{"diffoscope-json-version": 1, "source1": "/input1", "source2": "/input2", "unified_diff": null, "details": [{"source1": "/input1", "source2": "/input2", "unified_diff": "@@ -13,17 +13,14 @@\n         <version>2.8.0</version>\n         <hashes>\n           <hash alg=\"MD5\">76ffec6a7ddd46b2b24517411874eb99</hash>\n           <hash alg=\"SHA-1\">5b0d5b41975b53be4799b9621b4af0cfc41d44b6</hash>\n           <hash alg=\"SHA-256\">6852aa0f4e42a2db745bab80e384951a6a65b9215d041081d675780999027e81</hash>\n           <hash alg=\"SHA-512\">417de20fcdcb11c9713bacbd57290d8e68037fdb4553fd31b8cb08bd760ad52dc65ea88ad4be15844ad3fd5a4d3e440d2f70326f2fe1e63ec78e059c9a883f8d</hash>\n           <hash alg=\"SHA-384\">5eb755c6492e7a7385fa9a1e1f4517875bcb834b2df437808a37a2d6f5285df428741762305980315a63fcef1406597d</hash>\n-          <hash alg=\"SHA3-384\">0fe16a47cf7aab0b22251dafcc39939b68e8f1778093309d8d2060b51a08df445a8b8ed5a9561669faf2e55f907c76d8</hash>\n-          <hash alg=\"SHA3-256\">3e5a1eb5ab7d0797498862794709ff8eaaa071fe4cc9ec77f52db7e2f97ef487</hash>\n-          <hash alg=\"SHA3-512\">59281a3e29e76270d7f44b40b5b9f05e55f1ae3ec716d80add806f360940809e3813998ac7c5758043b8e248aed73b86e37dc506cdb4cde03c16bb617d8e5a3a</hash>\n         </hashes>\n       </tool>\n     </tools>\n     <component type=\"library\" bom-ref=\"pkg:maven/org.owasp.antisamy/antisamy@1.7.6?type=jar\">\n       <publisher>OWASP Foundation</publisher>\n       <group>org.owasp.antisamy</group>\n       <name>antisamy</name>\n@@ -65,17 +62,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">ed8191a5a217940140001b0acfed18d9</hash>\n         <hash alg=\"SHA-1\">377d592e740dc77124e0901291dbfaa6810a200e</hash>\n         <hash alg=\"SHA-256\">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>\n         <hash alg=\"SHA-512\">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>\n         <hash alg=\"SHA-384\">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>\n-        <hash alg=\"SHA3-384\">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>\n-        <hash alg=\"SHA3-256\">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>\n-        <hash alg=\"SHA3-512\">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n           <url>https://www.apache.org/licenses/LICENSE-2.0</url>\n         </license>\n       </licenses>\n@@ -110,17 +104,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">de1810a606b27192cbf5bbad9c25a648</hash>\n         <hash alg=\"SHA-1\">56b53c8f4bcdaada801d311cf2ff8a24d6d96883</hash>\n         <hash alg=\"SHA-256\">08346a757c617f6ecc66af9f099260adde1f3a1351fa81cb22fc17482b31f823</hash>\n         <hash alg=\"SHA-512\">4c2d75106af8470789f0e08305e64ad86528f2f737da230e561892d33dbca0b6e2dbced2a075f0744cee7801c06ef174481540661b3c9a1bec6d6f93938b05bc</hash>\n         <hash alg=\"SHA-384\">27470f74660b89f8a0af562a4edbd244afff4947b0fa7364c61e53ca49713efbca49e661214590f532c4acf9cfd66eac</hash>\n-        <hash alg=\"SHA3-384\">d25be0f1c5e0c02de0adf7113e591f10bd7fab20c168a20b7d15c859b252a6dc3ae3a24098e838d95c179ab3107f07b6</hash>\n-        <hash alg=\"SHA3-256\">9e22ce6935e71d12d1be70ef0b7cea9a87191c767de2904cb82fcb6e58d0e9b2</hash>\n-        <hash alg=\"SHA3-512\">9d36e201e469dd357ef715bba7beba62dbea98daefcea3b793fd285c2ffade97d72b35a07f05015fbc2d5b4fa5db58ff5ecf40e1269582a6c3e53ed62cbf97f4</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar</purl>\n@@ -151,17 +142,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">d407b8144029db656ac5ba3d54ef801f</hash>\n         <hash alg=\"SHA-1\">2872764df7b4857549e2880dd32a6f9009166289</hash>\n         <hash alg=\"SHA-256\">dc1a95e73eb04db93451533d390ce02c53b301a10dc343d08c862f2934b3d30e</hash>\n         <hash alg=\"SHA-512\">72fbee55f173c43d9ffc0cc5a83d59e60be1002c06ab81de39ba700cc30b04e84fdfed73d3a8985d561a1aa8ac3ca905f9259d01b431e1ff14da6fae622f787d</hash>\n         <hash alg=\"SHA-384\">2f96537af2866fa96aae46138febe3009dca97cc9b4284cf18510c12d159ad3f5d34c3c9bafc8026215da81520331660</hash>\n-        <hash alg=\"SHA3-384\">9900a3aeaf434d7f32a7500e29e16d354857ef34e6af3fb7de9e1ab7683b6a1c4bfa9b9f70bb779a8ec8d8be82b6bca4</hash>\n-        <hash alg=\"SHA3-256\">da34ed59342e368229b74245d2268a457588adea9e276a1ac2fb57419c605f31</hash>\n-        <hash alg=\"SHA3-512\">ca5b03cf34c7e344fd0b809c582e60f0eaea796372cf68e2e95087ac5943154e51472595f6554b810a5ac4789ba6f7c06cae46437badecbf31c57907123a49fc</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar</purl>\n@@ -192,17 +180,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">419f7b3172ebee12dd64af978feb4351</hash>\n         <hash alg=\"SHA-1\">dab1e18842971a45ca8942491ce005ab86a028d7</hash>\n         <hash alg=\"SHA-256\">9552b9e06cef3170e37046092de115c33a7cb48ee7ef0d87f1d5650dee7e1b0d</hash>\n         <hash alg=\"SHA-512\">b23e90b4b891378c2e4ff35b16f4a1dd97d2a11ca10ee15441e82ccb3d1a7589ea50fa277e7f557db472e3946cf46f371a265a3bbd0ff70801d99a6c90f6bbf3</hash>\n         <hash alg=\"SHA-384\">01259db34f52668fd409912b49e8370a4916f0bc4e7e31a7219facc97041d842d06d8b9616273923775c1e28cb2aa257</hash>\n-        <hash alg=\"SHA3-384\">844e77f78dbb01e36758c61bbad37c6e63d5cf2bc351788d649bdde4daa60b9a1fe2eee7bc8d105d3f4e95f822dfe9e1</hash>\n-        <hash alg=\"SHA3-256\">d033fdbdca628a9c69aaf684766d039a663fabece75900064b3543d089b46573</hash>\n-        <hash alg=\"SHA3-512\">1d46155ae902360a4f267ed08165f1424a0cab440b66d429b716187a96125e7bfcb90a71af7266ef2fd5a81d75ead59dbeacf4b943d404750487ff01c4c84903</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar</purl>\n@@ -233,17 +218,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">b1b046ef30c8b779093a5f53ccea593e</hash>\n         <hash alg=\"SHA-1\">d5ff4e0463af8a0ea5ab8d782c5418bab2f45c4d</hash>\n         <hash alg=\"SHA-256\">dcf9a902bd0c4b1a84ac0561d7b66052bc93381c4923a5bc5602290c1c82b779</hash>\n         <hash alg=\"SHA-512\">6c61d831dba764491641ef7533010838b8f74afffa2b5f80b99101cf03c740d6156166df8aa9a669f5ee78d0957616f347d35474665fd5eafe93ce6765fcd112</hash>\n         <hash alg=\"SHA-384\">84c12329baed416325cc678f930891803c40910ab4d0aecf179c76fd8a6a4fccb28d829e4fd77ae7d7ad8d81dbc58d27</hash>\n-        <hash alg=\"SHA3-384\">d065249893bdafa05ca2ba1e7c95a93ae52f95bed47ff0a8ebcda6be2ed2a71fea4c7c312792c3b74aa080f67f315c56</hash>\n-        <hash alg=\"SHA3-256\">2095d84c77bcf402059b395fea14182f0f9129bb8d87e67ee7661d68b038cc95</hash>\n-        <hash alg=\"SHA3-512\">4268eef2a0273ced00d154228101674fa2ce096173470aceedb3d26871873a7c31ac6674b553d0820928b13a934b11d9bdc667a05770e5a3a6fd33ebd66a70ff</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-css@1.17?type=jar</purl>\n@@ -268,17 +250,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">59f84de4324c9e33fa823d99c99622e9</hash>\n         <hash alg=\"SHA-1\">2862b81d9dc63990cb5586323b4a2410fc1f2249</hash>\n         <hash alg=\"SHA-256\">5d74182b9ca19ecd8d4814f2ff4b42a4aeea6e18977e905cc84e8a6f81940c9f</hash>\n         <hash alg=\"SHA-512\">ab12db3ab9c99a6756d61d614aa19c4647439135b1e5a49409e2ca2f47500117e43436e388176b1377fd90e2939b49bb70c59a4c3b7c2d81a403feb20be798cd</hash>\n         <hash alg=\"SHA-384\">78610c728b0225ec5958e5b4c46d8f15bb2c0fe030c8f851db32d6406b88244856e020fee7cac432762f138e00b5a3f8</hash>\n-        <hash alg=\"SHA3-384\">8cbbb5a4886ee43e1e948ce3ce790fe5ad8b3264d996fbcc9991ba77fd5c7ce625cbca2630acd625bbb398165e4b1632</hash>\n-        <hash alg=\"SHA3-256\">25ce2fd0032b04419583bad01eeb3aae9f0109af62dd29a5d60a16ce1451288b</hash>\n-        <hash alg=\"SHA3-512\">86214d5288e13f2389fa475d9de41f10660ba5ebece2c9bbf58467a006674849db0c1511af68597e6bd021d7401600d7f75cd8475dd80d3af2e410240cfea7b0</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-shared-resources@1.17?type=jar</purl>\n@@ -303,17 +282,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">27e4b764585781f8d8db4ce2d617b143</hash>\n         <hash alg=\"SHA-1\">83ef2a8b449444a1d57e91e938522899317a8672</hash>\n         <hash alg=\"SHA-256\">a1e4f743c8b80ac682edd4b397faa4ac42de591343036324c80ee8f22973c976</hash>\n         <hash alg=\"SHA-512\">d18316d086042baa4f664ef635c7b8e6a376b5ef40fca2f5015d7ddac7b6873001d2d695f750cdba4287964f0a047c837ec716c07294295962dee8ed6e90c71e</hash>\n         <hash alg=\"SHA-384\">cd886db9f7efed4cbb70e022bcf670e3d11c5815094523f92bb43436a43a34de2c7b70266ceb4b51c977e087dcd07f27</hash>\n-        <hash alg=\"SHA3-384\">6f2a47cf58bf589c67f091f3be0d3402fe4a887675a771f9d552034991030069f02df967f34da9bc7b73740db3f3ff2b</hash>\n-        <hash alg=\"SHA3-256\">d0c4a09755b50ceca68260eb7278b078a45e68174316a094440ea24738b3a6c4</hash>\n-        <hash alg=\"SHA3-512\">2c51be3e86ba14ac549402dc01040b70d790f9b0240d7997439f2687bf702f6fcb174ca01b71200a45d5735a1ef428cf6ef9138f8c86c3ef5f6f748b5abc3408</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-util@1.17?type=jar</purl>\n@@ -338,17 +314,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">25af6878d4a0c41eac9e95b7859dcdf5</hash>\n         <hash alg=\"SHA-1\">22bf8b4c207dc46859db0269853186d8dfc8cb9a</hash>\n         <hash alg=\"SHA-256\">75db00180bde4ef5caee3916d6f65e5045051d59cf51d57e673c03969d7bbbcd</hash>\n         <hash alg=\"SHA-512\">4e3f5684f5439d2d3c64c8578b89270257c5ce8b0445129e734203f8b2f95f03642cc16e2e95b997e839912909b20ba8a1893f2ef5eca0958c2a3eb9484ee9c2</hash>\n         <hash alg=\"SHA-384\">aa6cd06a07a73bc335465d9875a04d2f103cdffd8db8f7c1cce2c24faa0469c1ab2179509254a93ffe919d81d3982d50</hash>\n-        <hash alg=\"SHA3-384\">c940c7d2c04387d4208576a492cf6a519d019bc982cb5097ed3b2050fb3d75cf557684ee56dc8a703c57d914d6595340</hash>\n-        <hash alg=\"SHA3-256\">fc88ee30d54be59d4285b003142b8341f6af0400e34776a1686ecba1209e5085</hash>\n-        <hash alg=\"SHA3-512\">bc0a50f23efb2467cc4448031c1ddcb1557785d0eaa25b2ac255c931d29d1b7429999b1e2150c3e4e558cb36d3624cecfed368a5439202a5cb2ef5e2ba523617</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-constants@1.17?type=jar</purl>\n@@ -373,17 +346,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">10ba9936f23cfab12698ae80618660a9</hash>\n         <hash alg=\"SHA-1\">39b233a71430ffa9d0282d47789a58fa8bf4f861</hash>\n         <hash alg=\"SHA-256\">d5a64680363e7b36b3f28c34a3a536d76e847f77cec0740aab7c799a67b52d8b</hash>\n         <hash alg=\"SHA-512\">014461687f1de3b3cd3e2051317f9b84a880a60ebfd67c7237c0c8f3148c90ff85b2e55197ada43cad3e10c59e58b636ced2721e4cd9cb136bff8ae009baec8e</hash>\n         <hash alg=\"SHA-384\">53d9a624355b1eb6b6121e2b8c098565b2182bc7cada9e93b4c71da544f619e93a7462f1adc12c05b6ffe6e7cf23e289</hash>\n-        <hash alg=\"SHA3-384\">b903888c749e3f92875999d433af6d7130dfd637d782bce8d7061b07ce7dfd1ad0313942264d15cd8f24c56de9c31449</hash>\n-        <hash alg=\"SHA3-256\">0543ea821d91468cb4e5a7c4ebb4792f16da223f3048b3416d2fe802525b9565</hash>\n-        <hash alg=\"SHA3-512\">27e59144a94f1091887c7475f7ba0aeeed6043487892a7feae0c9625d2bcdfe4921ed627b896547ee8ea7e58ff0422e713c91cce83957fb77b1fd6c09c861f91</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/batik-i18n@1.17?type=jar</purl>\n@@ -410,17 +380,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">f398edbe3eb048508d88158378b55c48</hash>\n         <hash alg=\"SHA-1\">de2d1bd8d40474bbe876bb269410c750489f08e5</hash>\n         <hash alg=\"SHA-256\">2ebd333ab2a624514793c336e3af086608673286fe37ba1e639e0ac3e1b58be2</hash>\n         <hash alg=\"SHA-512\">397dcfaa12b6e0e3906fd2cc400b58e123c4d8c874b44888b1aed58abd022fb836543047e2684c6c5490824526f34d4aebe651cb16ee6753373880a312086df0</hash>\n         <hash alg=\"SHA-384\">8354a8e4d013f9467acdab7c477d609c715a784d8ba81f68b6aba19637c5378fc126c5953d6a83f8986e53d06f72dc52</hash>\n-        <hash alg=\"SHA3-384\">e1856f3840d3242c2790333ab22ec2b29019c30772f376f0f9caa6a401322e28a8d27581c1e71b28d06581708692d311</hash>\n-        <hash alg=\"SHA3-256\">454511c6e0ad15e3664d4526328feaeccfc08c5299c3b0519ad9a01d2441487e</hash>\n-        <hash alg=\"SHA3-512\">9535259336531d12e72102b96f84ad1ba09eff4f07c8dd1861782136d52d2807c203420c3b0d4da237453e94eac52f7e13e9a6e57c14f8ff351d0fbad0907975</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.apache.xmlgraphics/xmlgraphics-commons@2.9?type=jar</purl>\n@@ -449,17 +416,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">8a507817b28077e0478add944c64586a</hash>\n         <hash alg=\"SHA-1\">f029a2aefe2b3e1517573c580f948caac31b1056</hash>\n         <hash alg=\"SHA-256\">e94af49749384c11f5aa50e8d0f5fe679be771295b52030338d32843c980351e</hash>\n         <hash alg=\"SHA-512\">c8d2d39a60adcc49091d393daf30473d1776e4b6b09bb86639171f660833a17afbdc9f3e85843093535da16fa664cd7cd4ca38f54e141018dd1b78de681ad668</hash>\n         <hash alg=\"SHA-384\">a08af7c449f30861b88cc8d6ebdc97a480e03a6f5cc56314759a3b6342a3885986ef5016c184c33f89e4a445997d5d14</hash>\n-        <hash alg=\"SHA3-384\">c7a402c012e7cc62140fee3af3f33cfb71bfd99b9de11995c1d2de0a3be360e35f412bb706aef1bf1490185a7ff1216b</hash>\n-        <hash alg=\"SHA3-256\">d5ef6dc6ba69bf752fb4cc1de051125b802cb9460885f8004e5daa70c82e22dd</hash>\n-        <hash alg=\"SHA3-512\">e4b85827f87735bf2e94a54fd2db46a7805650aa49c1208a1d12a8b201f42b31acd022bf6386af68c43c6f678430b8232fab3987e31fc003511bf11c93e24a9f</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/commons-logging/commons-logging@1.0.4?type=jar</purl>\n@@ -490,17 +454,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">13ea502c89e57d59775faf093485dcfa</hash>\n         <hash alg=\"SHA-1\">b4f8b3bd6213ea030e570e6b6a43de8789c2c76b</hash>\n         <hash alg=\"SHA-256\">40b538e87aa351cca619f904ce09bf4e1cffb1b2e6a00a5edbe4dce7849925f7</hash>\n         <hash alg=\"SHA-512\">6ec0cb2cadd92287ac84673eefae7dc05040dc70f111ea01a56bc1265b46a4252ad3db18723e00bbe25687bdccee38774a4381a8b33d1e1d30a4cec833bf8a05</hash>\n         <hash alg=\"SHA-384\">ced88ab5e3af84ee2fd1ba7e2cf7c2de17ab4797583fae7e0c6bf6c0a2f7a0266a04f4b0ed9e3fd0c9079324e706a3f7</hash>\n-        <hash alg=\"SHA3-384\">b19dd17bbefbf1e393a1f1a566ab4880d1b2b87d0e7fa7001140c91d70234eea8c02afe8c90e2be2583cae43e8c310de</hash>\n-        <hash alg=\"SHA3-256\">7e8e11ebffb717b231761f58e51255a6ffb06121d31988fdadbd1153bbe3643b</hash>\n-        <hash alg=\"SHA3-512\">1820271ed55fcf4b44eccc08d83c484da31e504fd6ea283f27ac33085498afd2f0f3a8c9781b44562021e0ef0c351c3decd15b7bcda4309847c5812e76f057b6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/org.htmlunit/neko-htmlunit@4.3.0?type=jar</purl>\n@@ -531,17 +492,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">7f4028aa04f75427327f3f30cd62ba4e</hash>\n         <hash alg=\"SHA-1\">80229737f704b121a318bba5d5deacbcf395bc77</hash>\n         <hash alg=\"SHA-256\">e7c2a48e8515ba1f49fa637d57b4e2f590b3f5bd97407ac699c3aa5efb1204a9</hash>\n         <hash alg=\"SHA-512\">b4eeb5757118e264ec7f107d879270784357380d6f53471b7874dd7e0166fdf5686a95eb66bab867abbe9536da032ab052e207165211391c293cbf6178431fb6</hash>\n         <hash alg=\"SHA-384\">b67cbb4ef32141423000dd4e067bf32e0c1dd2c4689c611522b9fedfc1744513175a22f4b1276f2cec4721c9467cf882</hash>\n-        <hash alg=\"SHA3-384\">817fc9641f4fc52bfd76006886c6eba975f6f09b2a7cc59334729a8cc033807c8e89be9ec4309acfc16ed65ff6eee018</hash>\n-        <hash alg=\"SHA3-256\">f26080cceb5a2e605f3844d6dc8dd3f14c543cb14510765d841d71a64fa454dc</hash>\n-        <hash alg=\"SHA3-512\">00646c78d65ec854e157638f40735f1888aa585ede59915d58386c599c2fe54ec8c1da73284aeff00ce3142165e33c4c995ad39d08843c31e9e4d7e32c746836</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>MIT</id>\n           <url>https://opensource.org/licenses/MIT</url>\n         </license>\n       </licenses>\n@@ -574,17 +532,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>\n         <hash alg=\"SHA-1\">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>\n         <hash alg=\"SHA-256\">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>\n         <hash alg=\"SHA-512\">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>\n         <hash alg=\"SHA-384\">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>\n-        <hash alg=\"SHA3-384\">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>\n-        <hash alg=\"SHA3-256\">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>\n-        <hash alg=\"SHA3-512\">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>\n@@ -612,17 +567,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">7eaad6fea5925cca6c36ee8b3e02ac9d</hash>\n         <hash alg=\"SHA-1\">3789d9fada2d3d458c4ba2de349d48780f381ee3</hash>\n         <hash alg=\"SHA-256\">a840968176645684bb01aed376e067ab39614885f9eee44abe35a5f20ebe7fad</hash>\n         <hash alg=\"SHA-512\">8db0283b6840cd6407957d296b802e3edf90653e2722f8e29f86c1c0b60996c4b43e9e065e6864dab89b2138ddb0174d9b4fdda4a93f94eeb884783db82f3268</hash>\n         <hash alg=\"SHA-384\">bce0ec0f0f692213a1110197c4a11c333673ae0630481255d12b441a8cba70aecfaf104c3d8d9b500ed2a0a19a2bfcce</hash>\n-        <hash alg=\"SHA3-384\">c1d8154ef6eee57dfe6ae9a1c1a2525e9ec2aab3631911a53c064ea6480c0b3b1ce8dd079db7b3693d7ef81daba28ace</hash>\n-        <hash alg=\"SHA3-256\">09eb76497eac5012ce1000c52f4e597c4941a44b9d960b1ac58a19beb2dd63fc</hash>\n-        <hash alg=\"SHA3-512\">1e4eb902e50b3388da4d161ee49f4d47b61dddd2ad10e6ef6cbb67c4ebc9043e0b65ae59a4a0c8eb03dd28814ce4aedd7e0d4962a0aedc3bdcf7de37cde38f66</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n         <license>\n           <id>SAX-PD</id>\n@@ -665,17 +617,14 @@\n       <scope>required</scope>\n       <hashes>\n         <hash alg=\"MD5\">bcb07d3b8d2397db7a3013b6465d347b</hash>\n         <hash alg=\"SHA-1\">41a8b86b358e87f3f13cf46069721719105aff66</hash>\n         <hash alg=\"SHA-256\">d0b4887dc34d57de49074a58affad439a013d0baffa1a8034f8ef2a5ea191646</hash>\n         <hash alg=\"SHA-512\">ac0896b9a3fea71644330daef4eccb33005b5b7ac1e1d1d73eed2b2a1f4b2282057f3c0f3698b899e1c76b19c09c69bf4cd0ee548427b9bcc676b791db5c36bc</hash>\n         <hash alg=\"SHA-384\">b41128c5a90ed02edb4fb902e6bb64fb9cddb5939764b281a953ad6af56510705ff40a9ae960d5574e0187f1652a75fd</hash>\n-        <hash alg=\"SHA3-384\">dc9b68500d2c845967652f5e04883a6ba3146c51bbfcd7d14cbaf0eaa44df3240e41af8d03b63aa536f4c21d503b4a79</hash>\n-        <hash alg=\"SHA3-256\">7d3d773a1d7c1cd6cb37a98985f1e119574844a31fa48e890c2fa1f1d0fae72a</hash>\n-        <hash alg=\"SHA3-512\">d7da19e6fe75a236e7be635927d32f9d0aaf864ad648f831414d0f296c9cdbdcabeb9886d190d3eaaf8bcaea24a417f71de13e8e9cd21513b83f0a671c339f36</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/xml-apis/xml-apis-ext@1.3.04?type=jar</purl>\n@@ -705,17 +654,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">0806b237c67c69869506ce3ced9a722f</hash>\n         <hash alg=\"SHA-1\">1dcffed3e561ed32134a0dff4717f19bc2fdf4d8</hash>\n         <hash alg=\"SHA-256\">4548b74a815ed44f5480ca4f06204a8b00809dc7e5f6a825a9edf18f40377b65</hash>\n         <hash alg=\"SHA-512\">ebe5bca26efc72b82c168b65f8f4b1b55768e0464edb9e732e48bcb05b3de7e761e50f0da46e96f02258b4bc4443f4e4a5e7d53956b17161674238b564f6018d</hash>\n         <hash alg=\"SHA-384\">ed8acfde5a975f6aa24930caf2889cddeee21226497ca7ca403a25afdc2a6a32d7a6d53cc117143401e3698c87b33159</hash>\n-        <hash alg=\"SHA3-384\">eca5720d9a38a2dfe8667dd73003e4fd6d3a0503219d4aea539570374bdbe9157dfe945502de2d40b4f20a4caebd2100</hash>\n-        <hash alg=\"SHA3-256\">59bcae1d85e982281500f515c27f49c292f5b0f57a69204859f9c5243a64917f</hash>\n-        <hash alg=\"SHA3-512\">0b77811020ea0052e4b799add234754e2f3437b28f0f4f51f49df9de7bad5d97b4262aed175cc16f2d110a7c49adf88d99dc8f12bb2751ca6bff845ba09c473a</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>LGPL-2.1-only</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.github.spotbugs/spotbugs-annotations@4.8.6?type=jar</purl>\n@@ -736,17 +682,14 @@\n       <scope>optional</scope>\n       <hashes>\n         <hash alg=\"MD5\">dd83accb899363c32b07d7a1b2e4ce40</hash>\n         <hash alg=\"SHA-1\">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>\n         <hash alg=\"SHA-256\">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>\n         <hash alg=\"SHA-512\">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>\n         <hash alg=\"SHA-384\">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>\n-        <hash alg=\"SHA3-384\">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>\n-        <hash alg=\"SHA3-256\">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>\n-        <hash alg=\"SHA3-512\">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>\n       </hashes>\n       <licenses>\n         <license>\n           <id>Apache-2.0</id>\n         </license>\n       </licenses>\n       <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>\n"}]}
