{
  "bomFormat": "CycloneDX",
  "specVersion": "1.4",
  "serialNumber": "urn:uuid:77f24dda-67e5-470c-9026-ad6643f7dc50",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "vendor": "OWASP Foundation",
        "name": "CycloneDX Maven plugin",
        "version": "2.7.9",
        "hashes": [
          {
            "alg": "MD5",
            "content": "8e595cdb67f17e4b41e046456970591d"
          },
          {
            "alg": "SHA-1",
            "content": "69e8ca804520d09ce4657e7235bae84d01cbffa6"
          },
          {
            "alg": "SHA-256",
            "content": "aa09074fe5aa403c008cd4fc7ef8ce41cd244489337f16b3e91a3914158a4db8"
          },
          {
            "alg": "SHA-512",
            "content": "1488a8112da8e675813d7585f57c5efb178aed32901118186ee12d0e4ae3d19c53774c7f860bf70d17d70f050119b69443a2637cf641675b4b5d9cdcdd69b89b"
          },
          {
            "alg": "SHA-384",
            "content": "b097295dfbf10887abc6eec58d4d0822cde5a73d1f5c1cf183a57bf569016ad5ced9d34efae3e574d82bb62837540c6c"
          },
          {
            "alg": "SHA3-384",
            "content": "289f9520bd73a2031276248a6ef8f0891c691062c2d1ea86a2bc9ea8db2c52377d92a53be9957179e71aee3deda26a8c"
          },
          {
            "alg": "SHA3-256",
            "content": "32b50a7efe5d491a4039c0017eca3cf49d98b55fc66d06b3dd06209487323474"
          },
          {
            "alg": "SHA3-512",
            "content": "1daf813da53e5d5cda4d0302ff3a5e388aa45d96ebe6dcbe240f35d33f14b1e6390f6bbe7f21f3ed8cf96ebd9f5516a08b18487b7339715109c81cebfc1563df"
          }
        ]
      }
    ],
    "component": {
      "type": "application",
      "bom-ref": "pkg:maven/org.dependencytrack/dependency-track@4.10.1?type=war",
      "publisher": "OWASP",
      "group": "org.dependencytrack",
      "name": "dependency-track",
      "version": "4.10.1",
      "description": "Dependency-Track is an intelligent component analysis platform that allows organizations to identify and reduce risk in the software supply chain.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.dependencytrack/dependency-track@4.10.1?type=war",
      "externalReferences": [
        {
          "url": "https://dependencytrack.org/",
          "type": "website"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/DependencyTrack/dependency-track.git",
          "type": "vcs"
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
      "group": "us.springett",
      "name": "alpine-common",
      "version": "2.2.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "67f7db8f2ddae1c9af98a3316fd2e96f"
        },
        {
          "alg": "SHA-1",
          "content": "a9318b75f2a294e1a347ee5c54711d317ac5b09c"
        },
        {
          "alg": "SHA-256",
          "content": "188dfa29d81511b179ca2cb8b5cbbfe5f20f2f9191be9928220923e6008fa152"
        },
        {
          "alg": "SHA-512",
          "content": "03eec9972838d03ca946d3d1d5cf395ae3a8698770ea3efd5c040592c496c566567eeb21b3d0d929f5a0ab56126abeda01650027f1a3ab29506691a81ed7e07f"
        },
        {
          "alg": "SHA-384",
          "content": "e0966727c049c8b6134fa0fd264a3bcbb22e593d35a32f9f0fbb69d31d900fd6c42770bfa0ebb8aed7688be237deacf8"
        },
        {
          "alg": "SHA3-384",
          "content": "f528f3e8016bfcfc782fc0f6fabc5488c0fa84b3b47691d939032877967667d7fe94476ebd214402925e8aa32760ff4e"
        },
        {
          "alg": "SHA3-256",
          "content": "8e7f845d06de0eb73bac1b2795ec3138400d4c8c0f58c0b531e8960f7fc35ad3"
        },
        {
          "alg": "SHA3-512",
          "content": "794ca770ee9504305103a9e7c26b6992730ebfb626db0286ce0ce6ecb4a64b01abbf35966683f036d0f0780ddbec18f10667402b5b4ee7208cf0885c36524156"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-common",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git/alpine-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "slf4j-api",
      "version": "1.7.36",
      "description": "The slf4j API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg": "SHA-1",
          "content": "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg": "SHA-256",
          "content": "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg": "SHA-512",
          "content": "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg": "SHA-384",
          "content": "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg": "SHA3-384",
          "content": "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg": "SHA3-256",
          "content": "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg": "SHA3-512",
          "content": "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-lang3",
      "version": "3.13.0",
      "description": "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang\u0027s hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3435b913691a5c1b173485a49850b1a8"
        },
        {
          "alg": "SHA-1",
          "content": "b7263237aa89c1f99b327197c41d0669707a462e"
        },
        {
          "alg": "SHA-256",
          "content": "82f528cf718c7a3c2f30fc5bc784e3c6a0a10b17605dadb9e16c82ede11e6064"
        },
        {
          "alg": "SHA-512",
          "content": "9cce41fd8bb2a24bcf8e75898190730d62b656af0d1a199202cd6cc848956b8cce4840ee616fb559c254fdff0bd09def9e65de6940a65bc7a07a386cec2bec0b"
        },
        {
          "alg": "SHA-384",
          "content": "cb663314025f3c2da314c0880e6928f5567cc448ded5deabd5cece5695e6fd0d4a84349fc7ee9638c732204dc3b26519"
        },
        {
          "alg": "SHA3-384",
          "content": "0642f12aef0ef38c8a6f5081f05de8bdc0e585b9556cd496c1df66b977746aefd2672a8941cdbcdaf169e5e2aba5d583"
        },
        {
          "alg": "SHA3-256",
          "content": "9ea297efa12a940dc9191a352256c9f89bddb30b40af603143775330c6bdb0a0"
        },
        {
          "alg": "SHA3-512",
          "content": "c08c8c538c21ab4ad7d7e5c1e5c27ef075acdf15177c777a33209ea095fb3e3be8a97d14f3dd86306e7c310a6dbe5be030a696b9f819848f6eeec045149ee091"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-lang/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LANG",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-lang.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.11.4?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-registry-prometheus",
      "version": "1.11.4",
      "description": "Application monitoring instrumentation facade",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a69cb945431e5b34940b5ec0e602fc59"
        },
        {
          "alg": "SHA-1",
          "content": "bc5051ac55ca228596110d716f7f12e6b1768d14"
        },
        {
          "alg": "SHA-256",
          "content": "5b9fb978b05625e5c98ec3111a3e1841e56c7d50533c2839bdeff92c6fa6132e"
        },
        {
          "alg": "SHA-512",
          "content": "048447dcae2702d6ee892ca88b06acc5bf6dcbb851d7ddc59fe7ba6221994958207858237bf44a13f95ec25f430589894d674d3feba275b72f3562239d5926b8"
        },
        {
          "alg": "SHA-384",
          "content": "83b601ccf01827056e144ea990a8fa07b6356c0c38ca8d20b66b0e8da66b087f446469f3120e39f365a498ada127146b"
        },
        {
          "alg": "SHA3-384",
          "content": "8ffcf82677c7bec4940d020a340b0c55c1954958e4ae91fbc8a0bfd39c0cab7cbf5817571f7ae2ab75e99484a21020e4"
        },
        {
          "alg": "SHA3-256",
          "content": "fa718db5b1f36b8da292a1ed756540323e3721ac94cbe7142d145737366e8b26"
        },
        {
          "alg": "SHA3-512",
          "content": "3704ad27683b655714a40f6d599a0c280f7d1286987de739bfc8cdf8fa1d3d1fbe9ae80d5f2cc5ebdeb0438f551339d30d2dc024c0f5fb9ecc4bce74da4017f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.11.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_common",
      "version": "0.16.0",
      "description": "Common code used by various modules of the Simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bef35be6eef09775ffe092c267729478"
        },
        {
          "alg": "SHA-1",
          "content": "a09a8c790a20309b942a9fdbfe77da22407096e6"
        },
        {
          "alg": "SHA-256",
          "content": "eba6ec26ce7e40cbb8725e05fb83247a9f4f44945b9e7522e3375dde67b9f059"
        },
        {
          "alg": "SHA-512",
          "content": "21eb5680598ebb8c1257990d9aae98069c17b38dba4bf8fbed37ec2a287020401380ea7854430978546529f636bd75455eb65f01b1040630b0b12d191a44be22"
        },
        {
          "alg": "SHA-384",
          "content": "011c23fdaaaf4eaa125cae68fe43573167c7cdd82562ea6cbe553270148a75f901e5e73708f16783b915d8872fc0b943"
        },
        {
          "alg": "SHA3-384",
          "content": "201268d47ebee613ec4645a748a3e968ba2cb7fbddce904b2056129351a4d9d5fbe9103727efc31416eb656271c29acf"
        },
        {
          "alg": "SHA3-256",
          "content": "43b3bdf4aecfb55ac802f6001ad90ef6e4706c12cafd8b95d504b331ae8a873a"
        },
        {
          "alg": "SHA3-512",
          "content": "dbb907bbbc68387cdefb1e251c8e319caf227d4e096de33f693f6fecdd844b273e7b549eca10ffafebe29e1ae4d9aee72eed5ead2b32cebec8dcc103680d20ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
      "group": "us.springett",
      "name": "alpine-model",
      "version": "2.2.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ec49517ec624baea4fc9bbe19a6c4d9f"
        },
        {
          "alg": "SHA-1",
          "content": "22db330de63fbdb760a257b24ba7cdad37c4691d"
        },
        {
          "alg": "SHA-256",
          "content": "fda0b70457734688f11920d35341ceedb408df9f28f182f5c975b70f475b133a"
        },
        {
          "alg": "SHA-512",
          "content": "7cdb976c94df16b57455373e9728262bc897376bcad7a4c1946002e728620460c416e344889537139315a7e407b609af408e70e04f946e6be9d2bae6921c9595"
        },
        {
          "alg": "SHA-384",
          "content": "e07bd92054c682381e246e45382a0139c615f7bfacd947cf5c8bbadd10964d372cf80a68d4bc96d790fe4c34db05f373"
        },
        {
          "alg": "SHA3-384",
          "content": "fe3f7cee6f589c98e379f2cd04e027ad46dac6d5492e9be04b562c3bdc67c0159b5bd0cdf63dc2bd146004b8c640f66e"
        },
        {
          "alg": "SHA3-256",
          "content": "b2bf9e2ac902732878947598518b5a0791c0e21d78913d195e77497f7adbb950"
        },
        {
          "alg": "SHA3-512",
          "content": "a3dbdf539e3ab09a487f889dcefd689cd2d1f0fe7b27245d9061cc32b1f3a1f9f732ba9fbfcda0e4350123275d364a2fde95fc5e853913460e2a47770856f12b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-model",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git/alpine-model",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-api-jdo",
      "version": "6.0.1",
      "description": "Plugin providing DataNucleus implementation of the JDO API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ff5fbfccdd2f5794527877b97c15d6f2"
        },
        {
          "alg": "SHA-1",
          "content": "7183a10244b6804dcbe9a74e1bb47190765c3d9b"
        },
        {
          "alg": "SHA-256",
          "content": "6a7e18d4880b37d0f807051597c1abe555cc17a610d30d6489bc2fa8144f297b"
        },
        {
          "alg": "SHA-512",
          "content": "4f9469c3633d19a5e59a0f3aede4461b0f15d3d010080b382f0ae9682cf20966520cbbb19af3e7fb5e61f078408e548481952901c3b3125d40d5007a19a79fd1"
        },
        {
          "alg": "SHA-384",
          "content": "b1ad46b6cf0555409c6a2cad1103af9ed410f0252de6eb140186f12e30ba3963a8ad865d7de8023dbca1274c807ccae1"
        },
        {
          "alg": "SHA3-384",
          "content": "2135593d62a5cecc978d64827b64bdf1e5f502b8c39d316421bc508abdf628f37b3bcc1c5dff067749ada28ebfe9b8ce"
        },
        {
          "alg": "SHA3-256",
          "content": "673524ffa604f834187f43dcb9cc4b9a1b27ea1f974d61f706bb4c0801629913"
        },
        {
          "alg": "SHA3-512",
          "content": "f9f4bdc0d51fdf3ca52e9395c88f534f2a501e193d5854dca049305ddb4be40ef2c2764fa79cac178f9d976f7536d61991d873dcb599e31f0fa6ad68ccfd7567"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-api-jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-api-jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-core",
      "version": "6.0.3",
      "description": "DataNucleus Core provides the primary components of a heterogenous Java persistence solution. It supports persistence API\u0027s being layered on top of the core functionality.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d406891884e237877d0c550fde4014cc"
        },
        {
          "alg": "SHA-1",
          "content": "6314f8a2910297243d0a975be67f1d7b1240fec1"
        },
        {
          "alg": "SHA-256",
          "content": "658059a628af2dda7b5e6d78c9179ed685457c2168027b2535df643698302aa2"
        },
        {
          "alg": "SHA-512",
          "content": "b483dac9bda6bf59a52c2f3b72965e80a72455639315b68b4263dd850fb6e29d020c43d04f109bf605348caf0dad164d02e607c8542d94b67ed0ea9a3d20afe5"
        },
        {
          "alg": "SHA-384",
          "content": "acc24a3ed630afe1c864189bb2ea1ae3e146f933aafc62dcfb6d2c1ca78a3151286bdec921bf6e74db29cd11845b0b7c"
        },
        {
          "alg": "SHA3-384",
          "content": "4763fe164a1e1df8e807cb08987c6512813af3c64eabe7f194165348d6d11bc994696d61cf82bc5c5abcd2d4ec4893bd"
        },
        {
          "alg": "SHA3-256",
          "content": "f3f2bd29ae6925fbb1941f1ffa42fc20087efb98881a6a3ae100dbad256e7739"
        },
        {
          "alg": "SHA3-512",
          "content": "ab24566d32268544004b6bd35823df844d28e3e5b1c989de528195d1298e09da711798841437feb957978c231855bcc0e8853a452c3a9e165f244c60f38598a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "group": "org.datanucleus",
      "name": "javax.jdo",
      "version": "3.2.1",
      "description": "The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "79f1e95e6d7f1eb191edce207ac6ecd8"
        },
        {
          "alg": "SHA-1",
          "content": "e8d1af5779f95d3c85b641184b605725762a36c3"
        },
        {
          "alg": "SHA-256",
          "content": "61646f544baf75fc7a305410443c5f5f7d219fa7a2cabe3b782950a350ca5d3f"
        },
        {
          "alg": "SHA-512",
          "content": "29580963b5478646b0f3b47ae3387d0bdb5bd86da37afceef6841c32b9db3a4407186fc257855c5c47efbbf1f1bfbff0b45b6ad45101b6dfbed7946a9251fe43"
        },
        {
          "alg": "SHA-384",
          "content": "1845d95a87e9fb954ff3e0c80a0dae62eca817abb3f727d65edc9296a0992e60a7fa57db0a72858afaf9e2d872f6435f"
        },
        {
          "alg": "SHA3-384",
          "content": "e4f04e5be64a1a58ef475cf5b155e6169307dd9636cd4fe6661dd394fe28a0a9ee9dee426291bff62d66885ae35ab2c8"
        },
        {
          "alg": "SHA3-256",
          "content": "3703404351c56d4a658de2012266838fea9741cceb09e7304b4c323e33d88ca3"
        },
        {
          "alg": "SHA3-512",
          "content": "da4b8c30667d67651469ed1a750004a3afbaad1ce8c6697ac29889fd2e78dadbcde07d414161e42bc972017afe83e690329d4ede5e94a67553377ee7c2a7929a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/javax.jdo",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/javax.jdo",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.transaction",
      "name": "javax.transaction-api",
      "version": "1.3",
      "description": "Project GlassFish Java Transaction API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e9cb1684621821248b6823143ae26c0"
        },
        {
          "alg": "SHA-1",
          "content": "e006adf5cf3cca2181d16bd640ecb80148ec0fce"
        },
        {
          "alg": "SHA-256",
          "content": "603df5e4fc1eeae8f5e5d363a8be6c1fa47d0df1df8739a05cbcb9fafd6df2da"
        },
        {
          "alg": "SHA-512",
          "content": "3497cf77352aa1317c70ad1d28e8e7da51337d844c8227a35707209c750ba6f5d644a4ffdbdb10e5fbde204003aa43ff80e9e2ff3164584a7a34d8292266b2bc"
        },
        {
          "alg": "SHA-384",
          "content": "7044d8d5829a777d85e1a987c3e346eb535dd321366bdf32a9e8ed4f52facd0610ac2f3f58b4a1b001893f01fddc5eae"
        },
        {
          "alg": "SHA3-384",
          "content": "d0c1807001e02ce47320be657be055b4777b8b5673c22a78b0574955f7a6105dacc42b46b86ab967dc382cf332da59d8"
        },
        {
          "alg": "SHA3-256",
          "content": "c7c48884317a2d0e1596f201763acbca4ef76462af9172fd5e68aca3465303e1"
        },
        {
          "alg": "SHA3-512",
          "content": "bf053d4fe995cb5c1d6c01320fc73530017ee364de6ae21eb98fa0372b2aa6eff2fa4ac2d9cd5f692c930ee573c2f6226441918123fcfc48b5b4a126d350928c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "externalReferences": [
        {
          "url": "http://jta-spec.java.net",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/javax.transaction/issues",
          "type": "issue-tracker"
        },
        {
          "url": "javaee-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/javax.transaction",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.corba",
      "name": "glassfish-corba-omgapi",
      "version": "4.2.2",
      "description": "A CORBA ORB for Glassfish",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b2eb806fc90b71d6d15391a1c887ae1f"
        },
        {
          "alg": "SHA-1",
          "content": "6e0f5735a51bda8f72dda0e58ba766d16678c7b8"
        },
        {
          "alg": "SHA-256",
          "content": "2d964250e13aa77b5e687669ef4981d44c7b92496b28e439e5fbcc5c7882e0f5"
        },
        {
          "alg": "SHA-512",
          "content": "0e99c7e659bf2613d0436805476c5ed265afbd35648f6367bcd8227c0052b024b675f4c9eb3ec590e24c8f0b989d0392a4c53ec3cb1ce666a7ae566489841482"
        },
        {
          "alg": "SHA-384",
          "content": "253cd42b07fd905e5c5651a0d78d1b33cac48abfdfa8fc2592e982c4e385481ccead57d8bcbe32407f498de1e26f3558"
        },
        {
          "alg": "SHA3-384",
          "content": "cf14029429a406ec32481ac73a7580a4e34f1216f7f85ea29cb35dba8b8ca1e20b59b81b66778ac5b16a3975fcf6f2d8"
        },
        {
          "alg": "SHA3-256",
          "content": "76b8b17d5659c5638709d866cb78ee75b78cbaf53beb649f4ec1b15a47c65347"
        },
        {
          "alg": "SHA3-512",
          "content": "2d8b9be6f6a7149663107ade523c8e274b1f24710132ae09d09591632ceb108296f26214f9c9ce4cec40f074bf97f715284d136cb01ce886e8745b38eb5b3f48"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/proposals/eclipse-orb/glassfish-corba-omgapi",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/orb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/orb/glassfish-corba-omgapi",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-bean-validation",
      "version": "2.41",
      "description": "Jersey extension module providing support for Bean Validation (JSR-349) API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3154b7bccc279d32e4fb6831ca01c84d"
        },
        {
          "alg": "SHA-1",
          "content": "68ae9ee50241b678a8e8bd281cde7b7ca5812512"
        },
        {
          "alg": "SHA-256",
          "content": "e1f75177ca9dd5655b71a702fb272520f628b346feb311bae363368775c586b8"
        },
        {
          "alg": "SHA-512",
          "content": "e187cfed0d25c5338bb8eba249c43b72295bf8d857535504201c3b4d26db27309b11ebf895dcaf07434df1b464944a543bf7773ad41560615d23e44d2e9f8367"
        },
        {
          "alg": "SHA-384",
          "content": "234071a54e46b9e725ce3cd6395b0c2a5ca746cb2ba51ea4b7c849865665f083fb098e3cf703c6d9a70d7be7239801aa"
        },
        {
          "alg": "SHA3-384",
          "content": "5ddbdba86a3e73bc267f470d51ff5e2a3b4771b4f52a2f7bd9eeac45b8a0c999069cd36f2171e26f239f1cf792f9eec3"
        },
        {
          "alg": "SHA3-256",
          "content": "4e8596ee860f2c297a8ab0721e345b30a1b85a1ac9935a365e1f8c895218ea72"
        },
        {
          "alg": "SHA3-512",
          "content": "da62fb8a06a50b876c017de9d2776a60da841cb2d26c3c6af6c3ca6f4ece4c1f29c3e7c44705b3390fc0c08cb5b3fd03f7e2f8db800a5b4ed414368eeccc06fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-bean-validation",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-bean-validation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "jakarta.inject",
      "version": "2.6.1",
      "description": "Injection API (JSR 330) version ${javax.inject.version} repackaged as OSGi bundle",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4d7c80a1e3cd54531af03bef4537f7af"
        },
        {
          "alg": "SHA-1",
          "content": "8096ebf722902e75fbd4f532a751e514f02e1eb7"
        },
        {
          "alg": "SHA-256",
          "content": "5e88c123b3e41bca788b2683118867d9b6dec714247ea91c588aed46a36ee24f"
        },
        {
          "alg": "SHA-512",
          "content": "7fc8196ad9ee03a831dfff85c945e416c3906071a7aa8ebf6ab8b7008dfec0adccc1f1dca53ed6768ac5676cd4b3c43471674f97ff73e1f61f5a427aaed68e05"
        },
        {
          "alg": "SHA-384",
          "content": "6b3ea9eeec5cbbc1fb3e6c89160af67b82ffbd68948dd4790e3fe3ce2fc495c063698a7d6a1998d5db51abafe3915e19"
        },
        {
          "alg": "SHA3-384",
          "content": "b551e00861151233789c03cec07e162d90d1f377fb8f26d413f7015152188183d636e2837ceca131096c43511e618efa"
        },
        {
          "alg": "SHA3-256",
          "content": "67f3b5a4b3006d07a33ccdbbb70f312c94d2d8cdd32598d471b079470574ab6d"
        },
        {
          "alg": "SHA3-512",
          "content": "a0b6c00df7f5b53f549193a7e6a26d632847957ad296aef2ee75a23a5ebdec970f793511641e6c63677b481c47ca67f4039a5ee5f4bb532a46093a201782198d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-server",
      "version": "2.41",
      "description": "Jersey core server implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8c585005f2af963b482e8d9ed7d7e88f"
        },
        {
          "alg": "SHA-1",
          "content": "a73e75be17d885bae0aad1fd0ebf4cb28285993b"
        },
        {
          "alg": "SHA-256",
          "content": "99ed66ea2a67dbcf58b6b7ad03efac6edda22877985d0d90b42316c5d465e416"
        },
        {
          "alg": "SHA-512",
          "content": "b7efb9a3265fc15ec379620eb06805cdbea3da0a9048ef84ebf1e56ea2b57731f25c3c393cbd9cfa7b1629d49b9df5cdc0c3840f6b37443955d115fc331f5873"
        },
        {
          "alg": "SHA-384",
          "content": "dd6c2058e4a8043282ee952b7723591a0e497d6458ff879d05dac3a5f76f1f4f8376ccc33ccc5cbda3f1d48ab24d8d83"
        },
        {
          "alg": "SHA3-384",
          "content": "f583b2993ce32efbd5f21a05f3692b4245918e966fbb375209bf04433a1a875b444a239244bacf7b39c258a203c6cb42"
        },
        {
          "alg": "SHA3-256",
          "content": "151836672e9055d28b9fbdb801a20c99152fab29c171c73ed6c77297777b587c"
        },
        {
          "alg": "SHA3-512",
          "content": "2fd9e1b670de30a82ab68d70051fc537adfa1115ada68d8d4d12c635ff3f32ac65a56ca5778945f1a4a98e809cc0bc59d1cd840192f638b4263b339f434958e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-server",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.validation",
      "name": "jakarta.validation-api",
      "version": "2.0.2",
      "description": "Jakarta Bean Validation API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "77501d529c1928c9bac2500cc9f93fb0"
        },
        {
          "alg": "SHA-1",
          "content": "5eacc6522521f7eacb081f95cee1e231648461e7"
        },
        {
          "alg": "SHA-256",
          "content": "b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4"
        },
        {
          "alg": "SHA-512",
          "content": "3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb"
        },
        {
          "alg": "SHA-384",
          "content": "6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94"
        },
        {
          "alg": "SHA3-384",
          "content": "55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d"
        },
        {
          "alg": "SHA3-256",
          "content": "1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21"
        },
        {
          "alg": "SHA3-512",
          "content": "c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "externalReferences": [
        {
          "url": "https://beanvalidation.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/BVAL/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/beanvalidation-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar",
      "group": "org.hibernate.validator",
      "name": "hibernate-validator",
      "version": "6.2.5.Final",
      "description": "Hibernate\u0027s Jakarta Bean Validation reference implementation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9bce6e6e05f6975c0d414a5e935c8107"
        },
        {
          "alg": "SHA-1",
          "content": "a68959c06e5f8ff45faff469aa16f232c04af620"
        },
        {
          "alg": "SHA-256",
          "content": "8d6d89c3204b30a01dc248352f43dba196140bf4adc5f437f63e2ad62a3d2144"
        },
        {
          "alg": "SHA-512",
          "content": "7c29acb57e7ac2c46e47c4f4b716f5518bdfcba81bfad333764894c6b7be679fc8cff1c3598b9210bfd0da1b704e8b11f9f71e0ed7e57bf0eea4fd76b65458f8"
        },
        {
          "alg": "SHA-384",
          "content": "db1a36d00f1e07ffbdb8bd2a24dfbb07e97703f6054ec86e8a2ba3e5848fa83955fd082c48436c4aab7cb864ec5f12c0"
        },
        {
          "alg": "SHA3-384",
          "content": "46a17e6d4fdda01a91bb5921001506169fd4bcaf8c0aeea5f959480eecad3b2b258b361968f12cf8ffbe454fcf5562fc"
        },
        {
          "alg": "SHA3-256",
          "content": "7523582fe81c98cff0fd8e2229eb1f8a703ef4e099d8af20931b095a21277b8f"
        },
        {
          "alg": "SHA3-512",
          "content": "b1478874a387b448085c6a1e0012ec5cf3aec808285d4ec6386cf15e1309d6d8fb0f21af9c4df8dc0c1bb50887ca4f90f85fa9c55250ea5541a1403f465cd073"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://hibernate.org/validator/hibernate-validator",
          "type": "website"
        },
        {
          "url": "http://ci.hibernate.org/view/Validator/",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://hibernate.atlassian.net/projects/HV/summary",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/hibernate/hibernate-validator/hibernate-validator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "publisher": "JBoss by Red Hat",
      "group": "org.jboss.logging",
      "name": "jboss-logging",
      "version": "3.4.1.Final",
      "description": "The JBoss Logging Framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52ee373b84e39570c78c0815006375bc"
        },
        {
          "alg": "SHA-1",
          "content": "40fd4d696c55793e996d1ff3c475833f836c2498"
        },
        {
          "alg": "SHA-256",
          "content": "8efe877d93e5e1057a1388b2950503b88b0c28447364fde08adbec61e524eeb8"
        },
        {
          "alg": "SHA-512",
          "content": "c17b8882481c0cb8fbcdf7ea33d268e2173b1bfe04be71e61d5f07c3040b1c33b58781063f8ebf27325979d02255e62d1df16a633ac22f9d08adeb5c6b83a32a"
        },
        {
          "alg": "SHA-384",
          "content": "1a9a57638b6d9da1f50dc92da88405878885ccfc1cd6e3a66f5cee1fcef5af51a2d63294afd23f2300f550758af58469"
        },
        {
          "alg": "SHA3-384",
          "content": "aabecb31aaa548a5bf9ed6f540ad91e8f3c713a10c351c43aa71e845f6f80d81d673484e1c566ab246c80c8c77acfa74"
        },
        {
          "alg": "SHA3-256",
          "content": "447c31f632013a87e7e9e90a346b2011f2213df22a3844a502e813536f14611c"
        },
        {
          "alg": "SHA3-512",
          "content": "1b34af205a56d3f93d2070e335ef853090fb7dabe630b05beeee13c8596503c2f242fc93aa7a8763418771bc3593e65e8bd93c62288324e29caaf53ffbee27d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "externalReferences": [
        {
          "url": "http://www.jboss.org",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://issues.jboss.org/",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.jboss.org/pipermail/jboss-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/jboss-logging/jboss-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "com.fasterxml",
      "name": "classmate",
      "version": "1.5.1",
      "description": "Library for introspecting types with full generic information including resolving of field and method types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e91fcd30ba329fd1b0b6dc5321fd067c"
        },
        {
          "alg": "SHA-1",
          "content": "3fe0bed568c62df5e89f4f174c101eab25345b6c"
        },
        {
          "alg": "SHA-256",
          "content": "aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b"
        },
        {
          "alg": "SHA-512",
          "content": "7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a"
        },
        {
          "alg": "SHA-384",
          "content": "28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694"
        },
        {
          "alg": "SHA3-384",
          "content": "b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1"
        },
        {
          "alg": "SHA3-256",
          "content": "50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f"
        },
        {
          "alg": "SHA3-512",
          "content": "9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/classmate/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/java-classmate",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.el",
      "name": "jakarta.el-api",
      "version": "3.0.3",
      "description": "Jakarta Expression Language defines an expression language for Java applications",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "528ed6138395d22fb54912b2b889e88e"
        },
        {
          "alg": "SHA-1",
          "content": "f311ab94bb1d4380690a53d737226a6b879dd4f1"
        },
        {
          "alg": "SHA-256",
          "content": "47ae0a91fb6dd32fdaa5d9bda63df043ac8148e00c297ccce8ab9c56b95cf261"
        },
        {
          "alg": "SHA-512",
          "content": "f76c94036f0f49d3cf9d1f90697fa96a97d94aba93a0dccad7b907d6c63ff3bceacc6fd40405ff68d6c248b13d056b3543ccb3d2b405917b2ccddaae78ad8900"
        },
        {
          "alg": "SHA-384",
          "content": "5796acb1f22b55e2713763584eaf2b62abbcfcee85530138006fbb55abb19b2c534b2887c28a2f5301168783416fb6c8"
        },
        {
          "alg": "SHA3-384",
          "content": "bdb09cc896874c0a4a3c470e355f2b23f954800510986753cfc2d4da41cb6c4de567b9014d618da3f89f04e36cfe620b"
        },
        {
          "alg": "SHA3-256",
          "content": "4fc4437d2638002741f4217003f3a9de47c037458dbeabee1a1a5bec96547466"
        },
        {
          "alg": "SHA3-512",
          "content": "5857452b1eb5e9ad141717dd9e989763e99a98bf49150ebeb66c423daee8e890ae9b89737abdebedd7ef7e47e6c2fd8cfeaa9276014fb6dc88134ccd2234ab5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish",
      "name": "jakarta.el",
      "version": "3.0.4",
      "description": "Jakarta Expression Language provides a specification document, API, reference implementation and TCK that describes an expression language for Java applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a4ff0d711c405e054f8166c2ea893e0e"
        },
        {
          "alg": "SHA-1",
          "content": "f48473482c0e3e714f87186d9305bcae30b7f5cb"
        },
        {
          "alg": "SHA-256",
          "content": "3b8d4311b47fb47d168ad4338b6649a7cc21d5066b9765bd28ebca93148064be"
        },
        {
          "alg": "SHA-512",
          "content": "45b9142c3ba82abd44decd350257be6f951bfb23e3baa96e6e8a26b269881f96c4e50615fef06c3b27434d7cb346e87da913f90284e11614118699a8a3e883be"
        },
        {
          "alg": "SHA-384",
          "content": "14e457f2bbbabd02bbd6ddf8c9dd0c27ab7c50c4c7908c81a17660bc45de3a800119c00da8e799335fae4241adc2745a"
        },
        {
          "alg": "SHA3-384",
          "content": "eaa1fa45a0f0d152f78dd000518c23edb1e31025cd0dbc86c3cccafab64bd89d6bfbd605c062b6e5aeabc259f0bf9aba"
        },
        {
          "alg": "SHA3-256",
          "content": "86bb8ff8f351449a2ac125c09914eebdd8ee4b8e5616477fd155a481aa98b6a8"
        },
        {
          "alg": "SHA3-512",
          "content": "f40a2b2fb4595a9aadc4e38b4dbd8b958bb303c4d90df4241cd1eaa1181ca0715bbff6e29c3bd5c424542392f351cf09329d772ae66d72608c272dd6f5042ede"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.el",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/el-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/el-ri",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-infra@2.2.4?type=jar",
      "group": "us.springett",
      "name": "alpine-infra",
      "version": "2.2.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d4721d8f66a6cf59c0c88da23d2a1321"
        },
        {
          "alg": "SHA-1",
          "content": "47f551e5b273ec53cbb76abb0a02ef54670eff36"
        },
        {
          "alg": "SHA-256",
          "content": "d4e6cea21cf645b2298aceb9abbe21f0777a5f9dd61cd22740647a88623650a4"
        },
        {
          "alg": "SHA-512",
          "content": "b1a4295427388188088ea343248ed142083478bcc35863b853948184d5156db0afdfd09c986bb8923aad558660b1b2a502e1c3a0345b7df183adef68f1130bf8"
        },
        {
          "alg": "SHA-384",
          "content": "75ccbef907e8204a6b7d43c848bad840faa01f3282726821f32ab3b5591045b9d80cc959d8fa64a320ebd7ab296b238c"
        },
        {
          "alg": "SHA3-384",
          "content": "4fd5088ee5ea4ac345b34061cd626d4a008d101c0e07ce67a7c8143a93ccca5a72f8f95b62111139dbcc96a53c63daff"
        },
        {
          "alg": "SHA3-256",
          "content": "818a6d4fe05ba5b33a39fb0ae40997e1f179cc6b8821f5abcddf895a6b362f99"
        },
        {
          "alg": "SHA3-512",
          "content": "417e33084305c37cdfcf94e31960a4751d7cb1749799499b8fb301c4201698b380cd97268c8d9120dcb385cdbdc0fea77df3e5735256548881f45b428d3e0bcf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-infra@2.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-infra",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git/alpine-infra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-collections4",
      "version": "4.4",
      "description": "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4a37023740719b391f10030362c86be6"
        },
        {
          "alg": "SHA-1",
          "content": "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg": "SHA-256",
          "content": "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg": "SHA-512",
          "content": "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg": "SHA-384",
          "content": "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg": "SHA3-384",
          "content": "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg": "SHA3-256",
          "content": "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg": "SHA3-512",
          "content": "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-collections/",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/COLLECTIONS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.3?type=jar",
      "group": "org.datanucleus",
      "name": "datanucleus-rdbms",
      "version": "6.0.3",
      "description": "Plugin for DataNucleus providing persistence to RDBMS datastores.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0798f7a1e4b67ebb37aa51dc1a81f469"
        },
        {
          "alg": "SHA-1",
          "content": "1550d72e1b6a407b42c4e50db37321132a22bb55"
        },
        {
          "alg": "SHA-256",
          "content": "21497f686657ce029db3fb6ab3d3dbb7fb8355afd00996b65253b34d2f2eb979"
        },
        {
          "alg": "SHA-512",
          "content": "05fb02f86474608a4991dc0981be79af9d64b050a1965d561668c4d2004dcb09091035b916e33bacbaf45cbdcf4966a603eb13d395468d72fee6c3bb63c7e9ce"
        },
        {
          "alg": "SHA-384",
          "content": "3b71e37ea0b76be4404a8436d11f33d3115822466190ae1cb04aaa2b2fcd3664a166741bae8ca2d87f867a6f19feef47"
        },
        {
          "alg": "SHA3-384",
          "content": "9542b51c382dd72de346e0c6335144cc434d219e6a19bb96793049c85526da03d40397a2852958db647b937ecc3129dc"
        },
        {
          "alg": "SHA3-256",
          "content": "bbb08c7dda17052f199655c1123563d6766cdf923b69f602f778d9333cb6f1f3"
        },
        {
          "alg": "SHA3-512",
          "content": "45391adf7ff1b824d0d7d40f4ab5a54c3d9aca3cf221baa711aac79624c2ae6430a56408b3640aaaf5e2d00b71983b21ce133b78d2447e703bc1248d4a8ab064"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://www.datanucleus.org/#/datanucleus-rdbms",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/datanucleus/datanucleus-rdbms",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "publisher": "Zaxxer.com",
      "group": "com.zaxxer",
      "name": "HikariCP",
      "version": "5.0.1",
      "description": "Ultimate JDBC Connection Pool",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3bc96d2ce8285470da11ec41bff6129f"
        },
        {
          "alg": "SHA-1",
          "content": "a74c7f0a37046846e88d54f7cb6ea6d565c65f9c"
        },
        {
          "alg": "SHA-256",
          "content": "26d492397e6775b4296737a8919bf04047afe5827fdd2c08b4557595436b3a2b"
        },
        {
          "alg": "SHA-512",
          "content": "0a932d8c1083d3ba8eb6e004aa1783cc3f6df7424666f1d61ca6606715afbbb3da20bc0b61efd91bb3162f8092100ddad5e90fe019f818c89cc69a8d8d0bd5d5"
        },
        {
          "alg": "SHA-384",
          "content": "7076c4dfe7763b477aa23309d0103290e035c88478bef5bb2189bff5d7a3942fcf6b510318863b8d55a7495586284d7c"
        },
        {
          "alg": "SHA3-384",
          "content": "44ad2bde5beae862db7faba2e6f99b9e49076345f78f94136e5de2e10db972b786a544e009cf162f516953bb159085c6"
        },
        {
          "alg": "SHA3-256",
          "content": "3cd38fb84432c644bd831436b11c9b37be7dc8b2fc72b9517427c0008cc42e46"
        },
        {
          "alg": "SHA3-512",
          "content": "65a38105f390df9a4cfddcf2043206266cf0b2bb31a8797e08338dc4d631da31bae81998eb051e0f2767928783d5af55cc6d4b9bae47ad313cb66195cdc9f7e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/brettwooldridge/HikariCP",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "publisher": "Shigeru Chiba, www.javassist.org",
      "group": "org.javassist",
      "name": "javassist",
      "version": "3.29.2-GA",
      "description": "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation simple. It is a class library for editing bytecodes in Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9783c90ffa4d36eddda9526fde06f3ea"
        },
        {
          "alg": "SHA-1",
          "content": "6c32028609e5dd4a1b78e10fbcd122b09b3928b1"
        },
        {
          "alg": "SHA-256",
          "content": "a90ddb25135df9e57ea9bd4e224e219554929758f9bae9965f29f81d60a3293f"
        },
        {
          "alg": "SHA-512",
          "content": "5f9e939a0c094e2c4d4b8509c126fcb9033ea47c2577e172b2326c8aceb86b5bc3168d056b3d986c7bb3d3f46ed6fed3155c77734afcbb8cb75162df0375a657"
        },
        {
          "alg": "SHA-384",
          "content": "8b1f8b7235a7aeab500bcff13b5f88fe95df983502975021ac7d5edd0c73d708f65da48796f5680f2ef710fed9d0e0aa"
        },
        {
          "alg": "SHA3-384",
          "content": "d7944350dfa3808264a93445efedbab2645807d533b8cd9e95540e94ae38c6b7aafa6e29d1cbba669b67dda69881814e"
        },
        {
          "alg": "SHA3-256",
          "content": "a87df212cdfc24f3075ac8d4dec52cc9bd16446ec489706f60939aaf196fef50"
        },
        {
          "alg": "SHA3-512",
          "content": "9fffcb716b656fff4ad299ca4ef1b11166016a4bbe6c97317c894ca3163136ec1dbae62cc46a9f8a945cc6592ab930dccf8e0261f0a89025b0a8380fdc96e8b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-1.1"
          }
        },
        {
          "license": {
            "id": "LGPL-2.1-only"
          }
        },
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "externalReferences": [
        {
          "url": "http://www.javassist.org/",
          "type": "website"
        },
        {
          "url": "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://jira.jboss.org/jira/browse/JASSIST/",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git@github.com:jboss-javassist/javassist.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "group": "io.jsonwebtoken",
      "name": "jjwt",
      "version": "0.9.1",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "32b17377c70abef64a8b8203d2520932"
        },
        {
          "alg": "SHA-1",
          "content": "54d2abfc3e63a28824d35bf600d6a5d627da681a"
        },
        {
          "alg": "SHA-256",
          "content": "56e254d6a8d2306dc93e9ae2d81bf841481637f98b84847470c06cf71160d143"
        },
        {
          "alg": "SHA-512",
          "content": "ab8e3e49904fd2e852f720af46acce0b550b99ee4be593944a6c00f8781ed141c7f19cad0614cabad7194e0a0d970a3a1605525ce244167d5fdbf961aa6a093b"
        },
        {
          "alg": "SHA-384",
          "content": "254a9822f640ea9aa6f6ea2b48337684b01cf7a14d48acc9fbbb472c090919f7e241f7455d70b90e1ed223df4815cded"
        },
        {
          "alg": "SHA3-384",
          "content": "041a871e7c44449e86fda7fb2fc9df5d262ef64e511be0fd167b4a2a0c0f2e230bb3e09dc8074f2eca9911d519cad4bd"
        },
        {
          "alg": "SHA3-256",
          "content": "696478922c79f183e6e2656bd523fbb2a8830f084f9d278d5cce4d2216bdf702"
        },
        {
          "alg": "SHA3-512",
          "content": "1fe621ebdfdbab8fa8cd59878c171826a6c06de8e2f0416128c47b82bdcdfe9ad2bb9a59e157f96c170df919000fb009cd596b649a6aae4ed0ec6433cf9c2c79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jwtk/jjwt",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/jwtk/jjwt",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/jwtk/jjwt/issues",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-server@2.2.4?type=jar",
      "group": "us.springett",
      "name": "alpine-server",
      "version": "2.2.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e2064b6fab97ef78a468adf241662e95"
        },
        {
          "alg": "SHA-1",
          "content": "060dabe774e2a9dc44b72b3d0b3710c49c80c97c"
        },
        {
          "alg": "SHA-256",
          "content": "11ed946e427ee3324e8775827fbd30e6368447311016289a7b98900d65fa7d8a"
        },
        {
          "alg": "SHA-512",
          "content": "ef5e4b1e6b5edee88da3e7b099ee841c1c9982b14a32a4fd019b9a4f79dc55afe692e15cf5dd16d948e808fa1d2b63514e7ef38ae9a12092cc97ca446a1d9098"
        },
        {
          "alg": "SHA-384",
          "content": "fffcd63b2f575727f0069cd83bd77463fc13b36dc6a0523d54b22b0f68adc58dff1b3e2fe0a05fd1356495dc64010cd3"
        },
        {
          "alg": "SHA3-384",
          "content": "a09941a5a41355069baafce0d960e3c6f6424eface7b5b9eb26e761eb8370d8c0faa7bb88ab6cfbf7faebe671e10976d"
        },
        {
          "alg": "SHA3-256",
          "content": "095c2e0fa65e22fcf1935781c9294c289c2fa8352316c05a880c0b1fd33e63a5"
        },
        {
          "alg": "SHA3-512",
          "content": "3df29e5feb09bd5cb9fe9aab008f08e639c68abb1fa02c576e85aa2cf3dad364220c25d7795e25b1baf67fc7b21f52392df9a264b60b6a074547fee1b5d11075"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-server@2.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git/alpine-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-io",
      "name": "commons-io",
      "version": "2.13.0",
      "description": "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d000fa8939b71b8894637f0ef6ea28c"
        },
        {
          "alg": "SHA-1",
          "content": "8bb2bc9b4df17e2411533a0708a69f983bf5e83b"
        },
        {
          "alg": "SHA-256",
          "content": "671eaa39688dac2ffaa4645b3c9980ae2d0ea2471e4ae6a5da199cd15ae23666"
        },
        {
          "alg": "SHA-512",
          "content": "3a5698d0c995c395cf44180073615f087af42fd78e71f224eb38908d823da41f0d04f18e6a14df67b3b02830fbf542f35b9f43aafe39437f17fe18655fbcac07"
        },
        {
          "alg": "SHA-384",
          "content": "51ce4e22195684565d9a93aebcf93bf9aed13e76e429601bdaf5e348430effb5d1276d848a98690040a4182706c731f4"
        },
        {
          "alg": "SHA3-384",
          "content": "fd396f3c704aacf5d9fbb46d38c93c57ccd374fe0d194fdce9a2a29cf28a49f36546be9a58b525b72adc79f81b45406f"
        },
        {
          "alg": "SHA3-256",
          "content": "fedde8561c6fe53171cbcc97ac3cf9e53803480a6b63413711edba58af121433"
        },
        {
          "alg": "SHA3-512",
          "content": "875e3ef85e1445e2704db29a9d792b1df576786e6a24d4bcc2529eb5677f4fdfacf2af2a12aecf2a309fe76cc67422da05bea17bb1a95b719062d74dd7858544"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-io/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/IO",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-io.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-client",
      "version": "2.41",
      "description": "Jersey core client implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4ee9b388f464eef79a18db5c0556b1ce"
        },
        {
          "alg": "SHA-1",
          "content": "96262c5734fb2eb04e5e40c3b0b6a3a7c5adcb62"
        },
        {
          "alg": "SHA-256",
          "content": "bec0eb5a410edb4eaa62d0fc04fabcdbe7f15e7356f4b356e9c6e885bba4fc83"
        },
        {
          "alg": "SHA-512",
          "content": "8076b40e2363dd0151eeb0eff9568a87a2a36de57cc5cbcdd78337d2295d785d1775a364476cbb64d8fb1c27981ac248fe0cc0c2e6b4c6d2ef1c9cc78278365e"
        },
        {
          "alg": "SHA-384",
          "content": "9f3d4fced73fff1aab230db71381cd5f95eca6466deb71a302311e1e0fad0b9f8146b5ccf5ca98aa3f89fc899450c6b7"
        },
        {
          "alg": "SHA3-384",
          "content": "44048c969a1585e4f69a622deb8a6a4f97b31ef656eeb75da67ddf5009709a69d8a891d4fe3b33dc251481f44736591e"
        },
        {
          "alg": "SHA3-256",
          "content": "aaf99a6d6e82a71d0933d12d72eb5151cf739e667c50b3e89c55cd20e668f745"
        },
        {
          "alg": "SHA3-512",
          "content": "e8b8d2e25a1a5914f37bf6605b2a55441c41e0efd5c6cb7089968f5ca2d75ad328ddac7f8a88d65672f01585ea5212501ef80a14e34d26f2e05f93d7bc114dab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-client",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet",
      "version": "2.41",
      "description": "Jersey core Servlet 3.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "41c128efafdb838b3cf4b618b6256854"
        },
        {
          "alg": "SHA-1",
          "content": "05c6a5ac329b57673c01e5ed1aa103ae1f15c38f"
        },
        {
          "alg": "SHA-256",
          "content": "69ddfd277edf81532c2917d7562675852efcdf91c52220a4c23701e629ff7ea1"
        },
        {
          "alg": "SHA-512",
          "content": "3fe425cc205f2059d7fb7d98a565676a3a0393d4db867677f0d94cb40536b140088f873bf938e6210b0145f317b7ac73ca0279f17983742c541f242bd8200640"
        },
        {
          "alg": "SHA-384",
          "content": "4e976540df9267d851133f618084bb9d7528eb0c5bcb4444b6ce456779ff78b180cdc5017457afe2902b74364cc14f5b"
        },
        {
          "alg": "SHA3-384",
          "content": "82dd085fb94505642c3aed2ea423861ffb9fd0fca5ae3725d7f37715a5152ff5a7ae3434985666fa488780df3a73f11e"
        },
        {
          "alg": "SHA3-256",
          "content": "1eb09b52d224ea0bf5db8055dd76cccdfb465bf905a6a635c24e3f8beb3d1a81"
        },
        {
          "alg": "SHA3-512",
          "content": "f9ea8cc5124d42c37b54776482f2f1b2195d217b2ed82a8cda49f0cb67f8b13a87ff30327eb48ea3462b850e5726dd7174f3c0ece2e746f4fda6589a2807663f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.containers",
      "name": "jersey-container-servlet-core",
      "version": "2.41",
      "description": "Jersey core Servlet 2.x implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "52d6d02071ae5056af51e92434209876"
        },
        {
          "alg": "SHA-1",
          "content": "be7751e92f51bb022650659698ef9d77edbeea9c"
        },
        {
          "alg": "SHA-256",
          "content": "2dffe2a95cf475feadec223db1a732df10f705dcfef3377e3a81dcdb0683be0f"
        },
        {
          "alg": "SHA-512",
          "content": "9963ee4b06f456d2ef47a82b27e480822fe2b2f19846230de7380852ca1947ac5a3bcfa7b31ccf98d4dd69d890917579df0852ad607ff76076b1520250e73eb9"
        },
        {
          "alg": "SHA-384",
          "content": "4034735f42947104a7ff2b4e51ed45ad9744744fb8721593af6af8fa554aadaa2b0d0fba18dd76b930772a9b318484ae"
        },
        {
          "alg": "SHA3-384",
          "content": "aa95c300554277e78b0bceac4b32c1ea24c12b135713009c282235cdaf643dd53f6ceb95a69d002426d54d5d46baf015"
        },
        {
          "alg": "SHA3-256",
          "content": "f4999f66b276d489fa68d8f2bf1d04ab4a58f6ac28ae4c95383695fc38b3ec4e"
        },
        {
          "alg": "SHA3-512",
          "content": "916d7397fde7cd46db64daf82235114f62bede97ff49b7757594a3441561488c2bb0411fd486ad23a009e37c734c0f1567509ea852212969507c26ca416aca87"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-container-servlet-core",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-container-servlet-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-json-jackson",
      "version": "2.41",
      "description": "Jersey JSON Jackson (2.x) entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bf05b5f7c8ce1af0aba784194d66a58b"
        },
        {
          "alg": "SHA-1",
          "content": "98de931fb7af8b2e5df39a1a5a97f28136463d78"
        },
        {
          "alg": "SHA-256",
          "content": "bc832dbc342af74ca869c09f266be896e0b8da7625e5b724a09b8304c67dbc55"
        },
        {
          "alg": "SHA-512",
          "content": "ee870729323d78fc4612cbee5ca74f91e9cc7d97bbdeafad202a5228530557d015237015aca0132a0beb43c9cb1056456df220000c1172f5e306faf749317e0c"
        },
        {
          "alg": "SHA-384",
          "content": "ea59e1daf9f6820ad6463059508b347090a6f0b83071e79be716ce8ff81c1ae8f8c6e95ae69aeaa8dad36f97872e853d"
        },
        {
          "alg": "SHA3-384",
          "content": "abe1db0760d0ee46a6d25954f9626fbf1e01bc46a847d9d4897ca772d0886ea9d4f4b9519dc6341e2f1b8982a49e054d"
        },
        {
          "alg": "SHA3-256",
          "content": "7a2a9a7e7bcf8d6b06d3658bd07b9e36d4ea67ffa92e02dab1ff4ba5fda7cd76"
        },
        {
          "alg": "SHA3-512",
          "content": "0270157b57bb0434df993d54e21495a2f1d8f359a1684b8731cabcd8ff62b92f65e43bf8402277d1ea9d5497b9956a1207cbe6dcd12c3026e49064da5d6f2b6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-json-jackson",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-json-jackson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.ext",
      "name": "jersey-entity-filtering",
      "version": "2.41",
      "description": "Jersey extension module providing support for Entity Data Filtering.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9d32f27189b06e45d17aaa9c8fd739ed"
        },
        {
          "alg": "SHA-1",
          "content": "1b013c00c7ba800485b80cc6a833c4eb361f88fb"
        },
        {
          "alg": "SHA-256",
          "content": "2b6a382adcb7a4898eecdb1a39ce7ad077f6da5b36b2b93165d6965a292be862"
        },
        {
          "alg": "SHA-512",
          "content": "285d49c63513c63cc3b8c7477f779aa5bb0018f25fb10f63f65b900a0dcc457e6c812ebbd6be40681e682bb117f5fc0806a31ae7bbc9b3a4f51e326b7d383733"
        },
        {
          "alg": "SHA-384",
          "content": "8400594f1f5c96e4b588e9bd8b6a45691db7913d727966ed133cc4786bac4b2f86d2820302239fad84c9f05f20f49937"
        },
        {
          "alg": "SHA3-384",
          "content": "4452537a0d346e5cddb9b059af4906e56bfe268637a66ca1472f1de1cdcec093e6848f61c74559696120bd8829fadf59"
        },
        {
          "alg": "SHA3-256",
          "content": "5920137c7df9d950a53fadd57cf31bcad2fc3eaf1b1ed25fa41b7889d9803424"
        },
        {
          "alg": "SHA3-512",
          "content": "177bcee041bcfe84ae7ae33998975a91bf86a88a0074b3ad0647dad79670100e69447d233f359ec82182561901a88690bfa7a2f0f74eddfc40f8a06dac30250c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-entity-filtering",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-entity-filtering",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.module",
      "name": "jackson-module-jaxb-annotations",
      "version": "2.15.2",
      "description": "Support for using JAXB annotations as an alternative to \u0022native\u0022 Jackson annotations, for configuring data-binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "421554467d1d7b4e81771b75bf24c5d0"
        },
        {
          "alg": "SHA-1",
          "content": "6a22fd1c7b0f9788e81eea32c11dc8c1ba421f18"
        },
        {
          "alg": "SHA-256",
          "content": "4f2b832d183e3468c96c1b623354b581c3957f2e7af0fada0b15ef0e5e81b95a"
        },
        {
          "alg": "SHA-512",
          "content": "252b5602ce6683183ac3edeb29ee1332651801bb362380c907710d3ef6d36f53582069e589e7873c579e72dcb590ef3f5e5a3af32a2913760b8dc7169e8a50ac"
        },
        {
          "alg": "SHA-384",
          "content": "54d8754560ca3bf6c07448aadefafe0007b6788745fe264376ce45c9af9b0bf791c345ec15b837e3446548d4a75e2899"
        },
        {
          "alg": "SHA3-384",
          "content": "335855c15c69c9c283d38709609088d3cefff07dfe9539514fa0a7691a654e824e8fb33efc4bd8ced1fe34bd3761654c"
        },
        {
          "alg": "SHA3-256",
          "content": "8255efea4b05d94d03b873502ce606524f1504a2745a0ff4e86185c6151d72ba"
        },
        {
          "alg": "SHA3-512",
          "content": "13e62747d0c2eb8daeeddaf4ce306e1cc5ca4bdedf6f65d0627d92ec120bdb5b571378cbffbdc8e5a79077bc0643820ae783fed682d884cc6d9806dd8b8e401a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-base",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-base/jackson-module-jaxb-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.media",
      "name": "jersey-media-multipart",
      "version": "2.41",
      "description": "Jersey Multipart entity providers support module.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b46023dcce9bfc7118cf8f6f1d2453cb"
        },
        {
          "alg": "SHA-1",
          "content": "7db4af38256561bf72d2c7d351515e47bb13eef7"
        },
        {
          "alg": "SHA-256",
          "content": "cb8a1eafeb589d865624d0f4727ba03a1c713ac6c83c2e130cd06873c378dc7a"
        },
        {
          "alg": "SHA-512",
          "content": "df942b3a21281c33338be0e09e36c70c83ebd3d753558f2372b031e033f09ab0d329c03de9cb861112204e3a0815f3c6bc267dd8014310d9874a7e2fe0d17e0b"
        },
        {
          "alg": "SHA-384",
          "content": "b4a9f9c78c3484244c5980b6c5a367664fb2664bbd4bcccdb035923ce2d2a980c897e81562db44f9c427b4f0120c7120"
        },
        {
          "alg": "SHA3-384",
          "content": "bd5c49d8a1ac151c4ad329a1ca2b32d84704f995483add9599d13a751dfe5c71df71e7fb002e31308d3ef63aa1bf4956"
        },
        {
          "alg": "SHA3-256",
          "content": "77e8a6866abece19bf963becb550ed86e898734d690caba95a3fbe0cd3c7d371"
        },
        {
          "alg": "SHA3-512",
          "content": "bc1e1fad862534ce2e55335fd989723a87e3eaee6f872ce54fe594f3d57166348516f4991f81dccb9b6774a22bc9f83a59c22b38ec6509f36998c46acf97207a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-media-multipart",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-media-multipart",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.jvnet.mimepull",
      "name": "mimepull",
      "version": "1.9.15",
      "description": "Provides a streaming API to access attachments parts in a MIME message.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fdc35a1eae84c5a60c95d617551d4a06"
        },
        {
          "alg": "SHA-1",
          "content": "60f9a7991ad9ec1a280db8deea216a91c10aae74"
        },
        {
          "alg": "SHA-256",
          "content": "b9f586bf8844b14a33e75fe7a4b94896dc80d80b732d128777e287af14c836fa"
        },
        {
          "alg": "SHA-512",
          "content": "d80e7f2550272edefe8eebace17c8b836d72602bfff67007c6463d4c7b02a36b97467f23d358601d97882160533ed110da938082994434e2312fb0c4e0f2a19e"
        },
        {
          "alg": "SHA-384",
          "content": "dea380fc137e9784a6c6d114c0a12d4a415baa21e2ce188b952ee1bfa59baaa53e133a0c5fcde9ff1abdbf4dbe93a58b"
        },
        {
          "alg": "SHA3-384",
          "content": "c4d8fc6eff8b9325c07f037484d49e1a52ad580237ba247eec92617e15be03501862b7f64b334919077e124bb94975c5"
        },
        {
          "alg": "SHA3-256",
          "content": "648e6b07265e79912cf8191efdaf316a7f2d317e79d7e4e9b7e323556da74fac"
        },
        {
          "alg": "SHA3-512",
          "content": "14672a4a8dd2a5fe1d437a1204de922eb668ff76c72dae0acc4438fa54eb25a2f6232c75038a391428544b3e77a0a6290d84a99b9c60ea7ce743561ca9b4e1ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/metro-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/metro-mimepull",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.inject",
      "name": "jersey-hk2",
      "version": "2.41",
      "description": "HK2 InjectionManager implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "aa270985765bafdcd7d50d44cc1f57bf"
        },
        {
          "alg": "SHA-1",
          "content": "87c70af8271845b251fec124242bfc643e31506c"
        },
        {
          "alg": "SHA-256",
          "content": "f0c50191a02c581c04e348ab63227d7f6873b4e7d79eb88a7917914ea52834b5"
        },
        {
          "alg": "SHA-512",
          "content": "9513bb158b6b2c87080eba5173797f6f1c1fedf504a65e649b74eb3d2ccfdc54e90a577baa43dbfa522a18f7c2fb061a1705a2ca3c8e44fdb8b3c2e26e4712ce"
        },
        {
          "alg": "SHA-384",
          "content": "595e27a54c95765148edceebbbbb709d1d0770a0ed2e7755aae8a6fa2ac183b6b8c08d5f5b32853eac6f29978ed37e46"
        },
        {
          "alg": "SHA3-384",
          "content": "a30593cded758a54b6ce9ce6b8ba220750946a69157e6c53c9b49205e627a725ffdb7fd0599af8bbdbe48586dbed1e54"
        },
        {
          "alg": "SHA3-256",
          "content": "cd4957b2f2d68d38982d5b199fbf7250dcf634e28abfd948286c499e0c0d7fd9"
        },
        {
          "alg": "SHA3-512",
          "content": "3fda87a4613b42201bc73182c921e91518a7c9b1c3bfe3ccab44ed6dc7270f666d64c82e553cb2010feba28b723a8fb070f88d651cba9aec28b7538fffd22d55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        },
        {
          "license": {
            "name": "Modified BSD",
            "url": "https://asm.ow2.io/license.html"
          }
        },
        {
          "license": {
            "name": "jQuery license",
            "url": "jquery.org/license"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        },
        {
          "license": {
            "name": "W3C license",
            "url": "https://www.w3.org/Consortium/Legal/copyright-documents-19990405"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/project/jersey-hk2",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/project/jersey-hk2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-locator",
      "version": "2.6.1",
      "description": "ServiceLocator Default Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dfd358720393d83b01747928db6e3912"
        },
        {
          "alg": "SHA-1",
          "content": "9dedf9d2022e38ec0743ed44c1ac94ad6149acdd"
        },
        {
          "alg": "SHA-256",
          "content": "febc668deb9f2000c76bd4918d8086c0a4c74d07bd0c60486b72c6bd38b62874"
        },
        {
          "alg": "SHA-512",
          "content": "e2c87a265f114042f4c04397db4adca7291fd68e08e97129576ceb603287b57ccf5b03d0c285727ebb8cd7f88009280bdeab4254475d59da1ac41ba57b7cdecb"
        },
        {
          "alg": "SHA-384",
          "content": "05afff9ebfdbdaed71770a58fe334751b9ac7476eb4114e08fc376bf4e16226b5016784c99c3dd8cb04c79d954068402"
        },
        {
          "alg": "SHA3-384",
          "content": "6d7b53bb3939b45c75ef11a899bde1b7acf6ef1e3f3285687060c830505e540f1843d4f631b949fc8727c2a58cf0cfda"
        },
        {
          "alg": "SHA3-256",
          "content": "20def735fc2d01276b1c9e0961c68aac17722eff6e224ca43fb062ba592a2131"
        },
        {
          "alg": "SHA3-512",
          "content": "07822cb6669f8387a4b56cc28709347197b1d4c3ac36e2cd8f2e5dc36d50937aeabdc1dea47b8028d0e91a700aeed6d18066280b66101a43bb4ca00f6ca2181f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-locator",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2.external",
      "name": "aopalliance-repackaged",
      "version": "2.6.1",
      "description": "Dependency Injection Kernel",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0237846ebdaa7db36b356044a373ffba"
        },
        {
          "alg": "SHA-1",
          "content": "b2eb0a83bcbb44cc5d25f8b18f23be116313a638"
        },
        {
          "alg": "SHA-256",
          "content": "bad77f9278d753406360af9e4747bd9b3161554ea9cd3d62411a0ae1f2c141fd"
        },
        {
          "alg": "SHA-512",
          "content": "2d9e5395ba887fa5bb6a8209b731292d440f5c1db2fccaf56c41b1f1d9f774733da28aa8b9b769e765fe62f3640d7bcb2cf6140f0044a8b576e9e45144038c46"
        },
        {
          "alg": "SHA-384",
          "content": "f481e2a4e18308a1a0bd85e79f95711434436fa69a504fe98a3d7ea899eaed505a5cb2bfe08f41d1b2af56e150ec0741"
        },
        {
          "alg": "SHA3-384",
          "content": "df0d777477b068b3a3a6d368b8a647401f1531fd4bdce623c22b06b5fb6153cbeccaec9afcafb1c65efbdc49b73399ea"
        },
        {
          "alg": "SHA3-256",
          "content": "7c15e6095397160fe1c26a56964a42b85e23062644866a9ca93f6c24ccfe5212"
        },
        {
          "alg": "SHA3-512",
          "content": "da354a243056157b800aae44d0a6b9697399a37f3ea805ec192debd47f9ea493e224794a392786d54608324a01b6e1745210ffe4d8ef1e956b941adfe820fe52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/external/aopalliance-repackaged",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-api",
      "version": "2.6.1",
      "description": "HK2 API module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "23e8c18dae0c7b776bed756763d5153f"
        },
        {
          "alg": "SHA-1",
          "content": "114bd7afb4a1bd9993527f52a08a252b5d2acac5"
        },
        {
          "alg": "SHA-256",
          "content": "c2cb80a01e58440ae57d5ee59af4d4d94e5180e04aff112b0cb611c07d61e773"
        },
        {
          "alg": "SHA-512",
          "content": "9abe9f78d7f6c805b6c7b515579230e5fa573abbcd818bed56068080d6458608e2e99d5937eb959cf1e4f4cfdc4f790059dfc1231313cd8f30aaefbf518eb1c7"
        },
        {
          "alg": "SHA-384",
          "content": "2236ca10af39c4f4f6f1ac63c3652eaa4124bce8f557f8ebaa78576e00c25b986ee9d7e417db6edb9a06aa46b36f4d24"
        },
        {
          "alg": "SHA3-384",
          "content": "a836a3bdd7e94c1c69fe3aa7692989b404f3e249224e70382f4ab88d3ef64c51b57a539a7fc9253f93d43665d7de70c3"
        },
        {
          "alg": "SHA3-256",
          "content": "422eb417b817a7e9af62e36c6657fc9e10b461df59985f436970d75e9db4ca04"
        },
        {
          "alg": "SHA3-512",
          "content": "489625c546c34b7c6e395522843be55419706c3a951bc4e494002853dc913e175fbf3a6b7acb4ba581fd6995b56c2cc1431055e5b5416f71ea5519a0b8d5ce56"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "org.glassfish.hk2",
      "name": "hk2-utils",
      "version": "2.6.1",
      "description": "HK2 Implementation Utilities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75ccb55538a77bf878996497ffeb86f3"
        },
        {
          "alg": "SHA-1",
          "content": "396513aa96c1d5a10aa4f75c4dcbf259a698d62d"
        },
        {
          "alg": "SHA-256",
          "content": "30727f79086452fdefdab08451d982c2082aa239d9f75cdeb1ba271e3c887036"
        },
        {
          "alg": "SHA-512",
          "content": "8da7cd88de45270b1fcfd2c471ae092b3972af78a6e0ecc76ed4ac10b6bd6712d2a538bd163a457f21cea4e7e5c52f547108f44aaa791ed0fd069f697f1282c1"
        },
        {
          "alg": "SHA-384",
          "content": "94fb55c1f57b96fd84e717fbf3c254f16e2308bc33976addb71d26bf367b7c2ec63e657a953f30f55d7046dd07510e50"
        },
        {
          "alg": "SHA3-384",
          "content": "b2d1842c0e31c8a83179b3a4d8aa08953747a868d8e1d599201feb8cc3f6e694adcd355581dc58bcad7cec515898eb7e"
        },
        {
          "alg": "SHA3-256",
          "content": "4169734272046ce681790cbbb553652c3ada2af1a5201a2ab9ab6210451e3e70"
        },
        {
          "alg": "SHA3-512",
          "content": "f2bea2fee534c92fc6ae2322696ac97d7e62654cb7ce635342c7f0234d0562f1f8537677a0263d9a76bdaeb57248d37bce537f9b36506db75d0e31024d6e8789"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/glassfish-hk2-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2/hk2-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "javax.xml.bind",
      "name": "jaxb-api",
      "version": "2.3.1",
      "description": "JAXB (JSR 222) API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg": "SHA-1",
          "content": "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg": "SHA-256",
          "content": "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg": "SHA-512",
          "content": "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg": "SHA-384",
          "content": "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg": "SHA3-384",
          "content": "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg": "SHA3-256",
          "content": "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg": "SHA3-512",
          "content": "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.1"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/javaee/jaxb-spec/jaxb-api",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/jaxb-spec/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/jaxb-spec.git/jaxb-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "publisher": "Oracle Corporation",
      "group": "com.sun.xml.bind",
      "name": "jaxb-core",
      "version": "2.3.0.1",
      "description": "Old JAXB Core module. Contains sources required by XJC, JXC and Runtime modules with dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1025d4fdc74ea30f15f06203ed9cdf2d"
        },
        {
          "alg": "SHA-1",
          "content": "23574ca124d0a694721ce3ef13cd720095f18fdd"
        },
        {
          "alg": "SHA-256",
          "content": "d2ecba63615f317a11fb55c6468f6a9480f6411c10951d9881bafd9a9a8d0467"
        },
        {
          "alg": "SHA-512",
          "content": "fda51767b175ab5b12c7438b9a11873fe570fa4b5ffa2c3d10eebca9d1dcada6a8ff2d287ac76017c6a546e1f5cb02988fb7e2fac32a4a95ad443e1a1b4ade35"
        },
        {
          "alg": "SHA-384",
          "content": "4e48d9695a5e946aae21f3399a8d9e87ef25154a0bc11744a3cc88ce3287c2b495053001a555b06b6969ecf1445b0d92"
        },
        {
          "alg": "SHA3-384",
          "content": "1ecf6333c5c9dea54c8118d1b4706d1e904bdfbd8759e893e804880ad8285002a5a373840b0f0531032f59a2110520d3"
        },
        {
          "alg": "SHA3-256",
          "content": "b7b2fa99dc3329bb950015c81fe1d2d1abb458e9e60b12b212ad1c9069342407"
        },
        {
          "alg": "SHA3-512",
          "content": "c589a58840423bd22319bf45719559a3928ed8243fea454f6f20d5a2c67746dd40df310ca7c34bfd08da25f9e1ffcbb3385aa6c90b3678faec6bf6a22b257ece"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CDDL-1.1",
            "url": "http://glassfish.java.net/public/CDDL\u002BGPL_1_1.html"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "externalReferences": [
        {
          "url": "http://jaxb.java.net/jaxb-bundles/jaxb-core",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://java.net/jira/browse/JAXB",
          "type": "issue-tracker"
        },
        {
          "url": "http://java.net/projects/jaxb/lists/users/archive",
          "type": "mailing-list"
        },
        {
          "url": "http://java.net/projects/jaxb/sources/v2/show/jaxb-bundles/jaxb-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.xml.bind",
      "name": "jaxb-impl",
      "version": "2.3.6",
      "description": "Old JAXB Runtime module. Contains sources required for runtime processing.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd03551237ce80b1f8359a7657a70453"
        },
        {
          "alg": "SHA-1",
          "content": "9614f6c0cfad418a2e91a2b2b5cb98b0a1fcbd03"
        },
        {
          "alg": "SHA-256",
          "content": "5f02b1c45f8193ffa3798f5575ab6244c9ac2a7db4638040939680e994438422"
        },
        {
          "alg": "SHA-512",
          "content": "e05d90890d67fec1ebcb1f5dfbc1ce673d4e4fc0f11eac3dcf189c298816b36c110fb1184ec2816a7daf790ecfc15c03fca7ffc1fdd237efc2cd4f821a1f83e7"
        },
        {
          "alg": "SHA-384",
          "content": "4404633909e05b240a4956048086760666838bea6118af621790619db3c62797a089bc58f57c8db080e1d0d413604e5d"
        },
        {
          "alg": "SHA3-384",
          "content": "1e9e814a7effe1b866a06fd15625b338374cf558e097801978b0a93b108f302edda077aa58ff3fc13f9def545fec86d5"
        },
        {
          "alg": "SHA3-256",
          "content": "e8d9b277aa83d9ad8b2b7ecde16932cb31613cff495833e51f9a89803f38c7c8"
        },
        {
          "alg": "SHA3-512",
          "content": "f74bda346cbf257bb38ec96a40b8d190ea82a9f4ff933dfc88b1acf66d7160febc06ef620cc221749d607345f5ecb8d8596c775bb5c7f13c5640dae8e1320c94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-bundles/jaxb-impl",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "javax.json",
      "name": "javax.json-api",
      "version": "1.1.4",
      "description": "API module of JSR 374:Java API for Processing JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6128da383f9a4a45593650fc263a0998"
        },
        {
          "alg": "SHA-1",
          "content": "c8efa3cfaeee2b05c2dfd54cba21548a081b1746"
        },
        {
          "alg": "SHA-256",
          "content": "0bdb79a0a5e0cce2d8d2d339ad53453cdf90045fe34c5e4b19b064bb1aee5876"
        },
        {
          "alg": "SHA-512",
          "content": "5daa6155f1a9cf34657ed3b0163109dd550a3a8f1ab6b92cdbbe6473dcd6ba77a353272c17546d4f788b87abd5fd3a332a725a6f1b5f99c311dc05f851de2e3e"
        },
        {
          "alg": "SHA-384",
          "content": "67ebbd3a88e00f9723520fa70a63868e0b30f8cc63305a8c5777cea4b4a52b26818dcde9b8e8408b35a98d61b7bd8089"
        },
        {
          "alg": "SHA3-384",
          "content": "cc2797949bde1069ccaad3fc4a15c628dfce02393823bb25ccaae6ffa0d0222b193ccd1e9ff8fc71c98606d173d326bb"
        },
        {
          "alg": "SHA3-256",
          "content": "e4163d03ba00d439137c448baa853ca32543e5ab9873580d6dd3a96cabc0c0db"
        },
        {
          "alg": "SHA3-512",
          "content": "af54fa4e5fb9146097f18a9bc5acd492d118fa8b8ab292a864dcb8d1e37370d68b21f746ede20be060abe7cef6b02b575337445f858fc638485ef81795e7acb9"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.1 OR GPL-2.0-only)"
        }
      ],
      "purl": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://javaee.github.io/jsonp",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/jsonp/javax.json-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "publisher": "Oracle",
      "group": "org.glassfish",
      "name": "javax.json",
      "version": "1.1.4",
      "description": "Default provider for JSR 374:Java API for Processing JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ac67218fb9716fec512be8d0d877bde2"
        },
        {
          "alg": "SHA-1",
          "content": "943f240a509d3c70b448a55c6735591ecbd37c88"
        },
        {
          "alg": "SHA-256",
          "content": "17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955"
        },
        {
          "alg": "SHA-512",
          "content": "63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d"
        },
        {
          "alg": "SHA-384",
          "content": "afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e"
        },
        {
          "alg": "SHA3-384",
          "content": "d174b22190bb75a23dfce71ef70d692ea00a662aa49b96feb3fb4a7b41241f13fea8f3f3581442b35bfdf9645cac8f99"
        },
        {
          "alg": "SHA3-256",
          "content": "755a7153b6feb575dd105166d615f81064e2d78d43aa497950852f6dcb282bac"
        },
        {
          "alg": "SHA3-512",
          "content": "4a37342f7d9a787f46e4b891b24d3c4162f3d6f1f0985a65a2096355ef87831d608a5e2efac8c321581cbf626255b0e307fb2fcc13d39af9ee1922cf1acec357"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.1 OR GPL-2.0-only)"
        }
      ],
      "purl": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "externalReferences": [
        {
          "url": "https://javaee.github.io/jsonp",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/jsonp/javax.json",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.11?type=jar",
      "group": "io.swagger",
      "name": "swagger-jersey2-jaxrs",
      "version": "1.6.11",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "868b83fe572da9d62eff2ef1cd543d09"
        },
        {
          "alg": "SHA-1",
          "content": "6c9aaed8d692ade119d8a08071390f3a2cf9df96"
        },
        {
          "alg": "SHA-256",
          "content": "bf0c184f10d6c91c8f075fdb0ed5b353d2a7c1a18f27ace892d7cb5e8e81c165"
        },
        {
          "alg": "SHA-512",
          "content": "6baf60c8e87c8edad506bf973d899b7fa92b9a1ee5eba87622d781caf84979514a309033366b4d51c23ca200164908bb9f865eda24c1db9194b2f7400375245d"
        },
        {
          "alg": "SHA-384",
          "content": "ed2bda28661e3fe978d73ac79b048b1cff0b1a99657f5276c8a91655790b3e7c086fa2904ac4dda74f98ced3c357c8e2"
        },
        {
          "alg": "SHA3-384",
          "content": "43c58635f29656dcda20936404711965ee4d01f8e9f88d4a8520a7b5e3380d2bd701150fc1166f36c555dc8e4b7d5abc"
        },
        {
          "alg": "SHA3-256",
          "content": "a407a2fc60da4ec6ff30ac8562352856769f28bd71d2e998f14ef4b9e0e27911"
        },
        {
          "alg": "SHA3-512",
          "content": "f2ee6f3e110243808424a1f66e9f0f8d4918f1274f8b0c553e72c5d772984012ff0e66a1d713d8f3463b38fa230ddab1de64c105ec628381a892e4a138c079fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jersey2-jaxrs",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jersey2-jaxrs",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-jaxrs@1.6.11?type=jar",
      "group": "io.swagger",
      "name": "swagger-jaxrs",
      "version": "1.6.11",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "544295f6097ea83e55f19659fecdfeed"
        },
        {
          "alg": "SHA-1",
          "content": "15f5a714f9d1bcf0a9029916951aaf0d576d0292"
        },
        {
          "alg": "SHA-256",
          "content": "da5d094caa62582c7d0a515bf719cd598b6b88ac6cefdbab4bbd43fa84ea827b"
        },
        {
          "alg": "SHA-512",
          "content": "77a574a22c797d74df3a88f91ffdcb5b074deb03e625a08e41a25c8c43f3bc2271d354282e5746131dd5ef420bafff4fde682eee136f5c53f372c071f72c84f9"
        },
        {
          "alg": "SHA-384",
          "content": "53acad676f1058ac6167bf592b3180b14110146189a822bcc8182bb1dd8af4f0f3ff95f0704e6323fef57b554519f83f"
        },
        {
          "alg": "SHA3-384",
          "content": "be2a59a6dac9980e60e183fb85e807f80b79353ceddc4d8bd3e19f746edc697bd2858216ef858a7900fe2ef30b06bd7b"
        },
        {
          "alg": "SHA3-256",
          "content": "30109c67a2f68f17a047e993eb924e2059cce981c5d1d3daac5091a2c13aad91"
        },
        {
          "alg": "SHA3-512",
          "content": "378b44b42688b43e5ad5f5718437e81e27af409d6b355c6e4b9db3d0a6f3caaad42fcec5202181fddac9fa65a6833701c9471f574efbe1e48a20e19d28ef54bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-jaxrs@1.6.11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-core@1.6.11?type=jar",
      "group": "io.swagger",
      "name": "swagger-core",
      "version": "1.6.11",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3ec85d0a70ca9d343e9ad0d0fc14a37c"
        },
        {
          "alg": "SHA-1",
          "content": "38f39a99dcea68735dc9db895537cf9044a9d0b1"
        },
        {
          "alg": "SHA-256",
          "content": "6608494980e13f02f8e8da5d08a910cc9ad07524355e8cbf24b07a6b4c8b08c7"
        },
        {
          "alg": "SHA-512",
          "content": "4c0605f5330281360f37c6ab23ba78b9e849900e152d5dd4470c4ba793dbaf2d85b8d522adcfcf7976932ee951198d016020fc2a15feb34036346caadcaa3092"
        },
        {
          "alg": "SHA-384",
          "content": "fef1a887a58622579f1663d1e3d93a8ee183c37e4239b6666ca3cae6284c78e5b1e0d6536b77e4942c08810a6656aef5"
        },
        {
          "alg": "SHA3-384",
          "content": "518dcb05bbc0e6bdc0071d85b586e5170697495e16f25e351958b573152ed6169b27e5baabc4446a92bce4e1fce075c5"
        },
        {
          "alg": "SHA3-256",
          "content": "68aafc4527fba0604bd6f4179681a838e7cb52365953b6ef834ed183322ea8e8"
        },
        {
          "alg": "SHA3-512",
          "content": "8d3e4a45b6291ac4741236ae30c0b1d19bced20302a25a11b8c7e5b08a85ee8a7bbc1abfc39bb9d045ce04d4ec815c58fc9ee421eb39084e30b987821c536017"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-core@1.6.11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-models@1.6.11?type=jar",
      "group": "io.swagger",
      "name": "swagger-models",
      "version": "1.6.11",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4470ba37d37bb3a9121fc4a59e27dc57"
        },
        {
          "alg": "SHA-1",
          "content": "a616a37c0d5dc08467340ca5aa0fbe84ec21b05a"
        },
        {
          "alg": "SHA-256",
          "content": "9fe0627bf2b50e0580982737b0e74f6ed22935c030b0562efb115fbaaba0fc66"
        },
        {
          "alg": "SHA-512",
          "content": "1590b011fc7d371a5ea2446fb3bb7f8b16299f933b6faa52bd5281894e978c5565d0aceddac0c3cfad29e7384196150febb343dabd6541075a2f7e64a7a0da1c"
        },
        {
          "alg": "SHA-384",
          "content": "b8b83a31d2dcf9a1bac2a757863a79d752e7b26a64263782c0938dfc3dcdb04704ec18787f719704e792676fdcbfe199"
        },
        {
          "alg": "SHA3-384",
          "content": "69967f96be601b44494e31b41ccefa7509c7a5e0eea4d632928c97eefd809173ba150f15a281129a32d7940e85c63358"
        },
        {
          "alg": "SHA3-256",
          "content": "3a5ab8ad81b9113bf747d7d5fc44182f20fe860f16c478756c4cd58a4e3743f4"
        },
        {
          "alg": "SHA3-512",
          "content": "8d2e5e2511bc28016159d76b5a61b7eb6671322f9f8ed4962d8469b39b0190d510dd78f9f59dc36efb4c1fec2334aaa989c22c22e9affedfe305ea9f92115dad"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-models@1.6.11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-models",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.swagger/swagger-annotations@1.6.11?type=jar",
      "group": "io.swagger",
      "name": "swagger-annotations",
      "version": "1.6.11",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0c7aa4ecbb460369370214603d2dc4a3"
        },
        {
          "alg": "SHA-1",
          "content": "1c63879e1f630e44ad8d2245b8a28a088f387e7c"
        },
        {
          "alg": "SHA-256",
          "content": "2b4a17b5c2937ab7d3d710ee62266563cfc57bee920959f2eacc6f1613f68993"
        },
        {
          "alg": "SHA-512",
          "content": "022f1724cf7af50ff3db9bacf1cdd8ba79b337d85a66b5cdce02c30d5b2febe617e33e1e49e632204ddfa4ed30054abbc2b8f7d00d0a48d5f6abd0421e0757d5"
        },
        {
          "alg": "SHA-384",
          "content": "c811fce51c70334b46a275eccadc33cca34c10b7540f4b9a5d01bc3d6fa46344c9b3cc5b81e66582dc6bd9e09f29a06a"
        },
        {
          "alg": "SHA3-384",
          "content": "e679923172de8b543b16f211839da60afba64296b983300b4eba353090910c057589ffcf9af9b380af402a21b36da509"
        },
        {
          "alg": "SHA3-256",
          "content": "9d63456dd9b79cc5403524792d767d398e6e2d0c1880e9b9a578d2c4c04fbd54"
        },
        {
          "alg": "SHA3-512",
          "content": "f5741d3b723b1294b34550a9d472d3394d8c5e758ce7856ec366c91525cd30f7c1563ccfa58bd3f08e785ee95b89f71a86fb8aa73b028d6818a82f47faee39e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.swagger/swagger-annotations@1.6.11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/swagger-swaggersocket",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "group": "org.reflections",
      "name": "reflections",
      "version": "0.10.2",
      "description": "Reflections - Java runtime metadata analysis",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1d0070839d825f57fe6f4d8e2a82989b"
        },
        {
          "alg": "SHA-1",
          "content": "b638d7ca0e0fe0146b60a0e7ba232ad852a73b31"
        },
        {
          "alg": "SHA-256",
          "content": "938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825"
        },
        {
          "alg": "SHA-512",
          "content": "d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c"
        },
        {
          "alg": "SHA-384",
          "content": "2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722"
        },
        {
          "alg": "SHA3-384",
          "content": "7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54"
        },
        {
          "alg": "SHA3-256",
          "content": "b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf"
        },
        {
          "alg": "SHA3-512",
          "content": "023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "url": "http://www.wtfpl.net/about/"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/ronmamo/reflections",
          "type": "website"
        },
        {
          "url": "https://github.com/ronmamo/reflections/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/ronmamo/reflections/issues",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "group": "org.yaml",
      "name": "snakeyaml",
      "version": "2.0",
      "description": "YAML 1.1 parser and emitter for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "caf24b81b9d57e6d4f68b1ccd36e00a3"
        },
        {
          "alg": "SHA-1",
          "content": "3aab2116756442bf0d4cd1c089b24d34c3baa253"
        },
        {
          "alg": "SHA-256",
          "content": "880c9d896e4b74a06c549c15ca496450165d6909fa15d7e662bee8f6a66d7afa"
        },
        {
          "alg": "SHA-512",
          "content": "93567558444365c436027bd1064b67ae99abde77fa89b33ac7c586ab83e4dbf02b7610669fd00ccd258bca6ba3fa078954c92d918b989317dce7bf9ce18836b8"
        },
        {
          "alg": "SHA-384",
          "content": "63c0ec40f4e3f24786031fb8a9477071c86e69247dce283ff725e328e26fba7bdfbb0ab52027b9b0988b3978703a95fe"
        },
        {
          "alg": "SHA3-384",
          "content": "fedd091de2b63c38fb04cb8e2d657bc7b37193ef065b18058be892d6b816d7cb68e5445819c3f3f8fca116311adc9760"
        },
        {
          "alg": "SHA3-256",
          "content": "66264c5c5f4703942a959310c14f22df9c2b1c304ddca1d1c211da58af5623f4"
        },
        {
          "alg": "SHA3-512",
          "content": "0c4c5807880025a22791114253443d2166218760d63b80cd72eb3fdd71a19fdadb27d392b47de9c6b7ca2a2dc312273f0b8c97012ff277d2cab0fd06f3902573"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://bitbucket.org/snakeyaml/snakeyaml/src",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.h2database/h2@2.2.224?type=jar",
      "group": "com.h2database",
      "name": "h2",
      "version": "2.2.224",
      "description": "H2 Database Engine",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "769d5a85d19ccc2b06620f8c81d6d8f8"
        },
        {
          "alg": "SHA-1",
          "content": "7bdade27d8cd197d9b5ce9dc251f41d2edc5f7ad"
        },
        {
          "alg": "SHA-256",
          "content": "b9d8f19358ada82a4f6eb5b174c6cfe320a375b5a9cb5a4fe456d623e6e55497"
        },
        {
          "alg": "SHA-512",
          "content": "f2fd97ef57232b3436a0c7aab04cd3a8212851fecd82404a12a4f5fd76059c8841e366dec7a1ab8f9e2a8ccb49ce741a1581094343eb9487c697077cfaad3724"
        },
        {
          "alg": "SHA-384",
          "content": "66da2de856d54e820efaf555d47b8e80c14884c8f873b8c2d465df92b146062794133427593bcc2cddc4c98c83348945"
        },
        {
          "alg": "SHA3-384",
          "content": "d5b55bb0207e97d02ecba9cd4fcdf1fd3ea5c6cb7d6218ca8823c8931843534f1a5459294c2f070fce28db6ebf25f2f3"
        },
        {
          "alg": "SHA3-256",
          "content": "5ad7e8d1bd6c8f3eff68a14f2472316fa34c65f4b654e0a8d4f2241ee2b770be"
        },
        {
          "alg": "SHA3-512",
          "content": "66d53fd2944d7cff71acd6846aa89996236fa652ca35747507d136c5f67c0ee6f240ca55cd6803052f36dc94619e0c37435e26ed0953bf96efbbff1b43daae6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MPL-2.0"
          }
        },
        {
          "license": {
            "name": "EPL 1.0",
            "url": "https://opensource.org/licenses/eclipse-1.0.php"
          }
        }
      ],
      "purl": "pkg:maven/com.h2database/h2@2.2.224?type=jar",
      "externalReferences": [
        {
          "url": "https://h2database.com",
          "type": "website"
        },
        {
          "url": "https://github.com/h2database/h2database",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "group": "org.mindrot",
      "name": "jbcrypt",
      "version": "0.4",
      "description": "OpenBSD-style Blowfish password hashing for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d2b39d874e0d512f85386a72b0083682"
        },
        {
          "alg": "SHA-1",
          "content": "af7e61017f73abb18ac4e036954f9f28c6366c07"
        },
        {
          "alg": "SHA-256",
          "content": "e183f6f59404fc1e12073cfea4ace7ea103c900463cd21fb609a7c617ecdf624"
        },
        {
          "alg": "SHA-512",
          "content": "95ffe1f6593f83da047ff289a52b5ef73adcaca4a9a990a47744fbd50a52fce39958c17ed393e95d64093b2acbcaba39ba0b5b983a2e0ad98ce5c6e9282a67cd"
        },
        {
          "alg": "SHA-384",
          "content": "66a24af2134e6fcee1f4232c2c4bab43ab97d0c8ffbbc009f9bb0e5ef2a7d8795a6da3c6b47c583675b98036958aa729"
        },
        {
          "alg": "SHA3-384",
          "content": "33cf5e13897f25c525017888e7fcd2faf9a0f25135be03a65dd154feb11455e33c1df31963470b2ecaaba5267f6ad652"
        },
        {
          "alg": "SHA3-256",
          "content": "a347c842385e1d76780f9afe2200a7b9815bcd873b2a9fdd2652d0b0a5e0d324"
        },
        {
          "alg": "SHA3-512",
          "content": "5a71c6f1fde98865302e8c9ee6c99ace9efa220c0193bcdd56423015d1c73e54bd65f19a9a3ba3199b242589eb9ccc96b1d6c0d413387f8e8fbed7c691fc8790"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://www.isc.org/licenses/"
          }
        }
      ],
      "purl": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/djmdjm/jBCrypt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/djmdjm/jBCrypt.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@10.15?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "oauth2-oidc-sdk",
      "version": "10.15",
      "description": "OAuth 2.0 SDK with OpenID Connection extensions for developing client and server applications.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b0ddd5287c29149706edfc53bc37a2dd"
        },
        {
          "alg": "SHA-1",
          "content": "6f6b4c823e231550e87548b5d18e6dae9e7e96f1"
        },
        {
          "alg": "SHA-256",
          "content": "45015de8ba567e076d9db1b68aec8355680806dffec9b95a23ae55be00a62242"
        },
        {
          "alg": "SHA-512",
          "content": "7f9dbd95d5e0fcd749e0e20f2dfa89b782ba341e25799bfda9a777e41d19b6f90199691fbce95a5c9dd75c0acbcef0eaf474cd76000ea02b9f943d646c2f717b"
        },
        {
          "alg": "SHA-384",
          "content": "3fd5e0020337f2d87935a42a62d57ee6e85c9e97e510f0bb380b293156ccefcd4b7224314717cd870b0a87c15323839c"
        },
        {
          "alg": "SHA3-384",
          "content": "46b0b803de0698cde510d227bc925381b515eb38861ca8c13f67c03a93253c35dc6411127e28ce1bf2f6f7b5d58aac46"
        },
        {
          "alg": "SHA3-256",
          "content": "19bef3a670e7426fc18fb40db6384d3ae2cda0e04ef09b00ae69984b754e6aba"
        },
        {
          "alg": "SHA3-512",
          "content": "f3360e0b42b3073fcfe1516e323c49758334731fbe783a642e8c04b5812065c524fd3db017f1f936dcda4acf1d926f7d746887104b7797bdf40621ba8c26ceb9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@10.15?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "group": "com.github.stephenc.jcip",
      "name": "jcip-annotations",
      "version": "1.0-1",
      "description": "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg": "SHA-1",
          "content": "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg": "SHA-256",
          "content": "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg": "SHA-512",
          "content": "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg": "SHA-384",
          "content": "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg": "SHA3-384",
          "content": "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg": "SHA3-256",
          "content": "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg": "SHA3-512",
          "content": "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences": [
        {
          "url": "http://stephenc.github.com/jcip-annotations",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/stephenc/jcip-annotations/tree/master/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "content-type",
      "version": "2.2",
      "description": "Java library for Content (Media) Type representation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "135aaa5ebcc12a45f4b3ff08cb6fa46a"
        },
        {
          "alg": "SHA-1",
          "content": "9a894bce7646dd4086652d85b88013229f23724b"
        },
        {
          "alg": "SHA-256",
          "content": "730f1816196145e88275093c147f2e6da3c3e541207acd3503a1b06129b9bea9"
        },
        {
          "alg": "SHA-512",
          "content": "2b3d7dbf102645b1b6c11de967a877eddb95e8d38e4418cf0c4f7112720cab72f8af8a02c1e6a290ac737186bfb57d5c6db907ac6e7580c16c626f02bd7eeae9"
        },
        {
          "alg": "SHA-384",
          "content": "c1cd98d963a191cd18cd3b7352d91e48ce5de7982a77f0cc4660b7281d309673815f41f9b2be397a816b61af87d7661a"
        },
        {
          "alg": "SHA3-384",
          "content": "b171815441fa1c9d8961a4e5de615f8888c23a5bc6c19380b3647ad3676e1aa1ebf7a3b63c3db9225d19249293ec5864"
        },
        {
          "alg": "SHA3-256",
          "content": "10a5860f4da5c00e83300378e3e65f92d70df4b18d2bbc2c3a97c75b7f9c922b"
        },
        {
          "alg": "SHA3-512",
          "content": "bba6d712566f3e63ebcb998ee40b556004c50ac5e2cc818b01e45fd1d23929234ddb57097cc8897835810bba2d7332e0e429d5cb0fc54d5ab9d7e4715f88af17"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-content-type",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/json-smart@2.4.11?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "json-smart",
      "version": "2.4.11",
      "description": "JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C\u002B\u002B, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "323dbbcafd96353661c283118e74bd99"
        },
        {
          "alg": "SHA-1",
          "content": "cc5888f14a5768f254b97bafe8b9fd29b31e872e"
        },
        {
          "alg": "SHA-256",
          "content": "f2ffb40160d85a246b4a4337edcaf812db2811af075f2de9e285f0be998a2ee0"
        },
        {
          "alg": "SHA-512",
          "content": "ddef4c839f95811e565cdcb18ae977ce7b0aefe5694d1ebad018bc744083a61fcb7dd7f5e792296b6e25c6f1159aaf81a792f7f3d08c9feeeff162d1a9cb9852"
        },
        {
          "alg": "SHA-384",
          "content": "d7e774e9b22195efa1dc292e3de36d3559a22557e7dcfc1d08c9487f837d6ddd2c32f58db14abec9769fe20be6cde9b0"
        },
        {
          "alg": "SHA3-384",
          "content": "a150f94a1fbfbf59ebd14c3ef13cd6ca638487e8abce707d0229223e590f146162a53897366e07c525f0f2c9c07043fc"
        },
        {
          "alg": "SHA3-256",
          "content": "f8e562ebaddce2cb3c708c63aac0feb28e297e8f38c4e73a1e177a4b3dd4737a"
        },
        {
          "alg": "SHA3-512",
          "content": "9156469b813e4fff4349a95e43d24aad1dbab29c0e8a91b9c2db7d3b61f06c18b9d301e024d2708144aa5e0e8ed1939394dc6ebd0867161f4b2ad6afa66de3e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/json-smart@2.4.11?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar",
      "publisher": "Chemouni Uriel",
      "group": "net.minidev",
      "name": "accessors-smart",
      "version": "2.4.11",
      "description": "Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80590f80d4ddf575548ff83c7235297c"
        },
        {
          "alg": "SHA-1",
          "content": "245ceca7bdf3190fbb977045c852d5f3c8efece1"
        },
        {
          "alg": "SHA-256",
          "content": "2ea7ac03b1b7796d9ec59fcfa271b66ff50cd8019b8c1c997f5883bc30f5a492"
        },
        {
          "alg": "SHA-512",
          "content": "d821c4fdac3e9f5c2e2d18fd1669e49a2b8542a2402b42dfc48087706cd4d1229d6db90b9ab4531fe830ecc9c45e7c370b5c2a72afe311e529366d2b4c881eb8"
        },
        {
          "alg": "SHA-384",
          "content": "8024675c96fd17612091b5e09f343e8e29dc2567fe905dc935d123b1822806693ac8f0018e42449b49d3243213ae10c6"
        },
        {
          "alg": "SHA3-384",
          "content": "0cd81c43a154e6f8a0ec66fe2bee359be93afac53b4e1031b1be97264848cae210e1cb035b6e170931167470615da869"
        },
        {
          "alg": "SHA3-256",
          "content": "102d9b52b39fd6d321fae03291d0d1f281722a0baf64683aada72e933ae4e9e3"
        },
        {
          "alg": "SHA3-512",
          "content": "8a76c64016eff123e6d716f63b32d647f4eb1ff81fab6d525cdb3b3c2ed3e9937591f595e774d4de7171a76ba889517256a2af19bb77cca5c820b29ac98e5c28"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar",
      "externalReferences": [
        {
          "url": "https://urielch.github.io/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/netplex/json-smart-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "lang-tag",
      "version": "1.7",
      "description": "Java implementation of \u0022Tags for Identifying Languages\u0022 (RFC 5646)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31b8a4f76fdbf21f1d667f9d6618e0b2"
        },
        {
          "alg": "SHA-1",
          "content": "97c73ecd70bc7e8eefb26c5eea84f251a63f1031"
        },
        {
          "alg": "SHA-256",
          "content": "e8c1c594e2425bdbea2d860de55c69b69fc5d59454452449a0f0913c2a5b8a31"
        },
        {
          "alg": "SHA-512",
          "content": "494267766c974ce16a99cb221953edc91fde8db0c920230758ecea0ea9d3006e95d86ad46f7a9d61b810d85b0fa6da9a3ce2b507cdbe4be320c499eaea93666b"
        },
        {
          "alg": "SHA-384",
          "content": "fdc2cde39a1b07a2542cbc07222afd6292ae19cb1f9ae008476f7ec1b8ebe1e3e84aca08e47e1ef81887a23ac5267d00"
        },
        {
          "alg": "SHA3-384",
          "content": "b0e673087533f60173a11a55b0fde554c0830e7b3b6609e1ea6546de19fc9a97fbfe6eee73580d09b2de66989d0603c7"
        },
        {
          "alg": "SHA3-256",
          "content": "ea208d4eb55212ce9835a9be60396861b0fc33f4161efee3736c3e7159acb9f7"
        },
        {
          "alg": "SHA3-512",
          "content": "450f819981d73711c30d838261ff55a7f1988c8b965c786708dc27fbd10a2018cfde82b8fee5d7d1022eacf085dfdabe22d9de92462eba80e2c15a116c3c73ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-language-tags.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.30.2?type=jar",
      "publisher": "Connect2id Ltd.",
      "group": "com.nimbusds",
      "name": "nimbus-jose-jwt",
      "version": "9.30.2",
      "description": "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0ff69202fafb9707b3951ec3bd2bf5e3"
        },
        {
          "alg": "SHA-1",
          "content": "3a291d6af4007fd88df384249378130102912385"
        },
        {
          "alg": "SHA-256",
          "content": "1c5f3d94cd3d77d6176f854f1c78eb658cfb83ef803f0da54fb479f5614971ef"
        },
        {
          "alg": "SHA-512",
          "content": "eb4488556163033f6dbe158c168b2294a0994869c365620c719a191372f5c49e874a5d42418a8d88011b3fdf2cbf25ee04884c9903b22bf96fc3dd9f7a60c583"
        },
        {
          "alg": "SHA-384",
          "content": "bb88f8d4a0406f754bf1701f4fafe13fffc4aa78db37d51140575b86a58dab54aa78ae8267ec186fdbcdc7cf47263085"
        },
        {
          "alg": "SHA3-384",
          "content": "83d320fa309dacfedd3948fa8c1c158163aa23e4252481f95b6ce793c825fb222ed6c5f1215018f6df43588a7c81afff"
        },
        {
          "alg": "SHA3-256",
          "content": "9cef9d15d03673cd3015b735ffbc34c969f75a03754bc83a29f0e63737c38b81"
        },
        {
          "alg": "SHA3-512",
          "content": "768bede4695fcdbd945db0fb303dfab7a45c0585347aa1734acbfee4d38c9bcc664bcad83b93ea83c64a460215472ee3b517f0bcd5e3fe176eac690d0d505c41"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.30.2?type=jar",
      "externalReferences": [
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://bitbucket.org/connect2id/nimbus-jose-jwt",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jaxrs",
      "name": "jackson-jaxrs-base",
      "version": "2.15.2",
      "description": "Pile of code that is shared by all Jackson-based JAX-RS providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1e49e62ce00e45c97bd846a922fcb860"
        },
        {
          "alg": "SHA-1",
          "content": "d2bac694f9a5106a0ff239303e0e12fce937bd4b"
        },
        {
          "alg": "SHA-256",
          "content": "8f9b1ffed44842faf99b35f50681ba06f8702bcdf6b3e210c5976443a2bab319"
        },
        {
          "alg": "SHA-512",
          "content": "635cf5d1f39b850b74d6e2779964cd4864a3f8ffb73e7086329488f672dea378838ae6228a079544cb78388caafb26212179d7e5e4332132ffac5892730d3b52"
        },
        {
          "alg": "SHA-384",
          "content": "aae4d80ceec184bf5502a7dc8dc3ebf5293e563df42ff92308f15ee6b192345e26baee5355c04b929ed680b80213816f"
        },
        {
          "alg": "SHA3-384",
          "content": "77d5226e378937a5c5ed9146e30f3bed97e5d96b999f51d8ab22069c26a52e1f78a107da841fe9d6ea2c0b07f8559e05"
        },
        {
          "alg": "SHA3-256",
          "content": "534ca1a0d8fe1f02e019687ecce65e34763fdfc38c06ff9ab406a1270b415504"
        },
        {
          "alg": "SHA3-512",
          "content": "bdad0836625a854018dec7773e2284ada06fcace48f97bee4c3511efae32295a203b51eec270ae3de7ca8417caa6a00b6e161bba397be077a11371e1ce3d52b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-base/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.jaxrs",
      "name": "jackson-jaxrs-json-provider",
      "version": "2.15.2",
      "description": "Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4299601ef52f8cfcc792c5fad0b0f5d3"
        },
        {
          "alg": "SHA-1",
          "content": "eff432ebf1021d2fd64ce25bc7dcb24a37462b20"
        },
        {
          "alg": "SHA-256",
          "content": "6df88fb5a795ae86cdab5f363a99547adef26aeb863871f2148f6b499bc79a66"
        },
        {
          "alg": "SHA-512",
          "content": "1ebffde121979c005a7bc86ed04951723601e3783b58b03bb97119a6f4f4d42acb5e854fede200dbb7f7edeabbfa66d468e516c26dd7344b7d0bc5def00f95f2"
        },
        {
          "alg": "SHA-384",
          "content": "a2baff6839160156d3f84530c069b08b76bb51f9bb7d11b565f3b45f360f5f617b390c175d8ced1ce3cf3d2a9f93a705"
        },
        {
          "alg": "SHA3-384",
          "content": "c7d72cd8c05d0ec1a831b46389886593f91c7dc9620b56b28fee6f508d32baf6965482f71d9498e360d0cbde6f9a6f7a"
        },
        {
          "alg": "SHA3-256",
          "content": "3895a5a78de04b856680e11597dc73b5654f088755323e7e3086b2e684a7d701"
        },
        {
          "alg": "SHA3-512",
          "content": "7d5e5fef313def8d4fb01ccd843350a7e8e6dfc9fd7e7d882b58d546434318b6e159fbb8330e640459e5a77e47a653d8b32dda10525ab21e086b1d388880931e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-json-provider/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jdk8",
      "version": "2.15.2",
      "description": "Add-on module for Jackson (http://jackson.codehaus.org) to support JDK 8 data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dafcfdd5924e4b0577250280c7ff0d6e"
        },
        {
          "alg": "SHA-1",
          "content": "66a50e089cfd2f93896b9b6f7a734cea7bcf2f31"
        },
        {
          "alg": "SHA-256",
          "content": "5be6e20504b1eab7a40f98c4f98bd92e9177d6e6e20f183928e7d207fc66cb78"
        },
        {
          "alg": "SHA-512",
          "content": "73d6b07a821c14fb0ad13e4a3ca2856d316961c2f6d8b65c29a0c7ab587f76d56dab49b0f114b506ed53d36e084c9b1dcd8523ff743009dfcf34b894accd689f"
        },
        {
          "alg": "SHA-384",
          "content": "c458c5fcba559d50f3356f11bd9136e814566568cb50d93fd23588e0c7427a8f12fa8f040bbd4bc0335dbbbef760ffff"
        },
        {
          "alg": "SHA3-384",
          "content": "6743fc6f3fdbbe6551f5bc68e547a8ffc1cf7ad3860a551bce226742d5e5b08416163d3410fd163fab137b433d9dbb01"
        },
        {
          "alg": "SHA3-256",
          "content": "c3130237546b90a5761c60355b34609e051a0248d026b54139ae1b37d8124d38"
        },
        {
          "alg": "SHA3-512",
          "content": "a748da8094ab51b17a19f48e2605bd5f0eeb35e4942c9586e748497d04cce6e9ae1c76b6847edb089d12b266f2ef31d248f6290988ee4f4059f91dad76936e7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-classic",
      "version": "1.2.13",
      "description": "logback-classic module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc49f9a98304889b228adbbd7288ae43"
        },
        {
          "alg": "SHA-1",
          "content": "e9f3458e7354fe4917081237c01fa4999f4e1b86"
        },
        {
          "alg": "SHA-256",
          "content": "937afb220b91d8a394d78befdbf587c71aeed289d582e2a91e72a7d92172371d"
        },
        {
          "alg": "SHA-512",
          "content": "f82fef7616c900b3101c452817df961a2a0f17f553ee2796463271274a3d678abe01392ff4a8687b4625527ea7d2ed9686f8512ec0065f73b5821a50774fe755"
        },
        {
          "alg": "SHA-384",
          "content": "2ad26dc9243566544cfa75921e16865e19c79e73043b82d56dcfbadf3cbd75f50fcef6c47855f2578ca844dcee44565b"
        },
        {
          "alg": "SHA3-384",
          "content": "e120ebe93eae51e97c9f912a6f78c7d0fb7a0d92e10ad372ce41f5fc71859865d99837be839a52f5e043f9fe6c5f5260"
        },
        {
          "alg": "SHA3-256",
          "content": "5db19942aa9b8ad4f7b7b4940ebc67ccbe3042c3a840757ef3ea0ff8363e6acc"
        },
        {
          "alg": "SHA3-512",
          "content": "40a9b257f208da3bd4343944b31a8a7917653281cfbab2ec985b62fe2cd4172c2a0a5dcd2e9a0e348905d820f6080d8f62d0c99dc367f207cd4f2340d8951978"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-classic",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-classic",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
      "publisher": "QOS.ch",
      "group": "ch.qos.logback",
      "name": "logback-core",
      "version": "1.2.13",
      "description": "logback-core module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "25736944b46d10756764364afcb455fc"
        },
        {
          "alg": "SHA-1",
          "content": "8ae4a32ed4937b5ebff6891a93c5e957f4e81655"
        },
        {
          "alg": "SHA-256",
          "content": "07b1586faf220c05821d0f3ed8e2e417e214c83f40641f76e8a90b134c31ff6b"
        },
        {
          "alg": "SHA-512",
          "content": "2e2300d56e69ab736f8e3c1dfcf96417af4ee3916c976c13826bcdb7b1246242ace58de92431207a01620731a7d7e740867e3889d0c6738b015610de201559c4"
        },
        {
          "alg": "SHA-384",
          "content": "f77c2bb9a0ca63883acfc92e07605e0f6c01b03d31cab9c6e9420bbc09afef8ff79c4410a63d1e4960f8a66ed2f2def5"
        },
        {
          "alg": "SHA3-384",
          "content": "b1a394dc63f7ea18ee4fe0cad5dea4512ec8c7aeca535cbcaf66bb4268f654c285fed03a36ec594f9e3a12f76334c9ab"
        },
        {
          "alg": "SHA3-256",
          "content": "8d4c885f8a83301773d4cdbe344a338d8147706fe67cfb0e67391638ebf3c28b"
        },
        {
          "alg": "SHA3-512",
          "content": "7fd8e471bf5fba787d068c03decb7dd3918905f132da581fdc9db35ac630b0e6ee7ab42aa50850aae1b0007f13110f39eee7f183f333f22cf15d761b926202ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-1.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License",
            "url": "http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl": "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
      "externalReferences": [
        {
          "url": "http://logback.qos.ch/logback-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/logback/logback-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@3.1?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.eclipse.microprofile.health",
      "name": "microprofile-health-api",
      "version": "3.1",
      "description": "MicroProfile Health :: API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a8101e4782443848b266e5f3656ecf2"
        },
        {
          "alg": "SHA-1",
          "content": "3add01d04b7d84d54dbcf1e88c58ef6eaacc611b"
        },
        {
          "alg": "SHA-256",
          "content": "6127b48457cb1b11765c78b5f2ef9a216215dab7c1f6897ce1ebcf31477bd5c4"
        },
        {
          "alg": "SHA-512",
          "content": "b396b4e72b5601c5d8d9c759fec6c64f4e29d107d6efa9bd2f51490d480b97904b8adb5ebda8e029b4f65df4af2a302fac79741d40856192fba80bf4859fe37c"
        },
        {
          "alg": "SHA-384",
          "content": "146b3c51299958991111f1ce46459fa6f887d58e1a3afef7f95925a81100f0b2e146259aac73acd7275967b6ac0c7e26"
        },
        {
          "alg": "SHA3-384",
          "content": "02d1e82a1a7ad0e3d374971a1ceabb109bf2c5d81cf84772c521c5de0cef2495a568fde6fff7ca62130010b14fb82442"
        },
        {
          "alg": "SHA3-256",
          "content": "99597f3350ea2027d5370d57375aac89d725d5eb867268ec57bf29f4d6a96f33"
        },
        {
          "alg": "SHA3-512",
          "content": "0a6cf067e2330206aabf765912c4d524bbe89a92e2c263017749f2d7f4cbba66d066557dc491b1ab58b3eebdda3c82a0313b27f7a004ffcadbc4e6fe0cd176f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@3.1?type=jar",
      "externalReferences": [
        {
          "url": "https://microprofile.io/project/eclipse/microprofile-health/microprofile-health-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse/microprofile-health/microprofile-health-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder",
      "version": "1.2.3",
      "description": "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "541c66032b50af0c60c1723bdb900d11"
        },
        {
          "alg": "SHA-1",
          "content": "35ae93be1524b161525da2c9a110019616f67548"
        },
        {
          "alg": "SHA-256",
          "content": "b09e2cd5c36a7127e091df9be628278b1166b40bc08b9de8196ccddb0cccd67f"
        },
        {
          "alg": "SHA-512",
          "content": "ba7887259007272c533228cec1e2c5caebd639ef05b7b8925be6a0b5a7da5859e82489af4d462153e64bf2ce1234a8d6caa606fc6e42675a41cf7a067cfc5f6b"
        },
        {
          "alg": "SHA-384",
          "content": "f076cc6675cd055ddb58a5356b28de7268fd96d34393767a8b33c055b7836bdf302c6828e7a9ae61ff19930fc7015fb2"
        },
        {
          "alg": "SHA3-384",
          "content": "47bf29919d6cc83b4010de59b1403e3f9d795c1487bc77da58e2f1607ae652a48c1d2e6479f63b19e28345e53340654c"
        },
        {
          "alg": "SHA3-256",
          "content": "e909463a15ecf0cd8b1354a89357d5efbf3f8277d5acff4922f38b46b05c0be8"
        },
        {
          "alg": "SHA3-512",
          "content": "269c329b2d1c308418239281b1df9c10885e1c49ff9ad54067e2b8bcc0e18bcd8494ad82d7ac28c354053b00df8b3f6906f9c78ef32ccf313ae454f4c2463891"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.owasp.org/pipermail/owasp-java-encoder-project/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "publisher": "OWASP (Open Web-Application Security Project)",
      "group": "org.owasp.encoder",
      "name": "encoder-jsp",
      "version": "1.2.3",
      "description": "The OWASP Encoder JSP package contains JSP tag definitions and TLDs to allow easy use of the OWASP Encoder Project\u0027s core API. The TLDs contain both tag definitions and JSP EL functions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2aa0db8eb0a3c2294ce81e5c525c5b0d"
        },
        {
          "alg": "SHA-1",
          "content": "c0ff3cfc6ef21c8b43b045268203147029f23505"
        },
        {
          "alg": "SHA-256",
          "content": "cca9152d68581eacfa86c0518590b1f153d1daf505f1318f3711f66049217b3c"
        },
        {
          "alg": "SHA-512",
          "content": "99566f092be000f84c30ea5f495995824aba91dc5d377c8b4bbc3164f1fd921d2f3c54fa956f03701dab23afdd06d35f713a46f4d0e4e47ca1a41365281254f8"
        },
        {
          "alg": "SHA-384",
          "content": "0207fefe84778df49ea316cec19981237f0a6e05c6463c6a0954a144acfc46d968397900891cbc4b94a1ea105633314d"
        },
        {
          "alg": "SHA3-384",
          "content": "c285915fa4ffd67ce5d268fb98e14be84082e656143007f3beaa169914674d25f8a22f9c67b28dd7d4adc767ef825f98"
        },
        {
          "alg": "SHA3-256",
          "content": "21edeb5020107f2f3558b1d6aa6e7bce7bb50d1977cd11201ee59a67a21fd5b5"
        },
        {
          "alg": "SHA3-512",
          "content": "7a4681e587ffb9f6c28d659d2f8f3d55ee4e9d51c640ba0c57e45362ddf2a44edeec7d5d7fef4ad6d31fadbbeea1ffa69c93485a04439afb542bbc6536ed30c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder-jsp",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://lists.owasp.org/pipermail/owasp-java-encoder-project/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/owasp/owasp-java-encoder/encoder-jsp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "publisher": "Oracle",
      "group": "com.sun.mail",
      "name": "jakarta.mail",
      "version": "1.6.7",
      "description": "Jakarta Mail API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "17eb378c9dd574be23e71014ce9d5d30"
        },
        {
          "alg": "SHA-1",
          "content": "319df0e9d536c1a01acdfe49b6e82b97d2393073"
        },
        {
          "alg": "SHA-256",
          "content": "1b258ef45fae93059b65d0a0dd109e59ab93e8cd8a735ff66b2ba85f870d5150"
        },
        {
          "alg": "SHA-512",
          "content": "3f392a6ae3eada47c37b67d92f3cf39c609a5309fcc97eb271bcf079d0d01f5973c0d32458a875ac1186092a113bb452439f7b7b0edd58a5b3aba5f775e9a001"
        },
        {
          "alg": "SHA-384",
          "content": "868a5f77973668eb2af92c8a32fca8b0d80860be3489249b4e93246eda5711aad64eefe0f97ec436c57e2cb0cc89f9e8"
        },
        {
          "alg": "SHA3-384",
          "content": "83395046d0ad4d01c7ca16fb35a0591bb26367583e65dcbf4f11b9be80241c117ab61859e4e4f4c31883caf6539613af"
        },
        {
          "alg": "SHA3-256",
          "content": "1c64d48a7aadd0b7a75fd93d642da723921763ddb215bd78cdbe05d01e80541b"
        },
        {
          "alg": "SHA3-512",
          "content": "dc6c43c485a5b8eefc8211862b44195bfa1d830ba4f4029b7fc68eaf08dccb8909a9cb93772fd81a3b7c785cbc873c046c10d1c391040282cb58595bdd0ed3d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        },
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "externalReferences": [
        {
          "url": "http://eclipse-ee4j.github.io/mail/jakarta.mail",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/mail/jakarta.mail",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "group": "com.google.code.findbugs",
      "name": "jsr305",
      "version": "3.0.2",
      "description": "JSR305 Annotations for Findbugs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd83accb899363c32b07d7a1b2e4ce40"
        },
        {
          "alg": "SHA-1",
          "content": "25ea2e8b0c338a877313bd4672d3fe056ea78f0d"
        },
        {
          "alg": "SHA-256",
          "content": "766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7"
        },
        {
          "alg": "SHA-512",
          "content": "bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804"
        },
        {
          "alg": "SHA-384",
          "content": "ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4"
        },
        {
          "alg": "SHA3-384",
          "content": "9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1"
        },
        {
          "alg": "SHA3-256",
          "content": "223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff"
        },
        {
          "alg": "SHA3-512",
          "content": "3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://findbugs.sourceforge.net/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://code.google.com/p/jsr-305/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "group": "com.github.ben-manes.caffeine",
      "name": "caffeine",
      "version": "3.1.8",
      "description": "A high performance caching library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b19301179903e8781776397d9923f7c8"
        },
        {
          "alg": "SHA-1",
          "content": "24795585df8afaf70a2cd534786904ea5889c047"
        },
        {
          "alg": "SHA-256",
          "content": "7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3"
        },
        {
          "alg": "SHA-512",
          "content": "66195ac8ec62e5425344a51ab671a136618b8658a1e91bb1d1cd1aea5a51fdc12eb7fe5131a00e18ee330d6b0cad14f6743937c23baa50fb21e40eb76d82a777"
        },
        {
          "alg": "SHA-384",
          "content": "bb1447801069938c709220002e2489c589f3a12e411a902983d1120785265b5b2716614b0612b6ab732978fdfe492399"
        },
        {
          "alg": "SHA3-384",
          "content": "e0455cea493f7d299cc9cb4dafa42b184ddc35927985537ad8119057621f988c3165f1bec62715054bd9de802d91e1eb"
        },
        {
          "alg": "SHA3-256",
          "content": "a197fd5b92f9d15ee3a9efac322eb201b47bd8dc20304a0c6d85986199ec03ca"
        },
        {
          "alg": "SHA3-512",
          "content": "4fb700794e520bb3bc81ef156bedf696894ebf2d2bf0f25efdfd56dde4cd89b76c45b4a80d7eacb2ed0a6220718f1f9552547fecfb7d3fd319fa5145b4f20cab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "website"
        },
        {
          "url": "https://github.com/ben-manes/caffeine",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.errorprone",
      "name": "error_prone_annotations",
      "version": "2.21.1",
      "description": "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "75fe4fe33d308dd6cee3b601de902d27"
        },
        {
          "alg": "SHA-1",
          "content": "6d9b10773b5237df178a7b3c1b4208df7d0e7f94"
        },
        {
          "alg": "SHA-256",
          "content": "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac"
        },
        {
          "alg": "SHA-512",
          "content": "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a"
        },
        {
          "alg": "SHA-384",
          "content": "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4"
        },
        {
          "alg": "SHA3-384",
          "content": "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a"
        },
        {
          "alg": "SHA3-256",
          "content": "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae"
        },
        {
          "alg": "SHA3-512",
          "content": "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "externalReferences": [
        {
          "url": "https://errorprone.info/error_prone_annotations",
          "type": "website"
        },
        {
          "url": "https://github.com/google/error-prone/error_prone_annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "group": "us.springett",
      "name": "cvss-calculator",
      "version": "1.4.2",
      "description": "A Java library for calculating CVSSv2, CVSSv3, and CVSSv3.1 scores and vectors",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e0a81f65c07015da3a81f2b7d3de2e9"
        },
        {
          "alg": "SHA-1",
          "content": "8ec6dc684f94e42510ea736afdca64559b0ce5de"
        },
        {
          "alg": "SHA-256",
          "content": "6893343fa32d335b33e162cead736fcbb290b3f9e360506d634ef3c3fe11fd61"
        },
        {
          "alg": "SHA-512",
          "content": "b4feb83e0e96fb8b2822fbbc6408cbaf5e978cafac47f7d2d63949448c3ce2ed4bd36030af9dd1f59fa3abc4918b5db1ac41902cd9a6839a9fae7a8ba0c1b44d"
        },
        {
          "alg": "SHA-384",
          "content": "a228036ae53011f74f976c76f311e8ba380345792bfcd90347c089fce0fd21ddad5fb0cb5aa46de401426cbf3000279e"
        },
        {
          "alg": "SHA3-384",
          "content": "f560206e0333a0c1d3bef49c601253175639acf0157394afee5dde3da925228ff7e930362ca7d8764d94f486eac4a243"
        },
        {
          "alg": "SHA3-256",
          "content": "82fc4477a32c947122d04efb9e63c2b3141e56b661c7c8aabe3702b365ec2109"
        },
        {
          "alg": "SHA3-512",
          "content": "b018a95124430ad9d365b3e4ec790e41191a46f0712078c4d4b084378f3a236803ce5768b555b66765d0f883bbb6cd3f7b7ed81ea19ba7220ea0ab75245aad83"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/cvss-calculator",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/cvss-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "group": "us.springett",
      "name": "owasp-risk-rating-calculator",
      "version": "1.0.1",
      "description": "A Java library for calculating OWASP Risk Rating scores",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f387d7ce91df7f1b56224b972b916ebe"
        },
        {
          "alg": "SHA-1",
          "content": "f4ae15b14d7a4c3686f6a8a8a93e30560472b1f8"
        },
        {
          "alg": "SHA-256",
          "content": "9b66d91d1ff61f99e320466ff451555696f139147260528591ff1718c5605d1c"
        },
        {
          "alg": "SHA-512",
          "content": "449331aaabc401a7c7ac42c6bba06d17a2c2dc8def07961b93de7bde8fb9f54aa2541cbab7e541b6fa1552977d46e5367a78277cffbafc60873bb7042facff65"
        },
        {
          "alg": "SHA-384",
          "content": "e83afc9976cfcb5419768fdba983815bf755101fef34df693b6033094e12a29d23127148edef4ba6db3573e0b2bb3871"
        },
        {
          "alg": "SHA3-384",
          "content": "07bed3d3cc524090d01da7711e684d7c645e9225e38225ca92da6f58f3ae86c9d9f2e1a45ad923f9345abecb609c0be1"
        },
        {
          "alg": "SHA3-256",
          "content": "153dbb661c502fd174cdbb735a0a89f69555365e165dd6a91d7c765226b9947a"
        },
        {
          "alg": "SHA3-512",
          "content": "6c6bb8298f8f3337395693f4963d08d21d7f76e6ef8802773e37efc64b1b25a6f8ec77169f730591f429cfa5ac5f6a1b2ef0948af67fa49f19cf7ba8a0223f25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/owasp-risk-rating-calculator",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/owasp-risk-rating-calculator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/cpe-parser@2.1.0?type=jar",
      "group": "us.springett",
      "name": "cpe-parser",
      "version": "2.1.0",
      "description": "A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "609ba3b6bfdc158a29afb6c78b325c71"
        },
        {
          "alg": "SHA-1",
          "content": "232c40624764371451e08cdf31b855cfede549e5"
        },
        {
          "alg": "SHA-256",
          "content": "236563451f0923ee0e9ed0af0ceb72d2813300004fd4cb25b12eac128c56c476"
        },
        {
          "alg": "SHA-512",
          "content": "89ed0d54dfe1aeeda57bcbaa2e0d91da1b5ee429e7808fecb5751f96b11451a034bd99dc4d6d983a4fa7219ca7e91ac40a36ec8fb0b711a5d07726b67e20143d"
        },
        {
          "alg": "SHA-384",
          "content": "a003d84920346e2d962ede23ccb3763fa0bafe6497f95e657f53c99319cad4cd1be66b7cac11e731d57dfb06c2a9bbf3"
        },
        {
          "alg": "SHA3-384",
          "content": "419decbed608520e6e7b7d449c8970e551b242512400c37a6ad1eb73aa54acd93c95243c6e1bcb9d4b504c9ea10fc304"
        },
        {
          "alg": "SHA3-256",
          "content": "ee8df4f5e8dba718a1468922a9e781688ad44413b3abde5fedfb4badbe97352d"
        },
        {
          "alg": "SHA3-512",
          "content": "5ff3a7523a88b7202b8585efc5c8471bdc55530bab8d89efb7882f6e3dc42129b1dd0cd455422088f6486e3de63acfdd0608bedce0c554b9c0f91f718504532b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/cpe-parser@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/CPE-Parser",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/stevespringett/CPE-Parser",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/CPE-Parser.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.0.3?type=jar",
      "publisher": "OWASP Foundation",
      "group": "org.cyclonedx",
      "name": "cyclonedx-core-java",
      "version": "8.0.3",
      "description": "The CycloneDX core module provides a model representation of the BOM along with utilities to assist in creating, parsing, and validating BOMs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c4b5bb3d13e5830830acac309faa90d8"
        },
        {
          "alg": "SHA-1",
          "content": "721b93c45cb1113faacd900fddca772b6bdeeeab"
        },
        {
          "alg": "SHA-256",
          "content": "ecc371d12808dfe76047f87f8235665d74dd6cf8ec12c41d052715a3fd79e0b5"
        },
        {
          "alg": "SHA-512",
          "content": "ac32c71b5924579dc756358c6e62849b5929bb7c9b212e9338641482f107596317c23dd840e04bd460cbe44e1c9c2d525a45831ad9c4e715a60428f46dfde0cc"
        },
        {
          "alg": "SHA-384",
          "content": "7c5951bbc4f556bedb4d4e3710fd6123a4e99d85e2a7d604c415b2140f395569fa0a43636a96c180ad746ac0d1f7900c"
        },
        {
          "alg": "SHA3-384",
          "content": "0eb39bca225335c41200684f5a4f68daf4662d7a376c6d78f98772052f627976093b8eda6c1e31178dd8b0e325b75594"
        },
        {
          "alg": "SHA3-256",
          "content": "9d05a487425e1ed05be66218ce2bc7d333b3de09b391f1d664d1ef1312581122"
        },
        {
          "alg": "SHA3-512",
          "content": "3e55f4db14b1cea6b26eedf6f02d85c300310eef90f29305fb3d13601ce3821bd15c716abde6d5a15d636464b67f0297ae1db6563e7e5c8d60c1739f314cfe2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java",
          "type": "website"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/CycloneDX/cyclonedx-core-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-codec",
      "name": "commons-codec",
      "version": "1.16.0",
      "description": "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6e26920fa7228891980890cce06b718c"
        },
        {
          "alg": "SHA-1",
          "content": "4e3eb3d79888d76b54e28b350915b5dc3919c9de"
        },
        {
          "alg": "SHA-256",
          "content": "56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d"
        },
        {
          "alg": "SHA-512",
          "content": "eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9"
        },
        {
          "alg": "SHA-384",
          "content": "65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f"
        },
        {
          "alg": "SHA3-384",
          "content": "1841b59a30e095b063d9a421be91ee2adf28c98a9b32e4ef24130b60362db2f7f69eea04969d035dc4b01db38a14c65c"
        },
        {
          "alg": "SHA3-256",
          "content": "8327323df750189daa3755a4fb3936b685f72b46f3917d5dae2c1f3812577c37"
        },
        {
          "alg": "SHA3-512",
          "content": "664a0b5779c3e448d448d692a0ab19c2aec422d2adbfb23969bc44d2c6446257104d8206ccca4c0107c58f9a77ece5a48e2fd69fe8038f7cad8254675dadbb05"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-codec/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/CODEC",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/commons-codec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.15.3?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-xml",
      "version": "2.15.3",
      "description": "Data format extension for Jackson to offer alternative support for serializing POJOs as XML and deserializing XML as pojos.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "780f06a8e92cd975a5d14ea0a9d51c5e"
        },
        {
          "alg": "SHA-1",
          "content": "50f061b3ff15979ee0c784c657f5ea8ba7b920c5"
        },
        {
          "alg": "SHA-256",
          "content": "39a34531dca5fca75eb547663c300855c968c8faca6861d92eca9e9747af0416"
        },
        {
          "alg": "SHA-512",
          "content": "73914cde6694165a76f8f36e4611aa963dfa0dd5abebb34cd2efea938c839cbaad97d6786499bea1acf7bef12789797135b40e0f1bd3c3218cf4b830e494926f"
        },
        {
          "alg": "SHA-384",
          "content": "dfab75093101dd15016b90afb2aff9752ccbf350b2d06b440589a9830b6e3b1ab43afa5a30b9bad62096edd63316907d"
        },
        {
          "alg": "SHA3-384",
          "content": "39c3a9bee5b9c0c2dbf6ef58005c4112388bab89e5be350586aaa6aae55530a2bcaf048b021491a1d4fc7a9f7fd11cb9"
        },
        {
          "alg": "SHA3-256",
          "content": "a57d3239d476b18819c12fbd24d97a016e5942b07c745687f47e8705398630c4"
        },
        {
          "alg": "SHA3-512",
          "content": "66036b182bafe612422d08c0e61248c0ab33691559c3e8ae0e89179a43a7a6237cce878843078f40ca7fbe29eac3d85cceae51a90b3b67ed38997ad172eb6b45"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.15.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformat-xml/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-dataformat-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar",
      "group": "com.networknt",
      "name": "json-schema-validator",
      "version": "1.0.87",
      "description": "A json schema validator that supports draft v4, v6, v7, v2019-09 and v2020-12",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f0d3df7d661e41708e264ea82bd0ad4a"
        },
        {
          "alg": "SHA-1",
          "content": "59861a488ba2b977ef444c03e3c8c8c9f96c0734"
        },
        {
          "alg": "SHA-256",
          "content": "d2c00a6c4515a4adecbec813c4b994b720782207258d49cb537478edec1ada89"
        },
        {
          "alg": "SHA-512",
          "content": "ca1419376baf5bfd13163e7787085134c46b196eb6fbb19099eedb56d153b37dc7b709d7e771088421c567c45066d209f37e5782706f798a228e7e4f21b7c522"
        },
        {
          "alg": "SHA-384",
          "content": "e454ab9b970e4cb4b2f6f595495e0ad43d455b7fb10d474607f19fdef4569acc08a4f935625451d118e0496682ff33a4"
        },
        {
          "alg": "SHA3-384",
          "content": "ae83744bb3d0cc751059cd8fda72df351cd5127187a16c3c99ea679c3433f240f90c13de4e2c5c11206d325375e48c59"
        },
        {
          "alg": "SHA3-256",
          "content": "34685e96c0c011463bb57551b03f66b522eedf3d306e7181b5823a2036e87964"
        },
        {
          "alg": "SHA3-512",
          "content": "764183cf1e2de9fbe52d6f228957015ab7cc0f051aa3a289ecaed9b0c37093d791786f55bb141083beff08cd78aad282fec4e9d8e470cbde3ad18ad3ec7d6383"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/networknt/json-schema-validator",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/networknt/json-schema-validator/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com:networknt/json-schema-validator.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "group": "com.ethlo.time",
      "name": "itu",
      "version": "1.7.0",
      "description": "Extremely fast date/time parser and formatter - RFC 3339 (ISO 8601 profile) and W3C format",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f9277e3108caa3314836d8f20f9cf94"
        },
        {
          "alg": "SHA-1",
          "content": "00c6977b9d42efa3f8c95c31db5313a96ffc1724"
        },
        {
          "alg": "SHA-256",
          "content": "55ceb418c9e8138c4fcf62e213c4c814d89e8a84c827d395407cbecba5d791e7"
        },
        {
          "alg": "SHA-512",
          "content": "b29808a998e120d6fa97a19ea92402e57d06b92ddb98b892ae7c9de044b9e1d805dca2f7c0fe7faaa1fced7eecbda927d709113727a050972f24a75aa29525b8"
        },
        {
          "alg": "SHA-384",
          "content": "f63cbcc14966028fc81feec87bb5f948e0acc0a1683e9147eafe71c98cf3bb38d871bdccfdf70d94c985e1727b00ae7a"
        },
        {
          "alg": "SHA3-384",
          "content": "f95deb0a7c863dfc3e595a1398beecfd4baa7c3b5c8f43c3324e374de58d8e13891b32cb62d67d0e44df384fa320246e"
        },
        {
          "alg": "SHA3-256",
          "content": "37b170afbaa74ad33e4dfb402aae14a2a026fbde83cbad0e61aee65b5a01f55d"
        },
        {
          "alg": "SHA3-512",
          "content": "f87bbab20f0ffd19ad27225b623b44cfa693fc83b27eb828acf0beeda846a13a9139a11e32d59cf81aa93da08af02335dddf59b2afc5a36900478a04c09c6218"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/ethlo/itu",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com:ethlo/itu",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.dataformat",
      "name": "jackson-dataformat-yaml",
      "version": "2.15.2",
      "description": "Support for reading and writing YAML-encoded data via Jackson abstractions.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8b854304b3f56fcb85f9815f420b13fc"
        },
        {
          "alg": "SHA-1",
          "content": "58194ff9f51915ad6bf6b6f24818232d7566418a"
        },
        {
          "alg": "SHA-256",
          "content": "37795cc1e8cb94b18d860dc3abd2e593617ce402149ae45aa89ed8bfb881c851"
        },
        {
          "alg": "SHA-512",
          "content": "0e7e444bb04159967945a131e15131304e667370ba118d4d9d300ad10ab68c85f250bc7ce31d46bc72ef381f99f7f6352fd866debf700e85995063cbd6bcb728"
        },
        {
          "alg": "SHA-384",
          "content": "ebd84ccc50f2986468a62028fcaaae53520ba5eb64f008bd086b10e4ffb1ca33af8a4aded7572e09a6eb9419da36485a"
        },
        {
          "alg": "SHA3-384",
          "content": "3881fbd843d0351c51ccd33f4c85a4c8f2949165c19e4ff44caa3ca7418505366af75c1f73711d85f666d7095f18939c"
        },
        {
          "alg": "SHA3-256",
          "content": "e9e2e7b894cf982c5bc43a490bd784cf01a8c4123a5b1f2a0b73133104bdfff3"
        },
        {
          "alg": "SHA3-512",
          "content": "9154b0c38ef860cd89bc2338afb85d26f225aac039fb284c29ac034cd27fb34074044400264058153184ecbff214d2611b7647ae06defa9611766c893e7a857c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "jaxb-runtime",
      "version": "2.3.8",
      "description": "JAXB (JSR 222) Reference Implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a2db810cf9eb5fab9e3ac13fc27adbd7"
        },
        {
          "alg": "SHA-1",
          "content": "c90a335a07c60db986f29d35b0f8ac0a18f0f989"
        },
        {
          "alg": "SHA-256",
          "content": "9e535d3b504b4ce09f3b78478ead09486c3a676ebe33c3102b7a1f88317d05b3"
        },
        {
          "alg": "SHA-512",
          "content": "de2a649ba3adbb98b4401faab84c7ba20a5611ade37ce425b85ffe8effc58080a9f88d613b52568e2db952f2878c066214812615efebe2f9ede3cd725257957e"
        },
        {
          "alg": "SHA-384",
          "content": "3a2e48655a0bbd65a38d9ae2e7c556c9aef4a41ff599a0defac4b11c6304ce2789ee795aee3e4880cee7074980e53ee5"
        },
        {
          "alg": "SHA3-384",
          "content": "bfa2cafe5475f60335c17413e8657b83f78e71d3adb3480e49e0ebb3ef157fa07b78ff5d8dd8345c31ff3bd556b9ef45"
        },
        {
          "alg": "SHA3-256",
          "content": "2c78efa856aa350d0f39edfd21a391a3df1973bbed979152e749bf0585edae15"
        },
        {
          "alg": "SHA3-512",
          "content": "1f7aba046ec63f8d496e2447433bb80609334bb8eddcd2a564c3a6834d86252620b4a29409c912676746b5132202348ecd411bf250e3dd799845749d4d998800"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.xml.bind",
      "name": "jakarta.xml.bind-api",
      "version": "2.3.3",
      "description": "Jakarta XML Binding API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg": "SHA-1",
          "content": "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg": "SHA-256",
          "content": "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg": "SHA-512",
          "content": "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg": "SHA-384",
          "content": "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg": "SHA3-384",
          "content": "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg": "SHA3-256",
          "content": "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg": "SHA3-512",
          "content": "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jaxb",
      "name": "txw2",
      "version": "2.3.8",
      "description": "TXW is a library that allows you to write XML documents.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d14d98be8f76fdfa4cfa8a2769ca360b"
        },
        {
          "alg": "SHA-1",
          "content": "66e0297f1196f0d15a776e699de1b8e6ac5d44dd"
        },
        {
          "alg": "SHA-256",
          "content": "b10b729087255ff255d82d9cb826b4f993cf112e972ec3ade21a5dd1852fa5d2"
        },
        {
          "alg": "SHA-512",
          "content": "1d87b2294270812bccf08aee639e2bdad9b8520eb1f09bc2af5a754311e7a9a7bbf2ece230b751de503587ebd69c04448783dbf3119645028dff37d2cb3b3fc2"
        },
        {
          "alg": "SHA-384",
          "content": "19a8aa79bf9eac88cc20e0acbccf5f23ced3cd878c7593629e6417520b89044d61d9b972f6324b0c51dcbaf82cdbe79b"
        },
        {
          "alg": "SHA3-384",
          "content": "15c7115c155a655dae40bd203248c16450272af5c73db24deb9457dff79244646b31fd66639c8cd975137ee4cbdd13cd"
        },
        {
          "alg": "SHA3-256",
          "content": "43efbba7b6498f41046b744af95d7575bb3bbd98febae6ce216d43601f0dd328"
        },
        {
          "alg": "SHA3-512",
          "content": "633ff396e28426a26b7dd9eb33d6b6506932f51f324ea682c0eb49c984d149624ba0955521603e7bafbb9fe8ca923baf5406108ea1dca301bcadda80358723e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse-ee4j.github.io/jaxb-ri/",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.istack",
      "name": "istack-commons-runtime",
      "version": "3.0.12",
      "description": "istack common utility code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg": "SHA-1",
          "content": "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg": "SHA-256",
          "content": "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg": "SHA-512",
          "content": "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg": "SHA-384",
          "content": "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        },
        {
          "alg": "SHA3-384",
          "content": "2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d"
        },
        {
          "alg": "SHA3-256",
          "content": "50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e"
        },
        {
          "alg": "SHA3-512",
          "content": "286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "com.sun.activation",
      "name": "jakarta.activation",
      "version": "1.2.2",
      "description": "Jakarta Activation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg": "SHA-1",
          "content": "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg": "SHA-256",
          "content": "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg": "SHA-512",
          "content": "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg": "SHA-384",
          "content": "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        },
        {
          "alg": "SHA3-384",
          "content": "83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590"
        },
        {
          "alg": "SHA3-256",
          "content": "5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d"
        },
        {
          "alg": "SHA3-512",
          "content": "0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaf/jakarta.activation",
          "type": "website"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf/issues/",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaf/jakarta.activation",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "publisher": "Oracle",
      "group": "javax.activation",
      "name": "javax.activation-api",
      "version": "1.2.0",
      "description": "JavaBeans Activation Framework API jar",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg": "SHA-1",
          "content": "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg": "SHA-256",
          "content": "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg": "SHA-512",
          "content": "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg": "SHA-384",
          "content": "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg": "SHA3-384",
          "content": "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg": "SHA3-256",
          "content": "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg": "SHA3-512",
          "content": "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://java.net/all/javax.activation-api/",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/activation/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/javaee/activation/javax.activation-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.json/json@20231013?type=jar",
      "group": "org.json",
      "name": "json",
      "version": "20231013",
      "description": "JSON is a light-weight, language independent, data interchange format. See http://www.JSON.org/ The files in this package implement JSON encoders/decoders in Java. It also includes the capability to convert between JSON and XML, HTTP headers, Cookies, and CDL. This is a reference implementation. There are a large number of JSON packages in Java. Perhaps someday the Java community will standardize on one. Until then, choose carefully.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a0702c57783ce9e948252c34644f328"
        },
        {
          "alg": "SHA-1",
          "content": "e22e0c040fe16f04ffdb85d851d77b07fc05ea52"
        },
        {
          "alg": "SHA-256",
          "content": "0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3"
        },
        {
          "alg": "SHA-512",
          "content": "a5cdd1ed984448d6538746429f2d1a0ec8f64f93af0e84870ce898a9f07a81d11bf27d2ee081471975772efc8a0d3d5e05541197a532066e9edb09ad032d31a3"
        },
        {
          "alg": "SHA-384",
          "content": "5d2629c7fa21af332369d9feb30dca6bbc76378615252fd5fc8a9bd55deba17951a45ae3384672f317b12a5d25a285bc"
        },
        {
          "alg": "SHA3-384",
          "content": "b96f3dc5d35e439d33e31522538d5d91cb8d88f12d19071a66ab31722c46fbb9c945f3894942203f4dd945df93bc3d91"
        },
        {
          "alg": "SHA3-256",
          "content": "69c7a6f7873b85a74ec9547b081d217a7407deac8d0912ac4906c0eb2c2f87f5"
        },
        {
          "alg": "SHA3-512",
          "content": "fd2bcc534d0bcd4b1cf3337e1f5f8073d5693f3e65d789203312a166f91874d7c31ea1715de9eaea3e0437639591ae4157ceef4b76354e6681f34bc034a06d7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "url": "https://github.com/stleary/JSON-java/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:maven/org.json/json@20231013?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/douglascrockford/JSON-java",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/douglascrockford/JSON-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "group": "com.github.package-url",
      "name": "packageurl-java",
      "version": "1.4.1",
      "description": "The official Java implementation of the PackageURL specification. PackageURL (purl) is a minimal specification for describing a package via a \u0022mostly universal\u0022 URL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f8b3a23e6402d317b612251c83d292e7"
        },
        {
          "alg": "SHA-1",
          "content": "0a0d1009191c1cf6b04f40d26e4717596f3a90e0"
        },
        {
          "alg": "SHA-256",
          "content": "8e23280221afd1e6561d433dfb133252cd287167acb0eca5a991667118ff10a2"
        },
        {
          "alg": "SHA-512",
          "content": "ea5ed91a395e3c8ef18d575d363dc30302986dc5cc8423e97950708cd48dd87e97176619a246d72e8f5b4ff1a7fbb2afb5e9b3c7a11aa7340b540655ba4d4e9b"
        },
        {
          "alg": "SHA-384",
          "content": "791d86830598ccce6ea59faaa7ece317b84ce1b245194e39cf576f65250b32c8a62c0660478a4d4038040b8650e520b3"
        },
        {
          "alg": "SHA3-384",
          "content": "c2354f6e79b3feefa44b289a53b9ee05a4db20d75a6a367a4880a2028ec8306fd45c5495962381709b15134136bd3ed6"
        },
        {
          "alg": "SHA3-256",
          "content": "29888a1b55158593ef90003638a7ea204b0cff1d255f48780caa37e1c52bcfe3"
        },
        {
          "alg": "SHA3-512",
          "content": "3bb0b2ef76d2dc0cff23f70541091bd30744d1fb0e240aca4c930f01f70314f1f7cf80552d0116b77333a2c3a3025b217fc3aceca2755469f6871983d5e9740a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/package-url/packageurl-java",
          "type": "website"
        },
        {
          "url": "https://travis-ci.com/package-url/packageurl-java",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/package-url/packageurl-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/package-url/packageurl-java.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-core",
      "version": "8.11.2",
      "description": "Apache Lucene Java Core",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b8c6764eccdc3d734c8b5e57dd37c94d"
        },
        {
          "alg": "SHA-1",
          "content": "57438c3f31e0e440de149294890eee88e030ea6d"
        },
        {
          "alg": "SHA-256",
          "content": "8970925f43d789a70247e36c1ba5a2607baf4195c35afd0cd878642c95c37409"
        },
        {
          "alg": "SHA-512",
          "content": "f28f9e234db16ca4046982a34de88c10f74b19bb750fcb7c42b7af68d7feda1f14e54083ef3a5cfded5a5b6c3d6d84d65b0a661933c23f1b6714833287924aed"
        },
        {
          "alg": "SHA-384",
          "content": "49fe4d90193fb126c44a2b2bb825017ce34dfaa5a481be386afb8744659abb1f192960a8b1481527e19143f35189c3a0"
        },
        {
          "alg": "SHA3-384",
          "content": "6011e034bcdbc953d77b4e55e2b5d0bce776e9e7922d42fb765417cb1bdaa6255e2a5fa0c338721f6bd572b10a6cfb0d"
        },
        {
          "alg": "SHA3-256",
          "content": "1e4bbc4d7efa5fb00852ea345d80ed272c9e7ced21236d17e3821b33a54d89ec"
        },
        {
          "alg": "SHA3-512",
          "content": "714f471872859653f35ee0995537dc105ef4874747c4d5ee5b3c085b67d4746c903e0be95bbfc5271d7fd6a46c9124e2c4150ae52220357790c2bb67dfd723f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-core",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-analyzers-common",
      "version": "8.11.2",
      "description": "Additional Analyzers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5f1ccb6914773cf321fb26ec2159a9c3"
        },
        {
          "alg": "SHA-1",
          "content": "07a74c5c2dd082b08c644a9016bc6ff66c8f27cc"
        },
        {
          "alg": "SHA-256",
          "content": "d3def04f7d0d2c891cf2c7e3dfc14c3b53545bec1cb8732ae033f25164e5c931"
        },
        {
          "alg": "SHA-512",
          "content": "d745b159350fdd52a7bd58ff341ff58ecd7bc34c1c8762f32cab7a42f4eca14d7691592611701d2522cd16ea8a97d6d71536d203caff379a6de44ef7ac518d50"
        },
        {
          "alg": "SHA-384",
          "content": "a9816835fed0db0e31c10b610bfd42394b8110d4e4077025527be3c3367236071bb669d921607f9ab6a881ad1142c585"
        },
        {
          "alg": "SHA3-384",
          "content": "0d944c8b518a22188c2216b7b38b2c8d5740e09646af4f2196da9097f6ea2edb647e66298f07636ac4c423f400b00cf1"
        },
        {
          "alg": "SHA3-256",
          "content": "b551f6f08ae2e150f0306bf50bd9c6d7f14b86f9fd4c73daee638f448765449d"
        },
        {
          "alg": "SHA3-512",
          "content": "afa274a413500a4ce8781f36da65bd1767c91c3406f81f13caa5f545cad7ce1d6e7d49b5bbf54dba122b2136e3e68674d6684ac7ae2d80358282088ad94f5288"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-analyzers-common",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/analysis/common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queryparser",
      "version": "8.11.2",
      "description": "Lucene QueryParsers module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5640c1f4ee0b1f2798c11ad2bd558173"
        },
        {
          "alg": "SHA-1",
          "content": "1886e3a27a8d4a73eb8fad54ea93a160b099bc60"
        },
        {
          "alg": "SHA-256",
          "content": "d2cf511bad3bda7b91587cba4c227f8964a4e8da0433d05a740439ea21bb1ae4"
        },
        {
          "alg": "SHA-512",
          "content": "95ac945685ba071d52f8c593f4f4b1d90ab9b930ca7a834bb3e193a644cb212e51232d50ad8330678a543bbde6142e794e8a1fa69e28f50331216443dd329d9a"
        },
        {
          "alg": "SHA-384",
          "content": "26581b3465343dcca8952aca125958791c88f725ef9ab9ad62a93bb500836b242f6b270c3cf6aa591c1e6132499ae1d6"
        },
        {
          "alg": "SHA3-384",
          "content": "82e6acfbc011ab33007881467b13df18347ecbe9a9fed03a08e1506c4ad77371e2eb649629d27ff2c8f2a9f9490b7d98"
        },
        {
          "alg": "SHA3-256",
          "content": "c9d009269f90fa4a5c523242ea8b8fa0e742df49af6cc41e6e0c579a153b9455"
        },
        {
          "alg": "SHA3-512",
          "content": "2c40f9413fd888c796a02dcf0fbb49eb0944d75d7d2f0ca8350379cc6ffd0314f59fb5595a86b06c5baf4e76f0b37f22112fc64ab45d3220aa5b046297fbfa25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queryparser",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queryparser",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-queries",
      "version": "8.11.2",
      "description": "Lucene Queries Module",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "58ed6bbc77bc9a3063d2bbe3b631821a"
        },
        {
          "alg": "SHA-1",
          "content": "c86c8bbd6dddfb6870fc2f59989cb89d50290d5a"
        },
        {
          "alg": "SHA-256",
          "content": "0f93119d7d316cef13fdebaa668e716b197eb86cbe8e7b345c0ead26320e63c8"
        },
        {
          "alg": "SHA-512",
          "content": "378fcb346f8471130bb203800dc574c3f1724aa277e3c3922f13803b352e6697189ff673b9748655da5354aa628c352c634b186020ec31bb998e5e8fab64a12c"
        },
        {
          "alg": "SHA-384",
          "content": "de0492cb11f760bad7ae111f49a0199cc04365d30506d135e0f7df97ded4741e1c1933c8cb198611d3b999864e1d5dbb"
        },
        {
          "alg": "SHA3-384",
          "content": "6227770ee3f11b43044b1c59058f62ca56df272ff83b9d703c35ced1784dfc7a049d6f7b7f6f0c795c24ac811f4fa001"
        },
        {
          "alg": "SHA3-256",
          "content": "928e02a55d353dd48a9c766049652946148dfa6d2b8dbb71bca311a7192a3c5c"
        },
        {
          "alg": "SHA3-512",
          "content": "24f9841bebac1ff7b5f3d602c6960813bafa8a880f6a1d3604171ab6b30203591a2bc3e2450f761d34254adc1ff7e0889381fa5b149c65ddfa7683a13c87b6af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-queries",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/queries",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.lucene",
      "name": "lucene-sandbox",
      "version": "8.11.2",
      "description": "Lucene Sandbox",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3e7d4b2ca392627e868741d4fafe0a5e"
        },
        {
          "alg": "SHA-1",
          "content": "5ff823b4a429ccf842386a008b08bddfa88d9f87"
        },
        {
          "alg": "SHA-256",
          "content": "fea64c3102e21a1c233a95ebed8e7021e65f82e517da8d8b1446776356705bb7"
        },
        {
          "alg": "SHA-512",
          "content": "a4a044cd93d1476c16b85117116f57bf57647af120c09c71a97b1b1c76d19ad975ef316b42696ace16983a7dc2d3955cf50d5cd0ae83154da119fcfc1bcef672"
        },
        {
          "alg": "SHA-384",
          "content": "6bfc3de1c9ebf3b21e639183fab0382681e7334307cd47d68cfff5f39aacca30948172a0b3ab8695a3ac40488c157d5a"
        },
        {
          "alg": "SHA3-384",
          "content": "56488b54e092c6f3333e9dd6b33e44b6e391c329b2ae65232d61313d8e1c8db07553012ffd3bb2081134832de0c646b0"
        },
        {
          "alg": "SHA3-256",
          "content": "13f154e51f4a876ffe132d252bcbb24a816c817b12522309fc30c7ac2ae97fce"
        },
        {
          "alg": "SHA3-512",
          "content": "b6c1d21ee119ed5810279fc3b208292116efbbf3b5c0766d982be85346f98db0e39df7db0630633ecff6fc746f568783063cf7cf28096077ee09cbc92639a069"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "externalReferences": [
        {
          "url": "https://lucene.apache.org/lucene-parent/lucene-sandbox",
          "type": "website"
        },
        {
          "url": "https://builds.apache.org/computer/lucene/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/LUCENE",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/lucene-general/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=lucene-solr.git;f=lucene/sandbox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@5.1.0?type=jar",
      "group": "io.github.jeremylong",
      "name": "open-vulnerability-clients",
      "version": "5.1.0",
      "description": "Clients for vulnerability sources",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "5aaa873856144574020d24bf7431ca29"
        },
        {
          "alg": "SHA-1",
          "content": "8728b5a17ec75c45a342d7bbb488922833b6a80f"
        },
        {
          "alg": "SHA-256",
          "content": "3e1dc66c9246be7701175a1b239b8182fdc0741c687ae9766e99e9f887f7f6f1"
        },
        {
          "alg": "SHA-512",
          "content": "a456c6ecab103ed02c7ec08df295fb07ae151b7b5bcd4bec52bde27af9c35406f6536a08d5dd753fcdb22bfed569f5e3a1eaaa2321fa7b0580cd88d632577a7d"
        },
        {
          "alg": "SHA-384",
          "content": "cfe752809b27dff2684857cea6943ee581e07d08c43af5a6b31645c1603d1b067bbf167c02afa4dea9996483031f2f42"
        },
        {
          "alg": "SHA3-384",
          "content": "273cfe04896460cfafe6eded52bdb951fd18e02ad3cf841b09c43bd7eb32f3c8b40ea501e14f4e63aa1b4358482ed213"
        },
        {
          "alg": "SHA3-256",
          "content": "f1c56f6ca1fbe189987c872363f26c5ae86dd08cee1f6a59c0950fb285bfc8c4"
        },
        {
          "alg": "SHA3-512",
          "content": "866d37284b3cafa84f5a9691f81c41d8a0abc3e720719634be50886bd6c7cdbfc43bd5c4b7d55323a42a7ee7253169f83f51eb2ccb01d738fe3871163200e133"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@5.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/jeremylong/vuln-tools/",
          "type": "website"
        },
        {
          "url": "https://github.com/jeremylong/vuln-tools",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.datatype",
      "name": "jackson-datatype-jsr310",
      "version": "2.15.2",
      "description": "Add-on module to support JSR-310 (Java 8 Date \u0026 Time API) data types.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "94d6cec0fe6ad8b81752beb500bd4bbc"
        },
        {
          "alg": "SHA-1",
          "content": "30d16ec2aef6d8094c5e2dce1d95034ca8b6cb42"
        },
        {
          "alg": "SHA-256",
          "content": "7574c81ad570476ef6aad26f419288fd466733f3315bee3012f2f29c9dc008c8"
        },
        {
          "alg": "SHA-512",
          "content": "3036ff042d09342d36e90960103ec57c77549b85e2c370dfdd57673195141fea6edbac29fa598cc1d1edf56e4d457b7b838dcdc3f50acae1cc70b5905e075301"
        },
        {
          "alg": "SHA-384",
          "content": "38a75ac595705f1f518c461009280318fbe85b3aab04a68b15e736b3365e20ea17c5db28e46da0d89673b223307b800f"
        },
        {
          "alg": "SHA3-384",
          "content": "5f73012de6ca68e69e21bac475a9ed504e1923abf15fb73da56576c0b381d9913bb51ad45906988c085ef03487b4d774"
        },
        {
          "alg": "SHA3-256",
          "content": "a6991fef42c63f2f16758232fc2e6855bad4d21ec8cefb26a3a6308cf40d1388"
        },
        {
          "alg": "SHA3-512",
          "content": "730eb8e065c28d87f313a9659d261b38827752a7e84dc27ef074efbdddd954a69c6a91052680cd23f056dd6778f7a3fc66bf17a92b557f35d38f69e114e5b737"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-modules-java8/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.samskivert/jmustache@1.15?type=jar",
      "group": "com.samskivert",
      "name": "jmustache",
      "version": "1.15",
      "description": "A Java implementation of the Mustache templating language.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0b166350b8b372d5caae4f0b692e016f"
        },
        {
          "alg": "SHA-1",
          "content": "7b3b15951d13b774c76db2f4e14d977952f8b4d8"
        },
        {
          "alg": "SHA-256",
          "content": "1aeb96b9dc17bc29540b8c3342e8e91ee974d5c604165ecd469dd76b041c250c"
        },
        {
          "alg": "SHA-512",
          "content": "8197f9c36ad9b095c37f557727b76a8d4f1474e9db518eca7b3e359eb403c525823ec2e2b2c946deb8149e04d5e89c9a8324c49d1ea5545b996a198808a46008"
        },
        {
          "alg": "SHA-384",
          "content": "79781ee24c7355fd9443c1f8591a8137f121ffd7373bebbf5daaf63a6dbe0b4a241762e9b91be5e11fd3fab329e64d60"
        },
        {
          "alg": "SHA3-384",
          "content": "dfd7e5051902b91d7289370e47aaede5d2aa5cc21083e1f53df5b0dcde808fbdf4ea27f426caf8f2a6903149fedb08f5"
        },
        {
          "alg": "SHA3-256",
          "content": "db096977bdb118e75e8d716cf17670a1d17a075d8974ddacfefd84f7ecb48375"
        },
        {
          "alg": "SHA3-512",
          "content": "40566059c0099a8f5c57a07e9dcec764fce971ec5d16b5cfff481578142db9dffd9aae4d3e70b0085881d92ad8728c9fa197969ce2e7c614032c4fc40154d14d"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The (New) BSD License",
            "url": "http://www.opensource.org/licenses/bsd-license.php"
          }
        }
      ],
      "purl": "pkg:maven/com.samskivert/jmustache@1.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/samskivert/jmustache/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/samskivert/jmustache",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "group": "io.pebbletemplates",
      "name": "pebble",
      "version": "3.2.0",
      "description": "Templating engine for Java.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "30e37f975dc67ebf4367d113150b81ac"
        },
        {
          "alg": "SHA-1",
          "content": "ea9f717264313534a5732ae23bf17a2779213cb3"
        },
        {
          "alg": "SHA-256",
          "content": "893c703eb9bc5bc3a98cb38b74eef67c2200b20afcb8cca977e0043375cb9d7f"
        },
        {
          "alg": "SHA-512",
          "content": "3fdf7d6638c017b9cd6700a7815e71343e904fd800b0c4a18f1467e9b2651a350a15869c7f64a5991c32990ebc2c3ff56b2e9b81516ccc24693d6647b1612bbd"
        },
        {
          "alg": "SHA-384",
          "content": "eeb7729a923b1c3cfd124b4412b1cd5f5875857e139b7191d1a65459e5e1a8212896d678162962631c6d2f3474a2f48e"
        },
        {
          "alg": "SHA3-384",
          "content": "e48baf646cb4530f890f02c72c8aab51d82ba56e1549465cda2b322a46e4c9585c013c26a22a6074d194c2d2ec04d1ef"
        },
        {
          "alg": "SHA3-256",
          "content": "1aa8da60613e0da053166fb5f1645d18b12d76ba37f92f47e32c8e84c27d9513"
        },
        {
          "alg": "SHA3-512",
          "content": "59429a68b4182c2bfdf97060658cd13c8d78daf87dadc0b1823c0e81aa8c1cc5e7fc2355c1652c393e5c4450aa16dba030bffdfa9a24997924dda24cbd030797"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://pebbletemplates.io",
          "type": "website"
        },
        {
          "url": "https://github.com/PebbleTemplates/pebble.git/pebble",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "publisher": "The UNBESCAPE team",
      "group": "org.unbescape",
      "name": "unbescape",
      "version": "1.1.6.RELEASE",
      "description": "Advanced yet easy-to-use escape/unescape library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d95ed94e1624e307a1958ee105ccbf39"
        },
        {
          "alg": "SHA-1",
          "content": "7b90360afb2b860e09e8347112800d12c12b2a13"
        },
        {
          "alg": "SHA-256",
          "content": "597cf87d5b1a4f385b9d1cec974b7b483abb3ee85fc5b3f8b62af8e4bec95c2c"
        },
        {
          "alg": "SHA-512",
          "content": "6918e9579b06721942fdcd91e401f5b996fb4eac13056dbafdf594661f355a34874eb5266784bc2c4f82df9fdd9e219d71a96f52945a354f01665f85f8166bb3"
        },
        {
          "alg": "SHA-384",
          "content": "1b808b67c784b69afea64364ba4c0d433c7f042c512f5c18f07d5388fe7ac4741913f696424bd8fbde147383cfb3d8f9"
        },
        {
          "alg": "SHA3-384",
          "content": "6525bd20a12ff43a0089c0d59369574ae6c01e2b4b1aacf466847d4433ae403db08404a9b59be397c3034f972bcd6b06"
        },
        {
          "alg": "SHA3-256",
          "content": "a190c9bedccff959d08db12fe7080437fb4e98f05516b39d6540be718e151cc6"
        },
        {
          "alg": "SHA3-512",
          "content": "5d7b5edc0c2a0d47c9625936c14b4122330b96cdf54260fe2a6468289c2f4cbc4ee19770c1144acfa702f2f058a81544b4aea9258fe0e15166a1a331736d7b77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "externalReferences": [
        {
          "url": "http://www.unbescape.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "scm:git:git@github.com:unbescape/unbescape.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpclient",
      "version": "4.5.14",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg": "SHA-1",
          "content": "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg": "SHA-256",
          "content": "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg": "SHA-512",
          "content": "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg": "SHA-384",
          "content": "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg": "SHA3-384",
          "content": "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg": "SHA3-256",
          "content": "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg": "SHA3-512",
          "content": "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpcore",
      "version": "4.4.16",
      "description": "Apache HttpComponents Core (blocking I/O)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg": "SHA-1",
          "content": "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg": "SHA-256",
          "content": "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg": "SHA-512",
          "content": "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg": "SHA-384",
          "content": "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg": "SHA3-384",
          "content": "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg": "SHA3-512",
          "content": "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-core-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "commons-logging",
      "name": "commons-logging",
      "version": "1.2",
      "description": "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg": "SHA-1",
          "content": "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg": "SHA-256",
          "content": "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg": "SHA-512",
          "content": "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg": "SHA-384",
          "content": "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg": "SHA3-384",
          "content": "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg": "SHA3-256",
          "content": "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg": "SHA3-512",
          "content": "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences": [
        {
          "url": "http://commons.apache.org/proper/commons-logging/",
          "type": "website"
        },
        {
          "url": "https://continuum-ci.apache.org/",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/LOGGING",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "http://svn.apache.org/repos/asf/commons/proper/logging/trunk",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.client5",
      "name": "httpclient5",
      "version": "5.2.1",
      "description": "Apache HttpComponents Client",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fbbefc687f2e0c55b34b77edf53d486a"
        },
        {
          "alg": "SHA-1",
          "content": "0c900514d3446d9ce5d9dbd90c21192048125440"
        },
        {
          "alg": "SHA-256",
          "content": "9355f3876baf82fec13ced22c12b62d57536230836406d359459128e4f73ed51"
        },
        {
          "alg": "SHA-512",
          "content": "0f8cbc1b287f56af9565532aa6e16abbf8e14ce9e22d682eb155b24f9b36e3801306373b03cb9a3ad88963acff15138f949ec48ebe84491230a490a7c745b18b"
        },
        {
          "alg": "SHA-384",
          "content": "b828737744748cf6cf4d78f87f3c84bc90723eef7ad8ae68785504fb20389d08dbd4b13a66dddeb3a7d96adf5dd70d54"
        },
        {
          "alg": "SHA3-384",
          "content": "8946c3ef57726352db0621b9f604c88b5065901285f547173d708b48420f3586c04f84d0dd6a86159e8b494d50561361"
        },
        {
          "alg": "SHA3-256",
          "content": "6ab0c8554953cd7d42a9ca03659c8fb8a79be8979084847aea619044ea8dba35"
        },
        {
          "alg": "SHA3-512",
          "content": "e8db6667d9b300c728b0ea4e693f09a49283e27362d123a17e860188b4f03d2c34f57b62ab714ead1202820748c28bae9af4cbe6c43876877573f173e27bdd10"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-client-5.0.x/5.2.1/httpclient5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/5.2.1/httpclient5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5",
      "version": "5.2",
      "description": "Apache HttpComponents HTTP/1.1 core components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3a40241f9a99cf063f347dfb73c5c4e8"
        },
        {
          "alg": "SHA-1",
          "content": "ab7d251b8dfa3f2878f1eefbcca0e1fc0ebeba27"
        },
        {
          "alg": "SHA-256",
          "content": "293321cbf594d79ea8a0cb0214f75f146d17f088be17ad5ce11c2fe864df124c"
        },
        {
          "alg": "SHA-512",
          "content": "214dcc370a8ca0c7fdb7c7afdea37a0bf1b9ba838aa3e074d64b0d9b950ebc7ff1dae87892fad0f44cc6d56828101d640584b45358ace20076f19a78aa503300"
        },
        {
          "alg": "SHA-384",
          "content": "af7cbc6d6ba74d974665529431a57de332c69cf5bd5080368015de28e7a9f652c2daa777e78bec68350c95d168ec2280"
        },
        {
          "alg": "SHA3-384",
          "content": "22dfb21741aef07351a10123e1531db56cac4b2a158fdcf27d6ebc937b9e23169926741c27b9dcec2a29acc866549f38"
        },
        {
          "alg": "SHA3-256",
          "content": "3a97502a187ede8286a82c46af76cc8088e6b75de7f971a03ce0845ee5163ca6"
        },
        {
          "alg": "SHA3-512",
          "content": "9e814868255af14978947519b640d362f41bfddda6c9e47caf07e31403c2b0a64776e521d77b7df56a8970f173a509ec01e667b0863b11738b45ab6fadddfff1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.2/httpcore5",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents.core5",
      "name": "httpcore5-h2",
      "version": "5.2",
      "description": "Apache HttpComponents HTTP/2 Core Components",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "272112133e0dd0559efdd8f5e615a344"
        },
        {
          "alg": "SHA-1",
          "content": "698bd8c759ccc7fd7398f3179ff45d0e5a7ccc16"
        },
        {
          "alg": "SHA-256",
          "content": "5a087fb8c619979d492a83546f351ddadf32b28cc6a32923229f3fc777171578"
        },
        {
          "alg": "SHA-512",
          "content": "3c8ebdbe931d014e390a2b42aeae1ec3ae0def07c54a0c18927d0db1afed978fd9730455602c7692393bba029b07bdd43356a5b779f5d79b285d9e36d0c448d1"
        },
        {
          "alg": "SHA-384",
          "content": "a1ab74afe0b503a3cf8eb3b060b6696a174aca2b55d728add196d46aaa5c9dce0d81de4e26e2e44482fbeb0cad197f63"
        },
        {
          "alg": "SHA3-384",
          "content": "13fd21b5aaab5f9fc0d8ecbba20196a02dade84e992c4a686ef5c9a98c3366674d201e42f8555cef7042b1ba6d4ad256"
        },
        {
          "alg": "SHA3-256",
          "content": "62e29bad6d6c936fba13033ddc64153accd59dc964ed9f3dd7c1bd14212b834d"
        },
        {
          "alg": "SHA3-512",
          "content": "3c891ebf18f05498d732eef4aacf607e0e526bb5d6a821e795601896d80dbf5244a36674f9688bdceff7f8965b8e893c88cc9deb662b7ac206b2c32b2b796e32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
      "externalReferences": [
        {
          "url": "https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5-h2/",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/HTTPCORE",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?httpclient-users@hc.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-core/tree/5.2/httpcore5-h2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "group": "oauth.signpost",
      "name": "signpost-core",
      "version": "2.1.1",
      "description": "A simple, light-weight, and modular OAuth client library for the Java platform.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ef778c731f9b6cbb8311a780b1f4094f"
        },
        {
          "alg": "SHA-1",
          "content": "e307e72ff918b775f797f364b1fd442f23b5408a"
        },
        {
          "alg": "SHA-256",
          "content": "2628d8c1928e512cea34001c1108bfe251049b1ef747ba284aa7c781c24b2e79"
        },
        {
          "alg": "SHA-512",
          "content": "9c3a0934458de2d79c00d53422b838e17369cece5e325b11709af1c74e368c58de1c175eed689a247f6ab622f2a67c2ccd06283864e64d95abdbc26629d0226d"
        },
        {
          "alg": "SHA-384",
          "content": "c4051510406394dd52cbb6170f20869e5cef2b026e88c672908bb2ceaeeb43cd88df2811dd75fbe6ad37f2c523f562cd"
        },
        {
          "alg": "SHA3-384",
          "content": "1a09cf0e64cd9366f19197b6a66b3a94bb4851efa596f94538890d01e3261a611a7ceb6768512e5e3c2fd8fc5d3d01c4"
        },
        {
          "alg": "SHA3-256",
          "content": "190333f0f7c94e3db5f4d49392d454f43c710e43266fbb6049b58f8e22dc1548"
        },
        {
          "alg": "SHA3-512",
          "content": "9f0c3184b752c9ed73ab4f34805e62cafde30dc4b94f2dc55aa9645c15921ebaeba3f2bf3202ed98e60f3bb66e47945b1449e07fd559e0654afbe92f2a6a94c5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/mttkay/signpost/releases/signpost-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://github.com/mttkay/signpost/pulls",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/mttkay/signpost/signpost-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.httpcomponents",
      "name": "httpmime",
      "version": "4.5.14",
      "description": "Apache HttpComponents HttpClient - MIME coded entities",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "714c4ae31c40e6633c0bcaa4e6264153"
        },
        {
          "alg": "SHA-1",
          "content": "6662758a1f1cb1149cf916bdac28332e0902ec44"
        },
        {
          "alg": "SHA-256",
          "content": "d401243d5c6eae928a37121b6e819158c8c32ea0584793e7285bb489ab2a3d17"
        },
        {
          "alg": "SHA-512",
          "content": "884b062028f68278389b74ccfbc35142caae489ceda5df01d2c60df884b9604cd4055bf4e1524e0358661fa0e88e93e614fb6be590cb940510b07a37c0b0a20c"
        },
        {
          "alg": "SHA-384",
          "content": "88ec9117630f714abcebae122c9e10852706f88917ac12c610b975538c14a10fd5b1ec9213163b0cb950e9c9b7a74fe6"
        },
        {
          "alg": "SHA3-384",
          "content": "8f1d2b58f6a74585833611b1219c78cb37737fc75e3e2cb58804d87df93a28107da6c49a86b139dff46a7973260fdf11"
        },
        {
          "alg": "SHA3-256",
          "content": "7fdd67408fb7beacf7c00415476e9b61903c90ad06a50a7d500aa045d5747bbd"
        },
        {
          "alg": "SHA3-512",
          "content": "5075045ce4e6faa77907d762ceb24660d13b225505bb81a1b0f101a736d4ad2f4c914ce7d04137d1506495eaa437aa64bb1ac08130f4b6a76e0025f8463f7353"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "externalReferences": [
        {
          "url": "http://hc.apache.org/httpcomponents-client-ga",
          "type": "website"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "http://issues.apache.org/jira/browse/HTTPCLIENT",
          "type": "issue-tracker"
        },
        {
          "url": "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpmime",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.woodstox",
      "name": "woodstox-core",
      "version": "6.5.1",
      "description": "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "961dd4b2afedf95293dfdd8adfc8f211"
        },
        {
          "alg": "SHA-1",
          "content": "c6e52e84fe959e69a243c83ec7d24cd889444ddf"
        },
        {
          "alg": "SHA-256",
          "content": "c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f"
        },
        {
          "alg": "SHA-512",
          "content": "d9b3cf6aaac85d8c349e7a24ad30f7e23b7765f1b7ce2fdf301bf2240b9c7ee184bdd938e58be6df9ac90e97e3b8c7b34f8fa9da27d1ed8de78765a8345b18f2"
        },
        {
          "alg": "SHA-384",
          "content": "d51e67aae26449a2cdffa90a08b09cc805b85da3e758011a0945fc8b0ee8c18e98c6f94f0c0cf46b7a49e7370073068c"
        },
        {
          "alg": "SHA3-384",
          "content": "2e731b74e4814647b1a320cd2f1b9f9914db1cb07510e69fb4dda33c6b1586fb2ee9e3f5af027c98dd0d33e2ed4b19de"
        },
        {
          "alg": "SHA3-256",
          "content": "f84ca4c9bb77abb6e61930c7debee48497b2febc30d48329c6b15546dd00371b"
        },
        {
          "alg": "SHA3-512",
          "content": "257aea7a23c4631eaaa942763e639d239660f29cfb7190f0b112abf6301a214fcc8e84b118ba73d92861a5f441bee479908a4831352ce2278d3d40ef51067894"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/woodstox/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/woodstox",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "publisher": "fasterxml.com",
      "group": "org.codehaus.woodstox",
      "name": "stax2-api",
      "version": "4.2.1",
      "description": "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg": "SHA-1",
          "content": "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg": "SHA-256",
          "content": "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg": "SHA-512",
          "content": "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg": "SHA-384",
          "content": "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg": "SHA3-384",
          "content": "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg": "SHA3-256",
          "content": "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg": "SHA3-512",
          "content": "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-4-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/stax2-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/FasterXML/stax2-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.maven",
      "name": "maven-artifact",
      "version": "3.9.6",
      "description": "Maven is a software build management and comprehension tool. Based on the concept of a project object model: builds, dependency management, documentation creation, site publication, and distribution publication are all controlled from the declarative file. Maven can be extended by plugins to utilise a number of other development tools for reporting or the build process.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "96a7982d9a46c5c19696b4558be1bbd2"
        },
        {
          "alg": "SHA-1",
          "content": "fb0979832c10c1a25d038a33ca862bef055fcdc8"
        },
        {
          "alg": "SHA-256",
          "content": "ad7a0fb408f8e47585ccc0d0011e0b501d93bfc9888d369bbd4a043d19475073"
        },
        {
          "alg": "SHA-512",
          "content": "7ac2f9e8a13c166b305ff2004d467a9f12ea65d08b444ccc651232384fc37592eae6c3263e5ba2d7c0ec2725ce5cfb0f40198f8a857a39c2379c72d0f4e16427"
        },
        {
          "alg": "SHA-384",
          "content": "f97efa314f7bb2c120fb1e1e65859e5ab8b367556a82efa4654b548cf1c19af0a803ce1048dd728442a894a2c022410e"
        },
        {
          "alg": "SHA3-384",
          "content": "c97ea2052e75590746004d2726b7b12dfcb7afbc652b9fe6fe4b09eaa3502fd2d8fdb5704384eac5a06b656fba63fe57"
        },
        {
          "alg": "SHA3-256",
          "content": "405547e3a1b5393cc72fd26de6cdef47f7b9a26a07c15eea0fdb799718ad5d21"
        },
        {
          "alg": "SHA3-512",
          "content": "ab2d2071750ba22913275953f543f65e9a1ed311a5f5c64c877ab30dd65d854af3fdc85d701f15772b579ded1ff7f96c5469ac53fd00627ba386cd4fc26ef5d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
      "externalReferences": [
        {
          "url": "https://maven.apache.org/ref/3.9.6/maven-artifact/",
          "type": "website"
        },
        {
          "url": "https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/",
          "type": "build-system"
        },
        {
          "url": "https://maven.apache.org/download.html",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/MNG",
          "type": "issue-tracker"
        },
        {
          "url": "https://lists.apache.org/list.html?users@maven.apache.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/apache/maven/tree/maven-3.9.6/maven-artifact",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "publisher": "Codehaus Plexus",
      "group": "org.codehaus.plexus",
      "name": "plexus-utils",
      "version": "3.5.1",
      "description": "A collection of various utility classes to ease working with strings, files, command lines, XML and more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "cdec471a77f52e687d0df4c43f392a71"
        },
        {
          "alg": "SHA-1",
          "content": "c6bfb17c97ecc8863e88778ea301be742c62b06d"
        },
        {
          "alg": "SHA-256",
          "content": "86e0255d4c879c61b4833ed7f13124e8bb679df47debb127326e7db7dd49a07b"
        },
        {
          "alg": "SHA-512",
          "content": "e2d4e7bc919deb022d0fcc428da066d62c34a02d248b184ffc3edcea08ffbdc354cd018240b21a0495eafcd01723a692e583803ccb10d99fbfa97f58a49f967f"
        },
        {
          "alg": "SHA-384",
          "content": "ace26d0a31c11f312f1f6c1300d35fa6d9ed173d1f2718639e7f0b68d987d0d8fb57ec95eb187c250a8656cac3252711"
        },
        {
          "alg": "SHA3-384",
          "content": "01fba8224fd90332e30c8633fc6cb3d4190af08d39f117f0b4c65d440fb8c174aa777fa52275db918dc941c3e5339518"
        },
        {
          "alg": "SHA3-256",
          "content": "79a135751f0df24eb9dd9d1d0c9c8907158234cddb1b710ebf43cc7a344a533b"
        },
        {
          "alg": "SHA3-512",
          "content": "f1f21811c5c5125479290ed3b5b2b07c11ee4b9671bcbd24e7e8b8a4123a2686673ee064ba38c1e195acbe2b533ca738289be3064ec77062a32a756ed851fba1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "externalReferences": [
        {
          "url": "https://codehaus-plexus.github.io/plexus-utils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://archive.plexus.codehaus.org/user",
          "type": "mailing-list"
        },
        {
          "url": "http://github.com/codehaus-plexus/plexus-utils",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.4.2.jre11?type=jar",
      "publisher": "Microsoft Corporation",
      "group": "com.microsoft.sqlserver",
      "name": "mssql-jdbc",
      "version": "12.4.2.jre11",
      "description": "Microsoft JDBC Driver for SQL Server.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "083688841881389ef1cd7cf6fd32b96c"
        },
        {
          "alg": "SHA-1",
          "content": "d10ac00de02a1a682da0bea13aee20f49e756ef8"
        },
        {
          "alg": "SHA-256",
          "content": "e14bc6afacadef91085f2aaf2a9c275fe54ee93f4f7a499fb4d5a2e288043f01"
        },
        {
          "alg": "SHA-512",
          "content": "289439931fdf7f98be66d790ee53cdd2cc2fd1b0975a3d1b66e43a06cd86bd0c7597132a34167e029ebd47947b5191a40ae89ea92561bf3b0f4cff6a3e869c2f"
        },
        {
          "alg": "SHA-384",
          "content": "4f4b7d4e640b6e1413438cf75a5236ce1b8d3f3757c7a599456f50f6f1fef1ac64989c0cb2c75dd3885e6be01fb84719"
        },
        {
          "alg": "SHA3-384",
          "content": "b51d40c3fe96b245fd6c8ceaf62ed04f74a1fd6f23b4727b7bc5e48123617771afc7cf35e1905edf3b614af174221f39"
        },
        {
          "alg": "SHA3-256",
          "content": "4cbb11518f9f0f09e28b4c2abc60d37dc907f1745ffaf82b2f6293a7878bb335"
        },
        {
          "alg": "SHA3-512",
          "content": "55ac15ed6cc0fa656f6f574d5f8a7b7939a06377223ded7a09be97e94624342f735a3c0f8267d3e44c228c9443b3ea7e7a1a3c54cf568a62414b51864cfbde98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.4.2.jre11?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "website"
        },
        {
          "url": "https://github.com/Microsoft/mssql-jdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.mysql/mysql-connector-j@8.0.33?type=jar",
      "publisher": "Oracle Corporation",
      "group": "com.mysql",
      "name": "mysql-connector-j",
      "version": "8.0.33",
      "description": "JDBC Type 4 driver for MySQL.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "801b67e18f23e4e9ec392812a1c108d4"
        },
        {
          "alg": "SHA-1",
          "content": "9e64d997873abc4318620264703d3fdb6b02dd5a"
        },
        {
          "alg": "SHA-256",
          "content": "e2a3b2fc726a1ac64e998585db86b30fa8bf3f706195b78bb77c5f99bf877bd9"
        },
        {
          "alg": "SHA-512",
          "content": "dfc56aa76a7419a8ed2c0d051ed279ded8c9aff354018aac2f8c97b68a220784abe7a8ba4fc47e932c41bff61cb9637024a7e19cfaa37efd78cd8a3227f7baaa"
        },
        {
          "alg": "SHA-384",
          "content": "60085d09836d308ad2e3cb010a00d82f1cae4aeac062e66fe3ef25361d42ea810ee68cc5018828eeb85fd4ccf745c97e"
        },
        {
          "alg": "SHA3-384",
          "content": "03c1aab38056450d8e8924021b6f469b30482761e06282ee17ba2d000361ea119f912bd099760a7b09548fbae525796f"
        },
        {
          "alg": "SHA3-256",
          "content": "75d66cbfd3fa114a20a560fdcce0cebb5497c40814790c9a54b8312f80e4bb56"
        },
        {
          "alg": "SHA3-512",
          "content": "35c2f098a35ec7dae6bca230c75ad7a6306cb59051dedf568137a927da60169f0e7dc2065816de86e95e1b20b51b6c72bea55ef4762c3333f45eda79f27cca80"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "The GNU General Public License, v2 with Universal FOSS Exception, v1.0"
          }
        }
      ],
      "purl": "pkg:maven/com.mysql/mysql-connector-j@8.0.33?type=jar",
      "externalReferences": [
        {
          "url": "http://dev.mysql.com/doc/connector-j/en/",
          "type": "website"
        },
        {
          "url": "https://github.com/mysql/mysql-connector-j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.postgresql/postgresql@42.6.0?type=jar",
      "publisher": "PostgreSQL Global Development Group",
      "group": "org.postgresql",
      "name": "postgresql",
      "version": "42.6.0",
      "description": "PostgreSQL JDBC Driver Postgresql",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "527f2c51d65f6a78d6548c51a35556aa"
        },
        {
          "alg": "SHA-1",
          "content": "7614cfce466145b84972781ab0079b8dea49e363"
        },
        {
          "alg": "SHA-256",
          "content": "b817c67a40c94249fd59d4e686e3327ed0d3d3fae426b20da0f1e75652cfc461"
        },
        {
          "alg": "SHA-512",
          "content": "ec3b57d8377715ef6286d457b610a2e056aa99dbf036f750c5e07370fc8b01414b2aef5e0232d561c50f22abf0da961ee432e53734cc193a3e9bdaf6231d4fa1"
        },
        {
          "alg": "SHA-384",
          "content": "b554aa24acaf15f3cf749a4801f9864429a7cd122fd5faf9a6e9f866356a04971d965226a893501986e3f56ee26bc287"
        },
        {
          "alg": "SHA3-384",
          "content": "91c931143c56905da147372c2f06763e80a0e67d946fc748323c2219cb6f7647dfd14be7113f7db3dbe795c86d537a3d"
        },
        {
          "alg": "SHA3-256",
          "content": "f223ddf34881aa7e7837016a1df2749f80ed8f65fe30774fe1b944428751dd6a"
        },
        {
          "alg": "SHA3-512",
          "content": "cd9543c8827304c249d4b4941a7bc72a22f3e30ef36bbeae22a6cf3db09a796e5eae2ee88f23fe8cd41f1fdef040fa5f39b8f0ed5d6c116fc3dee3d9f882ae5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.postgresql/postgresql@42.6.0?type=jar",
      "externalReferences": [
        {
          "url": "https://jdbc.postgresql.org",
          "type": "website"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.postgresql.org/list/pgsql-jdbc/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/pgjdbc/pgjdbc",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar",
      "group": "org.checkerframework",
      "name": "checker-qual",
      "version": "3.31.0",
      "description": "checker-qual contains annotations (type qualifiers) that a programmer writes to specify Java code for type-checking by the Checker Framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c53ba1815a65635e97867b07b859ed3a"
        },
        {
          "alg": "SHA-1",
          "content": "eeefd4af42e2f4221d145c1791582f91868f99ab"
        },
        {
          "alg": "SHA-256",
          "content": "1cef5f476d22c6fb45387ddd8404f5e821cbd66487be1bdf8ee64871e63451b9"
        },
        {
          "alg": "SHA-512",
          "content": "98b38bc2c06dd6006e56c48594cfdd5f3e9ff123134e29b411cd18541637d1421612dbadac1e8c92e444a206a534b8a9d5f13798622f5333efb2eb4540b1f4f5"
        },
        {
          "alg": "SHA-384",
          "content": "5ffcf2934f37da4e3c2694f556e5038323b403ce049f8811aef5005a42aa489228aea728dbe3cb73bcc844f8f31c6954"
        },
        {
          "alg": "SHA3-384",
          "content": "8b549c3f1ace0dd51c7607e416670f361218c7f1854ef34f3ee0b7562baeeb73608021ebdde9fb986081aeae42f26f3e"
        },
        {
          "alg": "SHA3-256",
          "content": "cba999ab94ed8e3ed79d864c3f24f402d0cf00dd7d863b461e299c0a26f4b7d6"
        },
        {
          "alg": "SHA3-512",
          "content": "261f40fefd512af9f657315243636adbb9b4e623bbf95a888a120c22bbcc47eed8f6f830f9ba239355dc1cac5b18de239aaa48c3b14f6168f1f5dc948bafa688"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar",
      "externalReferences": [
        {
          "url": "https://checkerframework.org",
          "type": "website"
        },
        {
          "url": "https://github.com/typetools/checker-framework.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.15.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "mysql-socket-factory-connector-j-8",
      "version": "1.15.0",
      "description": "Socket factory for the MySQL JDBC driver (version 8.x) that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a61db0701821d43d441b55030e8b0e05"
        },
        {
          "alg": "SHA-1",
          "content": "4c20efd4e2efdaba795fcd48935f7cabd24ca976"
        },
        {
          "alg": "SHA-256",
          "content": "c5dc0e5bf796575ba0a5d5317d46da300826fb39b4bec4b8092a9b8997aef538"
        },
        {
          "alg": "SHA-512",
          "content": "a8ec9e31cc7372cef386b851e5ca9a85fec5f6d877813bd680bcec746822d7e78ee7f1f6fbd8211439186015465c53caee3f12dfcc7f73a0f2598ea0e61d01b4"
        },
        {
          "alg": "SHA-384",
          "content": "9de7ed04ced2c3cf74861f7ddc3271fb5d6df142056e481941bb0ec0bd9d58aacd7e34e23b6ba6227dac667e04e9502e"
        },
        {
          "alg": "SHA3-384",
          "content": "2b9f41a275313d691df4e08d89a7a27498556a90c1f26930ac13a66a8ccd0a13539a9e554811265b17626010bb565a91"
        },
        {
          "alg": "SHA3-256",
          "content": "ef83f156d4d27d841f8e461454cae4a9435b5a62b84f5a0c05bfa52b6ac41a93"
        },
        {
          "alg": "SHA3-512",
          "content": "58b3dcbfba503079688a374954082e38fe9b9eae42d39b269108dff06434f36ee98be32fb7c1b15901177d2f84082b5c9021cfd3c37b8fcbaf2cfe93b5a1aa85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/mysql-socket-factory-connector-j-8",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/mysql-socket-factory-connector-j-8",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "jdbc-socket-factory-core",
      "version": "1.15.0",
      "description": "Core library for establishing secure connections. End users should depend on the driver-specific socket factory artifacts.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c74b709c40493326f693062220e7c4ba"
        },
        {
          "alg": "SHA-1",
          "content": "c9464c88ebebb24823940b8c3b1705c3771dc230"
        },
        {
          "alg": "SHA-256",
          "content": "3864931ab6084b34a471439526e472542bc380e694cc3f49c5980745371d9ba4"
        },
        {
          "alg": "SHA-512",
          "content": "b0d762cddfb88ec0ae5345132c307c6172055d3f5c16cea8105d36d80c7b3eb224315edda3fa60dbab4a707fe65aca594f26a2ee3484d5334fc460026cda40e1"
        },
        {
          "alg": "SHA-384",
          "content": "2e1b99e6a5ff774278adb953019214ff731d5fe66881c15fb92a4b836e51cb9daed69f1942dad765ec178f8dbf5fd87e"
        },
        {
          "alg": "SHA3-384",
          "content": "19825cd4ad9718e30696e795a8ccdf2d7888c02dadeede956cb8f7dbb3622dc40c2d6b7744954a91a072e100ad3e001c"
        },
        {
          "alg": "SHA3-256",
          "content": "0d04665466812b3c8d00c0b162ab1b6c5ccc8f04462281f83088132dc7d69041"
        },
        {
          "alg": "SHA3-512",
          "content": "564bf1463af59331ca259ce0be9172d1c3ea78b770edf08375d074ce1d1e5b5cf8564d91a51afbee451f6202bf42aa0efd29ac7adf2050758de3cb5f76e55e0e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/jdbc-socket-factory-core",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/jdbc-socket-factory-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.21?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-unixsocket",
      "version": "0.38.21",
      "description": "UNIX socket channels for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b96800a414fadaabf3096dd5e7366921"
        },
        {
          "alg": "SHA-1",
          "content": "a82bcad60a471aff9c73c944322ce10481029c80"
        },
        {
          "alg": "SHA-256",
          "content": "19fdaf23c686ac884aa7dd8459c68d5553e753203775e1df5c411b03c399985f"
        },
        {
          "alg": "SHA-512",
          "content": "0bddaa7709c37de57ef4b288e81dc19c4b4dad62e4ad6ebe3237a454e47ba7f17e80fcde7c0e0363f0b802e2f8870e7996bb1d63a1543825718f11a09df113ab"
        },
        {
          "alg": "SHA-384",
          "content": "8cffc69b796e69f521a3bb3ed22feace51ddda1a288afa910baa79b1495e9299bd68b75ac1a64417d272fccaed5787ea"
        },
        {
          "alg": "SHA3-384",
          "content": "73ae57a42b4fe4ad3d0e20ea4decf9dd90e895abd5e05c897ad5f38e863ae46840203130bf93ac08f23797c56629f5b8"
        },
        {
          "alg": "SHA3-256",
          "content": "fd8eb47e1e1b802acbb16df51a40c1e3ece51e7af3b775fc09a834336cb64f39"
        },
        {
          "alg": "SHA3-512",
          "content": "f3e565819ce1318ef0856308f3f9a5289c77d38a70a8195fbe94d2ce288349c6da4b4948d63e5f946d5bfb64f49fe6ed5ceeb09194b035d4011806e000d1449b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.21?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-unixsocket",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-ffi",
      "version": "2.2.15",
      "description": "A library for invoking native functions from java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45d16cc738cfcd2dbe6af9694899c5ec"
        },
        {
          "alg": "SHA-1",
          "content": "fa3c32f463423469de314b03a157d5f1f7476ec0"
        },
        {
          "alg": "SHA-256",
          "content": "a34ef74dc7d44d1575e522b47ab41116953c3128a61f9a35a6a9fd4a9d47a195"
        },
        {
          "alg": "SHA-512",
          "content": "a64c4a5e7f58f944cca4f3adb6ee78f574735a305e7ffcf0427bd4d268b45ff36907ddea71dd86109dafa42647e56127de96a4aa8ec2c77a7c7a0c1bc9c08f0e"
        },
        {
          "alg": "SHA-384",
          "content": "42989040936b9b7f038922292a09f8f255971c3e481ea9520faaaf5b7007f49e80af7dbe19c4eed6f572c156a06e5309"
        },
        {
          "alg": "SHA3-384",
          "content": "363394c4e42e2be5615804ccbc2fc7e41c15eaa9ff244e3e4ef4c4f4bf01b252558f0e51bde5642fb3524ff0708baee6"
        },
        {
          "alg": "SHA3-256",
          "content": "b535634b58792414b32316583584e0489115fde1d503b86447ec82d6140a1591"
        },
        {
          "alg": "SHA3-512",
          "content": "d4187c9a9a8354d6af57843ea632fb39df75b239d4742cb9cc5da4d610563d467906a7a4fbd1576a166b5f2f61e21ec9d57ca2c4b95f28b6ca0adc33faa41ad3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-ffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.12?type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.12",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "59bee5593ba45fac2814179613a2a4da"
        },
        {
          "alg": "SHA-1",
          "content": "a439d46fb5d5d9539f16db7d574c7aafb952874a"
        },
        {
          "alg": "SHA-256",
          "content": "d7ddb6e9f11133600894eb04f95a9d834caefa4acfc86ef9ad59e7555297bbd3"
        },
        {
          "alg": "SHA-512",
          "content": "f4ae9ec53d6185e4472c85b7959aeb62dc263e82ceb6ba8219f205bb24bb59dfb0076a7ebed691a7bf17be5d4765e8d825c3976cf0fd63116bd1c3b5a9097077"
        },
        {
          "alg": "SHA-384",
          "content": "713bf64ee6a990d737c2dcacb9e3d5a44af532c5156fa092faae660f3c8b2da8d996d70e72d2aa351c05f5c42075af48"
        },
        {
          "alg": "SHA3-384",
          "content": "8f29e0b383d0b3df8cb4a8ad234ac7ac008db3a06bc324a4de45922a19d1deb12daafc565e92b1bdb8bde762ee8412c6"
        },
        {
          "alg": "SHA3-256",
          "content": "b2df5d964c39e7ce0febf5df0fcc36ae15c9b4299a9640d96608a3f6687f7746"
        },
        {
          "alg": "SHA3-512",
          "content": "bc94e8bcedc27d9380bfde6c8a4df217a9e3d5544fa6fcfbaf8b4d10bfbaa9d2f72697db4856e6d36c9f510f589f32a143e0900723c010f7d141f9a5c50531f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.12?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jffi@1.3.12?classifier=native\u0026type=jar",
      "group": "com.github.jnr",
      "name": "jffi",
      "version": "1.3.12",
      "description": "Java Foreign Function Interface",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0b149036d7544a70dcd2b4dba080752c"
        },
        {
          "alg": "SHA-1",
          "content": "ebd0e45f447d80c16fbf2a82ff0253de28837b41"
        },
        {
          "alg": "SHA-256",
          "content": "c7b947702f27d2e432b561afc4a8cee01f03d43629e5d657b92d617f672bff90"
        },
        {
          "alg": "SHA-512",
          "content": "1191b04d9828d7aeb84d7530d5282bdf7cbb2c9ca52aa311594a4f6d4abfdc082125766dbbba208fa136e1282316d0fa3cbf1990786c3d3fe4b317b47e957737"
        },
        {
          "alg": "SHA-384",
          "content": "47f762a67f1eddb13b46a5b132619f6f3e7d9926623771f7f1c0e019aea15f3e8b7136b09edb6f8f71a9a03fb5e06b01"
        },
        {
          "alg": "SHA3-384",
          "content": "35b0ae32a8e86a7cc32ee6d604f461e699d0049d9e032d4df336243c3a2c83f282f4b40fffc42550e55c25497e350b43"
        },
        {
          "alg": "SHA3-256",
          "content": "b13330a671bf1f6a459ffb8d5f0c7303aff9de4a69d2d28bc6cef1fbf541b222"
        },
        {
          "alg": "SHA3-512",
          "content": "9b848bcca45fc352ae64f13861398db6b48dbdc46dcc791638893e37b3e0d8717568ec2583e9f034a632d9c6a4ca86e5f36c06cf73a4b3aa8f3b34e13bb156f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License version 3",
            "url": "https://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jffi@1.3.12?classifier=native\u0026type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jffi",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-commons",
      "version": "9.2",
      "description": "Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "3eb09775e1076eb0a085a4592faebc2a"
        },
        {
          "alg": "SHA-1",
          "content": "f4d7f0fc9054386f2893b602454d48e07d4fbead"
        },
        {
          "alg": "SHA-256",
          "content": "be4ce53138a238bb522cd781cf91f3ba5ce2f6ca93ec62d46a162a127225e0a6"
        },
        {
          "alg": "SHA-512",
          "content": "d5bd27f9b8b4eea93635ceda3891665fc9db273818eb02d40da4b110b81524458de3f71a63e87d6bec9423ba0f2e14c20ecdf7706dfeb54f0b05aedb13a63ecc"
        },
        {
          "alg": "SHA-384",
          "content": "e8c5569aa075340aa6ecb4d41ee3028d6fb14a863fad3199bb6d15121bea5f907a5938c6c185e28ed6b3de95497a38ff"
        },
        {
          "alg": "SHA3-384",
          "content": "a7d9b082e9a08cc760cfe994f2152ab5ca64259963ebea2267f0570f0815a6bd04614472ea68694f173518cb7d3a057b"
        },
        {
          "alg": "SHA3-256",
          "content": "89f1821bf9e6b052ea6f945eefa29991f8b886eb48cf1d2c41fc60f599bc10b1"
        },
        {
          "alg": "SHA3-512",
          "content": "8e905b194b1772e5abb9da0b2ef68617ceef0a8ea79331547ea101f6bc5d6943e17ff08c039b190853c2968a5ecffdf4029550bd78421cfbc7e743f7a14674f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "http://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-a64asm",
      "version": "1.0.0",
      "description": "A pure-java A64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6cb469cbbcf9eca78d50f7da595a8337"
        },
        {
          "alg": "SHA-1",
          "content": "0a1cb8dbe71b5a6a0288043c3ba3ca64545be165"
        },
        {
          "alg": "SHA-256",
          "content": "53ae5ea7fa5c284e8279aa348e7b9de4548b0cae10bfd058fa217c791875e4cf"
        },
        {
          "alg": "SHA-512",
          "content": "922bdf2883c6a9cd6491289020d404ab151fd9ffa78d2ec884a2ac3af739d397016f1f4596c3e6c58744ea600fdbc2d330c8f520a1a9ab0eef6af6b667b35b89"
        },
        {
          "alg": "SHA-384",
          "content": "933298b61960f09eccb672a0622a93a721d06cf85cdb29500ff6efdf874bad7b08aede29b6cf3b51141c16b38b250be2"
        },
        {
          "alg": "SHA3-384",
          "content": "2a7231c649f4805d34eb19c7e6b6dbb5ecdb663e29ef69a4523e2f7d2ae70740ca3aa03eba3476960d0fe344ea45df2d"
        },
        {
          "alg": "SHA3-256",
          "content": "fc270fd94a4e2b4fb1a9e4dd42ff4600c94e226ef3431aee998a915b62eb19ae"
        },
        {
          "alg": "SHA3-512",
          "content": "8ee64fec1b5e93ff9c2b596c0345ef120479217bea95d669c6e17f338a45945545b546813af2f58920a6bb2d607bd004870d10c8660a516261288d9f555fc850"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-a64asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-x86asm",
      "version": "1.0.2",
      "description": "A pure-java X86 and X86_64 assembler",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "00670735acb2a9d1421b506dc7d338bc"
        },
        {
          "alg": "SHA-1",
          "content": "006936bbd6c5b235665d87bd450f5e13b52d4b48"
        },
        {
          "alg": "SHA-256",
          "content": "39f3675b910e6e9b93825f8284bec9f4ad3044cd20a6f7c8ff9e2f8695ebf21e"
        },
        {
          "alg": "SHA-512",
          "content": "e928926b01ce545144c1bbf160edee9b923773e32f9a399a71c2ab5e8325d9cbcfb41f41c8f008b80d1beab8da1c4b74845996479c07ed73bc131959911d4762"
        },
        {
          "alg": "SHA-384",
          "content": "91839815885716f1202a824b195a475d4d7561690192b42cf05b8c6432556a3e7e2dab13b6e970986a97711fb7060844"
        },
        {
          "alg": "SHA3-384",
          "content": "ed27f9b39907e92805c2d6ae6a045e00e24f51544501df3b98b593177df4fe55fee2347c668df66c2ea6fae64c66ee0c"
        },
        {
          "alg": "SHA3-256",
          "content": "f2e4e4807f6674a5b428cebdbdd01e8cadbeee71b785a046bec2bec1de63a41b"
        },
        {
          "alg": "SHA3-512",
          "content": "0dfffcf0daac9513b347ab8bf22887360feea890428e12857d7d3400400ba498fdc61307d9fd9c6a5e1baa9a96279afc07bba08c6229ed4ede71569d710fd0f6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-x86asm",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-constants",
      "version": "0.10.4",
      "description": "A set of platform constants (e.g. errno values)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5a4036fd334522540041b062b304abc"
        },
        {
          "alg": "SHA-1",
          "content": "09f6f23763bf40ea7b56391791f574174914430a"
        },
        {
          "alg": "SHA-256",
          "content": "9a5b8cf9798d9d0331b8d8966c5235a22c4307676e35803a24659e6d76096f78"
        },
        {
          "alg": "SHA-512",
          "content": "608b2c53914aeb3fb36e2fb81a948e5dbec835a9d220d50a4bb9693d4a534414d1bc4c5e5582b196793317fb64fe7617d78d5ec974e6413732940e141201fdba"
        },
        {
          "alg": "SHA-384",
          "content": "dfe87e3b585304854d0dd23d2d5b3a4f00ca47fc52e8e28c6c75f976cc12bbe627cdfcca5fccaf6cb3b2591cf70dee89"
        },
        {
          "alg": "SHA3-384",
          "content": "8d1bf7084c5f34d13fab9b9b77dd095f43f105a7722a0d95fcc4e050e41f608f426914c3ff63573da053a9188e7f30bc"
        },
        {
          "alg": "SHA3-256",
          "content": "842f986856d42bf3703b2b9b8a5db9c8cbd166fafb94d81739dc3ff9469b8ae0"
        },
        {
          "alg": "SHA3-512",
          "content": "b87d2ffb045ed6bcf0d1976933e8ec258132f43b705388c905805e27e6f3b547d212c4eed37dec53541eebf17669365fa88519e8436f22545e56f8fc4215eda6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-constants",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.16?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-enxio",
      "version": "0.32.16",
      "description": "Native I/O access for java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a7a7e1c5c349a58f660a153af1e43a05"
        },
        {
          "alg": "SHA-1",
          "content": "e5150a15ba39c3712510020ad164d424b6878551"
        },
        {
          "alg": "SHA-256",
          "content": "024667dd98536e29bdc7f959cbf89b66074d2ffb1cc2e184a74eaf8dce63f0b7"
        },
        {
          "alg": "SHA-512",
          "content": "a96ffefb8376d6b310e7f61c6f03cde0ab59e96ec49bc19b3c95d89ca74384db57ce3e78ff1a6762a08ad07ce5809235a3b486f14deab191130a5d96b7901592"
        },
        {
          "alg": "SHA-384",
          "content": "c287f478740dd3bc76af73f18eacc1036e622aa99273839129714287338c926b1db35a6830dcb77b7d98439f3a3df5d6"
        },
        {
          "alg": "SHA3-384",
          "content": "d763da1cd953ce9c67f1b44bf6b769f3db741c3ddab88b400ece3ebd520421ce63f5a1c5626079a0efceca58f53ca20d"
        },
        {
          "alg": "SHA3-256",
          "content": "25d1ae1ff5af1173eb0018910aed12efd2b5ee7c9a504b974cfab8497ff4fc67"
        },
        {
          "alg": "SHA3-512",
          "content": "ec87a33213a076cfca3c78fb11a52ed022b84ad6728a54050ef29de8f4d8912b973d02f8c4f5585ba753c3d389a3308d7704a12e672f069b57590f324a7cb1b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-enxio@0.32.16?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/jnr/jnr-enxio",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.18?type=jar",
      "group": "com.github.jnr",
      "name": "jnr-posix",
      "version": "3.1.18",
      "description": "Common cross-project/cross-platform POSIX APIs",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a19b1ba0c85d348ab801c5399251ac0d"
        },
        {
          "alg": "SHA-1",
          "content": "b8dd3917e186f47636bf50a2483e40d49880ca67"
        },
        {
          "alg": "SHA-256",
          "content": "effb488dcdf13922ac00e237185f691f82016054f0fd290b662011681939f808"
        },
        {
          "alg": "SHA-512",
          "content": "8d709fcf1afde39baf6b6fd8232c3a65f4ea442b3b3f68c484b56b29672c674e84bcdb8f56c0b253ad7859d0a9cc67a52ceed923536daf9c10f50d602ddcd344"
        },
        {
          "alg": "SHA-384",
          "content": "a31af58421dbec1c2806aeefab9b4e1481010e9cab2cb6815eaafedd5ab6544f926a32836d4cfcd0c25b46e06cea0104"
        },
        {
          "alg": "SHA3-384",
          "content": "c82b11e3b1508e58fb61ca2d750e1e73c10846b0b500d7561e102e2dd728f42e15a336d1e574191f1ec4c925787c6635"
        },
        {
          "alg": "SHA3-256",
          "content": "5b504d33b2e89b386526173ca9cdca86fbe1f44a8cdef4768d91100216813cf5"
        },
        {
          "alg": "SHA3-512",
          "content": "be1c6d1a2f1c01a1da6fce69237a858cb16a1d673257de3e7a4d24b16db598ad10f16929e4fa7a5c33622a3702a8490ebb5c68db8df83815d0c3b561178db683"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "GNU General Public License Version 2",
            "url": "http://www.gnu.org/copyleft/gpl.html"
          }
        },
        {
          "license": {
            "name": "GNU Lesser General Public License Version 2.1",
            "url": "http://www.gnu.org/licenses/lgpl.html"
          }
        }
      ],
      "purl": "pkg:maven/com.github.jnr/jnr-posix@3.1.18?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/jnr-posix",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://jira.codehaus.org/browse/JRUBY",
          "type": "issue-tracker"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-util@9.6?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-util",
      "version": "9.6",
      "description": "Utilities for ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "bd3bc1c176a787373e9a031073c9574b"
        },
        {
          "alg": "SHA-1",
          "content": "f77caf84eb93786a749b2baa40865b9613e3eaee"
        },
        {
          "alg": "SHA-256",
          "content": "c635a7402f4aa9bf66b2f4230cea62025a0fe1cd63e8729adefc9b1994fac4c3"
        },
        {
          "alg": "SHA-512",
          "content": "1b92e1fae7d0c082bccf751bdaeae3bf32d28b9e555c9989ad70d3e5156d19e9547232c5886a53af1973da51bf9f61266336f3bcc55ea2cf972b76370a0bd8ba"
        },
        {
          "alg": "SHA-384",
          "content": "67a6070241764a08974da4716f1b89f85fe8211d730f1f5b5b9bcdacc7be95bbd65baa498bbd95a7dde6534810c4dd9c"
        },
        {
          "alg": "SHA3-384",
          "content": "ffdbcf42dd1dfca7728ef9d4b120a7de92f3eee0da01d9c6a3b4c997b073f556b2ff680159d13ba2ed38df699327a24d"
        },
        {
          "alg": "SHA3-256",
          "content": "90ddaf322b51ae2533f2d1789e8af9a21f4afcf3e10faab43df2c97c90e07e2d"
        },
        {
          "alg": "SHA3-512",
          "content": "363a65bc46500f4cea15204232fa085d8808c4a9e14d5d9db741592cc4209a2b95b0e63d1054f87da463927829422acc63680656124f2d808b008f45f5b0a069"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-util@9.6?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-tree",
      "version": "9.6",
      "description": "Tree API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6062608f1a98afe1e853d01fa1221a9e"
        },
        {
          "alg": "SHA-1",
          "content": "c0cdda9d211e965d2a4448aa3fd86110f2f8c2de"
        },
        {
          "alg": "SHA-256",
          "content": "c43ecf17b539c777e15da7b5b86553b377e2d39a683de6285567d5283888e7ef"
        },
        {
          "alg": "SHA-512",
          "content": "ae0416ae62b9260da5012a3c5b6e12f34f4a0d016ec9cc9a2a1e771af12a9d63e36315c199f85d7a9d424ae39500253def0a0a581befa26d4372b21efec44781"
        },
        {
          "alg": "SHA-384",
          "content": "9073984cb9deeddaa83fd20bcfd2fc80a2c67c6e719b4345e7a444b900e50e39f0b24d2b7ce49607df706a89ca5ab29b"
        },
        {
          "alg": "SHA3-384",
          "content": "92bf09a4f44cd669a800784e5f9e3414140346bd2e0d82032c0f14054f7f62a8be9c1155d07eea23a7675f43e8eb172f"
        },
        {
          "alg": "SHA3-256",
          "content": "ea6d5aa1b71babc170b8c2a45115e952bf00336f9c45b3cbf8fb4e752ab31a51"
        },
        {
          "alg": "SHA3-512",
          "content": "c3a4ffe4228c994ea3f2b8d2f1b3a39212a2b1c358e737c73526e18f63d7a7ccd3ef580a3af596bd5fcd78209bcfed986e536cfaa33483e7ba9f022c7d2b770f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm-analysis",
      "version": "9.6",
      "description": "Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "31c84ef7cc893fb278952ae2d6a2674f"
        },
        {
          "alg": "SHA-1",
          "content": "9ce6c7b174bd997fc2552dff47964546bd7a5ec3"
        },
        {
          "alg": "SHA-256",
          "content": "d92832d7c37edc07c60e2559ac6118b31d642e337a6671edcb7ba9fae68edbbb"
        },
        {
          "alg": "SHA-512",
          "content": "e798d451addabbaeace3adf8d8e939430241d9665c81b98b0a7a705c9b91ddbb67ff86b1f7b9a7ef317f225d38da3319ed40e0fd33ddace3d2ac75c3f7b78b02"
        },
        {
          "alg": "SHA-384",
          "content": "b87c7ffc0e7bf9f34c7af4e0c965d91ba6e5d9cab5b9f78d83a07abd697169f7d45a9489db92b684a109c8b47b8bc1a5"
        },
        {
          "alg": "SHA3-384",
          "content": "b029a8799bea5c102e7f395e4fdb46052e583e5bbca633024ce5df0ca861425d2c8cb21df459b2d9fe1672c4f9016a97"
        },
        {
          "alg": "SHA3-256",
          "content": "cc705ce2d6dff603ea5283ba817093fba05175317d16a2382d946230d4df70e4"
        },
        {
          "alg": "SHA3-512",
          "content": "fefa33611d750ef56f13f278d58b2335c3261dbf1d8f500c0f51119619114480697dca6baf5d50f07acb6f5812224d4eb06c77b400c0183fecc51a8c2649d0b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client",
      "version": "1.43.3",
      "description": "Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "806427c3d16ae724be920277ef45ee39"
        },
        {
          "alg": "SHA-1",
          "content": "a758b82e55a2f5f681e289c5ed384d3dbda6f3cd"
        },
        {
          "alg": "SHA-256",
          "content": "60aca7428c5a1ff3655b70541a98ff3d70dded48ac1324dae1af39f1b61914af"
        },
        {
          "alg": "SHA-512",
          "content": "8fd64f4f5220f11a56d86ec29feeb79256a1d1c79271547268baba85fec7bd590c132039bf05fd03f2a7935860b2d0f59dd9cb0dccf9c2ccf148224402b87ff0"
        },
        {
          "alg": "SHA-384",
          "content": "cf07574e6554ebe50d837a8ab6cfb26b93b7c2846c8c370c0bc7c6eb0d70c6ad4281940909d926898908af47c9ce21d9"
        },
        {
          "alg": "SHA3-384",
          "content": "94498f03f3190194bc2ab1901f3584f478866991214c5b133d9c2292f8bba3d18254f37051c524b3fe2201ed287d6998"
        },
        {
          "alg": "SHA3-256",
          "content": "1c82d76b8327a8fed7291194de85e4edafab343b9f88ad82675e288d7e7e09ad"
        },
        {
          "alg": "SHA3-512",
          "content": "f55f1373dcac7322ad1d0b55b832c4271042f4c856c84acce7ac55fb21e5881c25636929164dbc015c5574931119261ebdef4bc60abe7bbf9d48280419499c3a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-api",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a5e7092bb89baaaee424f5a7b20d1bad"
        },
        {
          "alg": "SHA-1",
          "content": "66a60c7201c2b8b20ce495f0295b32bb0ccbbc57"
        },
        {
          "alg": "SHA-256",
          "content": "f1474d47f4b6b001558ad27b952e35eda5cc7146788877fc52938c6eba24b382"
        },
        {
          "alg": "SHA-512",
          "content": "aac98ed2de298609bac9cb5a69ac16df0ca9c9fc82f429720ddcfdd769fdae96b707ed81c8d8c37380de846b302aacaac80156ef75567061aed3f77cc3c3b725"
        },
        {
          "alg": "SHA-384",
          "content": "d8dfdbc7d584809f00b5a4239cbaf575e8924a176e92a44230e8ac1e9dc85e458b63fad69b0b445d8d2e8c1a70e7633a"
        },
        {
          "alg": "SHA3-384",
          "content": "5cb3db9b30adb23c2b33ce0ded61a69e5347a4531d0563fc9185aba11aab7a639bf40286fc8d0f52a73c50add15775c7"
        },
        {
          "alg": "SHA3-256",
          "content": "733221e8a1dc4476c53fee92837757bfd468afe25f57bbce79d25c60f2e240f6"
        },
        {
          "alg": "SHA3-512",
          "content": "cdb61cef7324e1173f297867ec9274c6439779cdd674a442d26724de047258a64f3f76ad4e496f7afde785b5dbdf5d03f0b0f1d4424868cf14ebc1fd3b63dc76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.grpc/grpc-context@1.27.2?type=jar",
      "group": "io.grpc",
      "name": "grpc-context",
      "version": "1.27.2",
      "description": "gRPC: Context",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90230b8704c4509b393fa12a3c985f53"
        },
        {
          "alg": "SHA-1",
          "content": "1789190601b7a5361e4fa52b6bc95ec2cd71e854"
        },
        {
          "alg": "SHA-256",
          "content": "bcbf9055dff453fd6508bd7cca2a0aa2d5f059a9c94beed1f5fda1dc015607b8"
        },
        {
          "alg": "SHA-512",
          "content": "4dfab33192611416f584440cdc2bcb6f680cb54830114cd60b54c5a2afb01c9fb68d432d27415f3701fb17ca0e7ed2d9a6c59511c1987015a6d0231f8a2ee5b9"
        },
        {
          "alg": "SHA-384",
          "content": "074ea06f0e0cce70d00f9ea2e3bd133018a214f0d5f0730d7ad844ea988ee9399ac8631b47c87218872471e444df8fff"
        },
        {
          "alg": "SHA3-384",
          "content": "cc6566b8224258fbbde79745e6fea926b448ecd8ffc736bafd6a1a41ed048d3fc8c9052cddbe014ba6fbb21ff5c686f3"
        },
        {
          "alg": "SHA3-256",
          "content": "fbcdc13d89f92f4fd10808d8c53e0b1d271468b8d3921ae463537c0e35db285f"
        },
        {
          "alg": "SHA3-512",
          "content": "a443a2ed39c4d352dc83cf5d84add225e2aa64fd3b4331764de0eb48173ce760c64f6a4d274b59e1c197dcca48d9a41ff8a4f649623d47d2bd64e939c412f140"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.grpc/grpc-context@1.27.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "website"
        },
        {
          "url": "https://github.com/grpc/grpc-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "group": "io.opencensus",
      "name": "opencensus-contrib-http-util",
      "version": "0.31.1",
      "description": "null",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9ecc9c428eb87dc734ae8d07b820ce26"
        },
        {
          "alg": "SHA-1",
          "content": "3c13fc5715231fadb16a9b74a44d9d59c460cfa8"
        },
        {
          "alg": "SHA-256",
          "content": "3ea995b55a4068be22989b70cc29a4d788c2d328d1d50613a7a9afd13fdd2d0a"
        },
        {
          "alg": "SHA-512",
          "content": "3192532e4989a26d9a69f4246ef994b35058d155e199b500196d14427d1b46b1515f872a36500cb84768524870297388c90272ffa61dc8448f6f7571c4f86b27"
        },
        {
          "alg": "SHA-384",
          "content": "46f9dcc71f71f33be99a00fdd9a2ba602eb547b56b6e8177660d3a44d3dd974609bf16d2a1b58359a0f39797cb3ee683"
        },
        {
          "alg": "SHA3-384",
          "content": "21d66f5efa2511de4e4b4f3ea18d37aeb954ea1b4315f1e11cd84a11a95e9bb9841addee4d1230c3813f06144a675a1c"
        },
        {
          "alg": "SHA3-256",
          "content": "8352c7dcd73fced7e49425d70f6955579f5c24fafd4529e5f5e54ef5a88a3c83"
        },
        {
          "alg": "SHA3-512",
          "content": "f8ec86e5728b9acbdaa684cbf385ab3834006e44363de43f9af4b50dca71d4e0d77d0d8b2e7bb97435581dda6572691b1d263835e4e97256999df550b9efc13b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "website"
        },
        {
          "url": "https://github.com/census-instrumentation/opencensus-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-gson",
      "version": "1.43.3",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "472f29d64b61f652b3ce977772e28393"
        },
        {
          "alg": "SHA-1",
          "content": "252e267acf720ef6333488740a696a1d5e204639"
        },
        {
          "alg": "SHA-256",
          "content": "e31a4edcb9c83954a2587e14fa2f3f8f4aad56152381b3321a3bd0bcae03fa26"
        },
        {
          "alg": "SHA-512",
          "content": "c58d428e25212d0da965b770e3ee894bb4fb3e1be95e66dc81e9e16b5e15f29986099eb7d080d294ee64281abb5d29c773f2354c60f97d29a1be9d300641a233"
        },
        {
          "alg": "SHA-384",
          "content": "1f149627d93c1e8e00e95b7515d5b27bdd6dc542c777d3f4004197bc473eb940919eb1183d2b3b5aeeb9410177e43266"
        },
        {
          "alg": "SHA3-384",
          "content": "a6e081657338175732699ad3cf02517c7070f59ff95c2679e49eb3fa9bd29108db75edd07b243255128bb56b6e04c528"
        },
        {
          "alg": "SHA3-256",
          "content": "6a66769cbf8bba2cc3fd5853415cc9bedef898e838c94c4a7747fef5c461ef8c"
        },
        {
          "alg": "SHA3-512",
          "content": "1e193033ffd88d7e200fc997b339b852880b3103cd33ca265f985cdc3e15f5e1ab2989d99cf7a08baac8d10300303bd651a25eebe69a00489c517cfbfdff9366"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-gson",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "group": "com.google.code.gson",
      "name": "gson",
      "version": "2.10.1",
      "description": "Gson JSON library",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "df6097815738cb31fc56391553210843"
        },
        {
          "alg": "SHA-1",
          "content": "b3add478d4382b78ea20b1671390a858002feb6c"
        },
        {
          "alg": "SHA-256",
          "content": "4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593"
        },
        {
          "alg": "SHA-512",
          "content": "7503e4b8d05c6cc0ecb3a94c5a2e070e049083a441003a79a0cdf474f4286699b4ba1d2a655ddabb8ba10c50e7c36a7045cccdaee465166d4630db647aba2727"
        },
        {
          "alg": "SHA-384",
          "content": "48a4786bd6e1867f058ee4fb676fc82d9d9f64a6d7420d4a47ae2398504c9de73222636614aeb4a9fbf10ee143d72226"
        },
        {
          "alg": "SHA3-384",
          "content": "3df9a0332c2766124fe7c915cfea665d2e318ccaa7212415fabd9e93e6eb77de538725fd2ef313cde46f6d814c9566ea"
        },
        {
          "alg": "SHA3-256",
          "content": "d3374006d76d4f9acdf3d3a1a4f47899570f52442b2188f80c09a74f22139ecb"
        },
        {
          "alg": "SHA3-512",
          "content": "2b10c2f4fe39d8712b430ff171823d7172c0a06685c1eb7de511e90159cec0e094fb2a9b50b747c5b039cb10f1fce9edf82ecbf9c47f76a6f31c4e3cb7586cce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/gson/gson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/gson/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/gson/gson/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api-client/google-api-client@2.2.0?type=jar",
      "publisher": "Google",
      "group": "com.google.api-client",
      "name": "google-api-client",
      "version": "2.2.0",
      "description": "The Google APIs Client Library for Java is a Java client library for accessing any HTTP-based API on the web",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4f9f4cf15e07b7a0c1a5599d2bc54d6f"
        },
        {
          "alg": "SHA-1",
          "content": "10e53fd4d987e37190432e896bdaa62e8ea2c628"
        },
        {
          "alg": "SHA-256",
          "content": "58eca9fb0a869391689ffc828b3bd0b19ac76042ff9fab4881eddf7fde76903f"
        },
        {
          "alg": "SHA-512",
          "content": "6dcca4012e5aadab4c50e0e069700191a11599a265c1244f256357332389cd61b87f0363525bb38e3461a63f0126d1e8385d71ab9632d9af4a10289841515704"
        },
        {
          "alg": "SHA-384",
          "content": "7c4813286959cd8dcf1725cdd1f80e7671d04a8b6f19ef82e72c4c4eb9e67d46cc46c39260ddbd62dab1c45e3c77b3e8"
        },
        {
          "alg": "SHA3-384",
          "content": "89fb8904710f2b2a844a92bebf59d58c08ce6e0feb0badf2c301e3405b0ac0c4245077054512ede3dd8e38fd19f3df4e"
        },
        {
          "alg": "SHA3-256",
          "content": "2aad6788798b91c351450e9df706bcfd293a7b79a65a9837cd538e51bf654863"
        },
        {
          "alg": "SHA3-512",
          "content": "13fb2acaa82ed9f97b8427a4c8173eed267deace423f6fb1de328b2a601e85b3957d125795368b95ad6e88b1127605ac9abf0709dffa45e976f6cfd2dc36381e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api-client/google-api-client@2.2.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-api-java-client/google-api-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.42.3?type=jar",
      "publisher": "Google",
      "group": "com.google.http-client",
      "name": "google-http-client-apache-v2",
      "version": "1.42.3",
      "description": "Google HTTP Client Library for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "6c723b200fc08cfab85e05994b181c04"
        },
        {
          "alg": "SHA-1",
          "content": "3dc8cea436c52d0d248abe9648b0e4f1d02bd500"
        },
        {
          "alg": "SHA-256",
          "content": "86d112c6f7e55c8f6d1bfbd47a02d25afd072c60a80dea8ef616fba278637600"
        },
        {
          "alg": "SHA-512",
          "content": "5d4ff8ba6ad50c8eb73b02f8edd28f9501fe2860407901f767736c121d8a79f852cd4001ab5dfd6c676aa8bf86f7105a365cb23553f9df9103cf2904ddf312a3"
        },
        {
          "alg": "SHA-384",
          "content": "47800013cc5cf68e18d57b20cbf2ce4bc1f6ffe4fdf6d843fb8290d5d81024fef829f35ba4eb0b68db479c1791666266"
        },
        {
          "alg": "SHA3-384",
          "content": "4630dc44f0cca8f5aae0031b118d02ff1f362043c4c5afba61fd866a1908c2414f74df2e4e25dc75e2ad146e1b6ca3ff"
        },
        {
          "alg": "SHA3-256",
          "content": "90d04bdef09faf701a66049d1de08c2950f19b7137566d668a39108cee56e669"
        },
        {
          "alg": "SHA3-512",
          "content": "a5ce5107fb32f700f365c3eb800dd5b64463094eaf69da83034fd127add1f733665823a34e5acb45a877fcd8162908a5d287a9f6a9ee4b82c50d74765bc88b15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.42.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-http-java-client/google-http-client-apache-v2",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20231108-2.0.0?type=jar",
      "publisher": "Google",
      "group": "com.google.apis",
      "name": "google-api-services-sqladmin",
      "version": "v1beta4-rev20231108-2.0.0",
      "description": "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "34d4361e9f37eab8ed5af72e5915f48d"
        },
        {
          "alg": "SHA-1",
          "content": "b96f204f1b00d03bf74744f93c902611d4141741"
        },
        {
          "alg": "SHA-256",
          "content": "5bc2f47bd2bd2369c942745da0ecd54f15b236ccdf356d6de845340073c24110"
        },
        {
          "alg": "SHA-512",
          "content": "9bd654b84bc00b460d90aab47011e42372d4152eb6adb59a51b632c7fa92e924dae444f00a081fd01133a5147c81b249b588efd90530ef7a58b36e32859bb920"
        },
        {
          "alg": "SHA-384",
          "content": "fb49f24649815ad801bd32ac7c1d47d85078ccfe3473bf6a79f0cf2d33edff3f5ea1eaf0b98a91a54512eb251456c553"
        },
        {
          "alg": "SHA3-384",
          "content": "e57749369a0ec640e2fe1deaf194e6503eba687b6469750f18076ad670dee080b4516ab7a2da08f1e3f23f5ce3731b2a"
        },
        {
          "alg": "SHA3-256",
          "content": "503fd86f5635f4a5ff1b7090658a8f81daacb973345b73884e4537aa8a5bfb5f"
        },
        {
          "alg": "SHA3-512",
          "content": "c75dcb13fa44c5b50dda4ac9d2000b057b1b834f19ae1112672dd564bba0fc8a2662a0c6aeda2f0f85e56ca3ceba92c2da956f1622ae59c10ff182b7488cd15b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20231108-2.0.0?type=jar",
      "externalReferences": [
        {
          "url": "http://nexus.sonatype.org/oss-repository-hosting.html/google-api-services-sqladmin",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/tags/oss-parent-7/google-api-services-sqladmin",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.20.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-credentials",
      "version": "1.20.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "a615672d002d62edac89e6c612d1d01a"
        },
        {
          "alg": "SHA-1",
          "content": "0bc23b2c7e6419d3cd7e108d6942b9431bf5c25c"
        },
        {
          "alg": "SHA-256",
          "content": "b3054d8757807f8af8015b535fb288ed67456444922211f0f929f4c04e69b0b7"
        },
        {
          "alg": "SHA-512",
          "content": "16e4e943e7c90e173ff4aa851957f83d1e677bb0552c97c2802aeb938cff638ff60f28c596f80f5b1814374daecc6645c054ce5c2ac733cb911c2ea0c4c52957"
        },
        {
          "alg": "SHA-384",
          "content": "98d778da47907bbc09fa0423cd101b51b60f618a5c62b2752ad4c77944a3764622e4181bf3f8d150c20bd70ca0bec72a"
        },
        {
          "alg": "SHA3-384",
          "content": "556bf4830321675587169b3176b60dcedbeed26e610062512167ac16e55c53756776eab824bb9ddc8eee0ea50b6abc09"
        },
        {
          "alg": "SHA3-256",
          "content": "55271c2e1ad5c5448cd31233a511329f94dc61a4ebf6921b83da259b11caecb7"
        },
        {
          "alg": "SHA3-512",
          "content": "bd806608afd1a91f107cbb7c632dd443941041fb11bbb5064e2499879df6462238101792662c87c32f08f0c6da74f54a4101b656844201d98c1f0dad2ba6e8f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-credentials@1.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.20.0?type=jar",
      "publisher": "Google",
      "group": "com.google.auth",
      "name": "google-auth-library-oauth2-http",
      "version": "1.20.0",
      "description": "Client libraries providing authentication and authorization to enable calling Google APIs.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4113c2e2c63b11060b7ae6b4becbb9fc"
        },
        {
          "alg": "SHA-1",
          "content": "0a5f0e4a16f5b12cde3df1ea413852aeaf176176"
        },
        {
          "alg": "SHA-256",
          "content": "ab3ee74eeccb12fca40f4444af4d45df9e290f2c3f4751e855697dedf52f7a73"
        },
        {
          "alg": "SHA-512",
          "content": "f67270fdc9f30b29ba64ba00bf8bca7efdf133e3862324790bc1b20d2f1721cbd14ca421b4901ecffe048433cfa55aa6cf2d85ad405fb5b2c975590924b99fbd"
        },
        {
          "alg": "SHA-384",
          "content": "155e514a0ec2f853d821dcc3c1e8b1edfbfb08b8bddf5d98974cedd2e9458a1a865d75f887626e9323413e0f451dbc34"
        },
        {
          "alg": "SHA3-384",
          "content": "4d677bcfdcfdca3d6da042d3db86a17c74927d6c4136df80952a18719b8ba7cc121668a331e29d727fab0e655dd2c1fe"
        },
        {
          "alg": "SHA3-256",
          "content": "4bbbe839855dadb88febc95d351e1ffe44352085538b645dbedd25683743561c"
        },
        {
          "alg": "SHA3-512",
          "content": "795df3e975f180b1bb0190b1e10510208d5a51fcf2d2f201f17e6515459da0fbb79ebb59f684bd906837f4895c3bbf805f0f59395745016f9a94bef86045b78d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.20.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "website"
        },
        {
          "url": "https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.10.4?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.auto.value",
      "name": "auto-value-annotations",
      "version": "1.10.4",
      "description": "Immutable value-type code generation for Java 1.7\u002B.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d1fd626bf1a426ee635ab11b7edb414"
        },
        {
          "alg": "SHA-1",
          "content": "9679de8286eb0a151db6538ba297a8951c4a1224"
        },
        {
          "alg": "SHA-256",
          "content": "e1c45e6beadaef9797cb0d9afd5a45621ad061cd8632012f85582853a3887825"
        },
        {
          "alg": "SHA-512",
          "content": "e6662af12121eb18281440e686cf2209d374f31a17334229039d60ba33db2ae77e25adfc081c65961435c70d2d0afe22b0b9d72a55ab95e8b6af95bfbed08238"
        },
        {
          "alg": "SHA-384",
          "content": "2510518b5fb155115f8ce789892464c089f332c571e8aa8e104632d3b9a76edfb6e40260fe0ad0ec1f38a1ab0cfb2960"
        },
        {
          "alg": "SHA3-384",
          "content": "7fe6fe02c259f38ba7220333f1d5c826063e41d1a5b59b140450df0ddda588c87aef0382fcc30da2475bdd651614c62a"
        },
        {
          "alg": "SHA3-256",
          "content": "55fab9a5eb7467a64ac40c5b68288befd2d26e56b7b84413e6b6210eacab819e"
        },
        {
          "alg": "SHA3-512",
          "content": "36a328c3f3c438e5abd4bd24647f080ae811b77ee79e9f6f7b9b3d19431647da837153a4543eb3037dc80f61466bb815509b2368d2b2e3bbd6ff3c76f382dfea"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.auto.value/auto-value-annotations@1.10.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/auto/tree/main/value",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://github.com/google/auto/issues",
          "type": "issue-tracker"
        },
        {
          "url": "http://github.com/google/auto",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.34.1?type=jar",
      "publisher": "Google",
      "group": "com.google.oauth-client",
      "name": "google-oauth-client",
      "version": "1.34.1",
      "description": "Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 7 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "fc4e2886629e8b6c044964d2fba81d13"
        },
        {
          "alg": "SHA-1",
          "content": "4a4f88c5e13143f882268c98239fb85c3b2c6cb2"
        },
        {
          "alg": "SHA-256",
          "content": "193edf97aefa28b93c5892bdc598bac34fa4c396588030084f290b1440e8b98a"
        },
        {
          "alg": "SHA-512",
          "content": "08889bc7adf2d839633eb8a003953f833cc94bfab7e98109a3e3e98c0ca1e003d1a09a906b2f7fbf89c4e289d017d208602e960a91805ab09b03bce9ba4a4473"
        },
        {
          "alg": "SHA-384",
          "content": "26725f2821f4b58a81924bfebc75b253f286d4ae6cc25e36b402c0ea3f7a5cc6bd16ac6e862bb45774b819b4b17cdec3"
        },
        {
          "alg": "SHA3-384",
          "content": "a55924a614001716f97bc20e46a19529b20c2bf75cc468dd9afe9264c8b2e6dfbab99d51edc8566d0144c45a9d67b6fc"
        },
        {
          "alg": "SHA3-256",
          "content": "b59efd38b2c771976e094cad5983cd6fe8888c128cb8e378428b339fdb2fde68"
        },
        {
          "alg": "SHA3-512",
          "content": "c28122a67fa00da175ee67f7b5718224124d86e1f8d71ac0524881e03e30eb05a5c8a9817c1f8075a51c20d89354ac6d21a6a5240fdb9ea7f7c30ce3f553bd13"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.oauth-client/google-oauth-client@1.34.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/google-oauth-java-client/google-oauth-client",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.api/gax@2.37.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.api",
      "name": "gax",
      "version": "2.37.0",
      "description": "Google Api eXtensions for Java (Core)",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "43941fde832e27bf679862c82296a3db"
        },
        {
          "alg": "SHA-1",
          "content": "a41a8b5641dad26c7601ea93818611b4a6465058"
        },
        {
          "alg": "SHA-256",
          "content": "a2918c611a95ac55a74fc31bd0dcc566c91084329aca9925dbdd8106ee63b2c3"
        },
        {
          "alg": "SHA-512",
          "content": "64b6e2219ec0781c4211bdb7b97c3bd2ea6f5893d2e08ce0013c993af355760f5c92a887b150cd5ccd57db78f1211036e92cdf2b0a7f0dbcc01ba373b9b9bcd0"
        },
        {
          "alg": "SHA-384",
          "content": "243114f9ec9fb932ca27bb27134f5c3ee5296699b66a3a74ae4d6243e405461df5a16b647072ace8b8b2ec97c2305f4c"
        },
        {
          "alg": "SHA3-384",
          "content": "683b77cea386734eb15ea399fb467a247f8867a3382eba075f75c0426ec64432de3689e23b9cf120e7a176d82016d860"
        },
        {
          "alg": "SHA3-256",
          "content": "7c6284a3d968da630e8c226cb4c9725e71c05ba55393d9901af76a015e96b986"
        },
        {
          "alg": "SHA3-512",
          "content": "5059625606ee519d60d3c429decebe0a8b97bc2b2dd737c64866373fd757d851c95200e5066d60e89b46689bb90542ca9ffcf3c9222a8e5137750534dbf7f38f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/com.google.api/gax@2.37.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/googleapis/sdk-platform-java",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
      "group": "com.google.guava",
      "name": "guava",
      "version": "32.1.3-android",
      "description": "Guava is a suite of core and expanded libraries that include utility classes, Google\u0027s collections, I/O classes, and much more.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85369dbe6f7ec8409d59544d232bb20f"
        },
        {
          "alg": "SHA-1",
          "content": "ea090dd85ca2fa12d42d054369df888665230dd7"
        },
        {
          "alg": "SHA-256",
          "content": "20e6ac8902ddf49e7806cc70f3054c8d91accb5eefdc10f3207e80e0a336b263"
        },
        {
          "alg": "SHA-512",
          "content": "d998aa0384422040760f1ea1dfd68ed6c3da32cdae541dceb7089911b521d66d13bd25d0433ed39d79830685c3e710368e3863894289101f9ec183a53f3827f7"
        },
        {
          "alg": "SHA-384",
          "content": "a0eafa677572326478f96dcb8fdfb8df5d6ddbb23b1b73d0d3d06bbfa61f9a93d30d0f76ec2545bf7e293c7704c9a904"
        },
        {
          "alg": "SHA3-384",
          "content": "2741bf0fb50d7e4e76482931262fbcf1601828c2930e0d44387980b54b6994330e471ff29c8c0a58fbe64bcfcede6b37"
        },
        {
          "alg": "SHA3-256",
          "content": "274e28b3c0ec258205a4b4b4e367f1b743760840751318963d3ff171ae90cf00"
        },
        {
          "alg": "SHA3-512",
          "content": "5bd5c4b2c9d8d8f2a163d18f541ddb974708fe623d5e5c78afccb961d0906a95884fd54a8c4d049c2417782ef6de2b19394fbc15ee82c5a2bcfe68ff45eaad59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava",
          "type": "website"
        },
        {
          "url": "https://github.com/google/guava/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/guava",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group": "com.google.guava",
      "name": "failureaccess",
      "version": "1.0.1",
      "description": "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they\u0027re in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg": "SHA-1",
          "content": "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg": "SHA-256",
          "content": "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg": "SHA-512",
          "content": "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg": "SHA-384",
          "content": "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg": "SHA3-384",
          "content": "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg": "SHA3-256",
          "content": "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg": "SHA3-512",
          "content": "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/failureaccess",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "group": "com.google.guava",
      "name": "listenablefuture",
      "version": "9999.0-empty-to-avoid-conflict-with-guava",
      "description": "An empty artifact that Guava depends on to signal that it is providing ListenableFuture -- but is also available in a second \u0022version\u0022 that contains com.google.common.util.concurrent.ListenableFuture class, without any other Guava classes. The idea is: - If users want only ListenableFuture, they depend on listenablefuture-1.0. - If users want all of Guava, they depend on guava, which, as of Guava 27.0, depends on listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-... version number is enough for some build systems (notably, Gradle) to select that empty artifact over the \u0022real\u0022 listenablefuture-1.0 -- avoiding a conflict with the copy of ListenableFuture in guava itself. If users are using an older version of Guava or a build system other than Gradle, they may see class conflicts. If so, they can solve them by manually excluding the listenablefuture artifact or manually forcing their build systems to use 9999.0-....",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "d094c22570d65e132c19cea5d352e381"
        },
        {
          "alg": "SHA-1",
          "content": "b421526c5f297295adef1c886e5246c39d4ac629"
        },
        {
          "alg": "SHA-256",
          "content": "b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99"
        },
        {
          "alg": "SHA-512",
          "content": "c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f"
        },
        {
          "alg": "SHA-384",
          "content": "caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5"
        },
        {
          "alg": "SHA3-384",
          "content": "e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f"
        },
        {
          "alg": "SHA3-256",
          "content": "1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f"
        },
        {
          "alg": "SHA3-512",
          "content": "6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "website"
        },
        {
          "url": "https://travis-ci.org/google/guava",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/google/guava/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/google/guava/listenablefuture",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "group": "com.google.j2objc",
      "name": "j2objc-annotations",
      "version": "2.8",
      "description": "A set of annotations that provide additional information to the J2ObjC translator to modify the result of translation.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c50af69b704dc91050efb98e0dff66d1"
        },
        {
          "alg": "SHA-1",
          "content": "c85270e307e7b822f1086b93689124b89768e273"
        },
        {
          "alg": "SHA-256",
          "content": "f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed"
        },
        {
          "alg": "SHA-512",
          "content": "f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff"
        },
        {
          "alg": "SHA-384",
          "content": "e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1"
        },
        {
          "alg": "SHA3-384",
          "content": "10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d"
        },
        {
          "alg": "SHA3-256",
          "content": "b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072"
        },
        {
          "alg": "SHA3-512",
          "content": "d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/google/j2objc/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.15.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "postgres-socket-factory",
      "version": "1.15.0",
      "description": "Socket factory for the Postgres JDBC driver that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0daedfa9f0e296a79d922e88fdeef634"
        },
        {
          "alg": "SHA-1",
          "content": "868b7a45565563d25e1842b294197e48620504d5"
        },
        {
          "alg": "SHA-256",
          "content": "8c0092fba294cda117893bea246dd36baf49824249abe7f0c1e1e6cb22f3bc35"
        },
        {
          "alg": "SHA-512",
          "content": "61575daa82b73d04349bfc6e68ff86f94205bfab2a00754e06204fc43ebb9392b0c66e11b32ec6296c0971bc4a33538990f500f7ef3f848c8a118683c6008151"
        },
        {
          "alg": "SHA-384",
          "content": "79220c28cf9d03f0f9f9cc89dece58eb7aa22007631de2c2256b668bdc2a77201ac5445b711884eeac1bba43d4fa338a"
        },
        {
          "alg": "SHA3-384",
          "content": "643c61899b0a1e5bd7a736ed00d8b301dd8d855cdf0674edf7d765fdd4374446d1c7accf6110c0d872f70a34c2bfe858"
        },
        {
          "alg": "SHA3-256",
          "content": "297ac1c3e582a9fdf44624a725880d9efa3b660bb1086dadade0df8a78525d91"
        },
        {
          "alg": "SHA3-512",
          "content": "cda1f2a743ecdb21adc333a803c6d5803084ad41775a0cbbb776551f75ae75c9cefd126543e6a19359b7b6a710eadbc7bed35bb0a7cb3525752758e7d4f59f86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/postgres-socket-factory",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/postgres-socket-factory",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.15.0?type=jar",
      "publisher": "Google LLC",
      "group": "com.google.cloud.sql",
      "name": "cloud-sql-connector-jdbc-sqlserver",
      "version": "1.15.0",
      "description": "Socket factory for the Microsoft JDBC Driver for SQL Server that allows a user with the appropriate permissions to connect to a Cloud SQL database without having to deal with IP allowlisting or SSL certificates manually.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b7700ae37f6a8a3396777f47f214ae83"
        },
        {
          "alg": "SHA-1",
          "content": "a837e0b1e82a3db122d16e8f3a3dc60c1763f2f7"
        },
        {
          "alg": "SHA-256",
          "content": "059007bd54dbfb0c2bb860492dd5e05a050470025d9b87578145834412741f13"
        },
        {
          "alg": "SHA-512",
          "content": "ef7ce5532999360f1b29bd53f347c244b69a6a8719c984fa0b3852297e46bf7b058c7e23234aa2cd19113de0d74652ec240996bcf82f39fce8175c268c3d203f"
        },
        {
          "alg": "SHA-384",
          "content": "ec529f67456e1718d04d409ece5abd44eeda9bd62e8209f13a34ed6fc17d9fc46bb8cb598ea823c456eae8e8c5cf875f"
        },
        {
          "alg": "SHA3-384",
          "content": "620be59cafa169476448069fabd19c5596749705332734a8ed2d69f45d0e730eb54c3c285f0a87270a3294d6445a5377"
        },
        {
          "alg": "SHA3-256",
          "content": "92f75f6eef7f6f31a89e6656044ba62fd36c79bcf7e0f5a3390c9a0e57ede7a9"
        },
        {
          "alg": "SHA3-512",
          "content": "1334b02dd6d449db7434de5a3efaf2c458cc0af97406a4b57148bda266d4f60f012c3fe9aa0477e16280f5e8da7035a2307ac87068198d2d48218b90e9e019e3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.15.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory/cloud-sql-connector-jdbc-sqlserver",
          "type": "website"
        },
        {
          "url": "https://google.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/googleapis/java-shared-config/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/GoogleCloudPlatform/cloud-sql-mysql-socket-factory.git/cloud-sql-connector-jdbc-sqlserver",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "group": "xerces",
      "name": "xercesImpl",
      "version": "2.12.2",
      "description": "Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program. The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual. Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the \u0022XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)\u0022 is also provided for evaluation. For more information, refer to the XML Schema page. Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1. Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "40e4f2d5aacfbf51a9a1572d77a0e5e9"
        },
        {
          "alg": "SHA-1",
          "content": "f051f988aa2c9b4d25d05f95742ab0cc3ed789e2"
        },
        {
          "alg": "SHA-256",
          "content": "6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16"
        },
        {
          "alg": "SHA-512",
          "content": "bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3"
        },
        {
          "alg": "SHA-384",
          "content": "0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52"
        },
        {
          "alg": "SHA3-384",
          "content": "b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6"
        },
        {
          "alg": "SHA3-256",
          "content": "875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168"
        },
        {
          "alg": "SHA3-512",
          "content": "1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "externalReferences": [
        {
          "url": "https://xerces.apache.org/xerces2-j/",
          "type": "website"
        },
        {
          "url": "https://svn.apache.org/repos/asf/xerces/java/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "publisher": "The Apache Software Foundation",
      "group": "org.apache.commons",
      "name": "commons-compress",
      "version": "1.25.0",
      "description": "Apache Commons Compress defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "45f94488e95ceeaf2f401c4f5542b35c"
        },
        {
          "alg": "SHA-1",
          "content": "9d35aec423da6c8a7f93d7e9e1c6b1d9fe14bb5e"
        },
        {
          "alg": "SHA-256",
          "content": "d0ec8014ebbb0749f471803122b21796afddf2e98e194e4374622e5fbaf69f49"
        },
        {
          "alg": "SHA-512",
          "content": "262ba7771cef5b3eee9e8790102cbe022bb52f5e4bd7f69e3ab132563472bbd5ae6de653df467bfbd7e9828d5edf9b81a6c43236b3ae65ac757ba745abb4f764"
        },
        {
          "alg": "SHA-384",
          "content": "73124bf7ce8a827d1bb42c4a7fddf2cbf6a89b84f32a7e0cac4a7bbcc99c5a7267a679c8fb0ae3bfb631e7824250da0c"
        },
        {
          "alg": "SHA3-384",
          "content": "81f4e544a5000293b27f35c8b6a78ccb9e04eafaeb6252ddd78724ebd43ced9e790eec488db1ba96b5c130898821d6e2"
        },
        {
          "alg": "SHA3-256",
          "content": "b75cf4407a6973e1e56710f4f2ec25fbe59c1503101bd23d164d78d5a655b506"
        },
        {
          "alg": "SHA3-512",
          "content": "511656c844b399f004af9591124dbdbaf6f8bb6893a03e55b0f9bcc745fcfb9ab5521e9eff859c2a4b4f2aa2188ae603bc18d38b510bc7c047e7f84238f782ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "externalReferences": [
        {
          "url": "https://commons.apache.org/proper/commons-compress/",
          "type": "website"
        },
        {
          "url": "https://github.com/apache/commons-parent/actions",
          "type": "build-system"
        },
        {
          "url": "https://repository.apache.org/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://issues.apache.org/jira/browse/COMPRESS",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail-archives.apache.org/mod_mbox/commons-user/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitbox.apache.org/repos/asf?p=commons-compress.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-retry",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "447108bdd4ba9dd26235508ad8da2c3d"
        },
        {
          "alg": "SHA-1",
          "content": "afaad85737e3ae522ef3161bef4ac8d557e5c95b"
        },
        {
          "alg": "SHA-256",
          "content": "e2dd918093bc263f1d725d0c17beea31ce34cbbf56eecfb92dce82a3c479e7b5"
        },
        {
          "alg": "SHA-512",
          "content": "fc7025548743558a9c8e4454f58f8d3461b35b46b53fed2ea614d97fbeb0be393877183e05367d912f541b6251a44818a535ce941bd02596fc20dda182876cc9"
        },
        {
          "alg": "SHA-384",
          "content": "62095d4d7fd7127f5d5060b076d666d31f0c96bd7e4841d72ed8957aa36a3380dab3fedb3f50a89e919bb03eac7b0fc8"
        },
        {
          "alg": "SHA3-384",
          "content": "6ed4559d7a78a9850380758a01915b3c3ce3e720cfdba6502bbaec898c3a01e674e38e6eaf76241e98bb106a9f432b84"
        },
        {
          "alg": "SHA3-256",
          "content": "4e55dfb2c62abbe5ae3451798e3e18a42f4d74a2e1433f22cb5ba56814a01881"
        },
        {
          "alg": "SHA3-512",
          "content": "0370b55dc252bd76ad91b4c44b5c92fe77bcf607b13351ea877b95298e2dec7aa778ccdd16479fc24b906a0911854aaeae4d41e73a7c84920eee644a1a0b79ba"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-core",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "dd2b0a9d3cfdd30ebdf24bc5e765953a"
        },
        {
          "alg": "SHA-1",
          "content": "edebba65e2778e666a5e0832ee3210f85d1c2873"
        },
        {
          "alg": "SHA-256",
          "content": "3c279de9c066215d04b89cc8864996660a05815ab47202089726aac7f3bd96fe"
        },
        {
          "alg": "SHA-512",
          "content": "b0a18808784c7f33953fb949b1aeeccfe2ea565ae043ed5d125e9f29872dc084b78e7350e1bc082d22de1113c98d0d95d3a0acd56e003fcae5aab01e86dc46f2"
        },
        {
          "alg": "SHA-384",
          "content": "3f79896c3576913baf078d0c5ad3e9b58d55f67928dc040f6c3bd167078287674dd786399be07b94c1d6f2a0aebabd5d"
        },
        {
          "alg": "SHA3-384",
          "content": "18c3443e13c46dd186d93c2d3c9aadfc2a955d1062547c87214fbc0ee53e363712ea9564834c1dbae0faa89ed339e8ca"
        },
        {
          "alg": "SHA3-256",
          "content": "8e66db2878a6b0a3adaa9c994e358dabd2323d9666e550ac4511a5d507fe099b"
        },
        {
          "alg": "SHA3-512",
          "content": "e8ed9434fe957ffcc764972bedece3f23074484eb24b15805e05192aacaf5ea415a1ddb14eb54a89c0b8ed26c25ee7e83be66a57cf6093f40449cc9f2f0f7b15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-ratelimiter",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1a415668febe5365ad0ac017ab99ca73"
        },
        {
          "alg": "SHA-1",
          "content": "48dff23ede5fef4bdbc6ade6e7b27c86a96f59e8"
        },
        {
          "alg": "SHA-256",
          "content": "15377bd6ffe4e5a24e35611ed921ffe4fc111380c5b2c153cdb21ff4b08e3c2b"
        },
        {
          "alg": "SHA-512",
          "content": "2b0486e43231494682b68672d8d3858bedd05286bc4425142289ebae8d56da50df3a65101e5539815fb6f50a32d1a3ecaa552dd4521af1cc801877da6488d009"
        },
        {
          "alg": "SHA-384",
          "content": "bce11c3ba03d48bf750fdb6f658ffd8da2b51bc8ccd6d81d8ff64ed47cd20b6cb7c0250674e539094467f6076f4064ef"
        },
        {
          "alg": "SHA3-384",
          "content": "622937bc20496276cff9fff4e55019f15adf8c98d53541bbfc4b7b0840fc70f95d084b4bc0cafeab6b8fa89fda6e4b61"
        },
        {
          "alg": "SHA3-256",
          "content": "7ca7cd0b1a327e3ab231aa149aad412a2efef3e858e69929c751fcff6bdba564"
        },
        {
          "alg": "SHA3-512",
          "content": "43311ec63306e0e4dca664ef28d05b523199596ccadbe8344a455dccc3a082326d8dc47c74f68f5edc7857aa1b385474b01ad98e234daa61d91c88c7ca00b71f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-micrometer",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "f59c9024421cd4efed90aae7ac975857"
        },
        {
          "alg": "SHA-1",
          "content": "87e236c7ef25e634b97956191963673acedfc7fb"
        },
        {
          "alg": "SHA-256",
          "content": "2f1cb1cac83623974431d9b1a323cfa68aff3359b3e355ef97c698aef9d2a9b0"
        },
        {
          "alg": "SHA-512",
          "content": "670df2500ccdd0d8627f1b5acde21dd998fb5f0cc0be25800ff4451cf5323d860cacc51cb2aba87d3d888bb7708d58f60713b8a2ce9e48e680b57568e20eefe6"
        },
        {
          "alg": "SHA-384",
          "content": "756d7ca902fbe4da899a2756782752ee02a980faff886688acca6ee279e9d3dbcfce299fd6ee1e69f41f03bdfca541fb"
        },
        {
          "alg": "SHA3-384",
          "content": "cc89f137a51de0ce1a18471ef0f8cc1fa3e38914cd671742a29a3c91f29242bdbf1ff84b6ad4b3779821aa4f45f3e75a"
        },
        {
          "alg": "SHA3-256",
          "content": "da676377be6017bc5edadb1aa27d2437fe5785537db1d377426ab39ce1845053"
        },
        {
          "alg": "SHA3-512",
          "content": "46a4216c47297fdc0d9e821961a07c279ea64ed3384a541849e3017b58e86460603cadaa016d6f7392c577364bb2c840955ee9d544b454bee14a0dc8dd82ce12"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-core",
      "version": "1.10.0",
      "description": "Core module of Micrometer containing instrumentation API and implementation",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "13bbcc080729d2a0de553b78323b486f"
        },
        {
          "alg": "SHA-1",
          "content": "f6aec5087695596cdc81d5f597c46124c44ada23"
        },
        {
          "alg": "SHA-256",
          "content": "ece52bd972f554ffa023df61d4571728e719135573f594d69810d0b6886e82ce"
        },
        {
          "alg": "SHA-512",
          "content": "28278179694bd20878680a917da2cb440163d9f09effa1313b9119ac9a449c87349958dbbd06034fdb3f2b7809fdcf00868e5a55629cc1fb9adb5b2ede087a12"
        },
        {
          "alg": "SHA-384",
          "content": "1e737d372ff55f96d2468d3be298fc22c5380fb0cc8c5d996b486cc977309e00c55b07695209cdfbf29597a86857b239"
        },
        {
          "alg": "SHA3-384",
          "content": "b5bdb2e08374cb125c93328a91b49161460f9b51c0af0a8955d74c87017682d70a98ca520c20a6372f2a0f4d3a1c43c6"
        },
        {
          "alg": "SHA3-256",
          "content": "30a9e359b0675144ced4281313d395e625a09ae2e92e8140edb89eb1991c5f54"
        },
        {
          "alg": "SHA3-512",
          "content": "bd0742f31ba2ade4e17bf811bb7c8e4365cccb80c6b8a8e6fb712f69c0b69a0705c9b5a1a2de535c561784af66f63022074492b7057edbe19f0de49937e79596"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-commons",
      "version": "1.10.0",
      "description": "Module containing common code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ed9439b29a2adfaccd8d3afc3b9188"
        },
        {
          "alg": "SHA-1",
          "content": "e2181e59ebc1ccaaae567f231322ac9414359d43"
        },
        {
          "alg": "SHA-256",
          "content": "1da4fb8218c832fb443f99114d62d36997e3ecdbdd2d1b19c42adbd00de7db8e"
        },
        {
          "alg": "SHA-512",
          "content": "0557ab1739ef663be168f97c208c3e31dc41575e9ef03e2acc97d83d28441a09bd28c9e2d8653b20dce3c9bfabd0ec1d0e1eb2551b8db82624b27301b36d9c49"
        },
        {
          "alg": "SHA-384",
          "content": "5cbdfb4966870fbb2c4bce961feacf19862c2166567a67d9e5da5e8e32341361faf5525bf5d3c4e6f5048295009b2d16"
        },
        {
          "alg": "SHA3-384",
          "content": "ac79f709238173c5473ad55a2a4e0984d59c740aef3362e580eb414bfbb15e39889d9e9de10458bcd2c0201e58e11b3e"
        },
        {
          "alg": "SHA3-256",
          "content": "c69062fff7515170791d06fe094aebf1535a4555511095c7d0514adbe39cf439"
        },
        {
          "alg": "SHA3-512",
          "content": "b479736a0894849017090328255b8daf3f46e47136702b54e6f5c4f5d9ba346a009843a0040848587fccc803cbc1bb4bd62e5312b0ffe679704f7981a1693705"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "group": "org.hdrhistogram",
      "name": "HdrHistogram",
      "version": "2.1.12",
      "description": "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "4b1acf3448b750cb485da7e37384fcd8"
        },
        {
          "alg": "SHA-1",
          "content": "6eb7552156e0d517ae80cc2247be1427c8d90452"
        },
        {
          "alg": "SHA-256",
          "content": "9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2"
        },
        {
          "alg": "SHA-512",
          "content": "b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d"
        },
        {
          "alg": "SHA-384",
          "content": "06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362"
        },
        {
          "alg": "SHA3-384",
          "content": "b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1"
        },
        {
          "alg": "SHA3-256",
          "content": "ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882"
        },
        {
          "alg": "SHA3-512",
          "content": "4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        },
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "externalReferences": [
        {
          "url": "http://hdrhistogram.github.io/HdrHistogram/",
          "type": "website"
        },
        {
          "url": "https://github.com/HdrHistogram/HdrHistogram/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/HdrHistogram/HdrHistogram.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group": "org.latencyutils",
      "name": "LatencyUtils",
      "version": "2.0.3",
      "description": "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg": "SHA-1",
          "content": "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg": "SHA-256",
          "content": "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg": "SHA-512",
          "content": "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg": "SHA-384",
          "content": "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg": "SHA3-384",
          "content": "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg": "SHA3-256",
          "content": "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg": "SHA3-512",
          "content": "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences": [
        {
          "url": "http://latencyutils.github.io/LatencyUtils/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/LatencyUtils/LatencyUtils/issues",
          "type": "issue-tracker"
        },
        {
          "url": "scm:git:git://github.com/LatencyUtils/LatencyUtils.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "group": "io.micrometer",
      "name": "micrometer-observation",
      "version": "1.10.0",
      "description": "Module containing Observation related code",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "85a101a9e6a8a761a4ced843d5aa268d"
        },
        {
          "alg": "SHA-1",
          "content": "6d49a0c2ed681291f011e8d07583c0cc741dd4c6"
        },
        {
          "alg": "SHA-256",
          "content": "af6ff881c71ec62027b91dd1658459c211d261d9867a4552db8c7ffdf899455d"
        },
        {
          "alg": "SHA-512",
          "content": "33c3c6d6bd694521f54254d343e4fed97a402efe60032dc7e98bebb4ebd9eab23c6c53447cf5c05933617d4d32d678cb6a01c76877de98e3e02659fb837df46e"
        },
        {
          "alg": "SHA-384",
          "content": "ac0bc89d91612fc777b8bf0c1fb8b395075404a09ff46325deef900a2015228f98a57c038c66519dafa3c0dd6f72ee04"
        },
        {
          "alg": "SHA3-384",
          "content": "5601c7ddef6f1e4898c983b02d47e4e396c22378b83e2878d20bea319c6d70fe38ed16ad5f4be5ed8938f22554781271"
        },
        {
          "alg": "SHA3-256",
          "content": "b6dfd4f004ebe446e2eb358d2279e480f1ffe944261ed21acfe59f03856faec9"
        },
        {
          "alg": "SHA3-512",
          "content": "ac9674372e016f60a0f951b6b922dcea1038446867e1071c366cc9298cc3e00bb12870fd59f38dc32b5cb3780ec5cc31148abc2c5dedff779d32c091d412b937"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/micrometer-metrics/micrometer",
          "type": "website"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-bulkhead",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2f3b7e9039497d51f3cea58c261a2b79"
        },
        {
          "alg": "SHA-1",
          "content": "1ec5dacf4da3d90bd45a884330af01359f568ac5"
        },
        {
          "alg": "SHA-256",
          "content": "17d83e1751c3b91d17e45f43ba1814707706cb2209f07b59766a4d85bfe97c68"
        },
        {
          "alg": "SHA-512",
          "content": "05ad25f51d94db5d0085c76dc75e7a423852edc9b05892ba029d4266b45c4d2a038a94f8d9c74c8f07495e8e61aeac3cc6e1b7d355bf51e2b9561f70a126b746"
        },
        {
          "alg": "SHA-384",
          "content": "37098dd05bf8dd612d287b1de1c241c587ff1dc08b164c517502ca3b7b1b7160d5e7afab187ba26dd62e321551a2127b"
        },
        {
          "alg": "SHA3-384",
          "content": "f78dec1270a8439b3586e3ac514e20c0758e595ff133c94f8dc8fcbe22e5e991d39fe0a5b625fe1f6ab44c3ff782c7ec"
        },
        {
          "alg": "SHA3-256",
          "content": "13b3f2f1b794d581265533c9b73531a153760fbe5bdfb792f3bee8563b04ebf0"
        },
        {
          "alg": "SHA3-512",
          "content": "2c307cd27032423a819c1277341685a93f0644d8c3fe3cb83c68f0f87e6a8ff73b69d88c07bfeaeda8147baab15a8e35e8c2a243198c98970af20dd9eaf44c08"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-circuitbreaker",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c287ce795f2ae6edfa67d2d907bacbd5"
        },
        {
          "alg": "SHA-1",
          "content": "8138ed9546d984f023cf20539dba4e33b6246866"
        },
        {
          "alg": "SHA-256",
          "content": "0e6f73a1f17b2c813acca7cc131d2c1b6a5a56f3d55047872bbe7fe2cc73c312"
        },
        {
          "alg": "SHA-512",
          "content": "9329fe0fc8ca71f2bc1559cffe407f5cc69908ee4933acdd98736552447f950e583366a6255f125625cf13732bfc774a662b1e15d62a798037bfc5b9de685753"
        },
        {
          "alg": "SHA-384",
          "content": "37b9c91103e264582e4f1b346d21c705392ba85cc3e7ae717a1f5cbfe258bd9bc5ab51a79e093c930baeda08b1ed8dae"
        },
        {
          "alg": "SHA3-384",
          "content": "37b27f407945eda9aefad5a22ca38c783147966acf94434e1ef858bd0fbbcc1493a7443efe5de2885f91f4b2a370474d"
        },
        {
          "alg": "SHA3-256",
          "content": "b9cab9b8a77a661aab7c84c1835fe60e5bbceee036c965be1a7d15cb6a98c654"
        },
        {
          "alg": "SHA3-512",
          "content": "4aebfac33fb4875b177269992004070cdb622b1ee02b4d372c2bdff2704ca4d044b4a3bfe3bc4a8215c0151ffdaa7259c9998632fe0f3abddfaf0cb4cf369aeb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.1.0?type=jar",
      "group": "io.github.resilience4j",
      "name": "resilience4j-timelimiter",
      "version": "2.1.0",
      "description": "Resilience4j is a lightweight, easy-to-use fault tolerance library designed for Java8 and functional programming",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "01cb0a3d48b8bddb7aa8cf5c9f20ec79"
        },
        {
          "alg": "SHA-1",
          "content": "326f89e40ee01f9f235f67efd137dcedf3da1dc4"
        },
        {
          "alg": "SHA-256",
          "content": "29c26ff0d1b8a776a5113a0ecbd4411bb35115fa74ade5be78c4aa48a39a4fa0"
        },
        {
          "alg": "SHA-512",
          "content": "eef50ce949d90bf0d9c8f00763fb8bc7091bc41b94daf3baf4ca1ee77a99b7779af1361a8b32733ba9869503f1c86e85dd390784d93c301dcd3cbf3c69aacdef"
        },
        {
          "alg": "SHA-384",
          "content": "3418481b081651c0c5b695ef91b60a3a1e1640bb98aaaf1ab0e99d16813ed013faa976426fd529cff2fcd8cba9d330f7"
        },
        {
          "alg": "SHA3-384",
          "content": "e7c303b928022ac02701e4543a5988925d385f317dc3cbc163a5757af768f410a90000cf8db335c1aa9bfe80120f2344"
        },
        {
          "alg": "SHA3-256",
          "content": "e5e77a99cf910d4136ba21f5a8dd094837cd063fd3893f62a9669755ca1edc8e"
        },
        {
          "alg": "SHA3-512",
          "content": "e4aa47fb09c89e66dca3d931c4364ff68fc3365411fb5d7feafb26da5a223615ff1fb9b290e40b37526772798c6169b0797ef719bee09c563e671597c7ea3eb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.1.0?type=jar",
      "externalReferences": [
        {
          "url": "https://resilience4j.readme.io",
          "type": "website"
        },
        {
          "url": "https://github.com/resilience4j/resilience4j.git",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.9?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "log4j-over-slf4j",
      "version": "2.0.9",
      "description": "Log4j implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9d5349d40887a9a3c5682b86050ed2cc"
        },
        {
          "alg": "SHA-1",
          "content": "47b18c09cda4a3bba2197ed6827cf6390c2a0adb"
        },
        {
          "alg": "SHA-256",
          "content": "f5e89ed167244a7760b0db617d1f2022fd289a34de4af50a263a41d6cc73db27"
        },
        {
          "alg": "SHA-512",
          "content": "92f1041936ccc750a13bde56286bfbfe4adbfe5baf26cf0c1b29ecfcbef787b5c93354d93542553900803ef0e42fed23b64318c4705a91b1d320bb19cde2279a"
        },
        {
          "alg": "SHA-384",
          "content": "d46d0c9a4608bf9322c98ce5074d514f5dde70cf451babce49aabb0ce716c02733fc2fe4122779480b8e8edb82503a0e"
        },
        {
          "alg": "SHA3-384",
          "content": "0af9ac42281c9cb79b440db489ad97b8db63b4dcd5c4d3709f91b2fda2bf42faa96f498334df5778e3b0552def68cafe"
        },
        {
          "alg": "SHA3-256",
          "content": "9402e3014e2222210bf2d7635c5cf98afa39d78ca70287e4db2e855e37e535c3"
        },
        {
          "alg": "SHA3-512",
          "content": "4a45b50950b237f44bedef87d240c07863df0eef69763d3cec5acfde83f3739855542c5445e4e33638251f5b59ee309d57e1ecb8c4332dad9d697e61728d808d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.9?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/slf4j-parent/log4j-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.kohsuke/github-api@1.318?type=jar",
      "group": "org.kohsuke",
      "name": "github-api",
      "version": "1.318",
      "description": "GitHub API for Java",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c8eab04bc6c6266ad20f844679288338"
        },
        {
          "alg": "SHA-1",
          "content": "4b7bf36f53d2fdfad0b885278493efd4f6eb73e9"
        },
        {
          "alg": "SHA-256",
          "content": "86f5a9805e115edcb061e6e7605b5398125c923ae1e820130a6fe76362ccdf15"
        },
        {
          "alg": "SHA-512",
          "content": "e5eab36b2c370a02dfdaf582d458aba9c9ba3baec7fc4834d4db249d92444049e92cb1a65a74f81a0ac3980b7518d9e8966914b8119660e453298e3f0edf6100"
        },
        {
          "alg": "SHA-384",
          "content": "f5a4663bb681537d3750b72e780e8382a02153b1c4c4da2c106117ee1263a4eafb86eedbf237727a67389b4a54ae9f32"
        },
        {
          "alg": "SHA3-384",
          "content": "74a7b5172f87d9a9416b0f9d98f2ee6dbf213a864a54c6637df34eedae718d15d9f112aa6a584e63bbda3073d5f190f8"
        },
        {
          "alg": "SHA3-256",
          "content": "64305bc82c96da6ffff574bdd8d2b2f1294b5271275fac11a7bb8c16e9cbd338"
        },
        {
          "alg": "SHA3-512",
          "content": "3949d926d283732ab6b8f1420ae439648559991c95c0d551b5083b397eef1a48c89bf4e33cf8f0402c40032d60d7ad2876c2e52214af4ac65095f566b23b53f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.kohsuke/github-api@1.318?type=jar",
      "externalReferences": [
        {
          "url": "https://github-api.kohsuke.org/",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://groups.google.com/forum/#!forum/github-api",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/hub4j/github-api/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "publisher": "Pragmatists",
      "group": "pl.pragmatists",
      "name": "JUnitParams",
      "version": "1.1.1",
      "description": "Better parameterised tests for JUnit",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "954d9f5c8d8b97ecf3bdfb5b11fd706b"
        },
        {
          "alg": "SHA-1",
          "content": "20981e022b8d21deb374c2888bb0be5f6d371a8f"
        },
        {
          "alg": "SHA-256",
          "content": "1be1aac16d424ce940d5407bef86656dc4ed5803c93e563cb1682ae07b591ecb"
        },
        {
          "alg": "SHA-512",
          "content": "98cdc696d5f8d19ae20b723eb9e12fd93b94387723329f1a67d92a4f53deeb2105073a61194461d371754aac8b164b5bd8cd813b04a9e87d64a5e666b12e272e"
        },
        {
          "alg": "SHA-384",
          "content": "40fc031e6cd9dc82808cb08cfef194bef5d0c0fa5692b1d0f660a9f18b9e44f46a19f499b2d0911ce2b66444dfad8af3"
        },
        {
          "alg": "SHA3-384",
          "content": "9e477a10744665ba7b1e233e03b96c841fe63fa3be1d643847e6fa12b37f48ae1cec1ac020337d8c8b8b004e52883f06"
        },
        {
          "alg": "SHA3-256",
          "content": "b57f6069f89a8a985b0ab87a13d882a90fe3f8ae079f7ea9789684159413bcb3"
        },
        {
          "alg": "SHA3-512",
          "content": "5d772549251ae1beeff1af8bafb5c60826dd71c8a09ecd7694dd798ba38b597f26fd6bb182f52fe54d7b078149e11f2c6977e01340e2c3b6600773188a0eb285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/Pragmatists/JUnitParams",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/Pragmatists/JUnitParams/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/Pragmatists/JUnitParams",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.hamcrest/hamcrest@2.2?type=jar",
      "group": "org.hamcrest",
      "name": "hamcrest",
      "version": "2.2",
      "description": "Core API and libraries of hamcrest matcher framework.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "10b47e837f271d0662f28780e60388e8"
        },
        {
          "alg": "SHA-1",
          "content": "1820c0968dba3a11a1b30669bb1f01978a91dedc"
        },
        {
          "alg": "SHA-256",
          "content": "5e62846a89f05cd78cd9c1a553f340d002458380c320455dd1f8fc5497a8a1c1"
        },
        {
          "alg": "SHA-512",
          "content": "6b1141329b83224f69f074cb913dbff6921d6b8693ede8d2599acb626481255dae63de42eb123cbd5f59a261ac32faae012be64e8e90406ae9215543fbca5546"
        },
        {
          "alg": "SHA-384",
          "content": "89bdcfdb28da13eaa09a40f5e3fd5667c3cf789cf43e237b8581d1cd814fee392ada66a79cbe77295950e996f485f887"
        },
        {
          "alg": "SHA3-384",
          "content": "0d011b75ed22fe456ff683b420875636c4c05b3b837d8819f3f38fd33ec52b3ce2f854acfb7bebffc6659046af8fa204"
        },
        {
          "alg": "SHA3-256",
          "content": "92d05019d2aec2c45f0464df5bf29a2e41c1af1ee3de05ec9d8ca82e0ee4f0b0"
        },
        {
          "alg": "SHA3-512",
          "content": "4c5cbbe0dcaa9878e1dc6d3caa523c795a96280cb53843577164e5af458572cde0e82310cf5b52c1ea370c434d5631f02e06980d63126843d9b16e357a5f7483"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.hamcrest/hamcrest@2.2?type=jar",
      "externalReferences": [
        {
          "url": "http://hamcrest.org/JavaHamcrest/",
          "type": "website"
        },
        {
          "url": "https://github.com/hamcrest/JavaHamcrest",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.jersey.core",
      "name": "jersey-common",
      "version": "2.41",
      "description": "Jersey core common packages",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8d8f432106e36dbd41035ff3ab4dc2b4"
        },
        {
          "alg": "SHA-1",
          "content": "3410383fc49c8ad38ddc4ed4c7822e872f908043"
        },
        {
          "alg": "SHA-256",
          "content": "9bfbee9f124eb777534a8d23d1734745656504bb62e3749f92e27a5c6247cc43"
        },
        {
          "alg": "SHA-512",
          "content": "c5f800dbf6a6bad1b80459fed6c4c25d27ef3c5180bbdc7fe240ae1d0d8c0bf52f48296b0d744fbc724d15da27db93773b68429630163cd41dc9e068f066a958"
        },
        {
          "alg": "SHA-384",
          "content": "8583097b6b4c6aa2e6759de7ec951772df698a86506afd9b6c64cb5fb0e50cf7c92973b5e4f891eacafe798a3c02220f"
        },
        {
          "alg": "SHA3-384",
          "content": "55dfd20d63e4a6e90a3cb85e6ae79285f3f243dee3376d12a1b9a08157dd89b2f64a7dbc1435605ffc7744b359f82c0a"
        },
        {
          "alg": "SHA3-256",
          "content": "09856133571c3e6ac8711a69c5955832e10705df6b3bfe01829ebe96f2928364"
        },
        {
          "alg": "SHA3-512",
          "content": "226f62abe9b17f790ef54cc8403767e632792d78d2403267153f5b86d3ef716bb89e8b6a5c3956a83f89bdc2c763cccf471bdcb4e7e7f51d919845c4c714ab03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "name": "The GNU General Public License (GPL), Version 2, With Classpath Exception",
            "url": "https://www.gnu.org/software/classpath/license.html"
          }
        },
        {
          "license": {
            "name": "Apache License, 2.0",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        },
        {
          "license": {
            "name": "Public Domain",
            "url": "https://creativecommons.org/publicdomain/zero/1.0/"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.jersey/jersey-common",
          "type": "website"
        },
        {
          "url": "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/",
          "type": "build-system"
        },
        {
          "url": "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jersey/jersey-common",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.annotation",
      "name": "jakarta.annotation-api",
      "version": "1.3.5",
      "description": "Jakarta Annotations API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg": "SHA-1",
          "content": "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg": "SHA-256",
          "content": "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg": "SHA-512",
          "content": "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg": "SHA-384",
          "content": "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg": "SHA3-384",
          "content": "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg": "SHA3-256",
          "content": "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg": "SHA3-512",
          "content": "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j.ca",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/ca-dev",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/common-annotations-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "org.glassfish.hk2",
      "name": "osgi-resource-locator",
      "version": "1.0.3",
      "description": "Used by various API providers that rely on META-INF/services mechanism to locate providers.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e7e82b82118c5387ae45f7bf3892909b"
        },
        {
          "alg": "SHA-1",
          "content": "de3b21279df7e755e38275137539be5e2c80dd58"
        },
        {
          "alg": "SHA-256",
          "content": "aab5d7849f7cfcda2cc7c541ba1bd365151d42276f151c825387245dfde3dd74"
        },
        {
          "alg": "SHA-512",
          "content": "4d84983a9b1c72f58661b576c78ca456a2106602c2ad211cd7e72d94464c8774173b34a35629c507c7c84c982f1de0c9bf48352458e8480be5f874d20d6e69a3"
        },
        {
          "alg": "SHA-384",
          "content": "9f92002296c66cc8996d459b95a9c531ec71b98a8b819121abbc7d636a6c4ace04c88878ba6917f71650280a880d1ce2"
        },
        {
          "alg": "SHA3-384",
          "content": "b27581d003ce715fba7e2958dbe73b64330b8586d94dd2f4b80b3d4861fd36415af6c2fe1005a798a7bd4f706d77e3d1"
        },
        {
          "alg": "SHA3-256",
          "content": "cf90e96adac2f1167ff71267db4a91c75d824f8a4b0359d2ab7d50b1c87c3952"
        },
        {
          "alg": "SHA3-512",
          "content": "75f9ff6c3ab03f4471ac04789c181b75edf4c5dbf985a5616b2c979de59aa478b02593036f740a6c7bb71afcb145c131a3ff3e5a6a53336abab22f2cc9825772"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "externalReferences": [
        {
          "url": "https://projects.eclipse.org/projects/ee4j/osgi-resource-locator",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/ee4j/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/glassfish-hk2-extra",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "publisher": "Eclipse Foundation",
      "group": "jakarta.ws.rs",
      "name": "jakarta.ws.rs-api",
      "version": "2.1.6",
      "description": "Jakarta RESTful Web Services API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg": "SHA-1",
          "content": "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg": "SHA-256",
          "content": "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg": "SHA-512",
          "content": "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg": "SHA-384",
          "content": "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        },
        {
          "alg": "SHA3-384",
          "content": "3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286"
        },
        {
          "alg": "SHA3-256",
          "content": "794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17"
        },
        {
          "alg": "SHA3-512",
          "content": "fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api",
          "type": "website"
        },
        {
          "url": "https://repo.eclipse.org/content/repositories/jax-rs-api-releases/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api/issues",
          "type": "issue-tracker"
        },
        {
          "url": "jaxrs-dev@eclipse.org",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse-ee4j/jaxrs-api",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-server",
      "version": "9.4.49.v20220914",
      "description": "The core jetty server artifact.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "abe0a1deccaf25f99dfa60c854336483"
        },
        {
          "alg": "SHA-1",
          "content": "502f99eed028139e71a4afebefa291ace12b9c1c"
        },
        {
          "alg": "SHA-256",
          "content": "06ae86baded124f81935a0701ed6af7b9e7ce33ee8ef58a87b779bb0a6b23dc4"
        },
        {
          "alg": "SHA-512",
          "content": "2f199729ad9b46fda968b4bfafd657971fc9d90371852f8ad7afdae6d5752d2b84648734eabb6ffbf084800253d1da97d4bb9ad60f799ee6ae38a80c2d881fc4"
        },
        {
          "alg": "SHA-384",
          "content": "5f73f4c6bca19bc1553ee4f7dde37c8265c3462db7918142252391dd20a01eca0d579983ce15d9d36cd9c7516ca2c95e"
        },
        {
          "alg": "SHA3-384",
          "content": "732bd7c5eede53eff046158d0b747b805b1c899c5df303966bbabc346d161fc8e2964ac168e60b85e01834b123a0d477"
        },
        {
          "alg": "SHA3-256",
          "content": "dc329d3c1fd4c74a17e15a134c205d344c2e9e4044866e939720eea6d7b25f49"
        },
        {
          "alg": "SHA3-512",
          "content": "56407fda82889ccc5761236d5251b294bed3193909c453a30217dd190fc2d24baae8f717d434dfbb70c0a7822161cb023b2e3af85915bacee3cf1651c56af1e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-server",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-server",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "publisher": "GlassFish Community",
      "group": "javax.servlet",
      "name": "javax.servlet-api",
      "version": "4.0.1",
      "description": "Java.net - The Source for Java Technology Collaboration",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "b80414033bf3397de334b95e892a2f44"
        },
        {
          "alg": "SHA-1",
          "content": "a27082684a2ff0bf397666c3943496c44541d1ca"
        },
        {
          "alg": "SHA-256",
          "content": "83a03dd877d3674576f0da7b90755c8524af099ccf0607fc61aa971535ad7c60"
        },
        {
          "alg": "SHA-512",
          "content": "763dec9801f647b1a45e492eb2a67f6a60fc608bef4738eb7b1a92d93f1f6db02b32f4c6553d4557c320dfc25c0ea0b9854c59e793262b6ca453c71caf05ef38"
        },
        {
          "alg": "SHA-384",
          "content": "9f4522458bdb1c7cbc0e88271d1e4326193c8e4d422ef8b75c3dcadf0bf86a91389890ab2d25a8cc6cf276f625475cd3"
        },
        {
          "alg": "SHA3-384",
          "content": "be8a209d1912492e86e611fc42e59512a89c464aa78cea3c5badd3290a6564d8bde55933a7c5d8113d9acc848a382751"
        },
        {
          "alg": "SHA3-256",
          "content": "f94dd8bf0908ca77e5213d166035a427e658ff4a59d35daa7e281c5fb2fc390a"
        },
        {
          "alg": "SHA3-512",
          "content": "3abbd3cad570557be24b69f700c217c7c8e1736d4db74f3ac28dd96b80822ac1c7631b3a9a15b9738754a3d68e4e7f13b732820eb8b8e8e329690ec2a23c621c"
        }
      ],
      "licenses": [
        {
          "expression": "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "externalReferences": [
        {
          "url": "https://javaee.github.io/servlet-spec/",
          "type": "website"
        },
        {
          "url": "https://maven.java.net/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javaee/servlet-spec/issues",
          "type": "issue-tracker"
        },
        {
          "url": "servlet-spec@javaee.groups.io",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/javaee/servlet-spec",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-http",
      "version": "9.4.49.v20220914",
      "description": "The Eclipse Jetty Project",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2b04329b9eedcec0ec9484ea7c797545"
        },
        {
          "alg": "SHA-1",
          "content": "ef1e3bde212115eb4bb0740aaf79029b624d4e30"
        },
        {
          "alg": "SHA-256",
          "content": "c39bfec2941a45396bd67da1aea53ea587c97ca31fdcee0d8ea4351b9f043704"
        },
        {
          "alg": "SHA-512",
          "content": "82c6985f0d7c76459bf0638fdc24f3692a11804a95845b1a45203dfcc1205ab7bf67934f6babf7eb2f2b87d637a8fcbd87eae297e4403511bf73f359b1957e09"
        },
        {
          "alg": "SHA-384",
          "content": "f0392019c4c6dfb84804df6a517cab4b07bf5e39a733f4ca192e62ef846f1add0c9155ff2c07bfbe968e4af4548365ca"
        },
        {
          "alg": "SHA3-384",
          "content": "295d5acc4d806ce489dcd60dffacf1ca618b2d81eb2662c4f3bea64ac7b32e53f950305468ce7ffc9fa2c1e8d929db04"
        },
        {
          "alg": "SHA3-256",
          "content": "ffc8717d72fa7601d5e3ef895bdd2aec4cbdc887bbc1fad6e7eb4fbe34c36fcd"
        },
        {
          "alg": "SHA3-512",
          "content": "5ff052e08556e59538f558125cfa7e6e1a3c177d5da33fad76f9d854b2227adaddca97057b247e22e4480db27b0d089e134f1f5527ab40e3b33644002c90963a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-http",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-http",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-io",
      "version": "9.4.49.v20220914",
      "description": "The Eclipse Jetty Project",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "de743b404e22bcb7d1048febe14c1c85"
        },
        {
          "alg": "SHA-1",
          "content": "cb33d9a3bdb6e2173b9b9cfc94c0b45f9a21a1af"
        },
        {
          "alg": "SHA-256",
          "content": "9ee7fcec407cb4b16b252596d9b9a23b4ee9cd4cf65921ae95872684af083bb3"
        },
        {
          "alg": "SHA-512",
          "content": "c2f865e518ee4207f38ee1ee5ab6b0ea99587d6aa5096b19a96dd5954c48debd5dc48e8aec5557eab30d7e59e7428721db700ca9711132219371286e3f5ee152"
        },
        {
          "alg": "SHA-384",
          "content": "7d474a53e71c9261bb865da9caa8b052aff16883f6636c1c8df350d56076c6a4fa1cf26e417d355df335de9f11f8cead"
        },
        {
          "alg": "SHA3-384",
          "content": "84ad4699820a0191ff65a56ad9f6cdb09ef9049cab505826b848f4bcbc4bf961c724900e3e75eff00fffabc1efd272bb"
        },
        {
          "alg": "SHA3-256",
          "content": "25a65b855008d781b92d14934d026c3073ad7522f0bab08a49d6017bb2da6282"
        },
        {
          "alg": "SHA3-512",
          "content": "1502710eee15380c8c5b692fa233b013e17a3168e9b68c8d8a52ae198f70350d7c3c8df1ccd51799875d98581f18b1e3d06144f6f70a5394af1ae3a936da93cd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-io",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-io",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-servlet",
      "version": "9.4.49.v20220914",
      "description": "Jetty Servlet Container",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "33ffd378efa54dab102807331870423a"
        },
        {
          "alg": "SHA-1",
          "content": "53ca0898f02e72b6830551031ee0062430134a05"
        },
        {
          "alg": "SHA-256",
          "content": "8bf6a78836715859789e9183f779ece85f769206c75e606c09cb1f03f0623334"
        },
        {
          "alg": "SHA-512",
          "content": "86c8a3778e6709554f05c34d786630c6bc5e52cf34dd5f56b229be57d43b9767a307a78216042fcc705a5301c4bba82aca0062029742a06706e1e77640f2d456"
        },
        {
          "alg": "SHA-384",
          "content": "b1b08faa24cd3535f13248809317f9fd8ec17df7523818321d22f9aec05aec3cf7ff5926c5b98ca55d45bdc9d8a4bc4a"
        },
        {
          "alg": "SHA3-384",
          "content": "de190fc4e130f39d4dd60561a6ba99940da5c0e5bdb14feecd9278925d8957066e33574fb1e200b805a0e496664a0f8a"
        },
        {
          "alg": "SHA3-256",
          "content": "8ff8ba9afc0540ef1164336becee484fc4d6a30e670c3e153c2c82609bfe27ec"
        },
        {
          "alg": "SHA3-512",
          "content": "ff442edf3b77ae9a1e57f086fa7d845dc67ca43953967eafa638bd8166268fe8696270eea7a847eeb3ff5c18a04c6151a74120f4f46ebc178c307f4372a78fb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-servlet",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-servlet",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-security",
      "version": "9.4.49.v20220914",
      "description": "Jetty security infrastructure",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "90ac74048766749cdc81cc86eef85b71"
        },
        {
          "alg": "SHA-1",
          "content": "057a67eeb12078b620131664b3b7a37ea4c5aefe"
        },
        {
          "alg": "SHA-256",
          "content": "5dd804fc4cf166b8106b06cb427b649f99cf36a48dbb0b19a88d76a9fb5c4e06"
        },
        {
          "alg": "SHA-512",
          "content": "c32c44d936b5fdfc5a2ac1c86f00d68b11f803ef5369fb5d56d321097576f49b3aa13530d08386ad16194704cbe43f61ca9eff7e27da65a4152b95f8ee53fc4d"
        },
        {
          "alg": "SHA-384",
          "content": "e57de1bc1f8e67907ca9547e5f7d3f93bfcffbd498b4d41446d621c9d7ae045d3129f1715eec806ccc188359819b88b8"
        },
        {
          "alg": "SHA3-384",
          "content": "36a658507e5939282451fe87208541e0d2ab3c9e0da205dd087a8dd9315a27bd2d7ba74446651da770eaba3222dd59bb"
        },
        {
          "alg": "SHA3-256",
          "content": "c82cc10b7e1c5a422da0dca9f699d7ae7881bc664a7818a9d5651c2230d3e24a"
        },
        {
          "alg": "SHA3-512",
          "content": "767e198dc0ca94c7b7d3be95c47096e5179271e3a2c26e90451ce6b0a3c51bc3c1c7af0cffb031b79b3803755930d788e928366a0bcbfd5b781598da455ebb1c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-security",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-security",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util-ajax",
      "version": "9.4.49.v20220914",
      "description": "JSON/Ajax Utility classes for Jetty",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0a732c157104fdbc438b2d33dd2af182"
        },
        {
          "alg": "SHA-1",
          "content": "3b267b5ae59b7b826d5b579f2ee8b8914b286547"
        },
        {
          "alg": "SHA-256",
          "content": "9a61fd75a52936aa6c6737e411ca81ada5203cd3d1371f3815644614b5ce7247"
        },
        {
          "alg": "SHA-512",
          "content": "5929b07840b05039579443a35bf3058dd79264011004300ae0e82cdb99ed950ca2edb40cba61903a29e9755b5bbc73141b205bb1ea3016300af816259802cd99"
        },
        {
          "alg": "SHA-384",
          "content": "492f5f843fb4c2df83f0b2254dac753a1f63f3d49d83700c8ab1fa50f47bd0abd2bdb6fdd00bbfd89770dcec28fed129"
        },
        {
          "alg": "SHA3-384",
          "content": "7bffdec0b7334393e686787f2df1a19e029d9b193e0bf2e432e58206298a39a31e0fd5dd6f373a410a85d85d3ac78454"
        },
        {
          "alg": "SHA3-256",
          "content": "fa01e7f900ba688418ebcfa46de802294a6d2c673dfbc825228cc5bcf0e4b0e6"
        },
        {
          "alg": "SHA3-512",
          "content": "3dcaf6a5add2c299448f67a43004774ad9d3d0ce1acbeb2739e0fedb4735a7728cf244eb83b89735f0dd48079b3da685a426b06b742d329eff8efc5dc8d0d637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-util-ajax",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-util-ajax",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-util",
      "version": "9.4.49.v20220914",
      "description": "Utility classes for Jetty",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "312173fff994adf15a3f2c4e72115746"
        },
        {
          "alg": "SHA-1",
          "content": "29008dbc6dfac553d209f54193b505d73c253a41"
        },
        {
          "alg": "SHA-256",
          "content": "679313e158f334135e0e80ac200fd6dea605cde73fd7bf255aaaf47773d2f801"
        },
        {
          "alg": "SHA-512",
          "content": "e207d93ef5bc98ad2b1a43393231bdacfb3ab642b6197a8b72d819f8ad30357c4daa0a76a0459340563fcdee0fdfc111e719a2db5be778d6b1e10f1ccbe77fc9"
        },
        {
          "alg": "SHA-384",
          "content": "7f67fa650c960cd1f920780fa7b9b50b6640b70b14a82db896e06c294f8e49afbe87c5953af539f364aabb64812114a5"
        },
        {
          "alg": "SHA3-384",
          "content": "7652022537fc97fd15a4ae7264ee82ea52e46369215ebd4894bedaa14eb27d85f87fe09496bcdb043d4441701274dffc"
        },
        {
          "alg": "SHA3-256",
          "content": "a1d5571435d8fc7eb415d073e6a296a42dd8ee00205839c44dd0d6255dd7cf1e"
        },
        {
          "alg": "SHA3-512",
          "content": "06a9239b7896d5cc152c2b6803e8b6f25f3addb8b6520712ac0707bd71041816f94d414058bb61eb8a4ae8e455a88585860b94bd7be74f221066d8e466db125d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-util",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-util",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-webapp",
      "version": "9.4.49.v20220914",
      "description": "Jetty web application support",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1e50455682a09c4356890911c52d066"
        },
        {
          "alg": "SHA-1",
          "content": "549345c1cc6fdd4754fabcf46bc4e60be16e2686"
        },
        {
          "alg": "SHA-256",
          "content": "33148b2a8e6eb3d426dd2b980e6deb67690b3978ad17759542488556b01cf401"
        },
        {
          "alg": "SHA-512",
          "content": "979a8b686603d25cd9708b8f70fa1a05f154d636aa2a84ad8e9e524506d18f45bcef4b648ff1e88c647935eacff10ea70262e9fc12824ed253d0dd8f7afbe4bb"
        },
        {
          "alg": "SHA-384",
          "content": "bae9169f4854f6dc1fb9e316432d4bb65417e7ebbe8c58d1680a19f75a3c16e9dcd10066855d4820222331698f139234"
        },
        {
          "alg": "SHA3-384",
          "content": "f34d2cd0fcf24b5ccfcb119da8ef05242c77ae817b0b6e5f168df56ee42c291f0806423ccc3e06d2c89199adb77027e6"
        },
        {
          "alg": "SHA3-256",
          "content": "a14c0711d2390d9d0b21c1957ee26a8ddaf5862548fb88c63f598043e99793ca"
        },
        {
          "alg": "SHA3-512",
          "content": "cbcbb35c23ddb8279b7c5c00da743f320582584a0e1999813cff5e35eecc6d019f2fbe0b899e063950c6e9e51199cc6f81995590102a593d4b57c6f33bcf79cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-webapp",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-webapp",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.49.v20220914?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-xml",
      "version": "9.4.49.v20220914",
      "description": "The jetty xml utilities.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1aa15ef4f0f1365b21ad561102d7734c"
        },
        {
          "alg": "SHA-1",
          "content": "34e602eae6dd2fe54a00ec77fc98c5e77737906b"
        },
        {
          "alg": "SHA-256",
          "content": "0047f7b8569bff65523c3023d1ac2e483faccb003dcf9e307763bc2d21aef85b"
        },
        {
          "alg": "SHA-512",
          "content": "6892c787500aa48591291cce5e5f2a626af75388dd8ab3b2816bdbd22261a41ee1df354a8583a98fcaba9745613a00535d5f43fee72c5a4cb0d84b83f220196a"
        },
        {
          "alg": "SHA-384",
          "content": "2db5a3986fed8df711893839c0e242003e30b59fc52fd06ac7aed8deb5f2317f2ff59376a28f869fdc929086b4d1dc8b"
        },
        {
          "alg": "SHA3-384",
          "content": "74b9ad85d75812d34970aca8c219fcbc3e465ececbdf549aee76747572cddb6cefdefd4c66ec161d8b255a7d5ec2d85e"
        },
        {
          "alg": "SHA3-256",
          "content": "85a5f58524ef4e987245a53a7ab45a43aaa5f6d43f226dab979ce7e1d4e651d7"
        },
        {
          "alg": "SHA3-512",
          "content": "e48b1e482e9bbefef56d8f21e8f7d1a8a6bcf76489c0e45c1f5754fff0b1e23257f9a71dfe0b175759dd5c084b1e1cb4352dfaa2389cade39b87fb7ddb86eb2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "EPL-1.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.49.v20220914?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.org/jetty/jetty-xml",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-xml",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
      "publisher": "OW2",
      "group": "org.ow2.asm",
      "name": "asm",
      "version": "9.4",
      "description": "ASM, a very small and fast Java bytecode manipulation framework",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "ffa64f03a23a4823d98703e6ce6ff397"
        },
        {
          "alg": "SHA-1",
          "content": "b4e0e2d2e023aa317b7cfcfc916377ea348e07d1"
        },
        {
          "alg": "SHA-256",
          "content": "39d0e2b3dc45af65a09b097945750a94a126e052e124f93468443a1d0e15f381"
        },
        {
          "alg": "SHA-512",
          "content": "41e6d8f67faa63e3993692d6606cbc68ec43d140e0232c5aee2ef7dbeea289ad5711ce04407c771e8baef844ead5f838d8b248e20a06e3fd5c41c52d3340a459"
        },
        {
          "alg": "SHA-384",
          "content": "b4be5348020e602444066609b95162c1037e85bff5670db6a22330dbd556eecb9e9270a4ddcda17d352717c6803d7109"
        },
        {
          "alg": "SHA3-384",
          "content": "bca491acf7ad4834c25ea75e3267d9a47de90897d99613f6c9ef91f715e63a660c7dd4f6f2c4aa0c8ee0d9f012968409"
        },
        {
          "alg": "SHA3-256",
          "content": "5e7bdbd620fc5d3b5acc82867a38638d004c9476f25ba9de342778b098f57829"
        },
        {
          "alg": "SHA3-512",
          "content": "55e16a86d5b9a7a7e145e8c327d6456a6d4a73be49e35f78e14691e11453da63d86c956ea3f55feeede39e62292af9eb2ff21ebce62293a99ee115a9d862f91a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
      "externalReferences": [
        {
          "url": "http://asm.ow2.io/",
          "type": "website"
        },
        {
          "url": "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2",
          "type": "distribution"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://mail.ow2.org/wws/arc/asm/",
          "type": "mailing-list"
        },
        {
          "url": "https://gitlab.ow2.org/asm/asm/",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient",
      "version": "0.16.0",
      "description": "Core instrumentation library for the simpleclient.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "0d7e4aec0a8ba8ba66c87f06e3d439da"
        },
        {
          "alg": "SHA-1",
          "content": "28b0eaf7c500c506976da8d0fc9cad6c278e8d87"
        },
        {
          "alg": "SHA-256",
          "content": "22c374f237f7bc4fdb1f0ec2da379c0ba00e69ad2ffe8b6ade543d73062d377f"
        },
        {
          "alg": "SHA-512",
          "content": "2ce92dde047afc954d25326a7f573959be5be48209c687a4739b078c4083b4f1c31739d8d5bfc050844520fe8c41fdddaaf7aced8f9e6d18d3399a9101a410a7"
        },
        {
          "alg": "SHA-384",
          "content": "7f13ada603732139efb752367586be3941422f4caa3982e74e3c0aeb994113dd9a5e60d733c66101ad866cb3bbad3b73"
        },
        {
          "alg": "SHA3-384",
          "content": "2f192df969841ac644700e33e1c574277985887dc0c65bd9c66413c2b227eb4c4a1cc8777a82035af99179b46f022bc2"
        },
        {
          "alg": "SHA3-256",
          "content": "65403743a2a54a2f0c3dc5373c73b78e44732ad9e15cd4ee8a79d3e5ad5e2cf0"
        },
        {
          "alg": "SHA3-512",
          "content": "67a4bc85bb4fab76fbbe77b305e36eb3042b8aa74906ad6637e64d03a577a29305ba21d6dcb7f99e8bc96dc6344256a3fbff05f6826e08f036f91c258363a00d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "55959da7c8ad68257c11d23f0de6a52f"
        },
        {
          "alg": "SHA-1",
          "content": "cc3d2b7b7cb6f077e3b1ee1d3e99eb54fddfa151"
        },
        {
          "alg": "SHA-256",
          "content": "a2a84c59bef3796bb7f9c6f2ae8b7de8b905313ef28180ac3de7ff61dd68df3f"
        },
        {
          "alg": "SHA-512",
          "content": "48aed68de446dc550346b6746b1378d570aa0d1cdef04d49e1f1de55f3b625bbf5873f7caff6e55a0eee3d7fad1bec6046a9fdf6d2c65f61d1a82df9bb2b0342"
        },
        {
          "alg": "SHA-384",
          "content": "50e97cdd886a166f6a12eda030b11044492582307f3b37bd5f5ea97f6c4de1c01f3c2d535fb52dea7c325595e303c297"
        },
        {
          "alg": "SHA3-384",
          "content": "0ef419b322cd233172c94716b75d514c02ca990f708b7a4d9e08662aa6220071561788e5c3c2b09ed9b98442f380c272"
        },
        {
          "alg": "SHA3-256",
          "content": "39cc794427fe6fa645bcb7127d6dfa264ddbbfe6c5154458b415f6eb1a07d8e6"
        },
        {
          "alg": "SHA3-512",
          "content": "5a5e4626d06ea30c6f56382759688def90e95c595c9011f158d16b2d033896b1fb1123f79268b62c0c99f9bd387b24400a20185e540139cb9ba3caaf29e51370"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_common",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "80ee58e0fd6a13feacded45d0fc52f53"
        },
        {
          "alg": "SHA-1",
          "content": "dec00ef7c6155c4ca1109ec8248f7ff58d8f6cd3"
        },
        {
          "alg": "SHA-256",
          "content": "e84a784ac8e24f182ee62da80b6b5c8140774b75bfa4bf9cc3d3b8390db625f6"
        },
        {
          "alg": "SHA-512",
          "content": "506b8bb090bcccf020ba8dcbfec047d71927b400a06a0f2e669ee8c2b3746a3b2cd9abeb2b5562308367e93b643c4f239324943523d7b713b767137bd227baba"
        },
        {
          "alg": "SHA-384",
          "content": "917fbba98756ae774218480a9d1a028b97d185b52781c3d1d3006849a48e6a6bfbfab9ba6b524e97ed6efd1371dab51e"
        },
        {
          "alg": "SHA3-384",
          "content": "93a993bb7058582832f81656e1c8fe5ded242ced8f791225089d861801fc6be62f74de9b7ddc164f95fac267bb0aeccb"
        },
        {
          "alg": "SHA3-256",
          "content": "9fd8671d77d01cfdcc3bfa65dacebefbed8e72e63f13a524f40f4945fcf156f3"
        },
        {
          "alg": "SHA3-512",
          "content": "47c56b4f03f023c38e1af61591f7081a9dbe657f93c7b067089362e88054a03fadae12ed410e6c554e4faaca577f480f53e387f6e8488208b33fd8e779cb766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_common",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "group": "io.prometheus",
      "name": "simpleclient_tracer_otel_agent",
      "version": "0.16.0",
      "description": "The Prometheus Java Suite: Client Metrics, Exposition, and Examples",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c655a6b67747cebfc80375560a549059"
        },
        {
          "alg": "SHA-1",
          "content": "009d724771e339ff7ec6cd7c0cc170d3470904c5"
        },
        {
          "alg": "SHA-256",
          "content": "7ad2bb40df74a772d9f5445a3d03579b49d6b37a47d5e90f6cf3f59ecf41ad06"
        },
        {
          "alg": "SHA-512",
          "content": "e4b6a97354c32675069cf644e97a21c797875d5c855940ec169baf552f2858b413b2dae5da7ba43c75eda7c021c6695a21fda8fe7441a87bb9a07773cd63def8"
        },
        {
          "alg": "SHA-384",
          "content": "7f8632749d3b2b5a1197e5ca5fd73be9f8a3843a3c0d9eef38fac0203a41d168f77762413594cd63155743197300a8d9"
        },
        {
          "alg": "SHA3-384",
          "content": "743de884471ef70418bb93f876ac6b6bca294ae9eae6fd7f4be93fb5ebc93512f1ab45fe54fc54f281747821a0b54384"
        },
        {
          "alg": "SHA3-256",
          "content": "50834225cefc4d290ead0d5d9660bac8c28d78cc3cf6fd230cab92896aba9e51"
        },
        {
          "alg": "SHA3-512",
          "content": "922397ce19decd78caba0a17b0a8b87365108cb66a2b3768df2f235bc3868eb46cdd90f09d7e8b59cf18e008d48c1d8963a2c28dafad2f26f048c38569f46baf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "externalReferences": [
        {
          "url": "http://github.com/prometheus/client_java/simpleclient_tracer/simpleclient_tracer_otel_agent",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.awaitility/awaitility@4.2.0?type=jar",
      "group": "org.awaitility",
      "name": "awaitility",
      "version": "4.2.0",
      "description": "A Java DSL for synchronizing asynchronous operations",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8f3644827b9e3037de42068c57006260"
        },
        {
          "alg": "SHA-1",
          "content": "2c39784846001a9cffd6c6b89c78de62c0d80fb8"
        },
        {
          "alg": "SHA-256",
          "content": "2d23b79211fdd19036f6940cc783543779320aaf86f38d6e385a2ff26da41272"
        },
        {
          "alg": "SHA-512",
          "content": "4c422b4aef3dfceb040898f45cd1b2efb7bbf213ef9487334a0d0e674e494e120fef61348f8a81ce726f2f66dc426e133917de20c52b5d39d792e2dca7bc82d8"
        },
        {
          "alg": "SHA-384",
          "content": "11d15d6efb32707cae528eefb8fa4ab7820649ed528c3447660efd984518ee2906421af5ee76ea8181c904d594e8e719"
        },
        {
          "alg": "SHA3-384",
          "content": "71eff4441379fb1d13bec42264d48dd1ed4817c7a226a4ef1e5255e5afcc8e5e61aa92677ae98fdce2bf4824b4dbe4fc"
        },
        {
          "alg": "SHA3-256",
          "content": "4fc8b38b34625336be520d2be1edcab4c8dd8e0667fecb2aa6aea83b9bad7f28"
        },
        {
          "alg": "SHA3-512",
          "content": "074f8629ab499c28155e505513e0a25c83ce722747d196966eac6327de604853503ca5f54b84effe8e2e3ab78d9ce285bdba82bf738ff8bff0f1009549230521"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.awaitility/awaitility@4.2.0?type=jar",
      "externalReferences": [
        {
          "url": "http://awaitility.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "",
          "type": "issue-tracker"
        },
        {
          "url": "http://groups.google.com/group/awaitility/topics",
          "type": "mailing-list"
        },
        {
          "url": "http://github.com/awaitility/awaitility/tree/master/awaitility",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/us.springett/alpine-executable-war@2.2.4?type=jar",
      "group": "us.springett",
      "name": "alpine-executable-war",
      "version": "2.2.4",
      "description": "An opinionated scaffolding library that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "555013a37d8c78c5dbf8ba76a89dc2fb"
        },
        {
          "alg": "SHA-1",
          "content": "a7b6af7e9d83840ef15d7b51389d5998dc982c5c"
        },
        {
          "alg": "SHA-256",
          "content": "d07f4e57c18a0b2e305ce17efe03d9b4a5a07f6d7d63b6ff4a8ff84c1353e0b4"
        },
        {
          "alg": "SHA-512",
          "content": "b02bb4a722b2ebe57a18375ab64bbb253c409952523e9b17f09a8f04e4e878d706c95521829ccd018b8d64dbc63e560e6edcef992609f85e44dcc99c3917fc02"
        },
        {
          "alg": "SHA-384",
          "content": "d54ed59673104e382b51b548fb44f443456c42bfc80a962efdcb9fa72682c4a4f9c45b46b3f3e470ceb8b0d876671976"
        },
        {
          "alg": "SHA3-384",
          "content": "243ca3195838e021e41d8c25404ee61cf7a7fb76bc3801ac996751290998d4b83888b386129050176c73c0ba42237a6b"
        },
        {
          "alg": "SHA3-256",
          "content": "3fcc982853d588953073a0da998c75388ec86715ed8d4281b9a5d3a6d6c4c4e0"
        },
        {
          "alg": "SHA3-512",
          "content": "fa3d4523c7098345e21d4869b8ad4b248557f0e335662e3b88749cd5587b71b2d89f421898e14b51ea181eb22e77a88cf945225b64287ed4101ebcbddd7d63a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl": "pkg:maven/us.springett/alpine-executable-war@2.2.4?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/stevespringett/Alpine/alpine-executable-war",
          "type": "website"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/actions",
          "type": "build-system"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/stevespringett/Alpine/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/stevespringett/Alpine.git/alpine-executable-war",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.18?type=jar",
      "publisher": "Webtide",
      "group": "org.eclipse.jetty",
      "name": "jetty-deploy",
      "version": "10.0.18",
      "description": "Jetty deployers",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "afd923b44024c954dfa118b9fbfb70ec"
        },
        {
          "alg": "SHA-1",
          "content": "f3082fe22cb2976cff445e8048e97308c5c6b01b"
        },
        {
          "alg": "SHA-256",
          "content": "d77edc15c4dc13b891a4d473703ccde57762b17af956432bd62ff2d1d6b7ddf5"
        },
        {
          "alg": "SHA-512",
          "content": "bb2294bdb057a947b418c1274d65a4fab29b9aab2468a76c6c76bdad587b551d7c49ccb291bbf71ad399c0aa8fd2501035047fe23e39f29e2691ced4ebb1d8e9"
        },
        {
          "alg": "SHA-384",
          "content": "beb188d679c9cf83b23a4d330e937c3d35ba75886702cce1e440441d6fab7199d3e906ba907a132a20dcf73e4b3a45a0"
        },
        {
          "alg": "SHA3-384",
          "content": "f99cb6288379941186f9f3c5f3564a1c6907325db4a4a691f2e7cfff508a787372988b62c9fafcefc93611e2dba43951"
        },
        {
          "alg": "SHA3-256",
          "content": "e080c4dad4cae66f477c1b1cfce5078da8c0120c80486d50b2b6bd1b0c72a384"
        },
        {
          "alg": "SHA3-512",
          "content": "23dd6b55d5ad3a4ceba94d5dc995c2befcb83a103706b5f92662a0ec72d818fbf75cf408f5ac66e79396541116b046a494d24d0de8051cac4b00de1ad5f19752"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "EPL-2.0"
          }
        },
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.18?type=jar",
      "externalReferences": [
        {
          "url": "https://eclipse.dev/jetty/jetty-deploy",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://www.eclipse.org/lists/jetty-dev/",
          "type": "mailing-list"
        },
        {
          "url": "https://github.com/eclipse/jetty.project/jetty-deploy",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jul-to-slf4j",
      "version": "1.7.36",
      "description": "JUL to SLF4J bridge",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "2a3fe73e6cafe8f102facaf2dd65353f"
        },
        {
          "alg": "SHA-1",
          "content": "ed46d81cef9c412a88caef405b58f93a678ff2ca"
        },
        {
          "alg": "SHA-256",
          "content": "9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de"
        },
        {
          "alg": "SHA-512",
          "content": "0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea"
        },
        {
          "alg": "SHA-384",
          "content": "50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f"
        },
        {
          "alg": "SHA3-384",
          "content": "4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf"
        },
        {
          "alg": "SHA3-256",
          "content": "8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6"
        },
        {
          "alg": "SHA3-512",
          "content": "e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/jul-to-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "publisher": "QOS.ch",
      "group": "org.slf4j",
      "name": "jcl-over-slf4j",
      "version": "1.7.36",
      "description": "JCL 1.2 implemented over SLF4J",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "8065610cde33ed9fd5d34367912c1938"
        },
        {
          "alg": "SHA-1",
          "content": "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
        },
        {
          "alg": "SHA-256",
          "content": "ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195"
        },
        {
          "alg": "SHA-512",
          "content": "ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148"
        },
        {
          "alg": "SHA-384",
          "content": "618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a"
        },
        {
          "alg": "SHA3-384",
          "content": "95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40"
        },
        {
          "alg": "SHA3-256",
          "content": "7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb"
        },
        {
          "alg": "SHA3-512",
          "content": "da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "externalReferences": [
        {
          "url": "http://www.slf4j.org",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/qos-ch/slf4j/jcl-over-slf4j",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-common",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "9f11b84aefd2f2dcf48f8443a6213619"
        },
        {
          "alg": "SHA-1",
          "content": "4717c0c2225a2aad898b2fbdf717ec6e034d48f8"
        },
        {
          "alg": "SHA-256",
          "content": "ef9c6e4fefcf8ffcee7590239a8e8c56b192fc71c183fd8a943cf177e01b07eb"
        },
        {
          "alg": "SHA-512",
          "content": "d30fa0cce5b75758289a255946f165418786d96c5de3dbb12084d6da6bb75e556e43e002050ea114e3adb0ca15dc16e28b6218f5b2fcf993eadcb37076fb522a"
        },
        {
          "alg": "SHA-384",
          "content": "f10fbb5250849634a79477a536eb7f4a07aa66d5d1234e18caf5dbd2ab9473a4e26baa4fe381af9240eb6f9471cbb937"
        },
        {
          "alg": "SHA3-384",
          "content": "fee72e5c1e41740264f6d0f1fcfd72731c92df25af3d529509a006ce8330430390ab1139b8798c8cd6b78bcc0656d4e4"
        },
        {
          "alg": "SHA3-256",
          "content": "2c7bf9e688071240437f106b05955c298c9ee42f6c119cd918460af5a3a82a48"
        },
        {
          "alg": "SHA3-512",
          "content": "0ff1a2d6da110ca1a1713b052bab481bf052033e9cef7362a69a30e485d4a8ae8ba78ecd02278f4f81558d9cd2f12402108f82668754eade77fde3670433740c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "group": "org.owasp",
      "name": "security-logging-logback",
      "version": "1.1.7",
      "description": "The OWASP Security Logging project provides developers and ops personnel with APIs for logging security-related events.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "c1148e1a96d53351f39b407185a59e06"
        },
        {
          "alg": "SHA-1",
          "content": "e609fe8531b96fcd559c9e146342aa3a56d16231"
        },
        {
          "alg": "SHA-256",
          "content": "100f5e85cbf9cf395983d85355cc17ed1d19d77176d93c58a14f339e62382168"
        },
        {
          "alg": "SHA-512",
          "content": "9bdb7df787ae5264e509082aa3b6f865ec543801587270eb582c3cb430a15f019c24a25e5a1d4df462a2dec0e6e82ce636807b055d5e72b73d67d90805e9e5d1"
        },
        {
          "alg": "SHA-384",
          "content": "8502c6a84746dfd8b9960d599cd476dd3b2c0017b2e8eba169411f7adbfea4236323ada03cb7e005812456976e673a7b"
        },
        {
          "alg": "SHA3-384",
          "content": "283c28b7760973dc0195fcd2127294c4c77a2a8c95bcc597401f00ffbd8c5367788ae9c9b6874deac178526fe93c1265"
        },
        {
          "alg": "SHA3-256",
          "content": "5a2f21e6fe6fe4bc45c439d7dbb5a16d07cc56ecf15b10a60125ee777bac1122"
        },
        {
          "alg": "SHA3-512",
          "content": "f2fa575c8838d7dcb5d11678cff9afaeb65d3bb227f501cf86541e4131c7a3cb72921d8ff8d28f91f7a6d5d3ac08d579f1fba73e8a7627c7a46371ed0a62fad9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "externalReferences": [
        {
          "url": "https://www.owasp.org/index.php/OWASP_Security_Logging_Project",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/javabeanz/owasp-security-logging",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@7.3?type=jar",
      "group": "net.logstash.logback",
      "name": "logstash-logback-encoder",
      "version": "7.3",
      "description": "Provides logback encoders, layouts, and appenders to log in JSON and other formats supported by Jackson",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "1346d447a9139e684ec77afc946f32b9"
        },
        {
          "alg": "SHA-1",
          "content": "384f46df49a9b06bf2058648df20b3c83e5f8dd4"
        },
        {
          "alg": "SHA-256",
          "content": "73615f6e7a959c32021b5f59a5823ac252740773b17ee4d58652acdb2e4749e5"
        },
        {
          "alg": "SHA-512",
          "content": "229b7486f0017d7886104fde93f79ce17fdca584ec90337f03727b44bcd89c84adda13ce1bafe6d64a944cf313fbc13885bc90988b2cc612c891e4d05cc1d6f7"
        },
        {
          "alg": "SHA-384",
          "content": "665a9022239658248458d93b78a4a2c6a0a81ad7eba9cf58e22461a54b03ea536d7638177f900895477400d76767515c"
        },
        {
          "alg": "SHA3-384",
          "content": "8cd3cdb247142008e4ae61007362b2bb86c6e60c7f40a140d9a26cea37d4638d3a5de05a99b52017f4d4260c2136dd80"
        },
        {
          "alg": "SHA3-256",
          "content": "7907b0064105305b4bef52becabc5f1cb1a985c4e4db1c29cd40596eca4d647b"
        },
        {
          "alg": "SHA3-512",
          "content": "6caa3b08180a7d9e8ca0321e13c703c90a5cd72afb1bc24dd18620aa472dccae92a470cc733b6e75480497f2f74b1b404be5c3a03595ee92a6e217e5dc2a6f4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        },
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:maven/net.logstash.logback/logstash-logback-encoder@7.3?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "website"
        },
        {
          "url": "https://github.com/logfellow/logstash-logback-encoder",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-core",
      "version": "2.15.2",
      "description": "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "e51fdee85b48e6637ad9e85ee76b58df"
        },
        {
          "alg": "SHA-1",
          "content": "a6fe1836469a69b3ff66037c324d75fc66ef137c"
        },
        {
          "alg": "SHA-256",
          "content": "303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4"
        },
        {
          "alg": "SHA-512",
          "content": "a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6"
        },
        {
          "alg": "SHA-384",
          "content": "22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e"
        },
        {
          "alg": "SHA3-384",
          "content": "bf7f6d6d6898978d2ca11e924f0268a90adbb6f6f88b1402e7c96b6fba76ff4e7d83ba163d10b1c551443c3b3cdef9d2"
        },
        {
          "alg": "SHA3-256",
          "content": "fa5ecb4b5ab9884403d5001dd368be876e10daf90e91fccfdf6fb21f14563c15"
        },
        {
          "alg": "SHA3-512",
          "content": "1e8648a4c8aac64f0f71787ec6dd4693a30fe0e3c1fb78ce12b2a1865d17d7f9788c085ed1ac1216e45c05f582a0764d8fee44cf18cc90403846d255fe778c7b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-core",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-annotations",
      "version": "2.15.2",
      "description": "Core annotations used for value types, used by Jackson data binding package.",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "71dabcaac955a8bd17b5bba6580aac5b"
        },
        {
          "alg": "SHA-1",
          "content": "4724a65ac8e8d156a24898d50fd5dbd3642870b8"
        },
        {
          "alg": "SHA-256",
          "content": "04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f"
        },
        {
          "alg": "SHA-512",
          "content": "c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537"
        },
        {
          "alg": "SHA-384",
          "content": "78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb"
        },
        {
          "alg": "SHA3-384",
          "content": "f5b8fcedd6d34427bbe32b1c6082b49d9ded5a00b69549cd6722ffad7d87f3e90b48ddc74a8bd0dec1987ebac73df3a7"
        },
        {
          "alg": "SHA3-256",
          "content": "b4e4df4be6fe975483027aef5d4df099d8bf6dd5974118d118a47775d5f75a88"
        },
        {
          "alg": "SHA3-512",
          "content": "d10fdee33fe005f9941851117e7021fae066ca3ddf2ccbbd048dae103f3cb540e11116ba53fe48b34bbab6fcfe09a6cbc6c50d1bc74893509e8b93a6c6f2c517"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-annotations",
          "type": "vcs"
        }
      ]
    },
    {
      "type": "library",
      "bom-ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "publisher": "FasterXML",
      "group": "com.fasterxml.jackson.core",
      "name": "jackson-databind",
      "version": "2.15.2",
      "description": "General data-binding functionality for Jackson: works on core streaming API",
      "scope": "required",
      "hashes": [
        {
          "alg": "MD5",
          "content": "20ac0d0526a456274409fa852eb74087"
        },
        {
          "alg": "SHA-1",
          "content": "9353b021f10c307c00328f52090de2bdb4b6ff9c"
        },
        {
          "alg": "SHA-256",
          "content": "0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96"
        },
        {
          "alg": "SHA-512",
          "content": "edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2"
        },
        {
          "alg": "SHA-384",
          "content": "cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec"
        },
        {
          "alg": "SHA3-384",
          "content": "c4a29f5075cc31b52aabfc8f656ee761b075954fe89469e76aef7a563d93ee71653310967b68f89ce25ed26241c0bda9"
        },
        {
          "alg": "SHA3-256",
          "content": "400677b87f766708abe38aea66c8564cb422cd271208e926a0c2eac99b64cd92"
        },
        {
          "alg": "SHA3-512",
          "content": "0a02353d0afa97f7cb85f1f81ee221cf4425fbde1e2d1b6b7bd8fe0d5d2fcb5dbba8b6fe9c79b500c71fdac8accb77eccebe0853fd8c37bd34aa578796b8a81a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0"
          }
        }
      ],
      "purl": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "externalReferences": [
        {
          "url": "https://github.com/FasterXML/jackson",
          "type": "website"
        },
        {
          "url": "https://oss.sonatype.org/service/local/staging/deploy/maven2/",
          "type": "distribution"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind/issues",
          "type": "issue-tracker"
        },
        {
          "url": "https://github.com/FasterXML/jackson-databind",
          "type": "vcs"
        }
      ]
    }
  ],
  "services": [
    {
      "bom-ref": "service:gov.nist.nvd",
      "provider": {
        "name": "National Institute of Standards and Technology (NIST)",
        "url": [
          "https://nist.gov"
        ],
        "contact": [
          {
            "email": "nvd@nist.gov"
          }
        ]
      },
      "group": "gov.nist.nvd",
      "name": "National Vulnerability Database (NVD)",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://nvd.nist.gov/feeds"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public domain"
          }
        }
      ]
    },
    {
      "bom-ref": "service:org.sonatype.ossindex",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ],
        "contact": [
          {
            "email": "ossindex@sonatype.org"
          }
        ]
      },
      "group": "org.sonatype.ossindex",
      "name": "OSS Index",
      "description": "The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics.",
      "endpoints": [
        "https://ossindex.sonatype.org/api/v3/component-report",
        "https://ossindex.sonatype.org/api/v3/version"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.cyberriskanalytics.vulndb",
      "provider": {
        "name": "Risk Based Security",
        "url": [
          "https://riskbasedsecurity.com/"
        ],
        "contact": [
          {
            "email": "support@riskbasedsecurity.com"
          },
          {
            "email": "sales@riskbasedsecurity.com",
            "phone": "1-855-RBS-RISK"
          }
        ]
      },
      "group": "com.cyberriskanalytics.vulndb",
      "name": "VulnDB",
      "description": "VulnDB is the most comprehensive and timely vulnerability intelligence available and provides actionable information about the latest in security vulnerabilities via an easy-to-use SaaS Portal, or a RESTful API that allows easy integration into GRC tools and ticketing systems. VulnDB allows organizations to search and be alerted on the latest vulnerabilities, both in end-user software and the 3rd Party Libraries or dependencies. A subscription to VulnDB provides organizations with simple to understand ratings and metrics on their vendors and products, and how each contributes to the organization\u2019s risk-profile and cost of ownership.",
      "endpoints": [
        "https://vulndb.cyberriskanalytics.com/api/v1/account_status",
        "https://vulndb.cyberriskanalytics.com/api/v1/vendors/",
        "https://vulndb.cyberriskanalytics.com/api/v1/products/",
        "https://vulndb.cyberriskanalytics.com/api/v1/versions/by_product_id",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/",
        "https://vulndb.cyberriskanalytics.com/api/v1/vulnerabilities/find_by_cpe"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.github.api",
      "provider": {
        "name": "GitHub",
        "url": [
          "https://github.com/"
        ]
      },
      "group": "com.github.api",
      "name": "GitHub Advisories",
      "description": "Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.",
      "endpoints": [
        "https://api.github.com/graphql"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.crates",
      "provider": {
        "name": "Crates.io",
        "url": [
          "https://crates.io"
        ]
      },
      "group": "io.crates",
      "name": "Crates.io",
      "description": "The Rust community\u2019s crate registry",
      "endpoints": [
        "https://crates.io/api/v1/crates"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.packagist.repo",
      "provider": {
        "name": "Packagist",
        "url": [
          "https://packagist.org"
        ]
      },
      "group": "org.packagist.repo",
      "name": "Crates.io",
      "description": "The PHP Package Repository",
      "endpoints": [
        "https://repo.packagist.org/p/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.rubygems",
      "provider": {
        "name": "RubyGems",
        "url": [
          "https://rubygems.org"
        ]
      },
      "group": "org.rubygems",
      "name": "RubyGems",
      "description": "RubyGems.org is the Ruby community\u2019s gem hosting service.",
      "endpoints": [
        "https://rubygems.org/api/v1/versions"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.golang.proxy",
      "provider": {
        "name": "Google",
        "url": [
          "https://go.dev/"
        ]
      },
      "group": "org.golang.proxy",
      "name": "Go Module Mirror, Index, and Checksum Database",
      "description": "The Go team is providing the following services run by Google: a module mirror for accelerating Go module downloads, an index for discovering new modules, and a global go.sum database for authenticating module content.",
      "endpoints": [
        "https://proxy.golang.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:pm.hex",
      "provider": {
        "name": "Six Colors AB.",
        "url": [
          "https://hex.pm"
        ],
        "contact": [
          {
            "name": "Eric Meadows-J\u00F6nsson",
            "phone": "\u002B46 070-893 94 01"
          }
        ]
      },
      "group": "pm.hex",
      "name": "hex",
      "description": "The package manager for the Erlang ecosystem.",
      "endpoints": [
        "https://hex.pm/api/packages"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.maven.repo1",
      "provider": {
        "name": "Sonatype",
        "url": [
          "https://sonatype.com"
        ]
      },
      "group": "org.maven.repo1",
      "name": "Maven Central",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repo1.maven.org/maven2"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.atlassian.maven",
      "provider": {
        "name": "Atlassian",
        "url": [
          "https://atlassian.com"
        ]
      },
      "group": "com.atlassian.maven",
      "name": "Atlassian Public",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://packages.atlassian.com/content/repositories/atlassian-public/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.jboss.repository",
      "provider": {
        "name": "RedHat",
        "url": [
          "https://redhat.com"
        ]
      },
      "group": "org.jboss.repository",
      "name": "JBoss Releases",
      "description": "Package repository for the Java ecosystem.",
      "endpoints": [
        "https://repository.jboss.org/nexus/content/repositories/releases/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.clojars.repo",
      "provider": {
        "name": "Clojars",
        "url": [
          "https://clojars.org/"
        ]
      },
      "group": "org.clojars.repo",
      "name": "Clojars",
      "description": "Clojars is an easy to use community repository for open source Clojure libraries",
      "endpoints": [
        "https://repo.clojars.org/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:com.google.maven",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "com.google.maven",
      "name": "Google\u0027s Maven Repository",
      "endpoints": [
        "https://maven.google.com/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.npmjs.registry",
      "provider": {
        "name": "npm",
        "url": [
          "https://www.npmjs.com/"
        ]
      },
      "group": "org.npmjs.registry",
      "name": "NPM Registry",
      "description": "Package repository for the Node.js and JavaScript ecosystems.",
      "endpoints": [
        "https://registry.npmjs.org/-/package/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.nuget.api",
      "provider": {
        "name": "Microsoft",
        "url": [
          "https://www.microsoft.com/"
        ],
        "contact": [
          {
            "email": "support@nuget.org"
          }
        ]
      },
      "group": "org.nuget.api",
      "name": "NuGet Registry",
      "description": "Package repository for the .NET ecosystem.",
      "endpoints": [
        "https://api.nuget.org/v3-flatcontainer/",
        "https://api.nuget.org/v3/registration3/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:dev.osv",
      "provider": {
        "name": "Google",
        "url": [
          "https://google.com"
        ]
      },
      "group": "dev.osv",
      "name": "OSV",
      "description": "OSV is a distributed vulnerability database for Open Source",
      "endpoints": [
        "https://osv-vulnerabilities.storage.googleapis.com"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:org.pypi",
      "provider": {
        "name": "Python Software Foundation",
        "url": [
          "https://www.python.org/psf/"
        ],
        "contact": [
          {
            "email": "psf@python.org"
          }
        ]
      },
      "group": "org.pypi",
      "name": "PyPI",
      "description": "The Python Package Index (PyPI) is a repository of software for the Python programming language.",
      "endpoints": [
        "https://pypi.org/pypi/"
      ],
      "authenticated": false,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    },
    {
      "bom-ref": "service:io.snyk",
      "provider": {
        "name": "Snyk",
        "url": [
          "https://snyk.io"
        ]
      },
      "group": "io.snyk",
      "name": "Snyk",
      "description": "Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer\u0027s toolkit.",
      "endpoints": [
        "https://api.snyk.io"
      ],
      "authenticated": true,
      "x-trust-boundary": true,
      "data": [
        {
          "flow": "inbound",
          "classification": "public"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.dependencytrack/dependency-track@4.10.1?type=war",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-infra@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-server@2.2.4?type=jar",
        "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
        "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
        "pkg:maven/us.springett/cpe-parser@2.1.0?type=jar",
        "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.0.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar",
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
        "pkg:maven/org.json/json@20231013?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
        "pkg:maven/io.github.jeremylong/open-vulnerability-clients@5.1.0?type=jar",
        "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
        "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
        "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
        "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.4.2.jre11?type=jar",
        "pkg:maven/com.mysql/mysql-connector-j@8.0.33?type=jar",
        "pkg:maven/org.postgresql/postgresql@42.6.0?type=jar",
        "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.15.0?type=jar",
        "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.15.0?type=jar",
        "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.15.0?type=jar",
        "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.1.0?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.9?type=jar",
        "pkg:maven/org.kohsuke/github-api@1.318?type=jar",
        "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
        "pkg:maven/us.springett/alpine-executable-war@2.2.4?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@7.3?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.11.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.11.4?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-commons@1.10.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_common@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
        "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.16.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.prometheus/simpleclient_tracer_common@0.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.41?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
        "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.transaction/javax.transaction-api@1.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.corba/glassfish-corba-omgapi@4.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
        "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar",
        "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
        "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/osgi-resource-locator@1.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.41?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.core/jersey-client@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar",
        "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
        "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jboss.logging/jboss-logging@3.4.1.Final?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml/classmate@1.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-infra@2.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.3?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-server@2.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/us.springett/alpine-common@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-infra@2.2.4?type=jar",
        "pkg:maven/us.springett/alpine-model@2.2.4?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-client@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-bean-validation@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.41?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
        "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
        "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
        "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.11?type=jar",
        "pkg:maven/org.datanucleus/javax.jdo@3.2.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-api-jdo@6.0.1?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-core@6.0.3?type=jar",
        "pkg:maven/org.datanucleus/datanucleus-rdbms@6.0.3?type=jar",
        "pkg:maven/com.zaxxer/HikariCP@5.0.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/com.h2database/h2@2.2.224?type=jar",
        "pkg:maven/io.jsonwebtoken/jjwt@0.9.1?type=jar",
        "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
        "pkg:maven/com.nimbusds/oauth2-oidc-sdk@10.15?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
        "pkg:maven/net.logstash.logback/logstash-logback-encoder@7.3?type=jar",
        "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@3.1?type=jar",
        "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
        "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
        "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.core/jersey-server@2.41?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-json-jackson@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.41?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.ext/jersey-entity-filtering@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.jvnet.mimepull/mimepull@1.9.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jersey.inject/jersey-hk2@2.41?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.jersey.core/jersey-common@2.41?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-locator@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-api@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
        "pkg:maven/org.glassfish.hk2.external/aopalliance-repackaged@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.hk2/hk2-utils@2.6.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.glassfish.hk2.external/jakarta.inject@2.6.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn": [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-core@2.3.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.xml.bind/jaxb-impl@2.3.6?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/javax.json/javax.json-api@1.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish/javax.json@1.1.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-jersey2-jaxrs@1.6.11?type=jar",
      "dependsOn": [
        "pkg:maven/io.swagger/swagger-jaxrs@1.6.11?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
        "pkg:maven/org.glassfish.jersey.containers/jersey-container-servlet-core@2.41?type=jar",
        "pkg:maven/org.glassfish.jersey.media/jersey-media-multipart@2.41?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-jaxrs@1.6.11?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/io.swagger/swagger-core@1.6.11?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
        "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-core@1.6.11?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar",
        "pkg:maven/io.swagger/swagger-models@1.6.11?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.yaml/snakeyaml@2.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-models@1.6.11?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.swagger/swagger-annotations@1.6.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.swagger/swagger-annotations@1.6.11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
        "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.reflections/reflections@0.10.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.javassist/javassist@3.29.2-GA?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.h2database/h2@2.2.224?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.mindrot/jbcrypt@0.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/oauth2-oidc-sdk@10.15?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
        "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
        "pkg:maven/net.minidev/json-smart@2.4.11?type=jar",
        "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.30.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/content-type@2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.minidev/json-smart@2.4.11?type=jar",
      "dependsOn": [
        "pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/lang-tag@1.7?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.nimbusds/nimbus-jose-jwt@9.30.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
      "dependsOn": [
        "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.owasp/security-logging-logback@1.1.7?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp/security-logging-common@1.1.7?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
        "pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/net.logstash.logback/logstash-logback-encoder@7.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.microprofile.health/microprofile-health-api@3.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.owasp.encoder/encoder-jsp@1.2.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.owasp.encoder/encoder@1.2.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.sun.mail/jakarta.mail@1.6.7?type=jar",
      "dependsOn": [
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/us.springett/cvss-calculator@1.4.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/owasp-risk-rating-calculator@1.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/cpe-parser@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.cyclonedx/cyclonedx-core-java@8.0.3?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.15.3?type=jar",
        "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.package-url/packageurl-java@1.4.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.15.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.5.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.networknt/json-schema-validator@1.0.87?type=jar",
      "dependsOn": [
        "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.15.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.ethlo.time/itu@1.7.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.8?type=jar",
      "dependsOn": [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.glassfish.jaxb/txw2@2.3.8?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.json/json@20231013?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-analyzers-common@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queryparser@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
        "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-queries@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.lucene/lucene-sandbox@8.11.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.lucene/lucene-core@8.11.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.jeremylong/open-vulnerability-clients@5.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
        "pkg:maven/com.samskivert/jmustache@1.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.2.1?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar",
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.15.2?type=jar",
      "dependsOn": [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.samskivert/jmustache@1.15?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.pebbletemplates/pebble@3.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.unbescape/unbescape@1.1.6.RELEASE?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/oauth.signpost/signpost-core@2.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.httpcomponents/httpmime@4.5.14?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.apache.maven/maven-artifact@3.9.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.codehaus.plexus/plexus-utils@3.5.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.microsoft.sqlserver/mssql-jdbc@12.4.2.jre11?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.mysql/mysql-connector-j@8.0.33?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.postgresql/postgresql@42.6.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.checkerframework/checker-qual@3.31.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/mysql-socket-factory-connector-j-8@1.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.21?type=jar",
        "pkg:maven/org.ow2.asm/asm-util@9.6?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
        "pkg:maven/com.google.api-client/google-api-client@2.2.0?type=jar",
        "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20231108-2.0.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.20.0?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.20.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.34.1?type=jar",
        "pkg:maven/com.google.api/gax@2.37.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-unixsocket@0.38.21?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-enxio@0.32.16?type=jar",
        "pkg:maven/com.github.jnr/jnr-posix@3.1.18?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jffi@1.3.12?type=jar",
        "pkg:maven/com.github.jnr/jffi@1.3.12?classifier=native\u0026type=jar",
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
        "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
        "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
        "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.12?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jffi@1.3.12?classifier=native\u0026type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-commons@9.2?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-a64asm@1.0.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-x86asm@1.0.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-enxio@0.32.16?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar",
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.github.jnr/jnr-posix@3.1.18?type=jar",
      "dependsOn": [
        "pkg:maven/com.github.jnr/jnr-ffi@2.2.15?type=jar",
        "pkg:maven/com.github.jnr/jnr-constants@0.10.4?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.ow2.asm/asm-util@9.6?type=jar",
      "dependsOn": [
        "pkg:maven/org.ow2.asm/asm@9.4?type=jar",
        "pkg:maven/org.ow2.asm/asm-tree@9.6?type=jar",
        "pkg:maven/org.ow2.asm/asm-analysis@9.6?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
        "pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar",
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.grpc/grpc-context@1.27.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.grpc/grpc-context@1.27.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.opencensus/opencensus-contrib-http-util@0.31.1?type=jar",
      "dependsOn": [
        "pkg:maven/io.opencensus/opencensus-api@0.31.1?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.code.gson/gson@2.10.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.api-client/google-api-client@2.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/commons-codec/commons-codec@1.16.0?type=jar",
        "pkg:maven/com.google.oauth-client/google-oauth-client@1.34.1?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.42.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.oauth-client/google-oauth-client@1.34.1?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.http-client/google-http-client-apache-v2@1.42.3?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.apis/google-api-services-sqladmin@v1beta4-rev20231108-2.0.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.api-client/google-api-client@2.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-credentials@1.20.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.auth/google-auth-library-oauth2-http@1.20.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.auto.value/auto-value-annotations@1.10.4?type=jar",
        "pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar",
        "pkg:maven/com.google.auth/google-auth-library-credentials@1.20.0?type=jar",
        "pkg:maven/com.google.http-client/google-http-client@1.43.3?type=jar",
        "pkg:maven/com.google.http-client/google-http-client-gson@1.43.3?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.auto.value/auto-value-annotations@1.10.4?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.api/gax@2.37.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/postgres-socket-factory@1.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/com.google.cloud.sql/cloud-sql-connector-jdbc-sqlserver@1.15.0?type=jar",
      "dependsOn": [
        "pkg:maven/com.google.cloud.sql/jdbc-socket-factory-core@1.15.0?type=jar",
        "pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/xerces/xercesImpl@2.12.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.apache.commons/commons-compress@1.25.0?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-retry@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-micrometer@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.micrometer/micrometer-core@1.10.0?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-retry@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-ratelimiter@2.1.0?type=jar",
        "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.1.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-bulkhead@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-circuitbreaker@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/io.github.resilience4j/resilience4j-timelimiter@2.1.0?type=jar",
      "dependsOn": [
        "pkg:maven/io.github.resilience4j/resilience4j-core@2.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.9?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.kohsuke/github-api@1.318?type=jar",
      "dependsOn": [
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.13.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/pl.pragmatists/JUnitParams@1.1.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/us.springett/alpine-executable-war@2.2.4?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.18?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar",
        "pkg:maven/org.slf4j/log4j-over-slf4j@2.0.9?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-server@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/javax.servlet/javax.servlet-api@4.0.1?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-http@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-io@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-security@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-security@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-server@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.4.49.v20220914?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-util@9.4.49.v20220914?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.eclipse.jetty/jetty-deploy@10.0.18?type=jar",
      "dependsOn": [
        "pkg:maven/org.eclipse.jetty/jetty-webapp@9.4.49.v20220914?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.49.v20220914?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.awaitility/awaitility@4.2.0?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.awaitility/awaitility@4.2.0?type=jar",
      "dependsOn": [
        "pkg:maven/org.hamcrest/hamcrest@2.2?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.hamcrest/hamcrest@2.2?type=jar",
      "dependsOn": []
    },
    {
      "ref": "pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref": "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "dependsOn": [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    }
  ]
}