{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:32659a61-cdf0-37be-a022-94a9e064ca36",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.11",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "a70e8b649ab4a2bb7922d360173c8237"
          },
          {
            "alg" : "SHA-1",
            "content" : "4c3c0878c15561639076e5be7a48ffcd6111c5ee"
          },
          {
            "alg" : "SHA-256",
            "content" : "70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5"
          },
          {
            "alg" : "SHA-512",
            "content" : "bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8"
          },
          {
            "alg" : "SHA-384",
            "content" : "3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "OWASP Foundation",
      "group" : "org.owasp.antisamy",
      "name" : "antisamy",
      "version" : "1.7.5",
      "description" : "A library for performing fast, configurable cleansing of HTML coming from untrusted sources.",
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/nahsra/antisamy"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:nahsra/antisamy.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.5?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.15.1",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "84351f7991a0e6722f00e96a4ccc376f"
        },
        {
          "alg" : "SHA-1",
          "content" : "f11560da189ab563a5c8e351941415430e9304ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "a58af12ee1b68cfd2ebb0c27caef164f084381a00ec81a48cc275fd7ea54e154"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9adaeed2d715ac0ae44de056ba165a743a92acbeb9871b535f7e58e0b3bc4fba276495b50429be195098a559f3adb7294048479754a0ee4d397da2efda5f81c"
        },
        {
          "alg" : "SHA-384",
          "content" : "028c72b59373d3894da22f9eb2c731aabd00f670993973f71a354d722670c12ca659686b83bbf8db32d060ca180f50b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.client5",
      "name" : "httpclient5",
      "version" : "5.3.1",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de1810a606b27192cbf5bbad9c25a648"
        },
        {
          "alg" : "SHA-1",
          "content" : "56b53c8f4bcdaada801d311cf2ff8a24d6d96883"
        },
        {
          "alg" : "SHA-256",
          "content" : "08346a757c617f6ecc66af9f099260adde1f3a1351fa81cb22fc17482b31f823"
        },
        {
          "alg" : "SHA-512",
          "content" : "4c2d75106af8470789f0e08305e64ad86528f2f737da230e561892d33dbca0b6e2dbced2a075f0744cee7801c06ef174481540661b3c9a1bec6d6f93938b05bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "27470f74660b89f8a0af562a4edbd244afff4947b0fa7364c61e53ca49713efbca49e661214590f532c4acf9cfd66eac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-client-5.0.x/5.3.1/httpclient5/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/5.3.1/httpclient5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5-h2",
      "version" : "5.2.4",
      "description" : "Apache HttpComponents HTTP/2 Core Components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d407b8144029db656ac5ba3d54ef801f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2872764df7b4857549e2880dd32a6f9009166289"
        },
        {
          "alg" : "SHA-256",
          "content" : "dc1a95e73eb04db93451533d390ce02c53b301a10dc343d08c862f2934b3d30e"
        },
        {
          "alg" : "SHA-512",
          "content" : "72fbee55f173c43d9ffc0cc5a83d59e60be1002c06ab81de39ba700cc30b04e84fdfed73d3a8985d561a1aa8ac3ca905f9259d01b431e1ff14da6fae622f787d"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f96537af2866fa96aae46138febe3009dca97cc9b4284cf18510c12d159ad3f5d34c3c9bafc8026215da81520331660"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5-h2/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.2.4/httpcore5-h2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents.core5",
      "name" : "httpcore5",
      "version" : "5.2.4",
      "description" : "Apache HttpComponents HTTP/1.1 core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5a3d417ea4e65e0f74194263dc5c6c43"
        },
        {
          "alg" : "SHA-1",
          "content" : "34d8332b975f9e9a8298efe4c883ec43d45b7059"
        },
        {
          "alg" : "SHA-256",
          "content" : "a7f62496113f66f9e27c26b84c44f5ce4555c6270083cdf2d45f255336cd52af"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fb4134d85e665e15410af005b21cd2f9b5e60d75112945d37b879f96f769a70be034557526ea7d05f8b83dda91c56d00f946763c44a183d7aea2857549b4481"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ec2da2fd22a23e9f740589947398a907795ab310d4ed166ecc1448ceea7035a50090cf645dad28f3c84c08599f1e57e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?httpclient-users@hc.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/5.2.4/httpcore5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-css",
      "version" : "1.17",
      "description" : "Batik CSS engine",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1b046ef30c8b779093a5f53ccea593e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5ff4e0463af8a0ea5ab8d782c5418bab2f45c4d"
        },
        {
          "alg" : "SHA-256",
          "content" : "dcf9a902bd0c4b1a84ac0561d7b66052bc93381c4923a5bc5602290c1c82b779"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c61d831dba764491641ef7533010838b8f74afffa2b5f80b99101cf03c740d6156166df8aa9a669f5ee78d0957616f347d35474665fd5eafe93ce6765fcd112"
        },
        {
          "alg" : "SHA-384",
          "content" : "84c12329baed416325cc678f930891803c40910ab4d0aecf179c76fd8a6a4fccb28d829e4fd77ae7d7ad8d81dbc58d27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-css/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-css/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-shared-resources",
      "version" : "1.17",
      "description" : "Batik Shared Resources",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "59f84de4324c9e33fa823d99c99622e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "2862b81d9dc63990cb5586323b4a2410fc1f2249"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d74182b9ca19ecd8d4814f2ff4b42a4aeea6e18977e905cc84e8a6f81940c9f"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab12db3ab9c99a6756d61d614aa19c4647439135b1e5a49409e2ca2f47500117e43436e388176b1377fd90e2939b49bb70c59a4c3b7c2d81a403feb20be798cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "78610c728b0225ec5958e5b4c46d8f15bb2c0fe030c8f851db32d6406b88244856e020fee7cac432762f138e00b5a3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-shared-resources/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-shared-resources/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-util",
      "version" : "1.17",
      "description" : "Batik utility library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27e4b764585781f8d8db4ce2d617b143"
        },
        {
          "alg" : "SHA-1",
          "content" : "83ef2a8b449444a1d57e91e938522899317a8672"
        },
        {
          "alg" : "SHA-256",
          "content" : "a1e4f743c8b80ac682edd4b397faa4ac42de591343036324c80ee8f22973c976"
        },
        {
          "alg" : "SHA-512",
          "content" : "d18316d086042baa4f664ef635c7b8e6a376b5ef40fca2f5015d7ddac7b6873001d2d695f750cdba4287964f0a047c837ec716c07294295962dee8ed6e90c71e"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd886db9f7efed4cbb70e022bcf670e3d11c5815094523f92bb43436a43a34de2c7b70266ceb4b51c977e087dcd07f27"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-util/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-constants",
      "version" : "1.17",
      "description" : "Batik constants library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "25af6878d4a0c41eac9e95b7859dcdf5"
        },
        {
          "alg" : "SHA-1",
          "content" : "22bf8b4c207dc46859db0269853186d8dfc8cb9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "75db00180bde4ef5caee3916d6f65e5045051d59cf51d57e673c03969d7bbbcd"
        },
        {
          "alg" : "SHA-512",
          "content" : "4e3f5684f5439d2d3c64c8578b89270257c5ce8b0445129e734203f8b2f95f03642cc16e2e95b997e839912909b20ba8a1893f2ef5eca0958c2a3eb9484ee9c2"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa6cd06a07a73bc335465d9875a04d2f103cdffd8db8f7c1cce2c24faa0469c1ab2179509254a93ffe919d81d3982d50"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-constants/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-constants/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "batik-i18n",
      "version" : "1.17",
      "description" : "Batik i18n library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "10ba9936f23cfab12698ae80618660a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b233a71430ffa9d0282d47789a58fa8bf4f861"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5a64680363e7b36b3f28c34a3a536d76e847f77cec0740aab7c799a67b52d8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "014461687f1de3b3cd3e2051317f9b84a880a60ebfd67c7237c0c8f3148c90ff85b2e55197ada43cad3e10c59e58b636ced2721e4cd9cb136bff8ae009baec8e"
        },
        {
          "alg" : "SHA-384",
          "content" : "53d9a624355b1eb6b6121e2b8c098565b2182bc7cada9e93b4c71da544f619e93a7462f1adc12c05b6ffe6e7cf23e289"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/batik/batik-i18n/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-batik-users/"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/xmlgraphics/batik/trunk/batik-i18n/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.xmlgraphics",
      "name" : "xmlgraphics-commons",
      "version" : "2.9",
      "description" : "Apache XML Graphics Commons is a library that consists of several reusable components used by Apache Batik and Apache FOP. Many of these components can easily be used separately outside the domains of SVG and XSL-FO.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f398edbe3eb048508d88158378b55c48"
        },
        {
          "alg" : "SHA-1",
          "content" : "de2d1bd8d40474bbe876bb269410c750489f08e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2ebd333ab2a624514793c336e3af086608673286fe37ba1e639e0ac3e1b58be2"
        },
        {
          "alg" : "SHA-512",
          "content" : "397dcfaa12b6e0e3906fd2cc400b58e123c4d8c874b44888b1aed58abd022fb836543047e2684c6c5490824526f34d4aebe651cb16ee6753373880a312086df0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8354a8e4d013f9467acdab7c477d609c715a784d8ba81f68b6aba19637c5378fc126c5953d6a83f8986e53d06f72dc52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlgraphics.apache.org/commons/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xmlgraphics-general/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xmlgraphics/commons/trunk/?root=Apache-SVN"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.0.4",
      "description" : "Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8a507817b28077e0478add944c64586a"
        },
        {
          "alg" : "SHA-1",
          "content" : "f029a2aefe2b3e1517573c580f948caac31b1056"
        },
        {
          "alg" : "SHA-256",
          "content" : "e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668"
        },
        {
          "alg" : "SHA-384",
          "content" : "a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/logging/"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/logging/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://nagoya.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.apache.org/viewcvs/jakarta-commons/logging/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"
    },
    {
      "publisher" : "HtmlUnit",
      "group" : "org.htmlunit",
      "name" : "neko-htmlunit",
      "version" : "3.11.1",
      "description" : "NekoHtml is the Html parser used by HtmlUnit.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0522bf9642978992accc112311f56d1c"
        },
        {
          "alg" : "SHA-1",
          "content" : "5950a41eb9ea0a176755f75a5031bb0b9aa42ae9"
        },
        {
          "alg" : "SHA-256",
          "content" : "980fada2d8e4abc92c806355792163df46019a8e23c2ac776ba5cfd6eaa5752d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9199d6c7c4d30cef41c4721a74376ed627e07b122d6bfe625f2d413959f8be783bc28f4683f8edd3cfe5eeaa08108f63f01b132bac830cb73bac554414b11f60"
        },
        {
          "alg" : "SHA-384",
          "content" : "988902fa0e848aab22b47a8a1d51368094e1ff6cf1e8ceee326cf6208d73c808f286df406d06d1e86d397470e69a92e2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.htmlunit/neko-htmlunit@3.11.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.htmlunit.org"
        },
        {
          "type" : "build-system",
          "url" : "https://jenkins.wetator.org/view/HtmlUnit/"
        },
        {
          "type" : "distribution",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/HtmlUnit/neko-htmlunit/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/htmlunit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.11.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.11",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90c46a2d4613049843c804867321e6a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad96c3f8cf895e696dd35c2bc8e8ebe710be9e6d"
        },
        {
          "alg" : "SHA-256",
          "content" : "ce0e71d673acb9036bb55d0244b261cf033f8e4c1245f14f931dfb1937dd4c95"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7fff0928a5f27a5bd45f9bfde7d24e4fc64b678d2f972b80162b42d7fddda5eb309aaf5d8780d0d018425b8c01c1859b0c925e26690cd8f0af41212fd035920"
        },
        {
          "alg" : "SHA-384",
          "content" : "b8618ec12f84fef03e566a909a149f3ac2b72f7ea4b2bc8b45c6d604b5a7e1f628b781a7e177041467f0919cf3195da7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar"
    },
    {
      "group" : "xerces",
      "name" : "xercesImpl",
      "version" : "2.12.2",
      "description" : "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \"XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\" is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg" : "SHA-512",
          "content" : "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg" : "SHA-384",
          "content" : "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://xerces.apache.org/xerces2-j/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/xerces/java/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar"
    },
    {
      "group" : "xml-apis",
      "name" : "xml-apis",
      "version" : "1.4.01",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7eaad6fea5925cca6c36ee8b3e02ac9d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3789d9fada2d3d458c4ba2de349d48780f381ee3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268"
        },
        {
          "alg" : "SHA-384",
          "content" : "bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "SAX-PD",
            "url" : "http://www.saxproject.org/copying.html"
          }
        },
        {
          "license" : {
            "name" : "The W3C License",
            "url" : "http://www.w3.org/TR/2004/REC-DOM-Level-3-Core-20040407/java-binding.zip"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_4_01/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "xml-apis",
      "name" : "xml-apis-ext",
      "version" : "1.3.04",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier. The External Components portion of xml-commons contains interfaces that are defined by external standards organizations. For DOM, that's the W3C; for SAX it's David Megginson and sax.sourceforge.net; for JAXP it's Sun.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcb07d3b8d2397db7a3013b6465d347b"
        },
        {
          "alg" : "SHA-1",
          "content" : "41a8b86b358e87f3f13cf46069721719105aff66"
        },
        {
          "alg" : "SHA-256",
          "content" : "d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/external/"
        },
        {
          "type" : "distribution",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-external-1_3_04/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
    },
    {
      "group" : "com.github.spotbugs",
      "name" : "spotbugs-annotations",
      "version" : "4.8.3",
      "description" : "Annotations the SpotBugs tool supports",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd5917b77643c3a7ba5420aea78f940c"
        },
        {
          "alg" : "SHA-1",
          "content" : "05d2dc4ca5b632976371155252499819aea372ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "e5d4f60be8e57595766ba7f1d4535dc46aebf98dae05e16372a4d4120d3ebb6b"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a64f6911a94654d440ce4918395af0cbdee79696acbcf727af79134b02e6be17956fffa8f39e05fa9e22e336041443eb31165b338164b48a1c70f947e66d68b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6875428ea8454185df4ac50b6551f9d9ba7d9152083eec2ecc5046aa464767982abfe0733c258f2dfed9fc3f2ad68add"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://spotbugs.github.io/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spotbugs/spotbugs/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.owasp.antisamy/antisamy@1.7.5?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
        "pkg:maven/org.htmlunit/neko-htmlunit@3.11.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
        "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.15.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
        "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.htmlunit/neko-htmlunit@3.11.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-apis/xml-apis@1.4.01?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}