{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -8,17 +8,14 @@\n         <version>2.7.9</version>\n         <hashes>\n           <hash alg=\"MD5\">8e595cdb67f17e4b41e046456970591d</hash>\n           <hash alg=\"SHA-1\">69e8ca804520d09ce4657e7235bae84d01cbffa6</hash>\n           <hash alg=\"SHA-256\">aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8</hash>\n           <hash alg=\"SHA-512\">1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b</hash>\n           <hash alg=\"SHA-384\">b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c</hash>\n-          <hash alg=\"SHA3-384\">289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c</hash>\n-          <hash alg=\"SHA3-256\">32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474</hash>\n-          <hash alg=\"SHA3-512\">1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.owasp.antisamy/antisamy@1.7.4?type=jar\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.owasp.antisamy</group>\n       <name>antisamy</name>\n@@ -59,17 +56,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">55035495737eb89a4efe6d03de337ef6</hash>\n         <hash alg=\"SHA-1\">a824554fe9e41e403a05acffdecfda44a4cde629</hash>\n         <hash alg=\"SHA-256\">5e3b72bed249ba1962fd88df059e14ac6968a87e2185bd07b7b678b35464e08b</hash>\n         <hash alg=\"SHA-512\">342017574564f3a7987940cc010838f2e4e4c09b349389d5de83563b102cce29c0092f4d90b911a0ecc158b3d2780fcb7a2da9dc95b1ef6795ffcf53d96faa56</hash>\n         <hash alg=\"SHA-384\">ecc6fb9d0f936a2e1772e82f3fc709a64b17669c41358f96cb7669980ff3c7df1537eec98bf276922decd7bcc4754163</hash>\n-        <hash alg=\"SHA3-384\">c5541d5a7169288540f4f8961c392693af40476784dc6f6c1f06e50cc42a4cd1516bccc460a4857af25388259d752cb9</hash>\n-        <hash alg=\"SHA3-256\">c51c93a34949d808c14c3e1232c0a5425935ecdd0c2c48e0fbb3fe22da9bd470</hash>\n-        <hash alg=\"SHA3-512\">a9a4fe0def1fd57a5515abce2cc9fdccc9e978753c844db1c38b806507787f9a8585c0774c9b8996a5bc6c7b7433fc8b8293ed94092be0ba103f8ef0a3714b03</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.htmlunit/neko-htmlunit@3.6.0?type=jar</purl>\n@@ -100,17 +94,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">fbbefc687f2e0c55b34b77edf53d486a</hash>\n         <hash alg=\"SHA-1\">0c900514d3446d9ce5d9dbd90c21192048125440</hash>\n         <hash alg=\"SHA-256\">9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51</hash>\n         <hash alg=\"SHA-512\">0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b</hash>\n         <hash alg=\"SHA-384\">b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54</hash>\n-        <hash alg=\"SHA3-384\">8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361</hash>\n-        <hash alg=\"SHA3-256\">6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35</hash>\n-        <hash alg=\"SHA3-512\">e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar</purl>\n@@ -141,17 +132,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">272112133e0dd0559efdd8f5e615a344</hash>\n         <hash alg=\"SHA-1\">698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16</hash>\n         <hash alg=\"SHA-256\">5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578</hash>\n         <hash alg=\"SHA-512\">3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1</hash>\n         <hash alg=\"SHA-384\">a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63</hash>\n-        <hash alg=\"SHA3-384\">13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256</hash>\n-        <hash alg=\"SHA3-256\">62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d</hash>\n-        <hash alg=\"SHA3-512\">3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar</purl>\n@@ -182,17 +170,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">fc50cbfa50e2798cfc1586600a9733df</hash>\n         <hash alg=\"SHA-1\">687cede1a44f70c7741abfab6ee2aa53dd2bfb54</hash>\n         <hash alg=\"SHA-256\">5c0bda45a6b360dfc4e0e0b26f10f68ea96b403cb7324c50e420207e33184c27</hash>\n         <hash alg=\"SHA-512\">1eb330ed5f3f2373faf26b8d1ac2b25bd5c57c76e1956ba7025d4cc05dee6ede58743ceb20bf69acd925e7304abfaeee3e91fd0d7e0d547401982aeaba05f86d</hash>\n         <hash alg=\"SHA-384\">d3c44c3f48656f7b5294469a9f5696135c0dbf6b77c0da1df2c18dbc298bcee91d53c5f07fc124c5a6bdd2e741c4b9c2</hash>\n-        <hash alg=\"SHA3-384\">879b0f0d3b20998287c750145bf93a612e3f86704c6b81d0be28dcc5ba322aeec336666bb204b36b00d349f8dc741736</hash>\n-        <hash alg=\"SHA3-256\">7b40bc49c3bbaa180e16590411cd7f3d311ecd6417a3058cccdbb6e9e8cc38d9</hash>\n-        <hash alg=\"SHA3-512\">2bc7f5bfac772e1cc8d1ffa35e57f0b5637da802ac5604dd16fa2666e7f4c0de16888b6c4a63a1758b22392dfe81696b57e5c92597b487ad8bf8e9af05bbb978</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.3?type=jar</purl>\n@@ -223,17 +208,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">b1b046ef30c8b779093a5f53ccea593e</hash>\n         <hash alg=\"SHA-1\">d5ff4e0463af8a0ea5ab8d782c5418bab2f45c4d</hash>\n         <hash alg=\"SHA-256\">dcf9a902bd0c4b1a84ac0561d7b66052bc93381c4923a5bc5602290c1c82b779</hash>\n         <hash alg=\"SHA-512\">6c61d831dba764491641ef7533010838b8f74afffa2b5f80b99101cf03c740d6156166df8aa9a669f5ee78d0957616f347d35474665fd5eafe93ce6765fcd112</hash>\n         <hash alg=\"SHA-384\">84c12329baed416325cc678f930891803c40910ab4d0aecf179c76fd8a6a4fccb28d829e4fd77ae7d7ad8d81dbc58d27</hash>\n-        <hash alg=\"SHA3-384\">d065249893bdafa05ca2ba1e7c95a93ae52f95bed47ff0a8ebcda6be2ed2a71fea4c7c312792c3b74aa080f67f315c56</hash>\n-        <hash alg=\"SHA3-256\">2095d84c77bcf402059b395fea14182f0f9129bb8d87e67ee7661d68b038cc95</hash>\n-        <hash alg=\"SHA3-512\">4268eef2a0273ced00d154228101674fa2ce096173470aceedb3d26871873a7c31ac6674b553d0820928b13a934b11d9bdc667a05770e5a3a6fd33ebd66a70ff</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar</purl>\n@@ -258,17 +240,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">59f84de4324c9e33fa823d99c99622e9</hash>\n         <hash alg=\"SHA-1\">2862b81d9dc63990cb5586323b4a2410fc1f2249</hash>\n         <hash alg=\"SHA-256\">5d74182b9ca19ecd8d4814f2ff4b42a4aeea6e18977e905cc84e8a6f81940c9f</hash>\n         <hash alg=\"SHA-512\">ab12db3ab9c99a6756d61d614aa19c4647439135b1e5a49409e2ca2f47500117e43436e388176b1377fd90e2939b49bb70c59a4c3b7c2d81a403feb20be798cd</hash>\n         <hash alg=\"SHA-384\">78610c728b0225ec5958e5b4c46d8f15bb2c0fe030c8f851db32d6406b88244856e020fee7cac432762f138e00b5a3f8</hash>\n-        <hash alg=\"SHA3-384\">8cbbb5a4886ee43e1e948ce3ce790fe5ad8b3264d996fbcc9991ba77fd5c7ce625cbca2630acd625bbb398165e4b1632</hash>\n-        <hash alg=\"SHA3-256\">25ce2fd0032b04419583bad01eeb3aae9f0109af62dd29a5d60a16ce1451288b</hash>\n-        <hash alg=\"SHA3-512\">86214d5288e13f2389fa475d9de41f10660ba5ebece2c9bbf58467a006674849db0c1511af68597e6bd021d7401600d7f75cd8475dd80d3af2e410240cfea7b0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar</purl>\n@@ -293,17 +272,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">27e4b764585781f8d8db4ce2d617b143</hash>\n         <hash alg=\"SHA-1\">83ef2a8b449444a1d57e91e938522899317a8672</hash>\n         <hash alg=\"SHA-256\">a1e4f743c8b80ac682edd4b397faa4ac42de591343036324c80ee8f22973c976</hash>\n         <hash alg=\"SHA-512\">d18316d086042baa4f664ef635c7b8e6a376b5ef40fca2f5015d7ddac7b6873001d2d695f750cdba4287964f0a047c837ec716c07294295962dee8ed6e90c71e</hash>\n         <hash alg=\"SHA-384\">cd886db9f7efed4cbb70e022bcf670e3d11c5815094523f92bb43436a43a34de2c7b70266ceb4b51c977e087dcd07f27</hash>\n-        <hash alg=\"SHA3-384\">6f2a47cf58bf589c67f091f3be0d3402fe4a887675a771f9d552034991030069f02df967f34da9bc7b73740db3f3ff2b</hash>\n-        <hash alg=\"SHA3-256\">d0c4a09755b50ceca68260eb7278b078a45e68174316a094440ea24738b3a6c4</hash>\n-        <hash alg=\"SHA3-512\">2c51be3e86ba14ac549402dc01040b70d790f9b0240d7997439f2687bf702f6fcb174ca01b71200a45d5735a1ef428cf6ef9138f8c86c3ef5f6f748b5abc3408</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar</purl>\n@@ -328,17 +304,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">25af6878d4a0c41eac9e95b7859dcdf5</hash>\n         <hash alg=\"SHA-1\">22bf8b4c207dc46859db0269853186d8dfc8cb9a</hash>\n         <hash alg=\"SHA-256\">75db00180bde4ef5caee3916d6f65e5045051d59cf51d57e673c03969d7bbbcd</hash>\n         <hash alg=\"SHA-512\">4e3f5684f5439d2d3c64c8578b89270257c5ce8b0445129e734203f8b2f95f03642cc16e2e95b997e839912909b20ba8a1893f2ef5eca0958c2a3eb9484ee9c2</hash>\n         <hash alg=\"SHA-384\">aa6cd06a07a73bc335465d9875a04d2f103cdffd8db8f7c1cce2c24faa0469c1ab2179509254a93ffe919d81d3982d50</hash>\n-        <hash alg=\"SHA3-384\">c940c7d2c04387d4208576a492cf6a519d019bc982cb5097ed3b2050fb3d75cf557684ee56dc8a703c57d914d6595340</hash>\n-        <hash alg=\"SHA3-256\">fc88ee30d54be59d4285b003142b8341f6af0400e34776a1686ecba1209e5085</hash>\n-        <hash alg=\"SHA3-512\">bc0a50f23efb2467cc4448031c1ddcb1557785d0eaa25b2ac255c931d29d1b7429999b1e2150c3e4e558cb36d3624cecfed368a5439202a5cb2ef5e2ba523617</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar</purl>\n@@ -363,17 +336,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">10ba9936f23cfab12698ae80618660a9</hash>\n         <hash alg=\"SHA-1\">39b233a71430ffa9d0282d47789a58fa8bf4f861</hash>\n         <hash alg=\"SHA-256\">d5a64680363e7b36b3f28c34a3a536d76e847f77cec0740aab7c799a67b52d8b</hash>\n         <hash alg=\"SHA-512\">014461687f1de3b3cd3e2051317f9b84a880a60ebfd67c7237c0c8f3148c90ff85b2e55197ada43cad3e10c59e58b636ced2721e4cd9cb136bff8ae009baec8e</hash>\n         <hash alg=\"SHA-384\">53d9a624355b1eb6b6121e2b8c098565b2182bc7cada9e93b4c71da544f619e93a7462f1adc12c05b6ffe6e7cf23e289</hash>\n-        <hash alg=\"SHA3-384\">b903888c749e3f92875999d433af6d7130dfd637d782bce8d7061b07ce7dfd1ad0313942264d15cd8f24c56de9c31449</hash>\n-        <hash alg=\"SHA3-256\">0543ea821d91468cb4e5a7c4ebb4792f16da223f3048b3416d2fe802525b9565</hash>\n-        <hash alg=\"SHA3-512\">27e59144a94f1091887c7475f7ba0aeeed6043487892a7feae0c9625d2bcdfe4921ed627b896547ee8ea7e58ff0422e713c91cce83957fb77b1fd6c09c861f91</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar</purl>\n@@ -400,17 +370,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f398edbe3eb048508d88158378b55c48</hash>\n         <hash alg=\"SHA-1\">de2d1bd8d40474bbe876bb269410c750489f08e5</hash>\n         <hash alg=\"SHA-256\">2ebd333ab2a624514793c336e3af086608673286fe37ba1e639e0ac3e1b58be2</hash>\n         <hash alg=\"SHA-512\">397dcfaa12b6e0e3906fd2cc400b58e123c4d8c874b44888b1aed58abd022fb836543047e2684c6c5490824526f34d4aebe651cb16ee6753373880a312086df0</hash>\n         <hash alg=\"SHA-384\">8354a8e4d013f9467acdab7c477d609c715a784d8ba81f68b6aba19637c5378fc126c5953d6a83f8986e53d06f72dc52</hash>\n-        <hash alg=\"SHA3-384\">e1856f3840d3242c2790333ab22ec2b29019c30772f376f0f9caa6a401322e28a8d27581c1e71b28d06581708692d311</hash>\n-        <hash alg=\"SHA3-256\">454511c6e0ad15e3664d4526328feaeccfc08c5299c3b0519ad9a01d2441487e</hash>\n-        <hash alg=\"SHA3-512\">9535259336531d12e72102b96f84ad1ba09eff4f07c8dd1861782136d52d2807c203420c3b0d4da237453e94eac52f7e13e9a6e57c14f8ff351d0fbad0907975</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar</purl>\n@@ -439,17 +406,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">4259c0bc6078e53a09883b521c1d53af</hash>\n         <hash alg=\"SHA-1\">a4c6e1f6c196339473cd2e1b037f0eb97c62755b</hash>\n         <hash alg=\"SHA-256\">e35d1df7232568ed4b81d9a9ed94a0159b3ff6cf1915cc21eef5cb55d7b157a2</hash>\n         <hash alg=\"SHA-512\">b98a5739f029d535207d50854a63c581334864e6021ec81ef960c23971d0b4fffaebbaee4830025a307d65b586017fe0ebc5901a2e5271f54fba401bde7f5e8b</hash>\n         <hash alg=\"SHA-384\">f2890279f22566dbbea487ac8c3d84e54cd9dc56ab5ea1c7d37038099e478c7fe6fe67c7cedec80994ca685487418ad2</hash>\n-        <hash alg=\"SHA3-384\">128ca5b7cbf8c73675d118af94a06ea5efc7a6d0e31c1dd338d7d589580168aae131368aa095ba65cf112a2456cefd6e</hash>\n-        <hash alg=\"SHA3-256\">00164b8e61543375503df44933df917a21973b21834ce706d905d71ea0631a0a</hash>\n-        <hash alg=\"SHA3-512\">40909b82dc29956221a73050fbe226d9a4b565bf517e3762b9584da13d6609d53b5f5a8acd9906fe93e64db6a4019e17811e8139ee84fc74ad8d8e61822441b0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n@@ -484,17 +448,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">45630e54b0f0ac2b3c80462515ad8fda</hash>\n         <hash alg=\"SHA-1\">7cf2726fdcfbc8610f9a71fb3ed639871f315340</hash>\n         <hash alg=\"SHA-256\">0818930dc8d7debb403204611691da58e49d42c50b6ffcfdce02dadb7c3c2b6c</hash>\n         <hash alg=\"SHA-512\">069e6ddce79617e37d61758120c7e68348ee62f255781948937f7bec3058e46244026d7f6a11e90fbc15cd4288c4bb1acee4f242af521c721a9e68a05e64d526</hash>\n         <hash alg=\"SHA-384\">fd6f7ad85d02ac63cd1a586c8bb158c1fc000495f512f097731ea9f749b5da2637615b821294962805ba312c738f40aa</hash>\n-        <hash alg=\"SHA3-384\">17cd61f59a162250b52a89c7c56eb60da253b776210500313c7b82744483ff84717946f969251fb4d76f9bb12a2458fe</hash>\n-        <hash alg=\"SHA3-256\">9dcb04582c64c79e788f9191195834ec75bb3457133d22a176a0ccb069b97103</hash>\n-        <hash alg=\"SHA3-512\">990faffa454598a3fa82affe30f1323db769d2e1fff20d9c7163ef6fd95ac7a0874c06a634207a2eaed9e5afbdee68b225138fc75018717ba97efe3ffe92c88a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -527,17 +488,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>\n         <hash alg=\"SHA-1\">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>\n         <hash alg=\"SHA-256\">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>\n         <hash alg=\"SHA-512\">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>\n         <hash alg=\"SHA-384\">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>\n-        <hash alg=\"SHA3-384\">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>\n-        <hash alg=\"SHA3-256\">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>\n-        <hash alg=\"SHA3-512\">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>\n@@ -565,17 +523,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>\n         <hash alg=\"SHA-1\">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>\n         <hash alg=\"SHA-256\">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>\n         <hash alg=\"SHA-512\">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>\n         <hash alg=\"SHA-384\">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>\n-        <hash alg=\"SHA3-384\">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>\n-        <hash alg=\"SHA3-256\">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>\n-        <hash alg=\"SHA3-512\">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n         <license>\n           <id>SAX-PD</id>\n@@ -618,17 +573,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">bcb07d3b8d2397db7a3013b6465d347b</hash>\n         <hash alg=\"SHA-1\">41a8b86b358e87f3f13cf46069721719105aff66</hash>\n         <hash alg=\"SHA-256\">d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646</hash>\n         <hash alg=\"SHA-512\">ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc</hash>\n         <hash alg=\"SHA-384\">b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd</hash>\n-        <hash alg=\"SHA3-384\">dc9b68500d2c845967652f5e04883a6ba3146c51bbfcd7d14cbaf0eaa44df3240e41af8d03b63aa536f4c21d503b4a79</hash>\n-        <hash alg=\"SHA3-256\">7d3d773a1d7c1cd6cb37a98985f1e119574844a31fa48e890c2fa1f1d0fae72a</hash>\n-        <hash alg=\"SHA3-512\">d7da19e6fe75a236e7be635927d32f9d0aaf864ad648f831414d0f296c9cdbdcabeb9886d190d3eaaf8bcaea24a417f71de13e8e9cd21513b83f0a671c339f36</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar</purl>\n@@ -658,17 +610,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">a70cfa500f3d66e6bd7ecb7cfe671ce2</hash>\n         <hash alg=\"SHA-1\">46fb4f0ae2e69eafa963711cc5c3369ac81aa31f</hash>\n         <hash alg=\"SHA-256\">c0fd1ac2e22acdd46913a2ff74551b71f124457199688698204af4bf3d43165d</hash>\n         <hash alg=\"SHA-512\">47a9596641e37f75cfba6c690c2ed8bf45e28619bb5fb13493108330b0c7efe785e5eea1390953852c7a9961f63164e08bd71dd61ab8bed5f2699e1bf032ca76</hash>\n         <hash alg=\"SHA-384\">e59214b34da8049c03510134fefc9f0e9b25a90fe6dc3755ed7cd7c052da869f0b3990057c5f669630a6381e57a41f62</hash>\n-        <hash alg=\"SHA3-384\">5577b1a6d32682968b87beb3fda5824a04520040ae160a03bf97fb940db7ef6123778aadd40079ac53bb4f1c7feffd2c</hash>\n-        <hash alg=\"SHA3-256\">223b0e8681421828f9f4e322abdaa25457ecbef7452f3aabb2baa7a0a942a171</hash>\n-        <hash alg=\"SHA3-512\">3dcf225f14d1a6e6cb1f4375894e79205b27f438750ce8c4c7c435363aba38bc7ceed9c81e01fbdaa1f1da23590d31f094a202c647724faa2c6acfffe95a3f75</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>LGPL-2.1-only</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar</purl>\n@@ -689,17 +638,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">dd83accb899363c32b07d7a1b2e4ce40</hash>\n         <hash alg=\"SHA-1\">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>\n         <hash alg=\"SHA-256\">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>\n         <hash alg=\"SHA-512\">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>\n         <hash alg=\"SHA-384\">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>\n-        <hash alg=\"SHA3-384\">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>\n-        <hash alg=\"SHA3-256\">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>\n-        <hash alg=\"SHA3-512\">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>\n"}]}