{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -8,17 +8,14 @@\n         <version>2.7.11</version>\n         <hashes>\n           <hash alg=\"MD5\">a70e8b649ab4a2bb7922d360173c8237</hash>\n           <hash alg=\"SHA-1\">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>\n           <hash alg=\"SHA-256\">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>\n           <hash alg=\"SHA-512\">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>\n           <hash alg=\"SHA-384\">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>\n-          <hash alg=\"SHA3-384\">ad88cf6a0e0a5d51df49a4dab5530a28de9df7eec8460c045dff3e1f9316b82a244a125d52b937fe9d4ee72e44f5d01a</hash>\n-          <hash alg=\"SHA3-256\">b4d9c3ef07c34517fd9f33178ba95ffc9618eb84a3671e71b0c82991ec3717e5</hash>\n-          <hash alg=\"SHA3-512\">935b43aba8999dc7d95d93288a251c97b6b32852841b7bef31516c27c8d65c8de7f8411f1829f765ee760f25930c766db6a49df68e5994e18721c0a71f606f1e</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.owasp.antisamy/antisamy@1.7.5?type=jar\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.owasp.antisamy</group>\n       <name>antisamy</name>\n@@ -60,17 +57,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">84351f7991a0e6722f00e96a4ccc376f</hash>\n         <hash alg=\"SHA-1\">f11560da189ab563a5c8e351941415430e9304ea</hash>\n         <hash alg=\"SHA-256\">a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154</hash>\n         <hash alg=\"SHA-512\">e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c</hash>\n         <hash alg=\"SHA-384\">028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2</hash>\n-        <hash alg=\"SHA3-384\">73cd585ab3736b4be50ec0f10dfe5ebfc3390eea8d56f07f29055f1fddb2dff8084310eaa6fb9f97ea639ed1abd7bc33</hash>\n-        <hash alg=\"SHA3-256\">daf39bc99f1a3dc0075714a4a342a58d69a4cd62c25bc39a581f657ca72b1044</hash>\n-        <hash alg=\"SHA3-512\">b003f8971d1536ea0fc4320dbfe17d7259d49e59314739f9fc83134e511facbff048b0ef4f86a9d0893781ca09c95cebc3b181a6c89a2d41e851870b96e76839</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n@@ -105,17 +99,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">de1810a606b27192cbf5bbad9c25a648</hash>\n         <hash alg=\"SHA-1\">56b53c8f4bcdaada801d311cf2ff8a24d6d96883</hash>\n         <hash alg=\"SHA-256\">08346a757c617f6ecc66af9f099260adde1f3a1351fa81cb22fc17482b31f823</hash>\n         <hash alg=\"SHA-512\">4c2d75106af8470789f0e08305e64ad86528f2f737da230e561892d33dbca0b6e2dbced2a075f0744cee7801c06ef174481540661b3c9a1bec6d6f93938b05bc</hash>\n         <hash alg=\"SHA-384\">27470f74660b89f8a0af562a4edbd244afff4947b0fa7364c61e53ca49713efbca49e661214590f532c4acf9cfd66eac</hash>\n-        <hash alg=\"SHA3-384\">d25be0f1c5e0c02de0adf7113e591f10bd7fab20c168a20b7d15c859b252a6dc3ae3a24098e838d95c179ab3107f07b6</hash>\n-        <hash alg=\"SHA3-256\">9e22ce6935e71d12d1be70ef0b7cea9a87191c767de2904cb82fcb6e58d0e9b2</hash>\n-        <hash alg=\"SHA3-512\">9d36e201e469dd357ef715bba7beba62dbea98daefcea3b793fd285c2ffade97d72b35a07f05015fbc2d5b4fa5db58ff5ecf40e1269582a6c3e53ed62cbf97f4</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar</purl>\n@@ -146,17 +137,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">d407b8144029db656ac5ba3d54ef801f</hash>\n         <hash alg=\"SHA-1\">2872764df7b4857549e2880dd32a6f9009166289</hash>\n         <hash alg=\"SHA-256\">dc1a95e73eb04db93451533d390ce02c53b301a10dc343d08c862f2934b3d30e</hash>\n         <hash alg=\"SHA-512\">72fbee55f173c43d9ffc0cc5a83d59e60be1002c06ab81de39ba700cc30b04e84fdfed73d3a8985d561a1aa8ac3ca905f9259d01b431e1ff14da6fae622f787d</hash>\n         <hash alg=\"SHA-384\">2f96537af2866fa96aae46138febe3009dca97cc9b4284cf18510c12d159ad3f5d34c3c9bafc8026215da81520331660</hash>\n-        <hash alg=\"SHA3-384\">9900a3aeaf434d7f32a7500e29e16d354857ef34e6af3fb7de9e1ab7683b6a1c4bfa9b9f70bb779a8ec8d8be82b6bca4</hash>\n-        <hash alg=\"SHA3-256\">da34ed59342e368229b74245d2268a457588adea9e276a1ac2fb57419c605f31</hash>\n-        <hash alg=\"SHA3-512\">ca5b03cf34c7e344fd0b809c582e60f0eaea796372cf68e2e95087ac5943154e51472595f6554b810a5ac4789ba6f7c06cae46437badecbf31c57907123a49fc</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar</purl>\n@@ -187,17 +175,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">5a3d417ea4e65e0f74194263dc5c6c43</hash>\n         <hash alg=\"SHA-1\">34d8332b975f9e9a8298efe4c883ec43d45b7059</hash>\n         <hash alg=\"SHA-256\">a7f62496113f66f9e27c26b84c44f5ce4555c6270083cdf2d45f255336cd52af</hash>\n         <hash alg=\"SHA-512\">9fb4134d85e665e15410af005b21cd2f9b5e60d75112945d37b879f96f769a70be034557526ea7d05f8b83dda91c56d00f946763c44a183d7aea2857549b4481</hash>\n         <hash alg=\"SHA-384\">8ec2da2fd22a23e9f740589947398a907795ab310d4ed166ecc1448ceea7035a50090cf645dad28f3c84c08599f1e57e</hash>\n-        <hash alg=\"SHA3-384\">e52f4f1c073ec9d893cffa353a27939054a0b537fe49e4aacfdd6c265dfba037309913a001c025d85ccbb06a1e9e72b0</hash>\n-        <hash alg=\"SHA3-256\">23fb185f22dac603ba579c4f707671f43b3b08ab049ae519fb492ea0232c5ba9</hash>\n-        <hash alg=\"SHA3-512\">8371cd7e6f94ccb1590bd90d5868a90a3344123b0e6a4f7113d76b816c16d58efc6f2cab124a45ffd93739990fed05201f294f890aa989345f52e736383b4261</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar</purl>\n@@ -228,17 +213,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">b1b046ef30c8b779093a5f53ccea593e</hash>\n         <hash alg=\"SHA-1\">d5ff4e0463af8a0ea5ab8d782c5418bab2f45c4d</hash>\n         <hash alg=\"SHA-256\">dcf9a902bd0c4b1a84ac0561d7b66052bc93381c4923a5bc5602290c1c82b779</hash>\n         <hash alg=\"SHA-512\">6c61d831dba764491641ef7533010838b8f74afffa2b5f80b99101cf03c740d6156166df8aa9a669f5ee78d0957616f347d35474665fd5eafe93ce6765fcd112</hash>\n         <hash alg=\"SHA-384\">84c12329baed416325cc678f930891803c40910ab4d0aecf179c76fd8a6a4fccb28d829e4fd77ae7d7ad8d81dbc58d27</hash>\n-        <hash alg=\"SHA3-384\">d065249893bdafa05ca2ba1e7c95a93ae52f95bed47ff0a8ebcda6be2ed2a71fea4c7c312792c3b74aa080f67f315c56</hash>\n-        <hash alg=\"SHA3-256\">2095d84c77bcf402059b395fea14182f0f9129bb8d87e67ee7661d68b038cc95</hash>\n-        <hash alg=\"SHA3-512\">4268eef2a0273ced00d154228101674fa2ce096173470aceedb3d26871873a7c31ac6674b553d0820928b13a934b11d9bdc667a05770e5a3a6fd33ebd66a70ff</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar</purl>\n@@ -263,17 +245,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">59f84de4324c9e33fa823d99c99622e9</hash>\n         <hash alg=\"SHA-1\">2862b81d9dc63990cb5586323b4a2410fc1f2249</hash>\n         <hash alg=\"SHA-256\">5d74182b9ca19ecd8d4814f2ff4b42a4aeea6e18977e905cc84e8a6f81940c9f</hash>\n         <hash alg=\"SHA-512\">ab12db3ab9c99a6756d61d614aa19c4647439135b1e5a49409e2ca2f47500117e43436e388176b1377fd90e2939b49bb70c59a4c3b7c2d81a403feb20be798cd</hash>\n         <hash alg=\"SHA-384\">78610c728b0225ec5958e5b4c46d8f15bb2c0fe030c8f851db32d6406b88244856e020fee7cac432762f138e00b5a3f8</hash>\n-        <hash alg=\"SHA3-384\">8cbbb5a4886ee43e1e948ce3ce790fe5ad8b3264d996fbcc9991ba77fd5c7ce625cbca2630acd625bbb398165e4b1632</hash>\n-        <hash alg=\"SHA3-256\">25ce2fd0032b04419583bad01eeb3aae9f0109af62dd29a5d60a16ce1451288b</hash>\n-        <hash alg=\"SHA3-512\">86214d5288e13f2389fa475d9de41f10660ba5ebece2c9bbf58467a006674849db0c1511af68597e6bd021d7401600d7f75cd8475dd80d3af2e410240cfea7b0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar</purl>\n@@ -298,17 +277,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">27e4b764585781f8d8db4ce2d617b143</hash>\n         <hash alg=\"SHA-1\">83ef2a8b449444a1d57e91e938522899317a8672</hash>\n         <hash alg=\"SHA-256\">a1e4f743c8b80ac682edd4b397faa4ac42de591343036324c80ee8f22973c976</hash>\n         <hash alg=\"SHA-512\">d18316d086042baa4f664ef635c7b8e6a376b5ef40fca2f5015d7ddac7b6873001d2d695f750cdba4287964f0a047c837ec716c07294295962dee8ed6e90c71e</hash>\n         <hash alg=\"SHA-384\">cd886db9f7efed4cbb70e022bcf670e3d11c5815094523f92bb43436a43a34de2c7b70266ceb4b51c977e087dcd07f27</hash>\n-        <hash alg=\"SHA3-384\">6f2a47cf58bf589c67f091f3be0d3402fe4a887675a771f9d552034991030069f02df967f34da9bc7b73740db3f3ff2b</hash>\n-        <hash alg=\"SHA3-256\">d0c4a09755b50ceca68260eb7278b078a45e68174316a094440ea24738b3a6c4</hash>\n-        <hash alg=\"SHA3-512\">2c51be3e86ba14ac549402dc01040b70d790f9b0240d7997439f2687bf702f6fcb174ca01b71200a45d5735a1ef428cf6ef9138f8c86c3ef5f6f748b5abc3408</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar</purl>\n@@ -333,17 +309,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">25af6878d4a0c41eac9e95b7859dcdf5</hash>\n         <hash alg=\"SHA-1\">22bf8b4c207dc46859db0269853186d8dfc8cb9a</hash>\n         <hash alg=\"SHA-256\">75db00180bde4ef5caee3916d6f65e5045051d59cf51d57e673c03969d7bbbcd</hash>\n         <hash alg=\"SHA-512\">4e3f5684f5439d2d3c64c8578b89270257c5ce8b0445129e734203f8b2f95f03642cc16e2e95b997e839912909b20ba8a1893f2ef5eca0958c2a3eb9484ee9c2</hash>\n         <hash alg=\"SHA-384\">aa6cd06a07a73bc335465d9875a04d2f103cdffd8db8f7c1cce2c24faa0469c1ab2179509254a93ffe919d81d3982d50</hash>\n-        <hash alg=\"SHA3-384\">c940c7d2c04387d4208576a492cf6a519d019bc982cb5097ed3b2050fb3d75cf557684ee56dc8a703c57d914d6595340</hash>\n-        <hash alg=\"SHA3-256\">fc88ee30d54be59d4285b003142b8341f6af0400e34776a1686ecba1209e5085</hash>\n-        <hash alg=\"SHA3-512\">bc0a50f23efb2467cc4448031c1ddcb1557785d0eaa25b2ac255c931d29d1b7429999b1e2150c3e4e558cb36d3624cecfed368a5439202a5cb2ef5e2ba523617</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar</purl>\n@@ -368,17 +341,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">10ba9936f23cfab12698ae80618660a9</hash>\n         <hash alg=\"SHA-1\">39b233a71430ffa9d0282d47789a58fa8bf4f861</hash>\n         <hash alg=\"SHA-256\">d5a64680363e7b36b3f28c34a3a536d76e847f77cec0740aab7c799a67b52d8b</hash>\n         <hash alg=\"SHA-512\">014461687f1de3b3cd3e2051317f9b84a880a60ebfd67c7237c0c8f3148c90ff85b2e55197ada43cad3e10c59e58b636ced2721e4cd9cb136bff8ae009baec8e</hash>\n         <hash alg=\"SHA-384\">53d9a624355b1eb6b6121e2b8c098565b2182bc7cada9e93b4c71da544f619e93a7462f1adc12c05b6ffe6e7cf23e289</hash>\n-        <hash alg=\"SHA3-384\">b903888c749e3f92875999d433af6d7130dfd637d782bce8d7061b07ce7dfd1ad0313942264d15cd8f24c56de9c31449</hash>\n-        <hash alg=\"SHA3-256\">0543ea821d91468cb4e5a7c4ebb4792f16da223f3048b3416d2fe802525b9565</hash>\n-        <hash alg=\"SHA3-512\">27e59144a94f1091887c7475f7ba0aeeed6043487892a7feae0c9625d2bcdfe4921ed627b896547ee8ea7e58ff0422e713c91cce83957fb77b1fd6c09c861f91</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar</purl>\n@@ -405,17 +375,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f398edbe3eb048508d88158378b55c48</hash>\n         <hash alg=\"SHA-1\">de2d1bd8d40474bbe876bb269410c750489f08e5</hash>\n         <hash alg=\"SHA-256\">2ebd333ab2a624514793c336e3af086608673286fe37ba1e639e0ac3e1b58be2</hash>\n         <hash alg=\"SHA-512\">397dcfaa12b6e0e3906fd2cc400b58e123c4d8c874b44888b1aed58abd022fb836543047e2684c6c5490824526f34d4aebe651cb16ee6753373880a312086df0</hash>\n         <hash alg=\"SHA-384\">8354a8e4d013f9467acdab7c477d609c715a784d8ba81f68b6aba19637c5378fc126c5953d6a83f8986e53d06f72dc52</hash>\n-        <hash alg=\"SHA3-384\">e1856f3840d3242c2790333ab22ec2b29019c30772f376f0f9caa6a401322e28a8d27581c1e71b28d06581708692d311</hash>\n-        <hash alg=\"SHA3-256\">454511c6e0ad15e3664d4526328feaeccfc08c5299c3b0519ad9a01d2441487e</hash>\n-        <hash alg=\"SHA3-512\">9535259336531d12e72102b96f84ad1ba09eff4f07c8dd1861782136d52d2807c203420c3b0d4da237453e94eac52f7e13e9a6e57c14f8ff351d0fbad0907975</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar</purl>\n@@ -444,17 +411,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">8a507817b28077e0478add944c64586a</hash>\n         <hash alg=\"SHA-1\">f029a2aefe2b3e1517573c580f948caac31b1056</hash>\n         <hash alg=\"SHA-256\">e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e</hash>\n         <hash alg=\"SHA-512\">c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668</hash>\n         <hash alg=\"SHA-384\">a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14</hash>\n-        <hash alg=\"SHA3-384\">c7a402c012e7cc62140fee3af3f33cfb71bfd99b9de11995c1d2de0a3be360e35f412bb706aef1bf1490185a7ff1216b</hash>\n-        <hash alg=\"SHA3-256\">d5ef6dc6ba69bf752fb4cc1de051125b802cb9460885f8004e5daa70c82e22dd</hash>\n-        <hash alg=\"SHA3-512\">e4b85827f87735bf2e94a54fd2db46a7805650aa49c1208a1d12a8b201f42b31acd022bf6386af68c43c6f678430b8232fab3987e31fc003511bf11c93e24a9f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-logging/commons-logging@1.0.4?type=jar</purl>\n@@ -485,17 +449,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">0522bf9642978992accc112311f56d1c</hash>\n         <hash alg=\"SHA-1\">5950a41eb9ea0a176755f75a5031bb0b9aa42ae9</hash>\n         <hash alg=\"SHA-256\">980fada2d8e4abc92c806355792163df46019a8e23c2ac776ba5cfd6eaa5752d</hash>\n         <hash alg=\"SHA-512\">9199d6c7c4d30cef41c4721a74376ed627e07b122d6bfe625f2d413959f8be783bc28f4683f8edd3cfe5eeaa08108f63f01b132bac830cb73bac554414b11f60</hash>\n         <hash alg=\"SHA-384\">988902fa0e848aab22b47a8a1d51368094e1ff6cf1e8ceee326cf6208d73c808f286df406d06d1e86d397470e69a92e2</hash>\n-        <hash alg=\"SHA3-384\">fe1fd15aaee36477bbf3767614f751c58e2cde00c58241a9494163e2e427fac83ef460c5c3294a3667a591a548431339</hash>\n-        <hash alg=\"SHA3-256\">1daa09c4fb56558fbf5b5f308afc32805da1a5d645c3a30e6aa879e67036cb14</hash>\n-        <hash alg=\"SHA3-512\">674c6bbd8e31c743ac9c889ca2d5f9a641770708038e123842c2ccc31b107a3d61f216e616354ed1f667e7131fa773e7f2ae3a067573f616d34c2e720e0852ec</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.htmlunit/neko-htmlunit@3.11.1?type=jar</purl>\n@@ -526,17 +487,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">90c46a2d4613049843c804867321e6a7</hash>\n         <hash alg=\"SHA-1\">ad96c3f8cf895e696dd35c2bc8e8ebe710be9e6d</hash>\n         <hash alg=\"SHA-256\">ce0e71d673acb9036bb55d0244b261cf033f8e4c1245f14f931dfb1937dd4c95</hash>\n         <hash alg=\"SHA-512\">a7fff0928a5f27a5bd45f9bfde7d24e4fc64b678d2f972b80162b42d7fddda5eb309aaf5d8780d0d018425b8c01c1859b0c925e26690cd8f0af41212fd035920</hash>\n         <hash alg=\"SHA-384\">b8618ec12f84fef03e566a909a149f3ac2b72f7ea4b2bc8b45c6d604b5a7e1f628b781a7e177041467f0919cf3195da7</hash>\n-        <hash alg=\"SHA3-384\">bed3dfc5d1215f8a8143495614912d9beca7642c2ba863985c7e4e515c30a6f78ffbb18fbe4a5886dcff637f6c0fa2fc</hash>\n-        <hash alg=\"SHA3-256\">b4b4f48729e7f5dc4dfb9b813fdee6b9045dec0f4957cc42bce9ed145a02816d</hash>\n-        <hash alg=\"SHA3-512\">4eee9b9e5db7c5f8ec9c554eb7c2160472ed7eb4404c44eafd314c126830af6d53f76b3c6f4a53872f2d23369dd56b0a4cd56fa69e3489c9ed69b993cad30e05</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -569,17 +527,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>\n         <hash alg=\"SHA-1\">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>\n         <hash alg=\"SHA-256\">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>\n         <hash alg=\"SHA-512\">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>\n         <hash alg=\"SHA-384\">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>\n-        <hash alg=\"SHA3-384\">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>\n-        <hash alg=\"SHA3-256\">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>\n-        <hash alg=\"SHA3-512\">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>\n@@ -607,17 +562,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>\n         <hash alg=\"SHA-1\">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>\n         <hash alg=\"SHA-256\">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>\n         <hash alg=\"SHA-512\">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>\n         <hash alg=\"SHA-384\">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>\n-        <hash alg=\"SHA3-384\">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>\n-        <hash alg=\"SHA3-256\">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>\n-        <hash alg=\"SHA3-512\">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n         <license>\n           <id>SAX-PD</id>\n@@ -660,17 +612,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">bcb07d3b8d2397db7a3013b6465d347b</hash>\n         <hash alg=\"SHA-1\">41a8b86b358e87f3f13cf46069721719105aff66</hash>\n         <hash alg=\"SHA-256\">d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646</hash>\n         <hash alg=\"SHA-512\">ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc</hash>\n         <hash alg=\"SHA-384\">b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd</hash>\n-        <hash alg=\"SHA3-384\">dc9b68500d2c845967652f5e04883a6ba3146c51bbfcd7d14cbaf0eaa44df3240e41af8d03b63aa536f4c21d503b4a79</hash>\n-        <hash alg=\"SHA3-256\">7d3d773a1d7c1cd6cb37a98985f1e119574844a31fa48e890c2fa1f1d0fae72a</hash>\n-        <hash alg=\"SHA3-512\">d7da19e6fe75a236e7be635927d32f9d0aaf864ad648f831414d0f296c9cdbdcabeb9886d190d3eaaf8bcaea24a417f71de13e8e9cd21513b83f0a671c339f36</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar</purl>\n@@ -700,17 +649,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">cd5917b77643c3a7ba5420aea78f940c</hash>\n         <hash alg=\"SHA-1\">05d2dc4ca5b632976371155252499819aea372ed</hash>\n         <hash alg=\"SHA-256\">e5d4f60be8e57595766ba7f1d4535dc46aebf98dae05e16372a4d4120d3ebb6b</hash>\n         <hash alg=\"SHA-512\">1a64f6911a94654d440ce4918395af0cbdee79696acbcf727af79134b02e6be17956fffa8f39e05fa9e22e336041443eb31165b338164b48a1c70f947e66d68b</hash>\n         <hash alg=\"SHA-384\">6875428ea8454185df4ac50b6551f9d9ba7d9152083eec2ecc5046aa464767982abfe0733c258f2dfed9fc3f2ad68add</hash>\n-        <hash alg=\"SHA3-384\">25422667753a299021150558bf094a6bd5a521a0b736d94866f807f3246b11a0574e9e480f85c7a894258979afdaedd4</hash>\n-        <hash alg=\"SHA3-256\">116a3c20fdd3253ab1cfc1bdc95c8d4eb3c454b3f7d89af1d2b87bde4b890c88</hash>\n-        <hash alg=\"SHA3-512\">0e9ee42600abe9496fedc2d82cd71e51fd05f26c0094c1710025d3931b79507a3502a9f9e83fddefeb6ed784123c7faa7251bd58368e78cdcc218481cd05045d</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>LGPL-2.1-only</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar</purl>\n@@ -731,17 +677,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">dd83accb899363c32b07d7a1b2e4ce40</hash>\n         <hash alg=\"SHA-1\">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>\n         <hash alg=\"SHA-256\">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>\n         <hash alg=\"SHA-512\">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>\n         <hash alg=\"SHA-384\">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>\n-        <hash alg=\"SHA3-384\">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>\n-        <hash alg=\"SHA3-256\">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>\n-        <hash alg=\"SHA3-512\">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>\n"}]}