{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.9",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg" : "SHA-1",
            "content" : "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg" : "SHA-256",
            "content" : "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg" : "SHA-512",
            "content" : "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg" : "SHA-384",
            "content" : "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.owasp.antisamy",
      "name" : "antisamy",
      "version" : "1.7.4",
      "description" : "A library for performing fast, configurable cleansing of HTML coming from untrusted sources.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nahsra/antisamy"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:nahsra/antisamy.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.4?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "maven.reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "HtmlUnit",
      "group" : "org.htmlunit",
      "name" : "neko-htmlunit",
      "version" : "3.6.0",
      "description" : "NekoHtml is the Html parser used by HtmlUnit.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "55035495737eb89a4efe6d03de337ef6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a824554fe9e41e403a05acffdecfda44a4cde629"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e3b72bed249ba1962fd88df059e14ac6968a87e2185bd07b7b678b35464e08b"
        },
        {
          "alg" : "SHA-512",
          "content" : "342017574564f3a7987940cc010838f2e4e4c09b349389d5de83563b102cce29c0092f4d90b911a0ecc158b3d2780fcb7a2da9dc95b1ef6795ffcf53d96faa56"
        },
        {
          "alg" : "SHA-384",
          "content" : "ecc6fb9d0f936a2e1772e82f3fc709a64b17669c41358f96cb7669980ff3c7df1537eec98bf276922decd7bcc4754163"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.htmlunit/neko-htmlunit@3.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.htmlunit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://jenkins.wetator.org/view/HtmlUnit/"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/HtmlUnit/neko-htmlunit/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/htmlunit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.6.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5",
      "version" : "5.2.1",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fbbefc687f2e0c55b34b77edf53d486a"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c900514d3446d9ce5d9dbd90c21192048125440"
        },
        {
          "alg" : "SHA-256",
          "content" : "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51"
        },
        {
          "alg" : "SHA-512",
          "content" : "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.2.1/httpclient5/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.2.1/httpclient5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5-h2",
      "version" : "5.2",
      "description" : "Apache HttpComponents HTTP/2 Core Components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "272112133e0dd0559efdd8f5e615a344"
        },
        {
          "alg" : "SHA-1",
          "content" : "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578"
        },
        {
          "alg" : "SHA-512",
          "content" : "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1"
        },
        {
          "alg" : "SHA-384",
          "content" : "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5-h2/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.2/httpcore5-h2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5",
      "version" : "5.2.3",
      "description" : "Apache HttpComponents HTTP/1.1 core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc50cbfa50e2798cfc1586600a9733df"
        },
        {
          "alg" : "SHA-1",
          "content" : "687cede1a44f70c7741abfab6ee2aa53dd2bfb54"
        },
        {
          "alg" : "SHA-256",
          "content" : "5c0bda45a6b360dfc4e0e0b26f10f68ea96b403cb7324c50e420207e33184c27"
        },
        {
          "alg" : "SHA-512",
          "content" : "1eb330ed5f3f2373faf26b8d1ac2b25bd5c57c76e1956ba7025d4cc05dee6ede58743ceb20bf69acd925e7304abfaeee3e91fd0d7e0d547401982aeaba05f86d"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3c44c3f48656f7b5294469a9f5696135c0dbf6b77c0da1df2c18dbc298bcee91d53c5f07fc124c5a6bdd2e741c4b9c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2.3/httpcore5/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.2.3/httpcore5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.3?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-css",
      "version" : "1.17",
      "description" : "Batik CSS engine",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1b046ef30c8b779093a5f53ccea593e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5ff4e0463af8a0ea5ab8d782c5418bab2f45c4d"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcf9a902bd0c4b1a84ac0561d7b66052bc93381c4923a5bc5602290c1c82b779"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c61d831dba764491641ef7533010838b8f74afffa2b5f80b99101cf03c740d6156166df8aa9a669f5ee78d0957616f347d35474665fd5eafe93ce6765fcd112"
        },
        {
          "alg" : "SHA-384",
          "content" : "84c12329baed416325cc678f930891803c40910ab4d0aecf179c76fd8a6a4fccb28d829e4fd77ae7d7ad8d81dbc58d27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-css/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-css/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-shared-resources",
      "version" : "1.17",
      "description" : "Batik Shared Resources",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59f84de4324c9e33fa823d99c99622e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "2862b81d9dc63990cb5586323b4a2410fc1f2249"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d74182b9ca19ecd8d4814f2ff4b42a4aeea6e18977e905cc84e8a6f81940c9f"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab12db3ab9c99a6756d61d614aa19c4647439135b1e5a49409e2ca2f47500117e43436e388176b1377fd90e2939b49bb70c59a4c3b7c2d81a403feb20be798cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "78610c728b0225ec5958e5b4c46d8f15bb2c0fe030c8f851db32d6406b88244856e020fee7cac432762f138e00b5a3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-shared-resources/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-shared-resources/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-util",
      "version" : "1.17",
      "description" : "Batik utility library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27e4b764585781f8d8db4ce2d617b143"
        },
        {
          "alg" : "SHA-1",
          "content" : "83ef2a8b449444a1d57e91e938522899317a8672"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1e4f743c8b80ac682edd4b397faa4ac42de591343036324c80ee8f22973c976"
        },
        {
          "alg" : "SHA-512",
          "content" : "d18316d086042baa4f664ef635c7b8e6a376b5ef40fca2f5015d7ddac7b6873001d2d695f750cdba4287964f0a047c837ec716c07294295962dee8ed6e90c71e"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd886db9f7efed4cbb70e022bcf670e3d11c5815094523f92bb43436a43a34de2c7b70266ceb4b51c977e087dcd07f27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-util/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-constants",
      "version" : "1.17",
      "description" : "Batik constants library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25af6878d4a0c41eac9e95b7859dcdf5"
        },
        {
          "alg" : "SHA-1",
          "content" : "22bf8b4c207dc46859db0269853186d8dfc8cb9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "75db00180bde4ef5caee3916d6f65e5045051d59cf51d57e673c03969d7bbbcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e3f5684f5439d2d3c64c8578b89270257c5ce8b0445129e734203f8b2f95f03642cc16e2e95b997e839912909b20ba8a1893f2ef5eca0958c2a3eb9484ee9c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa6cd06a07a73bc335465d9875a04d2f103cdffd8db8f7c1cce2c24faa0469c1ab2179509254a93ffe919d81d3982d50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-constants/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-constants/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-i18n",
      "version" : "1.17",
      "description" : "Batik i18n library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10ba9936f23cfab12698ae80618660a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b233a71430ffa9d0282d47789a58fa8bf4f861"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5a64680363e7b36b3f28c34a3a536d76e847f77cec0740aab7c799a67b52d8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "014461687f1de3b3cd3e2051317f9b84a880a60ebfd67c7237c0c8f3148c90ff85b2e55197ada43cad3e10c59e58b636ced2721e4cd9cb136bff8ae009baec8e"
        },
        {
          "alg" : "SHA-384",
          "content" : "53d9a624355b1eb6b6121e2b8c098565b2182bc7cada9e93b4c71da544f619e93a7462f1adc12c05b6ffe6e7cf23e289"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-i18n/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-i18n/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "xmlgraphics-commons",
      "version" : "2.9",
      "description" : "Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f398edbe3eb048508d88158378b55c48"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2d1bd8d40474bbe876bb269410c750489f08e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ebd333ab2a624514793c336e3af086608673286fe37ba1e639e0ac3e1b58be2"
        },
        {
          "alg" : "SHA-512",
          "content" : "397dcfaa12b6e0e3906fd2cc400b58e123c4d8c874b44888b1aed58abd022fb836543047e2684c6c5490824526f34d4aebe651cb16ee6753373880a312086df0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8354a8e4d013f9467acdab7c477d609c715a784d8ba81f68b6aba19637c5378fc126c5953d6a83f8986e53d06f72dc52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/commons/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-general/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xmlgraphics/commons/trunk/?root=Apache-SVN"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.14.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4259c0bc6078e53a09883b521c1d53af"
        },
        {
          "alg" : "SHA-1",
          "content" : "a4c6e1f6c196339473cd2e1b037f0eb97c62755b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e35d1df7232568ed4b81d9a9ed94a0159b3ff6cf1915cc21eef5cb55d7b157a2"
        },
        {
          "alg" : "SHA-512",
          "content" : "b98a5739f029d535207d50854a63c581334864e6021ec81ef960c23971d0b4fffaebbaee4830025a307d65b586017fe0ebc5901a2e5271f54fba401bde7f5e8b"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2890279f22566dbbea487ac8c3d84e54cd9dc56ab5ea1c7d37038099e478c7fe6fe67c7cedec80994ca685487418ad2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.14.0?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.9",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "45630e54b0f0ac2b3c80462515ad8fda"
        },
        {
          "alg" : "SHA-1",
          "content" : "7cf2726fdcfbc8610f9a71fb3ed639871f315340"
        },
        {
          "alg" : "SHA-256",
          "content" : "0818930dc8d7debb403204611691da58e49d42c50b6ffcfdce02dadb7c3c2b6c"
        },
        {
          "alg" : "SHA-512",
          "content" : "069e6ddce79617e37d61758120c7e68348ee62f255781948937f7bec3058e46244026d7f6a11e90fbc15cd4288c4bb1acee4f242af521c721a9e68a05e64d526"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd6f7ad85d02ac63cd1a586c8bb158c1fc000495f512f097731ea9f749b5da2637615b821294962805ba312c738f40aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.2",
      "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xerces.apache.org/xerces2-j/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "xml-apis",
      "name" : "xml-apis-ext",
      "version" : "1.3.04",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcb07d3b8d2397db7a3013b6465d347b"
        },
        {
          "alg" : "SHA-1",
          "content" : "41a8b86b358e87f3f13cf46069721719105aff66"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_3_04/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.7.3",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a70cfa500f3d66e6bd7ecb7cfe671ce2"
        },
        {
          "alg" : "SHA-1",
          "content" : "46fb4f0ae2e69eafa963711cc5c3369ac81aa31f"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0fd1ac2e22acdd46913a2ff74551b71f124457199688698204af4bf3d43165d"
        },
        {
          "alg" : "SHA-512",
          "content" : "47a9596641e37f75cfba6c690c2ed8bf45e28619bb5fb13493108330b0c7efe785e5eea1390953852c7a9961f63164e08bd71dd61ab8bed5f2699e1bf032ca76"
        },
        {
          "alg" : "SHA-384",
          "content" : "e59214b34da8049c03510134fefc9f0e9b25a90fe6dc3755ed7cd7c052da869f0b3990057c5f669630a6381e57a41f62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spotbugs.github.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.htmlunit/neko-htmlunit@3.6.0?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.3?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
        "pkg:maven/commons-io/commons-io@2.14.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.14.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.7.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}