{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "serialNumber" : "urn:uuid:254efe5b-93e5-440e-a94c-8823f183bafe",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2024-06-21T05:51:02Z",
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Eclipse Dash Project",
      "group" : "org.eclipse.dash",
      "name" : "org.eclipse.dash.licenses.core",
      "version" : "1.1.1-SNAPSHOT",
      "description" : "The Eclipse Dash License Tool identifies the licenses of content.",
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.dash/org.eclipse.dash.licenses.core@1.1.1-SNAPSHOT?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse/dash-licenses"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/dash-licenses-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/dash-licenses/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/dash-licenses"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.dash/org.eclipse.dash.licenses.core@1.1.1-SNAPSHOT?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "group" : "org.eclipse.dash",
      "name" : "eclipse-api-for-java",
      "version" : "1.0.0",
      "description" : "The Eclipse API for Java provides a lightweight Java interface to the Eclipse API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "93d0242722d351af4f5cd8a59883e1c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "2313eb526a819513202a90d078614033cd73551c"
        },
        {
          "alg" : "SHA-256",
          "content" : "5738c875f4e5e50a651a3efcd1bff28aabd6e2b448f96c176ac4913ba6a5c9af"
        },
        {
          "alg" : "SHA-512",
          "content" : "5123b9284a1e4783a5396b02b8d0687a38e825b38393670944970224565cb142950b2d6f72ff050913cb19c2115a04345b5bd5d528e2671e2c4901d6d5340ec7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d54e44c5fb2e63bbc60636f15f8a67ed0e672913bd679877cc2b2bee42cc11fbef6971d731056ff41fedada0c798e150"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d46d5833915bb7bff90b87ff5b362adf2a8808f4f471eb59d6fd2e12ae9247169585cecfdfe88617a12182a1bbfc694c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c99e2165d5408424b22b588582fada41a35bd134fd80c59a6a95c48aeb3bb161"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11f1e3edad52145c94179affbece9a6a9947e01e0b4d9a8ea25b4a69eb9d1d9ea13170d1acc59d0485e62ef2959efa17dda30c8960039ff32f9809d4f6535aaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/dash-licenses-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java/-/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.eclipse.org/eclipse/technology/dash/eclipse-api-for-java.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject",
      "name" : "guice",
      "version" : "7.0.0",
      "description" : "Guice is a lightweight dependency injection framework for Java 8 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e3052643d1c4d2acb76bdb7ee3855be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "ccc518677b9367d45f99dfa592c9b039f07687d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "de5b0e359bd7b03ca42806b368846efd95484380fe05ae2a4ea71bc338c59c00"
        },
        {
          "alg" : "SHA-512",
          "content" : "faee33dd9a53bfb961111785635bcabc496ebd227dbf530c9e95a47412cb933609d2389a1c252471714b0051c12d3259545b0496993d9a790a3db0fc86cd4b0e"
        },
        {
          "alg" : "SHA-384",
          "content" : "a76d1319f0d5da81e893aff6ef67234250738459d311d275bdef33d7950fad4fcff38728d829d5364b2d3639fc80fa62"
        },
        {
          "alg" : "SHA3-384",
          "content" : "884cc2b80ef645dc04c9aad30fdd017856bec3c4aa55a18dd3c879e72c20c01b872155a0644018c0373f856a32744b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e49d2141bcb70a5c405bfc7f72145cde3be8ec5db19e1d02877e5c4abfd03c2c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "baf1ade7afaa8cf08f038bfa1bf82ad6c1555e16c1daa2637075a8003faca709308204b74848eb9aea0c804d65f2d0c3ef5290a4d64a8b542be18faf8715b6b4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject/guice@7.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/guice"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/guice"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject/guice@7.0.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.inject",
      "name" : "jakarta.inject-api",
      "version" : "2.0.1",
      "description" : "Jakarta Dependency Injection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "72003bf6efcc8455d414bbd7da86c11c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c28afe1991a941d7702fe1362c365f0a8641d1e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d"
        },
        {
          "alg" : "SHA-384",
          "content" : "405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404"
        },
        {
          "alg" : "SHA3-512",
          "content" : "00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/injection-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"
    },
    {
      "group" : "aopalliance",
      "name" : "aopalliance",
      "version" : "1.0",
      "description" : "AOP Alliance",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "04177054e180d09e3998808efa0401c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2bd64cbaf769c6e4e85e34f7a6119d89e16fbf55af3fc5d6cbd52eb214c367dec1ac7b9062ee0fb35a2e0acfc7c477e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d4a726b2bf8aa58197021a7d8fca674b4b2790d4c48de43a92f728866a91c2f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "830bc3f8328be76897990e9b9fc42eef02623115e456af96ad09b20900ad615519c8c8de60155ac04fb332eaa9510110d52edd13911af76271c71d91cbd789cc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Public Domain"
          }
        }
      ],
      "purl" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://aopalliance.sourceforge.net"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "31.0.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bb811ca86cba6506cca5d415cd5559a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "119ea2b2bc205b138974d351777b20f02b92704b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5be94d65e87bd219fb3193ad1517baa55a3b88fc91d21cf735826ab5af087b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "c8d8aa38e6fb04c409c37922efcbbe182f65156a853f691d8381d56eea208adf22f7a28873bb7895210e41857dd4411aaf952682a2692051220e281910d0798f"
        },
        {
          "alg" : "SHA-384",
          "content" : "47f0a3fca2671c653cc883e5f2ff35023948a97f736207ea99fff80332aabc00756a5eebaca042364a8fbab16c5db059"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7282d9ffc029172438510a0fcf57edc3e492f0ceb41c5fcc71a3babd3fa193523720e1f2e6239dff35c6dcbf45b0e901"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c1ba0f6be4d4c10a77ec515966d0a8f7516046e1f9e39e38a5bf8f694d12a76b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fab6285650edf99a63ac281d209f0c8f7ee2d09d39f4db3702fcc67bcf0dd9537b8bce8bfd9c109edcaf778e0767fa5cba639fa156980a1958fa5d24bb3c3fe8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/google/guava/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "listenablefuture",
      "version" : "9999.0-empty-to-avoid-conflict-with-guava",
      "description" : "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \"version\" that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \"real\" listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg" : "SHA-1",
          "content" : "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg" : "SHA-256",
          "content" : "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg" : "SHA-512",
          "content" : "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg" : "SHA-384",
          "content" : "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/listenablefuture"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/listenablefuture"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"
    },
    {
      "group" : "com.google.code.findbugs",
      "name" : "jsr305",
      "version" : "3.0.2",
      "description" : "JSR305 Annotations for Findbugs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg" : "SHA-1",
          "content" : "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg" : "SHA-256",
          "content" : "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://findbugs.sourceforge.net/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://code.google.com/p/jsr-305/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"
    },
    {
      "group" : "org.checkerframework",
      "name" : "checker-qual",
      "version" : "3.12.0",
      "description" : "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ab1ae0e2f2f63601597a5a96fca8a54f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5692f0526415fcc6de94bb5bfbd3afd9dd3b3e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ff10785ac2a357ec5de9c293cb982a2cbb605c0309ea4cc1cb9b9bc6dbe7f3cb"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff20c424e130c31c30b4f4f5b4374f8f98f94ddae2b123f3c213f147be6b3de57854ee5651b02dd97d352c1c1df2a8bfeef73d5307a71372f46a6002eab24d78"
        },
        {
          "alg" : "SHA-384",
          "content" : "60641d5967c60154359437cf49d8b0c14e7c1d876ab1fff4932590b19edcad0e65975299004ac896fb190f45b69ef1a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aa56f81cc52d6fa2bf40be155584ea7bed253b29fa9d7aa9b56d898ea01909b217efd676ceb8c7c913c4d800bfee7529"
        },
        {
          "alg" : "SHA3-256",
          "content" : "85ce7342830164963b1cff7257c1e07aec3eb134ba4ff7102e77de8c33191c87"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29ff1fc98ce64a52fc15796f127b5b100522ef88e15c5e129941c4954a3ef1b51a3059c131cb36ba4838c5ab76b2e0f2ab2dd4e9f6edba0ec8154c450c0a2130"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://checkerframework.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/typetools/checker-framework.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar"
    },
    {
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.7.1",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5260e1257140bed1936991931cff5ed8"
        },
        {
          "alg" : "SHA-1",
          "content" : "458d9042f7aa6fa9a634df902b37f544e15aacac"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd5257c08a246cf8628817ae71cb822be192ef91f6881ca4a3fcff4f1de1cff3"
        },
        {
          "alg" : "SHA-512",
          "content" : "32747ed9abb289da6ec8f3acb3a3be47c1271323847c8e3c1e9f58e9fc4a211221bdaf988990e8ec97bdba3986927ec81cf9d3f3b5939fff8cbdfb0ec7afc7fe"
        },
        {
          "alg" : "SHA-384",
          "content" : "45a2519bd3e638c68f8de82ae3066549e75db98fbc7f8de6e31c6db04ca38829d5e3f69bf9fad3a83b181cef543e0c14"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db10d9671b108d2d0aba011cd818577478d5af64afae165fbbc357229a147d8da9f9797592ce7b2fc89e9924aa642635"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2761c68bee94cd183b519c1561941fbfa4e91505b04058c0dfb05e763af54006"
        },
        {
          "alg" : "SHA3-512",
          "content" : "890dca45a16af53a6ac5ee01fdac1818a6b876299ead0c2cac8797760ac8f13092d8b45f0de010ec8ae5b556afb0b30b8e078fcdc96d4c3d5c219e8f6dd8c173"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://nexus.sonatype.org/oss-repository-hosting.html/error_prone_parent/error_prone_annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar"
    },
    {
      "group" : "com.google.j2objc",
      "name" : "j2objc-annotations",
      "version" : "1.3",
      "description" : "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5fa4ec4ec0c5aa70af8a7d4922df1931"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba035118bc8bac37d7eff77700720999acd9986d"
        },
        {
          "alg" : "SHA-256",
          "content" : "21af30c92267bd6122c0e0b4d20cccb6641a37eaf956c6540ec471d584e64a7b"
        },
        {
          "alg" : "SHA-512",
          "content" : "51ea975179f809cb260751d11a513881b643bf016d15949bcb63b57d3c8868a2197e0620ccbaa5739e032797ec6faa3aa6d64606e999fce32930314780ca4115"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2a54e4bb17793a98f85fb8f91138cd3b3d311385b7fb2c09d05c3112d42218a6da29154ba184f00031919548022aa71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ba512ee47d36d5712335849e8f0fae21498c983c48fc2b4749ac7dfb4eeddf75dd51d21366667f90d6414db032a7b5b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e97bbe4e1ac9f9785ad0b81fd29fc9c6b0d9e37acc6da6d0b31ce9e6da072664"
        },
        {
          "alg" : "SHA3-512",
          "content" : "864bc6181c8ad8372e0a05ec3b0bdebc876571692331d3519e19df54a21ef333e992fe5c4e84759f010cf0657f9ea1c435bea8f103735ec3dc9dd31493e7d4a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/j2objc/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.inject.extensions",
      "name" : "guice-multibindings",
      "version" : "4.2.3",
      "description" : "Guice is a lightweight dependency injection framework for Java 6 and above",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0f7ccc500023f3cc9c8599736862974a"
        },
        {
          "alg" : "SHA-1",
          "content" : "371db862c3219e13ec56b5d30c983dd4651bf1c0"
        },
        {
          "alg" : "SHA-256",
          "content" : "23f6b9d4fadfa30202ab452eb740d9b90885da2d5941f2c0f935e3b3d4c877d9"
        },
        {
          "alg" : "SHA-512",
          "content" : "10a85bad1cfca49ecb81aa36982aac3f9830b22b671435b750a2c6e0ae6dc9ecb26c84e8b780ee06f1619f5f5eb9803295776f13153db3da8741791fa3161485"
        },
        {
          "alg" : "SHA-384",
          "content" : "ecfbc4fa1cd13b66536d8f7f9547712321063863485900fa55683d2606e126fb01cd3767eaf07d7645178932291a8591"
        },
        {
          "alg" : "SHA3-384",
          "content" : "55c4ce7f714cd3005d894ce2b45a7400e5441b3a2cef0babc7bb88d1e24f2c4db56493b08b801f380acfd231bfc1574e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e193198a450f3a4ced19a9265ea7d72289107c6b0067b0d8de873a2e6a6e03a3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6641b444916ba5e6a05fc3285a050b5ee26d82dbbb1c04daf97821f133b8005c9272a4a1205c3466bea5aa8db5735b558b08d7d6e5c236a66650d6df5aac5d92"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.inject.extensions/guice-multibindings@4.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guice/extensions-parent/guice-multibindings"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guice"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guice/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/google-guice/topics"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guice/extensions-parent/guice-multibindings"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.inject.extensions/guice-multibindings@4.2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.10.0",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9b3be74e726a151524bf31ec293ff285"
        },
        {
          "alg" : "SHA-1",
          "content" : "8669bee353424c3223c93723291b5c3753260c1c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d06e6a07a636baf777ad8e659256f2119109dde23551c9b80c5422d424b808c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4434edc3256ce9a004f9860738fe7fc7b96e964f131aa953b598084bfd60e510796164a27c94b4c0b03041d05261c013e0db664ffd2bdd1cf032011722bc7ac0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c50578f3e9a7f6bd7e2badef7e0758eba308f77c0eef17a1d2d7d7620f0a7f5bf414f8847b3a401484466a54c8115370"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d13077b7b86c9a8ced54228615f86b7785d84634e5cf757792259b4f110aaa6d1980938ba1c1a65377bdf62c24067e96"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eea22e71edfed1e0245104b27fe54fc903362ddad35594bdb3012dc01a0adc63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "db8b13b74e78808ea7819bee82851836ac47abaea7eceb6cda06a5506aba7277f3e93fbee4d0a19ef7d77870e8f13c2970a8cdd517487d4a68cfbd138839908c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.6.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15db12c583408c2af3ef7669b0204290"
        },
        {
          "alg" : "SHA-1",
          "content" : "38166a23afb5bd5520f739b87b3be87f7f0fb96d"
        },
        {
          "alg" : "SHA-256",
          "content" : "69e1237059acd56f0f8654dcde09d8a1412eee82918bef5564d51f8fb275711b"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6750c802f6c6cf1f4d824a4df093931e559adfae79fbfb5052adbd9e07fd9a361796bc5ebbf5810238fdd8c68c3ac512602defea90c044f72ac42e472923fc3"
        },
        {
          "alg" : "SHA-384",
          "content" : "c799cd36fa2abbc2ddf6458ad47ceac7e17c05469292119344011a9dbc3d56fcab886cc03869c574056e06b4da32cd14"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d35483ca5ee3bd852965ebc14cf9d4c589b0fd155b7b082765d380d089e93513b4d4ad50dc48301eba954e9965e33fe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "269a755892d3b8ab7ad9195c85d85674423d1191415fbb4ed0127349428e16ce"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0fd6a4a830f9e25700e97c59eb667b4bc063c3520cfb2574e1c8602a3a9d9bbd4b118a2eb8acabb4521ba73eaaa52fb6e3a0e6dd8743692fe2143a6d8a6cbfc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.6.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish",
      "name" : "jakarta.json",
      "version" : "2.0.1",
      "description" : "Default provider for Jakarta JSON Processing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "217370baa683188d6085c079a0988909"
        },
        {
          "alg" : "SHA-1",
          "content" : "da6c75e591cf2a89ddc479cbdbd8fe5f41d3efc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "52539b39498b86ca9910b0eacc608a8c78de8db3842caa84bc87169372202cc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a7240c34098be4fc81769ec528a5afcc90e509d092a5e4edca27b2e92a3edfd6814bf60598fe6b856bec42c3002e64af286b6b8cae90cad06db276c6cbc10dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef48cccd89f11a491844d85be814ee882e760fe384d76c74259269c7c514115665f7ce1711124577079024a7b2127e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b35d0fe7b5fb661733c6dda6c09cef82a48db6358d2c26d15935c713e3873307add4ea0fd01df7ef5fd762da380ab0d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d8d3ccc88d35b0254c3967f7fbe1c22b581ad9b25a92954570395ee1680a034"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a96804fb8d283352d133f05624aeaafca23e349ff3a55c4d1843a9dca9665bd941862bb27990d0f73f99ab9aadab3ab768b333ecb445830fc6cb8c704ca9ee8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jsonp/jakarta.json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-simple",
      "version" : "1.7.36",
      "description" : "SLF4J Simple binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd4a5fa54910b5ee561f639c903cf34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "a41f9cfe6faafb2eb83a1c7dd2d0dfd844e2a936"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f39bed943d624dfa8f4102d0571283a10870b6aa36f197a8a506f147010c10f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdcebe8fa58527a1bc7da0c18e90a9547ce8ac99cccfe5657860c2a25478c030ea758251da3e32a71eab9cbb91360692b5c6c5887a1f1597d1fda07151b27e5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "57eb6d0c778ad9637a819fe64ab6a7b5e291c1c2e5e9a8f536c553e54837fe0e26b9ef5a83ce25c7e3e7e8c5d455ab24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15809f42dc66ec21d8d931c2e10cbb1c2c7c580678c1946a0e4fc8b5c7cec5ff001a5551979693a59fbfa1420ba0c038"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a313022d52742de983fa574ebaaf3c6fbb173b0d823a6c31b2a22f429e03a428"
        },
        {
          "alg" : "SHA3-512",
          "content" : "335556e92ec298e2db4e2aa6d4cff0f61fdee178f8889c84db35b9236f08c4c371cc7ff27a77b16699d531111d0eb3ead3696738ed2bd726f75add07f2c51017"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-simple"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"
    },
    {
      "group" : "org.gitlab4j",
      "name" : "gitlab4j-api",
      "version" : "5.5.0",
      "description" : "GitLab4J-API (gitlab4j-api) provides a full featured Java client library for working with GitLab repositories and servers via the GitLab REST API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5f8bc99c618b742a01b87958bbf8c33"
        },
        {
          "alg" : "SHA-1",
          "content" : "1921408e531c9936df209e4c872fc5e900c13a80"
        },
        {
          "alg" : "SHA-256",
          "content" : "76e4d3e6ed7a64d5e5ed3f198a7ba6437d1af55770c1bfde3691d580c1bc3205"
        },
        {
          "alg" : "SHA-512",
          "content" : "a279ec425550b45997bbb1585fd17210667b19573ae5e21cb05e7d60436ef374e4a5408eab7d0fa75e763e41f9ddd9bc30c3b6597245c7ea918095a720c840f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "d7a3d643f9455b10f6352448f24c96fc0ef71977abfd7dc89e18b6eec97aed5a075b237b9c5d731a235155dd2ff641ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3367b8d26323706b103893548107d3fafa0ead6230a3efd2f95e4b51b51520b9245ac89fe848db9374b0ff5b2460d186"
        },
        {
          "alg" : "SHA3-256",
          "content" : "edf9863a951dea86df9d358489c6e7c66490fb073cb449eb01e4c6118a09a6d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8f1e44a75e04665acf74350ac03599355719a61681913d71741528c56f6c481673e76edf6253d91463117e6e5fb97130f143b923862e1fce6d49dc55c8d4a204"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.gitlab4j/gitlab4j-api@5.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://gitlab4j.github.io/gitlab4j-api/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/gitlab4j/gitlab4j-api/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.gitlab4j/gitlab4j-api@5.5.0?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "Jakarta Activation API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.inject",
      "name" : "jersey-hk2",
      "version" : "2.39.1",
      "description" : "HK2 InjectionManager implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "632a0bb4f05156a9fbfb63a2473594c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "992005ae2e8ec3b215b2daa788c09eb902ef814b"
        },
        {
          "alg" : "SHA-256",
          "content" : "01703b3c21d9fdcaf7019b238ce10490a815da5231f8c3583427b8e825aba278"
        },
        {
          "alg" : "SHA-512",
          "content" : "03a26564a466b6463a6a4d959ad2d1348b1dbcf2cd0cbf2b4ee6eebebc1e0a3ef2dcc9728b9a4ad310b2d47fcfba1240afce0858c65f8dd159325f7c7b421068"
        },
        {
          "alg" : "SHA-384",
          "content" : "cba201b656f401b99294efada29dfa29d4debd6d6c48dc66d7633bffac25446f59bebc15a62a9ee95d722eaef8cf3573"
        },
        {
          "alg" : "SHA3-384",
          "content" : "536339d7f4c451dec39a9699aa165d61ebf709da3a00326b5678501b3eb5eef897b006a7f0ad0d8818e007b5a335a015"
        },
        {
          "alg" : "SHA3-256",
          "content" : "46ffd762452536b76a6d98b5bf860f858daf9a6cdd141f7e2b097f4a92d571ee"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2b39c60eee14ad1ee46061b7d9630e465af9b69d70a0ad3bd0ce1742e74d7b13287fd5ab5036fb9e6b369f8a3d27b34b32f30fe6e3354974e75412d0600d80e5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.39.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-common",
      "version" : "2.39.1",
      "description" : "Jersey core common packages",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d94d2d5f10dfd16e533441b8bd00651"
        },
        {
          "alg" : "SHA-1",
          "content" : "39198bdead74896267646795a7e4b1d86c10e039"
        },
        {
          "alg" : "SHA-256",
          "content" : "5de63854765af44f68f819384091bd9f1c2fc0704cdea53d9f70fe7f3eef6591"
        },
        {
          "alg" : "SHA-512",
          "content" : "d554320ae7a7121049d666aa45b1e47a56d8d85dbe3bf621325504c38a3beda8e76ed82207a609a000703abf8e2ddf79a379b7c4747aa938e3c4336e5f6b8131"
        },
        {
          "alg" : "SHA-384",
          "content" : "af9b30f90196c97704d9880a820fe4f6937e5f001327a196774e7126251e1a2ff5827de15dc3242900e9539c73cd77de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "06ea3e12c055edb93a3041f70c44e400328501e800e7e9ed4eb5f03f4e1d640e9cbd6736a40d50f126eca68cdbb4ef5c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "134d5f2b2fbc00866f034fc9467b4cdca63133fecdf27019296e61a204460b14"
        },
        {
          "alg" : "SHA3-512",
          "content" : "472b8c8ee0307a7f0e4ac16c348d4084589e141148f9bc63c0313368eca9ff87cecc24882f7f5cfd8eca24592b577e574d90053cd0c29ed4af00e5df7d549790"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/jersey-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.hk2",
      "name" : "osgi-resource-locator",
      "version" : "1.0.3",
      "description" : "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg" : "SHA-1",
          "content" : "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg" : "SHA-256",
          "content" : "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952"
        },
        {
          "alg" : "SHA3-512",
          "content" : "75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/osgi-resource-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2-extra"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-locator",
      "version" : "2.6.1",
      "description" : "ServiceLocator Default Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg" : "SHA-1",
          "content" : "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg" : "SHA-256",
          "content" : "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg" : "SHA-512",
          "content" : "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg" : "SHA-384",
          "content" : "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d7b53bb3939b45c75ef11a899bde1b7acf6ef1e3f3285687060c830505e540f1843d4f631b949fc8727c2a58cf0cfda"
        },
        {
          "alg" : "SHA3-256",
          "content" : "20def735fc2d01276b1c9e0961c68aac17722eff6e224ca43fb062ba592a2131"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07822cb6669f8387a4b56cc28709347197b1d4c3ac36e2cd8f2e5dc36d50937aeabdc1dea47b8028d0e91a700aeed6d18066280b66101a43bb4ca00f6ca2181f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "aopalliance-repackaged",
      "version" : "2.6.1",
      "description" : "Dependency Injection Kernel",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg" : "SHA-1",
          "content" : "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg" : "SHA-256",
          "content" : "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg" : "SHA-384",
          "content" : "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        },
        {
          "alg" : "SHA3-384",
          "content" : "df0d777477b068b3a3a6d368b8a647401f1531fd4bdce623c22b06b5fb6153cbeccaec9afcafb1c65efbdc49b73399ea"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7c15e6095397160fe1c26a56964a42b85e23062644866a9ca93f6c24ccfe5212"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da354a243056157b800aae44d0a6b9697399a37f3ea805ec192debd47f9ea493e224794a392786d54608324a01b6e1745210ffe4d8ef1e956b941adfe820fe52"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-api",
      "version" : "2.6.1",
      "description" : "HK2 API module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg" : "SHA-1",
          "content" : "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg" : "SHA-256",
          "content" : "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a836a3bdd7e94c1c69fe3aa7692989b404f3e249224e70382f4ab88d3ef64c51b57a539a7fc9253f93d43665d7de70c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "422eb417b817a7e9af62e36c6657fc9e10b461df59985f436970d75e9db4ca04"
        },
        {
          "alg" : "SHA3-512",
          "content" : "489625c546c34b7c6e395522843be55419706c3a951bc4e494002853dc913e175fbf3a6b7acb4ba581fd6995b56c2cc1431055e5b5416f71ea5519a0b8d5ce56"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2",
      "name" : "hk2-utils",
      "version" : "2.6.1",
      "description" : "HK2 Implementation Utilities",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg" : "SHA-256",
          "content" : "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg" : "SHA-512",
          "content" : "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b2d1842c0e31c8a83179b3a4d8aa08953747a868d8e1d599201feb8cc3f6e694adcd355581dc58bcad7cec515898eb7e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4169734272046ce681790cbbb553652c3ada2af1a5201a2ab9ab6210451e3e70"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f2bea2fee534c92fc6ae2322696ac97d7e62654cb7ce635342c7f0234d0562f1f8537677a0263d9a76bdaeb57248d37bce537f9b36506db75d0e31024d6e8789"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
    },
    {
      "publisher" : "Shigeru Chiba, www.javassist.org",
      "group" : "org.javassist",
      "name" : "javassist",
      "version" : "3.29.0-GA",
      "description" : "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aefc94eda66e54b96825ffc807cfbafd"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3959fa7e00bf04dbe519228a23213d2afb625d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "62d4065362e8969ce654f2b5541de1efb5b5bca6c146dbd38a595ea4df64cd31"
        },
        {
          "alg" : "SHA-512",
          "content" : "e28e98381e47f3f1f904c01f510f2b764e402ae6142e670e1dffafb1ffc549b0c23dc40dcba07ced45f205437108bb1382c9555da57ca3853ce67a7e9cda67e9"
        },
        {
          "alg" : "SHA-384",
          "content" : "e34a1a5350019f5f3b97de5aa966ba0b8e317f27792e164ac5df78f5b2f9a4264e054fd1815ba1d5eab90a8569f8d55c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "563baaa9703ba286876d15b33d6e8a66805697d62a38dd5ebd5ae895e93f963a412e5b56121b2061f6e625cc5e055f9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c69fc6cb86425ede7a11a91976ea239e75cb6914f7ee63bc6c2d922da4168ebe"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5afeba114ea67519ec8f083e06ccba9098c09acc6f39152b8d8d6bf2183d031fca13c771a7f76981a5b4a98f57ce0783cbe68b58a361e7c642792d0a09ac0598"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-1.1"
          }
        },
        {
          "license" : {
            "id" : "LGPL-2.1-only"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.javassist/javassist@3.29.0-GA?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.javassist.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://jira.jboss.org/jira/browse/JASSIST/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jboss-javassist/javassist.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.javassist/javassist@3.29.0-GA?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.core",
      "name" : "jersey-client",
      "version" : "2.39.1",
      "description" : "Jersey core client implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6aa38bbf92f12e6b61c8eaa3d76a0fad"
        },
        {
          "alg" : "SHA-1",
          "content" : "2b1187bf77721c050bf68829918a1b3cd8be904e"
        },
        {
          "alg" : "SHA-256",
          "content" : "46dbf681f9248b38dcf75ccf4a9220d55813acdffc892da080e4ac0ee36d24de"
        },
        {
          "alg" : "SHA-512",
          "content" : "9b1dd3bbde7a8060b936348a1deec6a16148e2c6ede2644690289f057a7c42447502ad7578245316d56db97549f1e02f3f1fbbbc8021cf522b495cdf3e6eb02c"
        },
        {
          "alg" : "SHA-384",
          "content" : "634afe209b16f6f873c4f10741144d10d53d6bc4a58d9a4dfc0a1743ba9b1caa6036e47ca2f628b06607f617780dd57f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0eca8fc3dae4934f6a8c5cc35e98060896d215c8cd925b7c7d3b7934d781f44e0547538cca969872a5af189b920a993c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b96eeede0a53870c282f319c5f188f8f719fbf059b3221c76e2e765716726180"
        },
        {
          "alg" : "SHA3-512",
          "content" : "93a505ff64c16fcd860b0abe2cbab565825b401751fc08723dbdbbb8e56815506334eee511c6d5a1152b21256ad9763d0ea41dd252a4bdb15568fd21d16c9946"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/jersey-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.39.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286"
        },
        {
          "alg" : "SHA3-256",
          "content" : "794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "jaxrs-dev@eclipse.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "org.glassfish.hk2.external",
      "name" : "jakarta.inject",
      "version" : "2.6.1",
      "description" : "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg" : "SHA-1",
          "content" : "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b551e00861151233789c03cec07e162d90d1f377fb8f26d413f7015152188183d636e2837ceca131096c43511e618efa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "67f3b5a4b3006d07a33ccdbbb70f312c94d2d8cdd32598d471b079470574ab6d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a0b6c00df7f5b53f549193a7e6a26d632847957ad296aef2ee75a23a5ebdec970f793511641e6c63677b481c47ca67f4039a5ee5f4bb532a46093a201782198d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.connectors",
      "name" : "jersey-apache-connector",
      "version" : "2.39.1",
      "description" : "Jersey Client Transport via Apache",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16b9d846d06b811b571fc2203c686af8"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5e988397506984b7cccf3acad428f95c4796cb7"
        },
        {
          "alg" : "SHA-256",
          "content" : "51aa2cfff12041e6e9598ea174473866ca9ae83133c5498f2a8dd494cb864c6a"
        },
        {
          "alg" : "SHA-512",
          "content" : "5251f0d7b942b981870baa3762307cc48a83fafee354c3ace453c272bcb0e2cd9a998b65e11b45a60d6c7af1003fe34ce8f5bd17db1f50bff0ec3d35db028d95"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2080490f665abff1bed876fe8b8d7e566efa4771d25cef28db3156be2980b423fc49f97350b2f90c991ffde1a6da1ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "74f2c38bfd67de56ea4a600460a8c728d32cea5b1afcc358505f1a076fc3223386ffac72ebecb9e836f88c1327724d50"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8b4d4362d5538a07392c5beb290c9ebec98da8eb34f01570b3556020df735d5a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dc56d12ee750bdef95037c6f42c88c819841124bd21f83930a3aad32592fc17b784d5392390600cc9a1264082176f2c2c0903c56b4bd3eb9d17efe7ae880986b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-apache-connector"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-apache-connector"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.39.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.13",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e07a248f61c52776a2366c075dcd4963"
        },
        {
          "alg" : "SHA-1",
          "content" : "853b96d3afbb7bf8cc303fe27ee96836a10c1834"
        },
        {
          "alg" : "SHA-256",
          "content" : "e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424"
        },
        {
          "alg" : "SHA-512",
          "content" : "23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6f9e70b76717b705d040f0b33857f0dde89736f2e6d55ea56585235eb1b6d0ce4d5aa18c82050391ac968dcb5ec29e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "721a9fc1bb353ddf3e438bed4306a3fa5b55ffafb474be5dc8715bd23d7a5afa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c78f9d464e4b840e28266658512b1cab0ece1470bef2764deb2dc20ba69b73d526d92a19494ccb87b4408f9235c4294417f2e10ba709469f4bd62d017b9e3cbe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.13/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.media",
      "name" : "jersey-media-multipart",
      "version" : "2.39.1",
      "description" : "Jersey Multipart entity providers support module.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "621673d0b5fa9b2dfcf592e68ca813a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "060fe5e2aa2be7386913f28b7b68ca63f65a0eb3"
        },
        {
          "alg" : "SHA-256",
          "content" : "23bc5c8498425674c697625905e2b258465830c48d825aa5fa68199ae50326f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "9170cba1f40ebc32e5251ccf4aa7e1f7a674e15a6915c7d835c5f970e02e4149449579212421238309f5b85b950712d9988af891c95482cffb782a336e3585fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e7af6eb531308520ec83354aace0f2d2d87f299bcff7c9643904ee5d3e118564d799d5aeaa338f10e89150f59815203"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92333049ffac6d92d738f5e3ac274f39ca4234d7c82e07be87704163225c659f13bd2ed8f7b8ce81276f9c7350f346d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "05c30f4998ea3e682d604e14fd557e4c2cf945a484457c151367014257bbc625"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f5bfc93ad6f32d0fe1fd93ca4ad32b79f4420ce23b2c746c651db98beedf80f880b4fccb26e97e2d23096a65af7bc1827363435ea1e5ef27c5f5c7ecf5c83904"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.39.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.jvnet.mimepull",
      "name" : "mimepull",
      "version" : "1.9.15",
      "description" : "Provides a streaming API to access attachments parts in a MIME message.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg" : "SHA-1",
          "content" : "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg" : "SHA-256",
          "content" : "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg" : "SHA-512",
          "content" : "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg" : "SHA-384",
          "content" : "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/metro-mimepull"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/metro-mimepull/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/metro-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/metro-mimepull"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.media",
      "name" : "jersey-media-json-jackson",
      "version" : "2.39.1",
      "description" : "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a85422ca83c81635caa96fada2df77c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "3520363b7ac30d97ece9a6ae188c0d343cbad691"
        },
        {
          "alg" : "SHA-256",
          "content" : "3d40a62b6038a7778b3f382e07953dc6c3ff8d913bb5e8cdaa3e5fbaaa515054"
        },
        {
          "alg" : "SHA-512",
          "content" : "80ad3367fa36d75f4d3be11cf0edf8fa2931b843b6bf1f9f03dbf37f22fb76e53f36f7243ee31eb22972e3eba7427679e84da9132ddb22fbcb3e3a7872042d38"
        },
        {
          "alg" : "SHA-384",
          "content" : "64257da5bbd4b91e90975f7a36e0a427339e57e70c3877dd8a30cd16257dea551ed58819ebdfa375b57b009ded6adbcd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d6a6cf8198e598e27ca5c908106abdc144197b7440006723a78559e2d4624a38bf63ad7892949b4b28dcd50d9a6acc2f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0595855bab430892dae6e7527c0fe1d3733315524f056ba32934278cfff2a804"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54b5583eb22876157eb962ee7ca7b9394feaebf9cfecc96df16550fe5042389a1bed999269e2dd7ff3e6f3619832fd478e847a83be8b50314c5f0f0747c96fbb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "name" : "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url" : "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.39.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jersey.ext",
      "name" : "jersey-entity-filtering",
      "version" : "2.39.1",
      "description" : "Jersey extension module providing support for Entity Data Filtering.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dd0da504c67769f32abff03bd864df45"
        },
        {
          "alg" : "SHA-1",
          "content" : "d6cabcbea3885de33e1b0c96ba02752d92884ea4"
        },
        {
          "alg" : "SHA-256",
          "content" : "5250115ef12a5cb7863aba8190179c70881e63cf4d86f47ed9437cbe868db08e"
        },
        {
          "alg" : "SHA-512",
          "content" : "60032525f40a5f8998a448809f5e11a530c73e369f2159ddaed23875fbfe0cf07c8faeb4e5fcd2e25de11fe237fb533c1d29ff2e6f62cb9b6a04740f68d73d57"
        },
        {
          "alg" : "SHA-384",
          "content" : "1108de80289bf0a0fbd86dd743e276a91f1fe535e86bbe90400de21124d2a3c6568ee2d5e50629cff75419d68afba33b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e49b6d56ea42a4a9e42dc6f9384aac5a86d61038b5ee2b43b1e2f854e23643d7a56513fb79152786a2bb640cf9c3edd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29156fe637e1be8c59cd0ed3deaf1871ce716a011685b8c8be5524cec1ba2ff6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "76e40844928d7400583aa278c18eaec7b9b5fbc53aadbbc8d15adc4c3555c384c20b40db9160954debb4666c70825af54a3c7ac00397d1ee6c00add105277ab7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        },
        {
          "license" : {
            "name" : "Apache License, 2.0",
            "url" : "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license" : {
            "name" : "Public Domain",
            "url" : "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license" : {
            "name" : "Modified BSD",
            "url" : "https://asm.ow2.io/license.html"
          }
        },
        {
          "license" : {
            "name" : "jQuery license",
            "url" : "jquery.org/license"
          }
        },
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license" : {
            "name" : "W3C license",
            "url" : "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.39.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jersey/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.39.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.14.1",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "da4742ba6aeb24bf1bd29382fd95647b"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a6ad504d591a7903ffdec76b5b7252819a2d162"
        },
        {
          "alg" : "SHA-256",
          "content" : "d255b4b863ff8ec714a8f96fa55c34621d43dbb82b82d3f57476496a4c09e1e7"
        },
        {
          "alg" : "SHA-512",
          "content" : "80c98ab07cf49a2114882f955e5eefe9cef888a495b7db34f0a3c171525dff645f091fbc4dcea8d124ff85ae6eb530f481d25249420c9413772a712c78feb93d"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a68c63fd1c9d5114e39aa07f36a688a4d5c2c07a66bbf2370ca67483f8569c8bd2ad446b36f24724bb73905e59eda53"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1f5eb50fb9c3681daf3103d041f2cc6dfa938d8038f1945871260fcb2a8e417c8366f346f916898a0099c36cdfb964d1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f2842ab076e5107fad346f0a79c3f87a75f5667b400e7087c6fee7951a37cdb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "60038ae7eeb69fca94e497dda74649e53e9b406d13fa03ef6833bff46f59605b53d17a4004c45b7edaf04ab329b08a6c70e50e177362eb147c2ad70f98b2eee2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.14.1",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e3e7aab8799ccc169b10f244e6fb5b4"
        },
        {
          "alg" : "SHA-1",
          "content" : "268524b9056cae1211b9f1f52560ef19347f4d17"
        },
        {
          "alg" : "SHA-256",
          "content" : "423a0c806de4b3fa5eb4a28698305e3a3777c731e1bcfa1b2f3a3760c7b6e773"
        },
        {
          "alg" : "SHA-512",
          "content" : "e23798189c4178603d6df8d27f5a0595f278d8df7584425fe225cf48a1e89d46e50ac0841a8c1f371a4ac4c45680ef207f2e496258f9d3ecf53d5734f6892f54"
        },
        {
          "alg" : "SHA-384",
          "content" : "14ddb27647d784645b9d66a75cdad0e88256752994df50b366c35b70e38d32712abb74a7e58089cd7d5048dbcffd076a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4349a433aa87807ef2af5f214dcb154e3bbd5a884c226d5cdefba54feaf2170aee7e169a2e381fa377a6a33f53c0f44c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f32d8ce6fb9ef44408817f1416c8dd445d25e871a63cc4b598a7ddb2d3138ff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c00ab62eebc416880851bd5276ef238b3afa8deb6ed0553fbfd6670a44071f362f794cba69c950f53e17a77dcc471a2a1519436910439e08a359e82e58054d43"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.14.1",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9604a5f31129cdb7db4bdec90111850"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a07bc535ccf0b7f6929c4d0f2ab9b294ef7c4a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "0114187e296b34c931c1bf9e5a84152b62bfab7d182f5623f3982dc2da35e526"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a3cd2e4af749e800151efbcf0a18c6429bf5f8abb2dc2bd4f71ffeaba365574a0adb2ae204b6aba1f3a19f6fe6985d4ddf1169747235e85c5bedcdad2f4d58c"
        },
        {
          "alg" : "SHA-384",
          "content" : "fcd9164ae7dd26b1562f89e9ff741a9c34611b022db52e387e7a9bc3d8f084b3f5390e9516b049a8542ccb1f1630a665"
        },
        {
          "alg" : "SHA3-384",
          "content" : "761066454385f5892b0bf1fadfcebd9b8a13d61677df0294ca68dfa4317b3c61e21c429027c7ac6d8272ba80e12a166d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5302084471ac0959b67c640165eb595007371ebebd4646b81d9a76b26d9f6920"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0733c8d5b752ceabd35bd396470289d3773b804bdcd8b292c3a834394d810e095542a077edb5c7014bb70a8f9ebd7df18553df2cb7947436fbdad8ed7ede0851"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.module",
      "name" : "jackson-module-jaxb-annotations",
      "version" : "2.14.1",
      "description" : "Support for using JAXB annotations as an alternative to \"native\" Jackson annotations, for configuring data-binding.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2887a92355564aec2b8adf4e85c6f18d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c986d9cc542fe5ade8aaebf5f0360a563dc51762"
        },
        {
          "alg" : "SHA-256",
          "content" : "a640e81f2747c73464cc18bb461a9c3f442113be69e81115c0230c521e07963b"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfe0ed62f75361d19cba76428a61565f5b24e2830380d871b7f9ae1df794ae5ee4070c238ad12b860c638d2ca24f2d7e2e90ca4db41d1b14a070e367e457ed11"
        },
        {
          "alg" : "SHA-384",
          "content" : "55fe51971495214ac565aade3d770be4e0f0392fe2403b60b93ad2410823549c8e547a0387396986128d35172bc6b434"
        },
        {
          "alg" : "SHA3-384",
          "content" : "97c90354829c7703e0ffe26a37bc94c4ef54af8d18dac516f1b7ec6513a1f9f66298c4374d0708b5a1d595fb0354e865"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e1186f534773076ba13134bc6825919f90f097250e8292ae56548ab9a47f1ad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e5acef16ba567b03536a81c815460a60156735d1c53efcc070159efc22dbbc1967382565db14a94f54f02950042694ad29df8c4489010894a86d5633d9c003a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-modules-base"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-modules-base/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-modules-base/jackson-module-jaxb-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.4",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5d1d7a29978e4ae0be5a456ee1c65c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8a1142e04838fe54194049c6e7a18dae8f9b960"
        },
        {
          "alg" : "SHA-256",
          "content" : "586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
    },
    {
      "publisher" : "Eclipse JGit Project",
      "group" : "org.eclipse.jgit",
      "name" : "org.eclipse.jgit",
      "version" : "6.8.0.202311291450-r",
      "description" : "Repository access and algorithms",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b4362927e7a0f004ce94fd589dfb0ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "a665a8ad3a3fbeaee292d5927d204ffe8f6aa23d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0ca6129b0614f5f90e9456c51bcfe141483248aec6a2cc2a7816f638bb04abf"
        },
        {
          "alg" : "SHA-512",
          "content" : "09e08bc9b4b64a6add8b5f4484692ae8444e4b7530b929aba931387f70b821523700d63da670264d37f6dee6ce2673c88a16003ef811978cda4f4dfbd8db95af"
        },
        {
          "alg" : "SHA-384",
          "content" : "59dee5612f7e7b66d783adefc781cba6284960cc3e15e60ebbed374c6fd24a4d3c9ab1eda9bfaa9524c8c266973b237e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bca16d5395bd68a6c71745213c0184bb0075a6942b614b894ccd07f66849eed084638ac8b41b7b710a161a7d2f995ea5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ccfe697be71c6f5a397324fcfe024bb981acc8533136434e096e60591191fce9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "46fc583487087f0223587d6afa71d68d068600a81f9dd64902e5d80ff347e86c58efbddca38573c86d6d26e87a0a20f3a524c744e4c8901e76da74386ee189db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.8.0.202311291450-r?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.eclipse.org/jgit//org.eclipse.jgit"
        },
        {
          "type" : "build-system",
          "url" : "https://ci.eclipse.org/jgit"
        },
        {
          "type" : "distribution",
          "url" : "https://repo.eclipse.org/content/repositories/jgit-releases/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bugs.eclipse.org/bugs/buglist.cgi?query_format=advanced;component=JGit;product=JGit;classification=Technology"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jgit-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://git.eclipse.org/r/plugins/gitiles/jgit/jgit/org.eclipse.jgit"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.8.0.202311291450-r?type=jar"
    },
    {
      "group" : "com.googlecode.javaewah",
      "name" : "JavaEWAH",
      "version" : "1.2.3",
      "description" : "The bit array data structure is implemented in Java as the BitSet class. Unfortunately, this fails to scale without compression. JavaEWAH is a word-aligned compressed variant of the Java bitset class. It uses a 64-bit run-length encoding (RLE) compression scheme. The goal of word-aligned compression is not to achieve the best compression, but rather to improve query processing time. Hence, we try to save CPU cycles, maybe at the expense of storage. However, the EWAH scheme we implemented is always more efficient storage-wise than an uncompressed bitmap (implemented in Java as the BitSet class). Unlike some alternatives, javaewah does not rely on a patented scheme.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8fdeda28c1fb10e67b3d79f86bef5e61"
        },
        {
          "alg" : "SHA-1",
          "content" : "13a27c856e0c8808cee9a64032c58eee11c3adc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "d65226949713c4c61a784f41c51167e7b0316f93764398ebba9e4336b3d954c2"
        },
        {
          "alg" : "SHA-512",
          "content" : "48cd9df9252c58e9ffe4583e68607944bcdf2ad7a3be7b4317467f503c4f56cdbde358ca7c4f34fa620d01615072a42f3a572fc4f1237e266310b7508e79bcac"
        },
        {
          "alg" : "SHA-384",
          "content" : "d1fd074f21b8a54a07d3f4579376d7c3ab72f24814ebc9ba92344e9da4721e9bfa3cda3a599137e4ddf2395a3c5b88e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a553864f196f73c139a104170ab79e780046fb5f322072c5494a6590361021f875afd7168f858b0531b61918ab49b94e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bab97f3f893af36c36218a151b0c3fece27d47f358cc19e1ca9c22d77942bb76"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be817b93c7093d44ec8dded565d7e5651772ce38e9c72283c05191b33d0ecb2798cd385395f553500446573ac49dccc21f4ba3067d71eb89e03daa384d0193be"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/lemire/javaewah"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/lemire/javaewah/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:lemire/javaewah.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.16.0",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg" : "SHA-1",
          "content" : "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg" : "SHA-256",
          "content" : "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg" : "SHA-512",
          "content" : "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37"
        },
        {
          "alg" : "SHA3-512",
          "content" : "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
    },
    {
      "group" : "org.yaml",
      "name" : "snakeyaml",
      "version" : "2.2",
      "description" : "YAML 1.1 parser and emitter for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d78aacf5f2de5b52f1a327470efd1ad7"
        },
        {
          "alg" : "SHA-1",
          "content" : "3af797a25458550a16bf89acc8e4ab2b7f2bfce0"
        },
        {
          "alg" : "SHA-256",
          "content" : "1467931448a0817696ae2805b7b8b20bfb082652bf9c4efaed528930dc49389b"
        },
        {
          "alg" : "SHA-512",
          "content" : "11547e75cc80bee26f532e2598bc6e4ffa802941496dc0d8ce017f1b15e01ebbb80e91ed17d1047916e32bf2fc58da532bc71a1dfe93afccc277a296d86634ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "dae0cb1a7ab9ccc75413f46f18ae160e12e91dfef0c17a07ea547a365e9fb422c071aa01579f2a320f15ce6ee4c29038"
        },
        {
          "alg" : "SHA3-384",
          "content" : "654b418f330fa02f1111a20c27395ec5c7f463907ae44f60057c94da04f81e815cf1c3959f005026381ef79030049694"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2c4deb8d79876b80b210ef72dc5de2b19607e50fbe3abf09a4324576ca0881fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0d9be5610b2bcb6bb7562ee8bcc0d68f81d3771958ce9299c5e57e8ec952c96906d711587b7f72936328c72fb41687b4f908c4de3070b78cc1f3e257cf4b715e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.yaml/snakeyaml@2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/snakeyaml/snakeyaml/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.yaml/snakeyaml@2.2?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.eclipse.dash/org.eclipse.dash.licenses.core@1.1.1-SNAPSHOT?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar",
        "pkg:maven/com.google.inject/guice@7.0.0?type=jar",
        "pkg:maven/com.google.inject.extensions/guice-multibindings@4.2.3?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.6.0?type=jar",
        "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
        "pkg:maven/org.gitlab4j/gitlab4j-api@5.5.0?type=jar",
        "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.8.0.202311291450-r?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.dash/eclipse-api-for-java@1.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-simple@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.inject/guice@7.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
        "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
        "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/aopalliance/aopalliance@1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@31.0.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.checkerframework/checker-qual@3.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.7.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.j2objc/j2objc-annotations@1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.inject.extensions/guice-multibindings@4.2.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.inject/guice@7.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.10.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.6.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.gitlab4j/gitlab4j-api@5.5.0?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.39.1?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.0-GA?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.javassist/javassist@3.29.0-GA?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.core/jersey-client@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.connectors/jersey-apache-connector@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.39.1?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.39.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.39.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.39.1?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.14.1?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jgit/org.eclipse.jgit@6.8.0.202311291450-r?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.javaewah/JavaEWAH@1.2.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.yaml/snakeyaml@2.2?type=jar",
      "dependsOn" : [ ]
    }
  ]
}