97b8c5b690712b042478a61195e61e259cb2b2a5da0167e76ed41820840a8a2014158138883815043d7b58dd3cbd70" }, { "alg" : "SHA3-256", "content" : "6b22bd393ae688399e18ee6a98907adcd247db8d2043210c556aa4397491a288" }, { "alg" : "SHA3-512", "content" : "b7c40cce573ae34e424b01d0390571ab1589dc2a2d5a94ab8d0406ac8ca92ccc225824c9f7c25ef4df528134bacf02ab6afcaf4f6732f12c35a8cbd13a7c160e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/batik/batik-css/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/" }, { "type" : "vcs", "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-css/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.16?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "batik-shared-resources", "version" : "1.16", "description" : "Batik Shared Resources", "hashes" : [ { "alg" : "MD5", "content" : "d6b1e374064c15ad7cd1a5b06d9ee1a9" }, { "alg" : "SHA-1", "content" : "75809160dd805a8ce29b655671cd29e47da43efd" }, { "alg" : "SHA-256", "content" : "318543fe05ee0d118938d9302b2fce137d040f31d71e042d2ca02406e386974a" }, { "alg" : "SHA-512", "content" : "f011a34625828ccea3d36aaa3b8b617e38925d4fd69ecbffcb8bc45de2221fbf44d1b8c52d7e49c84f9c2dd4b1306787c559fe924500096e588ed6c0226239f1" }, { "alg" : "SHA-384", "content" : "06f8d25f9d2d2b77d31da5ee018952bb3f68be61fa8fce1d942f4d2400fb9a967b9cfa090956411ba03f7974f3873ea4" }, { "alg" : "SHA3-384", "content" : "c1d1f1300e11b7845db945e2a5569b30bdc65e05923c12c525f3e6536af10401c261c77f61c31e1222f73ac57afc0f2f" }, { "alg" : "SHA3-256", "content" : "8b478dc8b3730db651a06fa6df0c7cb5a876eed69fe0b9207953f09895c7cfe3" }, { "alg" : "SHA3-512", "content" : "8e63a68822f41eaccd99767462f06cd0f961822774577ac800247430e0859355dd87f2a3fcd7f08622d082d2fbbaaec74a253cdf3540353dd5503efa60f889ec" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/batik/batik-shared-resources/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/" }, { "type" : "vcs", "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-shared-resources/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "batik-util", "version" : "1.16", "description" : "Batik utility library", "hashes" : [ { "alg" : "MD5", "content" : "d8f93a8809db85573d4f8c576ff2ad2f" }, { "alg" : "SHA-1", "content" : "cc144a6a69fac333e5ed10ac3169768ceff2b840" }, { "alg" : "SHA-256", "content" : "a8306eda7a840685da7a730cdd99a63f8145ceb543017779d438c9d67550bfa2" }, { "alg" : "SHA-512", "content" : "3919d53c027545139c4fb98870f3bc658fc34f9f4010ff50ba5c067b00445592977b713d59a08807faa37a05917e750b46621cd18a885680aac2c1e624bf64a0" }, { "alg" : "SHA-384", "content" : "c7a4d92678dcd4866056a454a8b4b2f33ee3e27569a125b20e30cc366866989bea71e04e76bcdeaac05d9e978512185d" }, { "alg" : "SHA3-384", "content" : "807d9051e9e342ebd82423c9a52046adb7a27a3a6973dd1350e5ccaa31be9528e89f16f2d170adeebf143b4c64aaec08" }, { "alg" : "SHA3-256", "content" : "864b8f715499543eed891ae7c7805820d380997a6a922d69dd8a08737da324a1" }, { "alg" : "SHA3-512", "content" : "912f5433facda742be0037d43fa4ba2bedb7aac8031e9f931da32e3fdd9b1250a5dfa917c8353050ba8a4f8e6762f127ceb1ad222ce78bdacb015c3140fcf40e" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/batik/batik-util/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/" }, { "type" : "vcs", "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-util/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.16?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "batik-constants", "version" : "1.16", "description" : "Batik constants library", "hashes" : [ { "alg" : "MD5", "content" : "dbb70585ab60d60fee6b42b814756023" }, { "alg" : "SHA-1", "content" : "924370bb08a8ef1d3983d5ea587a17c7845d9af6" }, { "alg" : "SHA-256", "content" : "0bdc9ac3e0b93f26cafd3fd8e3065d13fe678865115fc162f4d627fa0af35ad5" }, { "alg" : "SHA-512", "content" : "7b0078656946d300c0d25b24e76c16134c1a96d7fd1ddf5193db648aee638311acced4e2d7cd3752e4d6f55ace9dab01cb850650657b852f976baa35105ebcd8" }, { "alg" : "SHA-384", "content" : "dc9755ae6387bbc9b4f005a5c352fe1b1eb4e5c51d4e63f2fb9356b06fe7ebb61a650cc4a7c0d40a6ee117006748cc39" }, { "alg" : "SHA3-384", "content" : "61635aee15fd9f98ebbb046e88c1460b0ffd8c2475da1698c0cfcf4997b84ed19fb1c81ab13e9dc4148bd08a9c8fd6c9" }, { "alg" : "SHA3-256", "content" : "acdcf90c16e74c351981561f2952ee8da3b682c27d8dd6eb249af0dbc4a3c396" }, { "alg" : "SHA3-512", "content" : "d7bb1249aa53628e0d3e5f976ebcf12caaf37a844de8f23a32dba073b6672b04dbcc70a603092d3284e9ddd05d4cc6cf09c9a90e3ef33699673ab57cc5c4c68d" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/batik/batik-constants/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/" }, { "type" : "vcs", "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-constants/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.16?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "batik-i18n", "version" : "1.16", "description" : "Batik i18n library", "hashes" : [ { "alg" : "MD5", "content" : "b2ac749b22077fb0f46ec912da8bfdde" }, { "alg" : "SHA-1", "content" : "6e45a40b5e67f89d528bb511d7d938c161dcbc1f" }, { "alg" : "SHA-256", "content" : "94fc90806f7cb823dabc0d292012ed97d637207329dc8d2f351f52e0a9107d9a" }, { "alg" : "SHA-512", "content" : "1d97e816134f440a056460661ac0322790e09a6a33a8a7f47d557a9f6e9250ef57075815266fe4ba1deacb23825e764d28cde54346d430c45e872382b8f02a6f" }, { "alg" : "SHA-384", "content" : "a27387bc399991314ce40f74e202febdf258bf43b888466247175cf4df1e46ddf8d1580a58681188f1e6d15ce11f2836" }, { "alg" : "SHA3-384", "content" : "cca4e312ae38ca31d702c68357e2de0feb089de941946c178163ceb28ecc581b7d5123c708a3aed67fd61ac1f41b1f7c" }, { "alg" : "SHA3-256", "content" : "bb8950e3c13aee8746c10febc00b49cade11de6597ba5c7df4a6c2b4267fffba" }, { "alg" : "SHA3-512", "content" : "4dc19cabde3375f03dc7334446524df41b9b227fb5c01f2a134595c6e1da646692bafac648fc13cc702fd61f240dd02bc61cdca83e26c07acc714d7ae05db63b" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.16?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/batik/batik-i18n/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/" }, { "type" : "vcs", "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-i18n/" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.16?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "org.apache.xmlgraphics", "name" : "xmlgraphics-commons", "version" : "2.7", "description" : "Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO.", "hashes" : [ { "alg" : "MD5", "content" : "ec712218e2391e64672fd8ed1e9e1d71" }, { "alg" : "SHA-1", "content" : "336ddd6d0a244cdebf26a298fb7c3a5fd45449db" }, { "alg" : "SHA-256", "content" : "1fe37a1927bdd699730f0ad39f50a699c9ab4dff0ad047dff1e846cb120ae2b1" }, { "alg" : "SHA-512", "content" : "5feaa2272225b0fed3632e06b447c310da36531927c00ca833bf37b1d0490b5cc2cfe9d06ee26d61e9dc5e97e6a3a9aea7f1831255a5bbd63bc152f4950ece33" }, { "alg" : "SHA-384", "content" : "c7ee684b23daba1ef0b98340460ce9cf58d0c0407942ed494d4fa2fdf32bad7ef9ec251c1e2b426bdaeeafb310e2bac4" }, { "alg" : "SHA3-384", "content" : "e6d856bea79493897e928428403bd5bc9c34679fb56eb4cf4fc20f7add3ca3c1d461cd579a8292fe8d6b3232777a1973" }, { "alg" : "SHA3-256", "content" : "0c90fd0813ddf8e7d8ed7655b8b3440deb66bf6bbabe2c4e45e03814709edc09" }, { "alg" : "SHA3-512", "content" : "d6bd04bfd59b989c6b3155c0bfb77e703d734e64b03254c0235bc9e01432b9ca61312cb55863c5068f6c839fafb6fb65dad00c86dbcdc55620bafaf4ba490429" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xmlgraphics.apache.org/commons/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-general/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/xmlgraphics/commons/trunk/?root=Apache-SVN" } ], "type" : "library", "bom-ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.7?type=jar" }, { "publisher" : "The Apache Software Foundation", "group" : "commons-io", "name" : "commons-io", "version" : "2.11.0", "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.", "scope" : "optional", "hashes" : [ { "alg" : "MD5", "content" : "3b4b7ccfaeceeac240b804839ee1a1ca" }, { "alg" : "SHA-1", "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689" }, { "alg" : "SHA-256", "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908" }, { "alg" : "SHA-512", "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10" }, { "alg" : "SHA-384", "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f" }, { "alg" : "SHA3-384", "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d" }, { "alg" : "SHA3-256", "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c" }, { "alg" : "SHA3-512", "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://commons.apache.org/proper/commons-io/" }, { "type" : "build-system", "url" : "https://builds.apache.org/" }, { "type" : "distribution", "url" : "https://repository.apache.org/service/local/staging/deploy/maven2" }, { "type" : "issue-tracker", "url" : "https://issues.apache.org/jira/browse/IO" }, { "type" : "mailing-list", "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/" }, { "type" : "vcs", "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git" } ], "type" : "library", "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar" }, { "publisher" : "QOS.ch", "group" : "org.slf4j", "name" : "slf4j-api", "version" : "2.0.7", "description" : "The slf4j API", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "403dffa46cdd2e3c82da19df4f394a4c" }, { "alg" : "SHA-1", "content" : "41eb7184ea9d556f23e18b5cb99cad1f8581fc00" }, { "alg" : "SHA-256", "content" : "5d6298b93a1905c32cda6478808ac14c2d4a47e91535e53c41f7feeb85d946f4" }, { "alg" : "SHA-512", "content" : "216d2cac27d501972c888f94dfa747d700b80d60813884b6ab4b12c6a3b17ed0c21a1d27e1aa4332c97c828f20039e3913d2763d7e1a3cef36ae4389a276e7a8" }, { "alg" : "SHA-384", "content" : "c25b39f418aa726ba8405dfd9b356131f89984e2ef5a55a724a2abf3b7c78443f671105835161d2414d602cf03da9f2d" }, { "alg" : "SHA3-384", "content" : "f33abfaac21badae6f85d3ebbc6c1204fd7fda3bb15173e763fa8cee95bce6a8270eec2c8f49343c66c8d2767bc317e1" }, { "alg" : "SHA3-256", "content" : "6e00d4b264a2afc4ca4e98f716ecece66c32c626ca3f8c5d56b22092b6fe417b" }, { "alg" : "SHA3-512", "content" : "ad7b9142d370fc532a07cdd43881a129b012ff50e2bede3ac27d9bd31ec707bf2f45e82002fa59e962955cc38ab73cdd77713fca50cedc926c046f5617c1285b" } ], "licenses" : [ { "license" : { "id" : "MIT", "url" : "https://opensource.org/licenses/MIT" } } ], "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://www.slf4j.org" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://github.com/qos-ch/slf4j/slf4j-api" } ], "type" : "library", "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar" }, { "group" : "xerces", "name" : "xercesImpl", "version" : "2.12.2", "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9" }, { "alg" : "SHA-1", "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2" }, { "alg" : "SHA-256", "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16" }, { "alg" : "SHA-512", "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3" }, { "alg" : "SHA-384", "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52" }, { "alg" : "SHA3-384", "content" : "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6" }, { "alg" : "SHA3-256", "content" : "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168" }, { "alg" : "SHA3-512", "content" : "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://xerces.apache.org/xerces2-j/" }, { "type" : "vcs", "url" : "https://svn.apache.org/repos/asf/xerces/java/" } ], "type" : "library", "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar" }, { "group" : "xml-apis", "name" : "xml-apis", "version" : "1.4.01", "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d" }, { "alg" : "SHA-1", "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3" }, { "alg" : "SHA-256", "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad" }, { "alg" : "SHA-512", "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268" }, { "alg" : "SHA-384", "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce" }, { "alg" : "SHA3-384", "content" : "c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace" }, { "alg" : "SHA3-256", "content" : "09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc" }, { "alg" : "SHA3-512", "content" : "1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } }, { "license" : { "id" : "SAX-PD", "url" : "http://www.saxproject.org/copying.html" } }, { "license" : { "name" : "The W3C License", "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip" } } ], "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xml.apache.org/commons/components/external/" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/bugzilla/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" }, { "type" : "vcs", "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/" } ], "type" : "library", "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" }, { "publisher" : "Apache Software Foundation", "group" : "xml-apis", "name" : "xml-apis-ext", "version" : "1.3.04", "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "bcb07d3b8d2397db7a3013b6465d347b" }, { "alg" : "SHA-1", "content" : "41a8b86b358e87f3f13cf46069721719105aff66" }, { "alg" : "SHA-256", "content" : "d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646" }, { "alg" : "SHA-512", "content" : "ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc" }, { "alg" : "SHA-384", "content" : "b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd" }, { "alg" : "SHA3-384", "content" : "dc9b68500d2c845967652f5e04883a6ba3146c51bbfcd7d14cbaf0eaa44df3240e41af8d03b63aa536f4c21d503b4a79" }, { "alg" : "SHA3-256", "content" : "7d3d773a1d7c1cd6cb37a98985f1e119574844a31fa48e890c2fa1f1d0fae72a" }, { "alg" : "SHA3-512", "content" : "d7da19e6fe75a236e7be635927d32f9d0aaf864ad648f831414d0f296c9cdbdcabeb9886d190d3eaaf8bcaea24a417f71de13e8e9cd21513b83f0a671c339f36" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://xml.apache.org/commons/components/external/" }, { "type" : "distribution", "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository" }, { "type" : "issue-tracker", "url" : "http://issues.apache.org/bugzilla/" }, { "type" : "mailing-list", "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/" }, { "type" : "vcs", "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_3_04/" } ], "type" : "library", "bom-ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar" }, { "group" : "com.github.spotbugs", "name" : "spotbugs-annotations", "version" : "4.7.3", "description" : "Annotations the SpotBugs tool supports", "scope" : "required", "hashes" : [ { "alg" : "MD5", "content" : "a70cfa500f3d66e6bd7ecb7cfe671ce2" }, { "alg" : "SHA-1", "content" : "46fb4f0ae2e69eafa963711cc5c3369ac81aa31f" }, { "alg" : "SHA-256", "content" : "c0fd1ac2e22acdd46913a2ff74551b71f124457199688698204af4bf3d43165d" }, { "alg" : "SHA-512", "content" : "47a9596641e37f75cfba6c690c2ed8bf45e28619bb5fb13493108330b0c7efe785e5eea1390953852c7a9961f63164e08bd71dd61ab8bed5f2699e1bf032ca76" }, { "alg" : "SHA-384", "content" : "e59214b34da8049c03510134fefc9f0e9b25a90fe6dc3755ed7cd7c052da869f0b3990057c5f669630a6381e57a41f62" }, { "alg" : "SHA3-384", "content" : "5577b1a6d32682968b87beb3fda5824a04520040ae160a03bf97fb940db7ef6123778aadd40079ac53bb4f1c7feffd2c" }, { "alg" : "SHA3-256", "content" : "223b0e8681421828f9f4e322abdaa25457ecbef7452f3aabb2baa7a0a942a171" }, { "alg" : "SHA3-512", "content" : "3dcf225f14d1a6e6cb1f4375894e79205b27f438750ce8c4c7c435363aba38bc7ceed9c81e01fbdaa1f1da23590d31f094a202c647724faa2c6acfffe95a3f75" } ], "licenses" : [ { "license" : { "id" : "LGPL-2.1-only" } } ], "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar", "externalReferences" : [ { "type" : "website", "url" : "https://spotbugs.github.io/" }, { "type" : "vcs", "url" : "https://github.com/spotbugs/spotbugs/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar" }, { "group" : "com.google.code.findbugs", "name" : "jsr305", "version" : "3.0.2", "description" : "JSR305 Annotations for Findbugs", "hashes" : [ { "alg" : "MD5", "content" : "dd83accb899363c32b07d7a1b2e4ce40" }, { "alg" : "SHA-1", "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d" }, { "alg" : "SHA-256", "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7" }, { "alg" : "SHA-512", "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804" }, { "alg" : "SHA-384", "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4" }, { "alg" : "SHA3-384", "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1" }, { "alg" : "SHA3-256", "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff" }, { "alg" : "SHA3-512", "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6" } ], "licenses" : [ { "license" : { "id" : "Apache-2.0" } } ], "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "externalReferences" : [ { "type" : "website", "url" : "http://findbugs.sourceforge.net/" }, { "type" : "distribution", "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/" }, { "type" : "vcs", "url" : "https://code.google.com/p/jsr-305/" } ], "type" : "library", "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" } ], "dependencies" : [ { "ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.3?type=jar", "dependsOn" : [ "pkg:maven/org.htmlunit/neko-htmlunit@3.1.0?type=jar", "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.1?type=jar", "pkg:maven/org.apache.xmlgraphics/batik-css@1.16?type=jar", "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar", "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar" ] }, { "ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.1.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar", "dependsOn" : [ "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar" ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.1?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.16?type=jar", "dependsOn" : [ "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar", "pkg:maven/org.apache.xmlgraphics/batik-util@1.16?type=jar", "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.7?type=jar", "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar" ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.16?type=jar", "dependsOn" : [ "pkg:maven/org.apache.xmlgraphics/batik-constants@1.16?type=jar", "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.16?type=jar", "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar" ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.16?type=jar", "dependsOn" : [ "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar" ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.16?type=jar", "dependsOn" : [ "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.16?type=jar" ] }, { "ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.7?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.7?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar", "dependsOn" : [ "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar" ] }, { "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar", "dependsOn" : [ ] }, { "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar", "dependsOn" : [ "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar" ] }, { "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar", "dependsOn" : [ ] } ] }