<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:3388b5af-2a1e-34d5-9cc3-e933f6138a8f" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2024-12-04T16:06:20Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-distribution-javadoc</name>
      <version>3.6.5</version>
      <description>Apache CXF JavaDoc</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-distribution-javadoc</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.6.5</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">904ae2f09ad0706fcfc162c87de3d163</hash>
        <hash alg="SHA-1">dd2f88233d2b73620dc28006305cfe9fec0a3d1a</hash>
        <hash alg="SHA-256">d1ab666d5f68f2bbb95f374489c2d0dcbf93dbe29aeaa2430c43b0178ddbc3f2</hash>
        <hash alg="SHA-512">a60033d48e15c529a96f870140dc76e426702f849b5972fdce819bee7bf95f8e55d71ee6d8407970a5c4209acf607e8d5ded060530d54164949953eacb09a848</hash>
        <hash alg="SHA-384">27cff06b5a846a0c357717069190b999a6c0d4bcc764d2955342d591adb6bf29e11a3be1ebc4a1fe35639c15242abccc</hash>
        <hash alg="SHA3-384">a19fddf8c50d35735f9415f42f01674a9dd30a08f5b80f9922be9851ed480e0af3e21afe6dfc603db68b2bff2f622e19</hash>
        <hash alg="SHA3-256">c7e1baeda59ae1c4f9eb4ce81c5812f236fdb6affa86cc80b0bafb1ff63306ff</hash>
        <hash alg="SHA3-512">ca3b2e1f3bd8ad4223db563a98fec240c69e54c3902f2638b524d0b88795a80206b35de87793799dabacb741d0370882f0bfce50eac6f75f985a970537489a20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
        <hash alg="SHA3-384">8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33</hash>
        <hash alg="SHA3-256">a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4</hash>
        <hash alg="SHA3-512">9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
        <hash alg="SHA3-384">07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d</hash>
        <hash alg="SHA3-256">5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e</hash>
        <hash alg="SHA3-512">6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-client</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c710b34458cbbf4a4215de145500e787</hash>
        <hash alg="SHA-1">48bd2c22e87e57841f62798421808d319794d25b</hash>
        <hash alg="SHA-256">ff17f4c8a9050758b10e8ddd2debe63e580c62c192dfab96c5ba96b002a2171b</hash>
        <hash alg="SHA-512">695a5ff4c890c66f14ba263a62804032bbec9cc63c93ae280eb0bcbf2752378291bd6fcb4ac1f669f4854c52aecf4fac546df54145174a64c07e5c1a5f72cf4c</hash>
        <hash alg="SHA-384">af9dd9255cbe853421a6065519be6db8f8f739ae8b0ef159901c865b810587c5df227025bcc4e0a67d61f5fcb5af7c8b</hash>
        <hash alg="SHA3-384">6b274ab4fdc2dc03e68163bd058ddff7bea579b38d539d0d1c6b06b85add28f8f9b86ab2c42ff0840ac2b245f29a32bc</hash>
        <hash alg="SHA3-256">d438b9a273deea759b719d3b4bd88b45303432a20e534252e134a02b99c909a0</hash>
        <hash alg="SHA3-512">72da06c859e47f0049982f669bd4c02ef8053fa64fd4aa68eb941e9e15868343010ce901e0baf5a121431684894b6e37ddf2bb9487b7d82e668b16e0f75e9f91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d38af2bf5070b5b2c04d33fb9ded9965</hash>
        <hash alg="SHA-1">d1c7c6b2137e85aa0078bed5e5ddc4515f8394bc</hash>
        <hash alg="SHA-256">0f0a78d8f1cd52ccca9e348d48524d334d7025f269deef04d55bce7be2545153</hash>
        <hash alg="SHA-512">2efa020d363d2923f8d3edce95247645d1cbbc8a2d43383257724d871608f90f7029ea22f5afe87b697f6e04c19b2909a01369a130b6907cb37b2e21689bef4f</hash>
        <hash alg="SHA-384">bafbc98d8e28f9f4ec0549fe509b25f1df2492db02e03eed1c12ae215a27b3beb5e96d78f55baaaddb8177cff408d549</hash>
        <hash alg="SHA3-384">1100b2a77b769f78e6e51d74096cfb070ae421598c3f662a710ec1129d78d6dde0648063cb07ab31a3c5b2a91ebd245d</hash>
        <hash alg="SHA3-256">70e23270771e346fc4d7164b08cee831423489fbbcac9ac046430630d6a0ae4b</hash>
        <hash alg="SHA3-512">d85fcbd6e01d17b1a0fa7e236889c4ea78cacada2fdf1556f9b5a57a5f4f8ddc4c5e6e31190efad5cd0094422a639997604384c80b95ec1dd12f2744ad48b037</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55fecb44781760685bb79b1b94d7198a</hash>
        <hash alg="SHA-1">5ee032dd5dcee7d957d535a4953fb66f433688b2</hash>
        <hash alg="SHA-256">de2726d47aafbb008f2ca8c4c3282c60f60d6100ab6846f21c4eb44d6389483b</hash>
        <hash alg="SHA-512">7e3bf3b70af5bd764cfeb4477d3e8b4c01f293487cfca15b01047bba575c330ffa9774eff5db76c2657df75548cc0bc21a687de1bbb489a35c1607b31d3d6cf9</hash>
        <hash alg="SHA-384">d7602a118af7a4368b0af7d5e05df07b2339e42fdd12be32b2b96338de66e50219cfaf2718b4b39d97a855f63f330433</hash>
        <hash alg="SHA3-384">e8dd3787b743ca20c344a58d9a1892906b17f9289d539060130d8f874f9963dac8c851a6c47cd87bdbf555ee9ea776d0</hash>
        <hash alg="SHA3-256">d91ff810e4b5ca62134cec624562a3a48bbdba69ec98cb4ae22edaf941bb29c4</hash>
        <hash alg="SHA3-512">6fa8982ed4aeab85453abedc12b4f3824b943027a6b312a981a26d999ffb1efc44039ecf38db5ee164413ded466c8e5b3b512f1ad7f096d5c21174e41042e3d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-websocket@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-websocket</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime WebSocket Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">568c3500de41e73547d063c829124589</hash>
        <hash alg="SHA-1">47d51edbdc8284994fb1cfaa6887b9f20dcdd19c</hash>
        <hash alg="SHA-256">dd0313f0ecceac81c1f8cd839236f566ce23589e8e9b8fc656302d457ac73e7b</hash>
        <hash alg="SHA-512">8fe1a497d36baf692ed79d4555c65ae62090985a905af777876dbe45f1780bfedca6e06d5c5b0776086154339a231eef9887b505deec753550e103583639f6f3</hash>
        <hash alg="SHA-384">80fca6b728a9c08e0bfe7a0c587c6aabd21a8d45046d1fffadb1136e76b7628e0247643be02a888af1cc4839fe51b228</hash>
        <hash alg="SHA3-384">87f4d71a90cfc03a3c4d895e0df01f55b2daf29a6442d3f324f87ca66b3a6b9d620ab7b8cbdd92b74e873edd797efa64</hash>
        <hash alg="SHA3-256">1ddf6ee56eab03815ab68a78eb4320ad3a042ae9d4ba3cac4d9cd2d2c129ffd3</hash>
        <hash alg="SHA3-512">5280b6100155d79415f4a4c40d626cceb710ce8b7eba78b0162bef89742c3a18e61d9820c476d4e42a5611c83d243bdac3851747d97721df923bf87cef3343fe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-websocket@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-websocket</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9ffebf7cb55b765e845ade5e891eea2a</hash>
        <hash alg="SHA-1">9effc008aa2505e9ded9183b92a5e2ba83b6e7a9</hash>
        <hash alg="SHA-256">573a597e476c8f1ce7300386e3e986ab48ae77417cc481239574275435aba7b5</hash>
        <hash alg="SHA-512">2d64cae37bbbf14bff04460a2f201e26e1eca77d6aef02c6f0e65b5850ad1c0adcb4e39cf6d96e4f4b32a4cf58ca6a5c35cd0b7ae0b43e216b0458b36dd41dba</hash>
        <hash alg="SHA-384">4a14f1c36d5e95ca87d38e236392f061190b1c7e71a41836481f533a60977f60e032221c153ff856ae167c5f9f0b4d28</hash>
        <hash alg="SHA3-384">37598a77033161bd43ab519bbdba3a205f4bea1353638f9a91e94534ba9b3697d1a17d41fd1e5b27457134f7fd1639f6</hash>
        <hash alg="SHA3-256">cc3b89ab8a78caa538e14b1e087972ea87287f0bd1405421a6602dfb2d39e623</hash>
        <hash alg="SHA3-512">4fd427ceaab57310eee3ded56a1dbc6f87462e7c416a2034ffdeef35a7b9f1a66a863fac326e079deec6d2e4e17fb35303c05a4c2bb85b6ec9f3b0e1a33f1bdb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-http-signature@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-http-signature</name>
      <version>3.6.5</version>
      <description>Integrate https://tools.ietf.org/html/draft-cavage-http-signatures-10 as JAX-RS filters for signing and
        verifying requests.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bbd7bc83dcbe313531d80dd44bf6450c</hash>
        <hash alg="SHA-1">fad4e6bc37bd1dfbeac258290eb0f0b6fd148457</hash>
        <hash alg="SHA-256">6fdcfc977ef8fa9da9ac5090ae56ccc2875eeba43f053c9ccdd6eb7d25c0bf43</hash>
        <hash alg="SHA-512">e771183f77b56a7c628b3dd6b6f4aa68f8f43a3da57728fef5953048a1155dd5b35a976ef12a4231952dbbbd396c8deae133e55a2cb4e9a0d62eb75c3c17fe7b</hash>
        <hash alg="SHA-384">e3ba1505bbf3cd1435e13506aad7af255d04ccbbd1ec4d211c868dafd4710ec12344c44faa33f0ac4233d82a12eddbd3</hash>
        <hash alg="SHA3-384">db58c94ed33100d300b628e577c86c752df4292f44c159677b1dcb031ddcbb08ea4862e22daf539d18b2fc3060bf784c</hash>
        <hash alg="SHA3-256">471bf9e3a887658d4cf305c27662ee7bb315eec10fe901b539ff38dee57c31f2</hash>
        <hash alg="SHA3-512">534ad8c64a3ba822fc9c5a525164f22cbfc0666d1b0cfa33f141fbd2edf3b229b20cc3cf797fcff126cf17ae33d9ee7812c8a29f694a1d316b94c976f0c80542</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-http-signature@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-http-signature</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tomitribe/tomitribe-http-signatures@1.8?type=jar">
      <publisher>Tomitribe Corporation</publisher>
      <group>org.tomitribe</group>
      <name>tomitribe-http-signatures</name>
      <version>1.8</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3611f747579050352f8543601b760c5f</hash>
        <hash alg="SHA-1">d396f578d4d3a3b8bb66202132b665ec2e59898b</hash>
        <hash alg="SHA-256">d1f527782cc4e7aae1b1b881941b2ac22bb2aadc2ace265b0dc65c6c04eb285d</hash>
        <hash alg="SHA-512">a683accde31f59002aef9b0d771e8ee77da5cb32427d3080ede1ac1f5b389f11ee81fc7352bd842f26fa4ed0954d09b760b9a795145891ac07c5a27585918576</hash>
        <hash alg="SHA-384">1a333dc870be2b0b983136be9fdd6586cd49d3204b9f93f2c9ad025dea7e9f9b8746340dde2bcfa109cc7e186d517ab4</hash>
        <hash alg="SHA3-384">5ae3e4286f7b471d39a08295e61fbc7f8d3d433d1ff006da6d5e5fc658e83da36204919dc015d60e5b9bd8603ce151da</hash>
        <hash alg="SHA3-256">8c36b73f76934b7493f47ba4df7458634d4a24553f8ebcb4faee43ebe42cd379</hash>
        <hash alg="SHA3-512">9ec688077c16c2954980a71097ca9808137779d42ced7304a6f9535e1f689750f24a49d66f0f936400d201cca8e77ba894f2ad7704e17f7a3a2a26f4a9cb6efe</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.tomitribe/tomitribe-http-signatures@1.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.tomitribe.com/tomitribe-http-signatures/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:tomitribe/http-signatures-java.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-jose</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime JOSE Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">202547edc5dd931a5449757a755ca691</hash>
        <hash alg="SHA-1">4c5bf005ab9b4ebee5cf4e2c8225e5214db204a2</hash>
        <hash alg="SHA-256">8636cb117269f08d5bfda6b5aeb703e064202f9c15e008a26604296fd5fe48e1</hash>
        <hash alg="SHA-512">c4032d57375743c037a654939282c0c103b6b343c6eeae7818a565415fe4e5adfc880684ee9c98cf9ccd5f9547a31cfc22d1db20066290718fd085ac520a44a0</hash>
        <hash alg="SHA-384">1b4dd9c2d7983087e73a0624fbe028ff0e07cf3bdd37b94eaec078180b0bafae16a572ab557a58fb8761a1f6d13b0176</hash>
        <hash alg="SHA3-384">b86f33aaca37c7feff235e333fb3c949cc3054a9b72bb99219675762bbe179328092505702d09f7a3eeb0ab0507706f1</hash>
        <hash alg="SHA3-256">b45ce4202598d606a52000dce0a3a238d8e0970e2642ad17ee163b7447bc8964</hash>
        <hash alg="SHA3-512">30aedb334664e9924a366ffdbabb969395d8417cfc42c3906bc2d7aafd373bdd74831646882cf4cfdffc9269c186b73458e7c9fb5316d5027d66987bc0bcb9a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-json-basic</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Extensions: JSON Basic</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">061e587f391725704f053214bff00514</hash>
        <hash alg="SHA-1">5a7a4b9149f6d282dc87634907d2f2afb60d3639</hash>
        <hash alg="SHA-256">a7d4af270941498e43a0c20c5d61632b6b1c16b3e2ba2826e79d0547a0ac7d95</hash>
        <hash alg="SHA-512">c9f4c880402b82b75c20cb4f9d9ff98cc7d51fd0fed8becd311890b4ffcf0d20501beb6f175982437696bc4d5764f9be372f9a4685708020142d576a47c307c1</hash>
        <hash alg="SHA-384">814c7fdce49120e2030eecbe514ce29c0a2c7935bd66f2d6a92648355a87e9e2ea8bb9b533b2b0f2339d952ceb6a0e89</hash>
        <hash alg="SHA3-384">1dbe42dde5088d8e1f6d6583eee48e07512024662768148a3a6af0a8201f95d7333985062e414e6b841ac267d142273b</hash>
        <hash alg="SHA3-256">ddca790be9a416cdce8cbb676a01091435cb25fe9e558203bd989241b55f2c6f</hash>
        <hash alg="SHA3-512">60bff5a9713a746dafa7838d3c380dbe7911f8db572f954474017c2cb338119f305eab586b1b1b7bd985d8e71065ea03db47ef46bbc2c803d2e4c7f64a5ff1ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-json-basic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-jose-jaxrs</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime JOSE JAX-RS</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">667c6bfad87a0527beecc1ee75519cc2</hash>
        <hash alg="SHA-1">f2fa28421f504f43e7f50b5e5167b036fa269a7b</hash>
        <hash alg="SHA-256">da4afee5001e0b2a6c2def6dbff02b574d11e423cd42b2ab2f7b7b449a6aafaf</hash>
        <hash alg="SHA-512">b0e2c6ab77aa79b636255d81a638714968f861385fb8fa1f9123ab46acb69b49cf07d16976c0fd64f63d7ff1072acd28a4197476c6fe2f4fe085486d743cc2ef</hash>
        <hash alg="SHA-384">a49867ef3abec7522a8ae52582ace353b151e5e338c6135f00dc1d1f69d7f5f99e4407113a6732117e357aef805b9b40</hash>
        <hash alg="SHA3-384">b1dff971d17c29c5719126eae72b9f97369cf408d4a8d67008662d4521cc84c9ab3aee933467f2293cbbdb94b4b6f925</hash>
        <hash alg="SHA3-256">5d628be770e79b8cef32d0a8dd2a6b1f91f888a4056f2c9f23c016d5da282daf</hash>
        <hash alg="SHA3-512">e2307118012942e9a65de3ac896d3c9a6b9c1b80689d3a8f03846394240dfe632d938a45dd5c24136bfbfdaf948272ecc632a6bb3bbe133fada70d6ae1b3927b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-oauth2</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime OAuth 2.0</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0dab2bead3d245b0fb9a1a13cccf9438</hash>
        <hash alg="SHA-1">e25060c16a49d6c9e09dc162aaa83481e5de92e7</hash>
        <hash alg="SHA-256">4fc13d771016ecb4df3de26f8b02ce6eaffe1f670728a6b61699dc41e64bdca0</hash>
        <hash alg="SHA-512">88e40ff048e091b8f2a78558457705ee0980c7164baf30d13a0931fed95aa0535cdae64844d93ebceff5594336d7853a964643e9817b07681c085dd824c51080</hash>
        <hash alg="SHA-384">dfd7fbec7d4ecdc02ad6870c3ad81fd5df36bd101c53b46845a9c200d2ab9ede1bc591e5e881929a31e4e92ae2ef0c55</hash>
        <hash alg="SHA3-384">bd6419cd34049a203fd7247b0d95f80ff9cfef6937f91351da5dc2fdd4c3e760e66e573845a188c068c9f13d259b2b36</hash>
        <hash alg="SHA3-256">230ca26e3f4d8d5ee37868e7008fdec6f5b1674e4ac7bf756451233fa971931c</hash>
        <hash alg="SHA3-512">ad3f3ae7a0ebcd10f7406b085bec591d51cfe14e2897aec72c6b01254538ecfa9e805a534fece56e185e448a3c8a9f0f9881f57fd342a60b782bbf93129438d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-oauth-parent/cxf-rt-rs-security-oauth2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2-saml@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-oauth2-saml</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime OAuth 2.0 SAML</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1880f264785c03ff06631b49d909d26b</hash>
        <hash alg="SHA-1">ea2af90e24e08a837297bff8781b1c51b80c4c0c</hash>
        <hash alg="SHA-256">5f1c42a2a836fc270be67ce7118165de077a80c394147216db1b1dec1b24f81c</hash>
        <hash alg="SHA-512">7f7339ee63c553c1cec3af5fa7a981cf7c16cbed00fa565dc7e73ed0c0042977dd69b4301af8eda9a95d1cec092ab68960b43eb5cf379b87af83e94a5628917d</hash>
        <hash alg="SHA-384">69917a83dd10e87b771345c40ca4b5883719508dcca8a592cf28e36d44309a84b83ff46409ea1429c0fb9a7c059225b2</hash>
        <hash alg="SHA3-384">f29c534e3bc1e30f0cc387efe7776a81e6159f8e39e2ae80e008cece0697f3e34bee89a0d2d4a33d3f0d57bf8f0b84f2</hash>
        <hash alg="SHA3-256">c4c7541f6f6ca9b5308ec41b2db2fdf83367436d207bc0f2aa79ccfa963399ea</hash>
        <hash alg="SHA3-512">2797fe0e99ed4eb94d1188f53e2264794e7028ec680da2da1bc91c0977a4dfb9ec670b3a311eabf6cd2f85e733a72d0ea4e0204fd778a5d45be9f32b2520122c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2-saml@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-oauth-parent/cxf-rt-rs-security-oauth2-saml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-security-xml</name>
      <version>3.6.5</version>
      <description>Apache CXF RS XML Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ff1fd88dd46db1dd5bc3d4073bbdadf3</hash>
        <hash alg="SHA-1">bbc6789ed30b3f8344e1c33216724467989f67e6</hash>
        <hash alg="SHA-256">a27ce99d1bd6a5ec4c2d2cf8f5392e0d0a18ba9e2395927560df83bb81d43906</hash>
        <hash alg="SHA-512">d05ed905e33ec2f34c78638e3d8bff82ff1ab67aab113a1d75721f0be591678412f93e8369d54c91c61c4774f2f1b8cc2fc0e0caf8a76463ad492912e926f01e</hash>
        <hash alg="SHA-384">a34798ab4c45c982d88694182d2690e9e396f0437e16233c0478fcd2808d7cb6e519193787b882fd0eb66c9ae013d5ed</hash>
        <hash alg="SHA3-384">4679c99d3bc4d4707d3bc2a7355506703118d3688cb22f018b140e256ac45c2ecdb204cfbce504e2df6acdfc42b52c5f</hash>
        <hash alg="SHA3-256">1fd024196e054988f6c0d0f6b2684f0f24b60c38a7884ec42907c21fdcf348de</hash>
        <hash alg="SHA3-512">470a35ac9865209937561ec2d2d3c75d92ce2a8cc201c4b8d545b9f7d32d3ebd96df0f5388d9f30cf227f1d7673a7c834af88fa6a7138814155027d073aac64a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security-saml</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime SAML Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e32bd67e6ff21645da3639df3881dae9</hash>
        <hash alg="SHA-1">64eed96f653223fc714f7207b63c72a001d6b251</hash>
        <hash alg="SHA-256">443d3b44b2ec9f67dc4dbb0c7a7485eff3241e6280f43a9f30e9ba3c3a9e3f28</hash>
        <hash alg="SHA-512">8e516e0097269e4127752b0cbc12220386abc30e605f89e7f0b2d946efef1d856c3826d60e9b065ff894c29b988b8067779d5e333c53a4330e960c2412682856</hash>
        <hash alg="SHA-384">b9d9aa034294330773b6e6c88b9b236069d90ba0c7b2511ab8113079620abdece3724be2001098978b45598a9b883bb3</hash>
        <hash alg="SHA3-384">9b9fde5acde2d55c551fa6f649d05db4b97f4df53bdbdb186f32bbc464d61a0e72a8bc0601b0f57e7b30bee6fc176256</hash>
        <hash alg="SHA3-256">5ee6aaf93ba0850c21e6e41c93ce8e2622f8d3f5590dfaa905c757ebfa358fa7</hash>
        <hash alg="SHA3-512">7066526cb442f97b7dd118da92a2a28ae87eadd7cfe391d88e01d6b34bde405271bdcc713bac6a179b9e26f16f2c878d6aa53a4a1f40bc7fbad23288e84ddecf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security-saml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f783564a05578dc16c181fb666f8ec5f</hash>
        <hash alg="SHA-1">f8ac30a6e5d9eb2b40c84399ba5948aa42566051</hash>
        <hash alg="SHA-256">c94278550f2011ad1e71679be3a6e0cdd4069652dbd65d2e85810ec890977a2e</hash>
        <hash alg="SHA-512">d6f8ddda939ecfa2c2710a45d26a64c1c0fe8e3525082095fff0ff5ecc2cbf494f0d639d7cc760cb1fe428df88946fedd1c8d875351b7fb70336e33eccd0cb32</hash>
        <hash alg="SHA-384">e26e9edbadaa07b4eb541f43ce0ba524a03b9fd01b2e27638418f4d19ff9156e7db078a981e2af6409f4b8876ed1ee82</hash>
        <hash alg="SHA3-384">8d9d72b1c52c480fca44471af5ae965c5eb280d1fe5286f32895ddb6c6dbfbb892f0b36d31102fd41b38bd52bbe36574</hash>
        <hash alg="SHA3-256">92dc2851b54ae4e42eb46668fda93902354ba3300ba9155cbfe682ad07c150bf</hash>
        <hash alg="SHA3-512">c08dac7b4ea94d0595b734b883386d54564e5af3933f92821233df34f1f78c587fd1bb075c341c65801fa56571117b805b0f5cd570eb757063f038c34ee8694d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-swagger</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description Swagger</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9925829e502f19812057f2e9b3b30ae2</hash>
        <hash alg="SHA-1">27324260d5148265c35cc0c826be48c9b7190fdc</hash>
        <hash alg="SHA-256">28cd940043e18913748b9a29bc3f3ba594c906917fc32c140a20bd4915e5aa16</hash>
        <hash alg="SHA-512">3a461cd7c065ceea9e32ab4acfa2bbe2f61eff42ef25e265162f1e5ff3a1ed1e432dc69921c7fa868c8905b30d94a33e220bf9b6753e2b61ef2ff5e50b424983</hash>
        <hash alg="SHA-384">c03c7fcb59dcc3059e03401e4c1af4f955c7a44b6a0397a3bd7d4a775c2244405cbef390a9bcc38321425f5b18faad50</hash>
        <hash alg="SHA3-384">ae9d746420f4e0cb9c390d32d35422a6147a118171df2364c61b31f994be1454a5f6c91da8e7940907475ea294accaa4</hash>
        <hash alg="SHA3-256">a364d3af0d96f7e106a45a2a353787d2aa49940fbd732910a8cf2eb209eb84c7</hash>
        <hash alg="SHA3-512">a1d7ee5ee08a530072280351a0c2bbaadad632e3f0127bf0199d4b0ef6abdeb364a6a440c81481a997cf04b9d210f232cde246a69f6dc2c43b70d01bbf540e89</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-swagger</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-common-openapi</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description OpenAPI/Swagger Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">662dc6202b241dff1bb1a8bbfbb71649</hash>
        <hash alg="SHA-1">3aaf43f6c0a36a5d7532c11fbb36268292c98821</hash>
        <hash alg="SHA-256">1152ebfba18b695ce5d89c808d50a0ab9aea5983259c1d6f3c3ce9958eb57870</hash>
        <hash alg="SHA-512">79ae71b1067b02fb149fd13d4ec859780ce3827d582778908b0dbfcb3bc992f62dac43d1209de0258ecb015b83f1fb7b074098c25cac722948023d2d0a3f95b1</hash>
        <hash alg="SHA-384">3a58f83060c988fe874b7a04d714d874890482740b581729975d2371a29b946e0faec482461f3c4b24b25254968c3831</hash>
        <hash alg="SHA3-384">cab0e96348a835a7b900d1d4f8eaf96c1837ad2f4dc71ae1cb8249947f6ea8ab02d226c7ebe7b1f8c346b0bc84f8a40c</hash>
        <hash alg="SHA3-256">8b45078257bda290ca350b4e5a5b360cf60cfada67cd8604a44cd12848985f5b</hash>
        <hash alg="SHA3-512">6a5655f91fe02d948fd1c244ea252659e56dbb53e2ed98cb83f7e7676e7c90db5d7bcf73b1b4e8b880edcd20d561207a58db712e5a7adc4ead28ae463cfb507b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-common-openapi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-swagger-ui</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description Swagger UI integration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3318eaf27052ba4ae5fa53d05ef4ada3</hash>
        <hash alg="SHA-1">26f4ed31fb1643cdcea862e83848e01260bdf94b</hash>
        <hash alg="SHA-256">72c267a442c000e46a3554288376797872b597d11645138890ae26a3fc5edab1</hash>
        <hash alg="SHA-512">c166604196be9b2913033314eb6de822165b271d4e9403e5794da15b5f325ccfd96239bb2a878b1f5bbd5700f5ee8091b0669a243ffda76a55d9c9f217ccc419</hash>
        <hash alg="SHA-384">181affbab68f9d25760035af18fea0a673e830a9da36fc9fc475fe386f807f22445c7e798add60ebcb5d6f192bba8a75</hash>
        <hash alg="SHA3-384">a151a72eda33f7cce7e37b12fb4f0426b04bee27996742659dd8e3ad2eb8c878fb6e2f350359adee2ee8621eaa4243be</hash>
        <hash alg="SHA3-256">b09decd687aecdf4522693233e57d603bc13bcecbfa15ab452242c9aa7eb4a02</hash>
        <hash alg="SHA3-512">82ea3484f4a13063a4d61c1be69c3a9ca84f350872c4fc70169fc3f26cc3f2ef8e2fa754c8706aa8ff4b7b550b3e014a6f0fe9368176a2e987e66caa60c2da81</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-swagger-ui</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger/swagger-jaxrs@1.6.14?type=jar">
      <group>io.swagger</group>
      <name>swagger-jaxrs</name>
      <version>1.6.14</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">878f5400457ce344dd91ae50e9d17b81</hash>
        <hash alg="SHA-1">41bc6356436e2aa14a51277243398481d2e6878c</hash>
        <hash alg="SHA-256">4ed8a59e16dcb6670bb15fbaf5d7d678cce82547240f18b9024f237ea6bc6892</hash>
        <hash alg="SHA-512">a75be1cf25d52ac7640dd0bab1a6b78b15b90e8b72ed38e12d3c923156137ba2be2c632a3e132eade704ce9012cab565f0fb055aa1c3528a746cf182915ffcc4</hash>
        <hash alg="SHA-384">189ee969858cef3ce43b5d7d40f8bc337bdaaf403322dc39b5b21a67d52381aec5bc66acd0c30449761d360d86185827</hash>
        <hash alg="SHA3-384">89799185b37232c58081233f100c7f10644aa74d4b7234cf13a1ab9eadd5025856955761636b6f1abf9871879e22fc27</hash>
        <hash alg="SHA3-256">b6568c45288460ade405106ff4d33cae66482059f86a4fac1b18b503011d1161</hash>
        <hash alg="SHA3-512">fc7640da848aad2780a16e548ebbe3d2d59be9b697a26c41c2aa01d6428a40f78fba9d2eda2af6946f395d3388d3a46db638be4c27d783e86215f27d057bb648</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger/swagger-jaxrs@1.6.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger/swagger-core@1.6.14?type=jar">
      <group>io.swagger</group>
      <name>swagger-core</name>
      <version>1.6.14</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cdb195831e42af23d2eef1de2d56a116</hash>
        <hash alg="SHA-1">0a54afa6a1068a899cb3d0616ca03bffb8b17f1f</hash>
        <hash alg="SHA-256">d978f51a1b58c3caedbdf96e80e347ed29dda0daf8944130e785ae92a4dd9f27</hash>
        <hash alg="SHA-512">a306f909ed23af480b435205052804ad16abc5add57440f7f634bfcad825cbdf3921eba3bf50541fda4d8c7a8d8d778644912ebc8ecbfcd439e06c18e38dff1b</hash>
        <hash alg="SHA-384">ad0a346dd58b12a8c231d07203e4b8b18952183fcb4649f4c699f7c7d9cb9dc0b70b702df4197c440f999fead4b78136</hash>
        <hash alg="SHA3-384">311eae5412b6690bf28f5243eb18ab197eff97c31ba4b632c6e70aad2f657b0b2fd6f811795527ff019189080988a23b</hash>
        <hash alg="SHA3-256">cc1344f69311771bb2b5c75489ddbf08a22918bf014984f4a25767178d66a65a</hash>
        <hash alg="SHA3-512">54910a2746d61d275d9cc8cf446d8932754611287a0f694959a7b098eb97387b9adfe1da44efdc5ab02e27c3256739e7254e5795daadf1cd27497a0c898cdd1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger/swagger-core@1.6.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-yaml</name>
      <version>2.17.2</version>
      <description>Support for reading and writing YAML-encoded data via Jackson abstractions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9dcb2f5d3b61bfb9af05b9b00bee13c3</hash>
        <hash alg="SHA-1">78d2c73dbec62044d7cf3b544b2e0d24a1a093b0</hash>
        <hash alg="SHA-256">941bcd8b1381bb3b0d726fab41624fa8ece0ee7b6cf2860ad95e8157ce673376</hash>
        <hash alg="SHA-512">c3f75fbddb17f968ba6fcf6c32db63e5e1520b123880b3a37b1933a777b84794faa09e1e71e80de49ed504068483e49d98eac26a276fff68c0ae51f7fc7dd7db</hash>
        <hash alg="SHA-384">3af4c7912505baecb96ffadc8f4f0c5ccf3144f065e131a9f9fbb8e09473649dbf25dccb5bf3865669fdaaf04edd7534</hash>
        <hash alg="SHA3-384">ccc6e417e268c54fe6b2231736a9eada0551d79ba1bc85ccb9a1863074ec57a89c6fc1eb663a166d72b9070cd035cef7</hash>
        <hash alg="SHA3-256">19f743c7edd6117fe0d0e5719245b0771d025e053a65156054d897dda7be3fd3</hash>
        <hash alg="SHA3-512">67ecd00f8bf0f7a08c18ab5c2a50afc446c614a12af99b7681486a1708b5a5f323b91f1e45b846ab5eefb770b59f0e522cd001ee0c24fe252ab53363adb27adf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-dataformats-text</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-dataformats-text/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-dataformats-text/jackson-dataformat-yaml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger/swagger-models@1.6.14?type=jar">
      <group>io.swagger</group>
      <name>swagger-models</name>
      <version>1.6.14</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16311efcf895053119fa8d9d4cf0c8de</hash>
        <hash alg="SHA-1">021a6bd576f96f8c203d252a71a548a21b628924</hash>
        <hash alg="SHA-256">18c64c670ce185eed531912a5d0923dd1a5b725c7147218d703b28346caf94c3</hash>
        <hash alg="SHA-512">b61b7597576fba3b192bf0cb12bf0b7f3f51204ad4566d055219dbb55a77ec2fb2e355708eec5373bd810be59d06faa4f081931de2b8ba9d45bab1b59a2f057c</hash>
        <hash alg="SHA-384">2413d63c82e983538af033dbc272acca84dc482fed87d9ee257caad0ad529b9f472e17e5c28c1263999bd55decf288c5</hash>
        <hash alg="SHA3-384">73e528c079b43c17146b33ea6937c9bd5d888198a449d802f403d7adf30393d2d231c2586382470f87b7161f1cd82474</hash>
        <hash alg="SHA3-256">10ea6b920081550ce4d1238274c5798c8165e0a9338b2a2b4da2836ae0335038</hash>
        <hash alg="SHA3-512">674556b12ab539b654b64e2ae8bc53148d20b58f00325436abfdc80120aeac4da83ecde16f08ba0afa43506601cae919dec5534a1aad2a8aed134c08c5f987a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger/swagger-models@1.6.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-models</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-models</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger/swagger-annotations@1.6.14?type=jar">
      <group>io.swagger</group>
      <name>swagger-annotations</name>
      <version>1.6.14</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7dfcc3d1a85d66141404a6cbac51568c</hash>
        <hash alg="SHA-1">2f78befb7777f158bd9e2218fd70c78dec1a2a61</hash>
        <hash alg="SHA-256">276d85dc2120cbc30b08be34b7bae5418467ca6983814b0d1e071829ebb5c500</hash>
        <hash alg="SHA-512">5d1d83e00314e17977b127fce927be05228759e9940c31194c72732cc2106ac18172b5da360e501ccc435595c77a4d80eacc1160d2f05cebc068ba682d20ba58</hash>
        <hash alg="SHA-384">a8c5982f49096711d013ade74846640382abd5472e393a86e58ba44d4aaecb480c313144785544595e2af64d84d3c97b</hash>
        <hash alg="SHA3-384">0d63a7b26f472b1e454f254089046f5a6428ddc94e47d4145ebfdb200b46efe3715e22f971654679aca62cc2b3d04fd8</hash>
        <hash alg="SHA3-256">bc9b04cb9d86d003e7b0d325c81726670e53cde58cd918cbec17c2d7225fec71</hash>
        <hash alg="SHA3-512">f7891059ee9c15bbdc600a416f0df4e1ea7050467953a5057ac6b3da895b9b8283eb3f439a2214305d4a7abf40ad649901d619d7732ca837a9269853ad7c8b21</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger/swagger-annotations@1.6.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar">
      <group>javax.validation</group>
      <name>validation-api</name>
      <version>1.1.0.Final</version>
      <description>Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4c257f52462860b62ab3cdab45f53082</hash>
        <hash alg="SHA-1">8613ae82954779d518631e05daa73a6a954817d5</hash>
        <hash alg="SHA-256">f39d7ba7253e35f5ac48081ec1bc28c5df9b32ac4b7db20853e5a8e76bf7b0ed</hash>
        <hash alg="SHA-512">bc137c5f7fa6b7092f9fc233d8be7d21d6767f8aa51c2e934b73692c82d28dbb410f55674d7b5a0e1523b514654339277b535b7f5bb01d457a11aba2eca3bbed</hash>
        <hash alg="SHA-384">c5c2853c8d811def0417e2c2f2e91468979008637d5e87441980af17c86e17ac1b59ea0587a70f376d40ca7a99d047f9</hash>
        <hash alg="SHA3-384">ba17c332df426d79dd8b73032860e9ce64a984b65d54fd04e5598095b2fb05e757062d469bf3ec67d05d0ff8978d3f13</hash>
        <hash alg="SHA3-256">469fa33a7d6854ac73627c8b4d281165c26dbcb21e645df792c3144453ab3129</hash>
        <hash alg="SHA3-512">a042781692aaaa9458be722d0437484c5f1fd8f3f4955c00008224caebeb671ab93740052599ce2f5feab8d7ec712c72786492f7c7ca1c27c25425545b05a91e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://beanvalidation.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://opensource.atlassian.com/projects/hibernate/browse/BVAL</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/beanvalidation/beanvalidation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <group>org.reflections</group>
      <name>reflections</name>
      <version>0.10.2</version>
      <description>Reflections - Java runtime metadata analysis</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d0070839d825f57fe6f4d8e2a82989b</hash>
        <hash alg="SHA-1">b638d7ca0e0fe0146b60a0e7ba232ad852a73b31</hash>
        <hash alg="SHA-256">938a2d08fe54050d7610b944d8ddc3a09355710d9e6be0aac838dbc04e9a2825</hash>
        <hash alg="SHA-512">d04700d4b6d3f28faa611e10ce863df1d6c82dfc6dd1b27cb910e44c19089ca08bef939e2bca7bc79274836f8e9d8801c4326232d24a38dba0a4893a20c7c42c</hash>
        <hash alg="SHA-384">2604ea7e2330b2c60dbc4177076b50b28a056083fe34cca9005b63f7efbba4d8513d1f21b56c296a73292b2003ce1722</hash>
        <hash alg="SHA3-384">7b5b12126cc3efb23335cdf73e01b19d714c17072038dc03534f1f596f2cdbe4b8d224e806326b1e7bd82a1eaf221a54</hash>
        <hash alg="SHA3-256">b1c978e8eb1bc3826d310deba7adfd02f0a90978dcd67867aa3f373a196e4caf</hash>
        <hash alg="SHA3-512">023c9a40f84b7f822f6d62f6a6ea3fc09ebcd489916085cb501818cd2c6af69e2561b2217c6d5d2cb8d99d87399343df2f863aa919e80d0a49502a5362f8744c</hash>
      </hashes>
      <licenses>
        <license>
          <id>WTFPL</id>
          <url>http://www.wtfpl.net/about/</url>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.reflections/reflections@0.10.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/ronmamo/reflections</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ronmamo/reflections/issues</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
        <hash alg="SHA3-384">9903fd7505218999f8262efedb3d935d64bcef84aae781064ab5e1b24755466b269517cada562fa140cd1d417ede57a1</hash>
        <hash alg="SHA3-256">223fda9a89a461afaae73b177a2dc20ed4a90f2f8757f5c65f3241b0510f00ff</hash>
        <hash alg="SHA3-512">3996b5af57a5d5c6a0cd62b11773360fb051dd86a2ba968476806a2a5d32049b82d69a24a3c694e8fe4d735be6a28e41000cc500cc2a9fb577e058045855d2d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://findbugs.sourceforge.net/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://code.google.com/p/jsr-305/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@32.1.3-android?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>32.1.3-android</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">85369dbe6f7ec8409d59544d232bb20f</hash>
        <hash alg="SHA-1">ea090dd85ca2fa12d42d054369df888665230dd7</hash>
        <hash alg="SHA-256">20e6ac8902ddf49e7806cc70f3054c8d91accb5eefdc10f3207e80e0a336b263</hash>
        <hash alg="SHA-512">d998aa0384422040760f1ea1dfd68ed6c3da32cdae541dceb7089911b521d66d13bd25d0433ed39d79830685c3e710368e3863894289101f9ec183a53f3827f7</hash>
        <hash alg="SHA-384">a0eafa677572326478f96dcb8fdfb8df5d6ddbb23b1b73d0d3d06bbfa61f9a93d30d0f76ec2545bf7e293c7704c9a904</hash>
        <hash alg="SHA3-384">2741bf0fb50d7e4e76482931262fbcf1601828c2930e0d44387980b54b6994330e471ff29c8c0a58fbe64bcfcede6b37</hash>
        <hash alg="SHA3-256">274e28b3c0ec258205a4b4b4e367f1b743760840751318963d3ff171ae90cf00</hash>
        <hash alg="SHA3-512">5bd5c4b2c9d8d8f2a163d18f541ddb974708fe623d5e5c78afccb961d0906a95884fd54a8c4d049c2417782ef6de2b19394fbc15ee82c5a2bcfe68ff45eaad59</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@32.1.3-android?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/google/guava/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/guava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
        <hash alg="SHA3-384">1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101</hash>
        <hash alg="SHA3-256">ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0</hash>
        <hash alg="SHA3-512">52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/failureaccess</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
        <hash alg="SHA3-384">e939f08df0545847ea0d3e4b04a114b08499ad069ba8ec9461d1779f87a56e0c37273630a0f4c14e78c348d3ac7eb97f</hash>
        <hash alg="SHA3-256">1f0a8b1177773b3a8ace839df5eed63cbf56b24a38714898a6e4ed065c42559f</hash>
        <hash alg="SHA3-512">6b495ecc2a18b17365cb08d124a0da47f04bcdde81927b5245edf3edd8e498c3c3fb92ce6a4127f660bac851bb1d3e4510e5c20d03be47ce99dc296d360db285</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/google/guava</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/guava/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/guava/listenablefuture</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>3.37.0</version>
      <description>checker-qual contains annotations (type qualifiers) that a programmer
writes to specify Java code for type-checking by the Checker Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ff1eed173ff9d6f208d0a5be8f5623d</hash>
        <hash alg="SHA-1">ba74746d38026581c12166e164bb3c15e90cc4ea</hash>
        <hash alg="SHA-256">e4ce1376cc2735e1dde220b62ad0913f51297704daad155a33f386bc5db0d9f7</hash>
        <hash alg="SHA-512">98f92a4d14b77f2946de34bc64bc0068505ba8893a734e52f6458e3061fc7471bd5a60c073c938302b7b78d51205929134207abc24f0edadd3db1e1f57755de5</hash>
        <hash alg="SHA-384">6a586fa9ead4d6edeb5e73a98af109dca2bf95e950c3c4862773f40e2eed5ea80208021f187fe717963027f7ea2bb489</hash>
        <hash alg="SHA3-384">0baafa897a7a5b9095680b5534841c537518c67a5ae9bf5923aceeb5aa3283551159c614b7fcfc205f2b5f77c144934c</hash>
        <hash alg="SHA3-256">68056437b32f1a878d9b38ca2d4c6d88e9ca76b6eb705e7a946bc044010b722d</hash>
        <hash alg="SHA3-512">66ec2f2416d564035e78295e7094ec1c23b76870d0095adbb9ec7e2d00b94684dc3c4ac08640b7ba14465ddc305382e5b20240d5eff31875d2ffe4682088a2f7</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://checkerframework.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/typetools/checker-framework.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.21.1</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75fe4fe33d308dd6cee3b601de902d27</hash>
        <hash alg="SHA-1">6d9b10773b5237df178a7b3c1b4208df7d0e7f94</hash>
        <hash alg="SHA-256">d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac</hash>
        <hash alg="SHA-512">530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a</hash>
        <hash alg="SHA-384">88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4</hash>
        <hash alg="SHA3-384">ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a</hash>
        <hash alg="SHA3-256">9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae</hash>
        <hash alg="SHA3-512">1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://errorprone.info/error_prone_annotations</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/error-prone/error_prone_annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>2.8</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c50af69b704dc91050efb98e0dff66d1</hash>
        <hash alg="SHA-1">c85270e307e7b822f1086b93689124b89768e273</hash>
        <hash alg="SHA-256">f02a95fa1a5e95edb3ed859fd0fb7df709d121a35290eff8b74dce2ab7f4d6ed</hash>
        <hash alg="SHA-512">f8263868a792b41707c9e7fe6fa5650a14cd93fbeafad20efe3772a3058fc933eb59782ec59e6eb9b9c569aa96da80134ae9fdf7547b69c44a97087efddceeff</hash>
        <hash alg="SHA-384">e6087ec31fec8289158496ad2ed6ce8472d5d513808a312e0782cedac3b86c37a62a63c0b5ea3839491d109fe9e148a1</hash>
        <hash alg="SHA3-384">10add34bfeb8612283eef89ac96747a3c9b755acd80ad526e1addaeb7efd6323c52b9bfa1a3d34adb40e1ccb963ee65d</hash>
        <hash alg="SHA3-256">b3336f8abd6b1f73b9f06d306974557000a000073bfbae6b54fda26d17dbb072</hash>
        <hash alg="SHA3-512">d376c184a6df071c4e93b913d175b5c2e63deac37105dc20342c19bdda62e4e9598ca1e8bfb4f4fd5cdee6dd5ac3b8af49e2c5193e324d59a59ce1f7adeab627</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/j2objc/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.sonatype.org/spice/trunk/oss/oss-parent-9/j2objc-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-openapi-v3@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-openapi-v3</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description OpenAPI v3</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ef1b67c4ce1793a5598834a974abdaf</hash>
        <hash alg="SHA-1">a3a1bb46d05fbf585b9ca55f952279c6aaf72d5f</hash>
        <hash alg="SHA-256">3299af2bb984968af32508c299db12e0b02973dc76b11354a0db443f348956e9</hash>
        <hash alg="SHA-512">ac7233de9f7e7a3c59828d360ff43cae9d90c3cb6b0adb225ddf23db6d46873467a3fc78e5511168e64de90b5948b352c12247527369cf4b366d3361f30cdaf2</hash>
        <hash alg="SHA-384">c88cec6dc1bf31837f6de90ec965ce8ead98ec52c90421d7496c1d3ea2df738f0b4ab84666c054eff5a49881a09639c5</hash>
        <hash alg="SHA3-384">e635eeceeac6853722b9de41f591573609ddaefb3b30d141ff65cf6594194242b718171ec4e895c9dde23332f3497ef4</hash>
        <hash alg="SHA3-256">a5828a35563dd75d4d76dcbf4309c45ed49c7f52f829bdc44013b1d42977130a</hash>
        <hash alg="SHA3-512">267dc73437c534eef079ebff5c271f1b59118d0bea1d61307947f0e433f2ad183602945e43078744477feefdb8628d2867e91c517dfdcc4f8fd481ecdc309601</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-openapi-v3@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-openapi-v3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-jaxrs2@2.2.26?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-jaxrs2</name>
      <version>2.2.26</version>
      <description>swagger-jaxrs2</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3f1cdbcdc3fc6f1ffe12d89705754dac</hash>
        <hash alg="SHA-1">56533dfa31525684c7a59767b709d78fcb1f4a15</hash>
        <hash alg="SHA-256">a201eea11f04edcb37ec0b7103b934f240a744f74811f4fc5a231a12c5ac0446</hash>
        <hash alg="SHA-512">0598397bfcef9c8996d6bccdee9213d8e5b1e819337e9999cc3cf8414d64b4ef26df83c38ed83e1379d054a84af976564eb0de53c10a8802d839761e92bdb7e5</hash>
        <hash alg="SHA-384">f2ad73ee9bf12cdd914a587e4ea75cd87bad5b67470b97c7d862bc3258b6b429e8b7efa84b51371305ecce56daf38f40</hash>
        <hash alg="SHA3-384">84c1acf3900a2f332af7099385fde195dfea9304005a5486ef2662f4bf1a1e0f09476a7b32a8b691fcab60ef33b9b6a6</hash>
        <hash alg="SHA3-256">e8a1096e5567fab1b1442a2921d54f3488a57c794c0527232fa2465498bef763</hash>
        <hash alg="SHA3-512">f64d29cbb57e67691b1a0a878a0ac788685fd6ea3d41fb4558299017bd26a00c9c46feb8da1be3d11a24319528c8caaa9c6bf19dbd73c6cc536ea69d732de9e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-jaxrs2@2.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-jaxrs2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.github.classgraph/classgraph@4.8.176?type=jar">
      <group>io.github.classgraph</group>
      <name>classgraph</name>
      <version>4.8.176</version>
      <description>The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f85ab463a66fc8234d49c73e0b07f554</hash>
        <hash alg="SHA-1">29e7fdb802fe8fcb81ade5bf2fb8da805ad6e01d</hash>
        <hash alg="SHA-256">603724d4fd2a7fce66a325e85a5504e1e4f5a19d158c228e4b8159eaa4d024ec</hash>
        <hash alg="SHA-512">39ccf323958ac0c728f17181f9991b61a46706737b71c8051fc7258370107e9c6376e4fe3190ded6aefc00e94cc03b88e18322abbab9933701920d003ca53ade</hash>
        <hash alg="SHA-384">73dadea4f9c29d8f65fdfa1d8e2554c59b550d9c38aa54cfaa924822c1d6120083792ce9c89e333db7f75ccbc03ad168</hash>
        <hash alg="SHA3-384">66b9bd57e0ceec1d78029746c435e6641ccbed8e49d393d278a307c69cd838aac9112502f333736edcefbf01b3049de7</hash>
        <hash alg="SHA3-256">2d20a7aed5ab386796f0519aba9f02dc706fe1478913dee5a65ea5e2c398b574</hash>
        <hash alg="SHA3-512">07c5fb0d80535227feea09af9631bbf22b360e14ea3e3f1a501f257750b6343d53bdf0e7d61132b159b41ccd04b57ee9aab6f49fb055249238236ce7f78c8abc</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.github.classgraph/classgraph@4.8.176?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/classgraph/classgraph</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/classgraph/classgraph/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/classgraph/classgraph</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.30.2-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple. It is a class library for editing bytecodes in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5b827b8ddec0629cc7a6d7dafc45999</hash>
        <hash alg="SHA-1">284580b5e42dfa1b8267058566435d9e93fae7f7</hash>
        <hash alg="SHA-256">eba37290994b5e4868f3af98ff113f6244a6b099385d9ad46881307d3cb01aaf</hash>
        <hash alg="SHA-512">046c5b87732ef28540c56f88891238e49ac15fcc23e1f13e0b12de816831ba3de54e68a727b6163877a7b19b13f1362c0e6affa2664af1fdac5748632ed7a09e</hash>
        <hash alg="SHA-384">d1dfb87ac4d7797ea07098b7814190eed3aa16e86dd792916ff7f86c30ad456dd153f9ae4e77f13cee03e23dd3cfb24b</hash>
        <hash alg="SHA3-384">f70abfcb1b0d9e7903171bf52fe34b33ceffa9c53b697fabac9f2d3e02b8621446f7b2471d44e2cb70862e559b4d36b2</hash>
        <hash alg="SHA3-256">cf3f1d9150d71a6f23a749c24d355accb133991a9272110c5fa0ccff73220367</hash>
        <hash alg="SHA3-512">e294c989c20271f42a4bf0c63cbb691cb2fa284088c8a846983aa0e4948b4325131b8829b210214f539d30eb4e20b14c06f4b164208488719512739d78dfd454</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.javassist.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.jboss.org/jira/browse/JASSIST/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jboss-javassist/javassist.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-models</name>
      <version>2.2.26</version>
      <description>swagger-models</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ea210dc183f44792229b43203cf21532</hash>
        <hash alg="SHA-1">669221edc1b8db081d50662ffe13f1e4b1772bd6</hash>
        <hash alg="SHA-256">f75ba91f0360503448ebf3b16eba590d3292782d4825ce8a6c30c66cd45e6423</hash>
        <hash alg="SHA-512">322bf03525764931db9a8ccdaf9b08ea375b955da42d3cb9d0a5f9f50b16851884a97c2033767d4700bb03fe5a72dd074b40b817272ea54d47f92fa98252eaf7</hash>
        <hash alg="SHA-384">c1805af734e938254c0183adf383bc9350b6c4c54a4c86e4247f839a9ae6afdc6a397efe413b5a7e8003aa929765b8f2</hash>
        <hash alg="SHA3-384">1c1eba829092789d1f5f0fb8d120db4356ac9803de1fb9a6c49b851c9fcb4e03c80c77f27170cf7b454394550271ae4e</hash>
        <hash alg="SHA3-256">4ddfe5844335e0e61750f48f93aaeef9d4074b163c2885045be58e0a0c3e910a</hash>
        <hash alg="SHA3-512">7fc4a06a0733db2827da20b59a9fc23aaaddabf0f544a77234407b95242be4e868ef741f159bd94c9b958b4627266acbca257b4363e3aa9a05454f5b9a27e03d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-models</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-models</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.26?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-annotations</name>
      <version>2.2.26</version>
      <description>swagger-annotations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">99feab9a41778bced57e17a27b8c7f12</hash>
        <hash alg="SHA-1">4b4ff26ae7438f3957f970ba1948a39920e9140a</hash>
        <hash alg="SHA-256">d63dacef430727b1e2864e77c38f1bc201e554f31c4e6eca001fd231242d5824</hash>
        <hash alg="SHA-512">4693e98f5dfd82b5bfd32672713a9f6880df9aeda321c424b08990bee03816502a98d974e7d6b46b87a80199c6c1ab009dd74fddd57ab84a1117ee5b18e4fa11</hash>
        <hash alg="SHA-384">9db5170387d0a13317289737f4bc8c28cc3820ac057c0402fe73f9cc9cec6e434e00bf24ba1536fd3ae16c2816045274</hash>
        <hash alg="SHA3-384">b251c98bb7683ca06e41a19d15d246e3e9f9e25d5e4bea6696858782d3ca938def59ba9541634a5599ca3b32cf4f568c</hash>
        <hash alg="SHA3-256">d7cfc23e663566d8b87ba348a9c064f22990f4c422f6901d442e1f64a2b9683f</hash>
        <hash alg="SHA3-512">1888003d5f077ed4f9cc3220af18fdfc00a90a5032dad7f931f7045aa90ad0f39c6652effc19479fdd26aa451e3d2eb9b0c6f76915e71c0f8610ce16ba3a2008</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.2.26?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-integration</name>
      <version>2.2.26</version>
      <description>swagger-integration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9b502a46ddcf6025a8b0e8d9b50ce944</hash>
        <hash alg="SHA-1">e9a2331cb40920ba11c84c7d4b4c0d1e83df7a8d</hash>
        <hash alg="SHA-256">a9af1b10a3b91acaa8de97091df9fef4ee82a7e626876bd3ce23ef4e9512fdba</hash>
        <hash alg="SHA-512">e99d10bd29a106a95f264be98138b170ae0d7e9f1f3657ffe0bf6b50e0e1f2adc47e729b8b45a7fbaffb968bfbdee9456ccd5b79fe07c2528e5ad661d75dc239</hash>
        <hash alg="SHA-384">30e28866033a54bc75138f21f84e2b4ac2b25627d0d90fcadbd6f54d9e85f6c35c8ea181007e914928760866921e9563</hash>
        <hash alg="SHA3-384">9548f93a315c1738a179408d4f38b8b61117330d643ffb9c2adc06321b595aaa89e7ab7d4ac6cc4b4fa7336651f28443</hash>
        <hash alg="SHA3-256">7fd368ddb64ff1e58a7a40382a05060cd595094441bc814b39c16a9f8228e028</hash>
        <hash alg="SHA3-512">b7483052b9bf1216cbe109b8852082060a15f80599a7c8ef358089d3844df3847938fc90af9fa9fb46bdb27ba2e82322bcb9907eed1a166ff8d81ebf88986401</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-integration@2.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-integration</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-integration</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.swagger.core.v3/swagger-core@2.2.26?type=jar">
      <group>io.swagger.core.v3</group>
      <name>swagger-core</name>
      <version>2.2.26</version>
      <description>swagger-core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d33fe19c4d76f178de41fe12239e2fe2</hash>
        <hash alg="SHA-1">248bbdb381cdcd38a9ece2b9218116bede97f38a</hash>
        <hash alg="SHA-256">b461fbae13b044fc490c66e45b1f046737527f959ba0ed177ddbc3278874c6a1</hash>
        <hash alg="SHA-512">17588890883453308d3d612c2446a41af1d6d2531cadaa5f47537eeee92818ac17e96f117148d304df45b362f3b91718ba01e4b1f383c0d65f9dc446db581e5d</hash>
        <hash alg="SHA-384">0d90aef81884adb7984525cee6efeae5ea581837326fff5c108d34267202b38287780da48b6db5267ea0639b52549f8f</hash>
        <hash alg="SHA3-384">2ab954076180563ab9441aee8708a358212553bd134681b56215398d78bdb16ffa7b74a85c43331704fd3732e4ba9fc3</hash>
        <hash alg="SHA3-256">1dd140de84a3c026a2768e94cb8505ae6929aacc186d81b95eb5d11441198366</hash>
        <hash alg="SHA3-512">01fc11831b95417752dba9bc889e3b747f87eb2cb16f800048286853baf4fb7658a9460cdca1b3712275dc8ac63f5f6a57931a43eba48b23dc9ae3930c762521</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.swagger.core.v3/swagger-core@2.2.26?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/swagger-api/swagger-core/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/forum/#!forum/swagger-swaggersocket</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/swagger-api/swagger-core/modules/swagger-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.jaxrs</group>
      <name>jackson-jaxrs-json-provider</name>
      <version>2.17.2</version>
      <description>Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">73b836e10bd91193ecdad78152c98b2a</hash>
        <hash alg="SHA-1">d00c5a275e7e1fe720ba77ce2a2cc485012ff7e6</hash>
        <hash alg="SHA-256">6e60f2aac6a6e3dc7d0714b7bdd7879e52aa453e95c92fd49adb566e5fbabe2f</hash>
        <hash alg="SHA-512">fc02726b67568ba68daed22250799c69b590cb99424342894de515cf26d4c506e707f05f10c6c896e099c11ed27d59a208e59993a69b8d77bc991820e670ac0c</hash>
        <hash alg="SHA-384">827f0c1a3b62e0a43d9f9c52dbb4adac0453f06dc825eeb1718726f4e24f7d4e1c9bba15cfafa8cb857a159f18496bda</hash>
        <hash alg="SHA3-384">4f5813158f0dfef626cecb5118f8a4a0d8b15dc8fe92bdfaf1d1658afc86c1b9e8e4e37a6669200e6828163f0d4dad27</hash>
        <hash alg="SHA3-256">221ab13724852dd9e950b2949e5411699341ba1d01a7b1550045b1e4ffb36469</hash>
        <hash alg="SHA3-512">709c528db1342e3f35b7ab998b71dfcb335e23b4bea5301f1f1faf25cd29b7edc293e1533376dc257bd3cd7453ebb69284005e05e1d18d06ec6978dc63535971</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-jaxrs-json-provider/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.jaxrs</group>
      <name>jackson-jaxrs-base</name>
      <version>2.17.2</version>
      <description>Pile of code that is shared by all Jackson-based JAX-RS
providers.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28ae7a46c286402dc9785e92a6ada128</hash>
        <hash alg="SHA-1">35019fecaabc6b9fb7d938ec45035a8e36884ab6</hash>
        <hash alg="SHA-256">fddf4a9fe080593678c2161818592dd5b6f59256611f2a15a8f45d035c4b1a98</hash>
        <hash alg="SHA-512">92f1a3a359985f7d93fb26e0a89aa9d71de60b8dd44fa263db08a6f8fd7c107465b52b402c4fb8023c2114e1a6729e473d9a67e821a28139490b8f53c3a648d0</hash>
        <hash alg="SHA-384">90a7566cab344e6c99c456b82b5c2b8d58127b0389a4086a0a8d795e41ce60a6fa206f87724a3c7bacc8cfac13d3d07a</hash>
        <hash alg="SHA3-384">8f5d53afe37e2bd389174c4ba59b31522831f39f12ffcfabff747e700ef0e5216aceacd59a8ad0464eea112797ec4163</hash>
        <hash alg="SHA3-256">3000dd7de9d725c6c5b8bde8177c519b0da28b3422b749de3ce3a234605d9657</hash>
        <hash alg="SHA3-512">0ad6719565d7535ce2f0e807a8fb725419cf68777f0b5e3b6c9e9b58b779622b5743462a4e4c90bcb22bc7e215b109eda01d52926b7b4b0cfe0eea7a315a49a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-jaxrs-base/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-jaxb-annotations</name>
      <version>2.17.2</version>
      <description>Support for using JAXB annotations as an alternative to "native" Jackson annotations,
for configuring data-binding.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">112d2c2221c1a8fbbd7d84609afdc3a8</hash>
        <hash alg="SHA-1">c2978b818ef2f2b2738b387c143624eab611d917</hash>
        <hash alg="SHA-256">85561c90e9bde3569a688f57410bde946140b355abdd70aec053fec954e301a6</hash>
        <hash alg="SHA-512">40f4e350ac05cc3b71cbba3ec63f25f9fefc85a98b90e1596530938fcd28f8081ca658ee3fc102c51872b5c7953823fb4be121745c8c9a7b65dfcd9e28200368</hash>
        <hash alg="SHA-384">955864bdeb33e39f1e1cdd618dfcbfe0d5efb5e36b9d6b5a4b39dfc6932faac1fc0fca2cc4cc626ea40d266d3a41067f</hash>
        <hash alg="SHA3-384">846834bd26232e7509ad9cf88f79b560afba98cdc98a0e86f43a126caabeba8a654e487e3a6b71187f48750c77b6037f</hash>
        <hash alg="SHA3-256">8054e1ee2b0ebb8f413d6673fd3730b52af5d935b07371836baa868f386c3aed</hash>
        <hash alg="SHA3-512">1af1315c4e9f6f6644ddbcefe094673136fd6c91912400cdf72b62b2db7d0389a46a69e75a85ae7555a348032e50b9893035743b924f0b56c8b23abee873f749</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-base</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-base/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-modules-base/jackson-module-jaxb-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-microprofile-openapi</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Service Description Microprofile OpenAPI</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eb08d1c83a5e2ebc2190bfc04615f249</hash>
        <hash alg="SHA-1">836fd08fcab5ca5cbdd120ca90a63930ee869054</hash>
        <hash alg="SHA-256">b78eef40a51770250388fd5a69358448a9f0963deea6ede221f3c14e30284f2a</hash>
        <hash alg="SHA-512">1d59399e9b5de59ed0d48185aa4a71995da317b9ee47c25ea40dcbefcab979b5e8cb2491cf5265c26bf5a7b6de69cebeaa57208f09343cdcf72cc54b216c19d0</hash>
        <hash alg="SHA-384">5d073039e97633906e4547283854e6b82f46a19da158ecd6c30ddba093b96e566afec1a3fa9a640b9b6b71c9c58592c9</hash>
        <hash alg="SHA3-384">8a351311cf503c42c1897f8b4ac0efcaa56d72f5400a551e7159748f25aa25fbe21e0445666395e2c5b0ccb545aea9f5</hash>
        <hash alg="SHA3-256">d3ae04d4bfacc98a138faee5af4399135093ad6332b66b6ca1f636f59d541a6e</hash>
        <hash alg="SHA3-512">fde895ed9e60e67b6d6b46a04a54bb246833d57ad27e530e64034b084f5e952abf86f659499740c94c29579d55a8a480cd1dcef72f292dcc3581a845617ef0a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-microprofile-openapi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.openapi</group>
      <name>microprofile-openapi-api</name>
      <version>2.0</version>
      <description>MicroProfile OpenAPI API :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b5c1458cc590b9b540762526b8001212</hash>
        <hash alg="SHA-1">0ae8b3b956853744c628a1c49139557b308a60f3</hash>
        <hash alg="SHA-256">dd3c638bb1807ac52a049082e005b328e7448a1a983c5e2cdbb4f6b679e5b54d</hash>
        <hash alg="SHA-512">f940d77d272d4526b16b5b5b86afe9cd92b09b883ebcdd99ebe2ff4f31e12bb9f4acf02740bb87b5b6e4906d1451b7aa538f79fa81ffc1543929c313d4dc49ca</hash>
        <hash alg="SHA-384">2993d8ecd601ed15077657b7535f236bf9e52bcd732a9fbca7dc225b8978f7ea684740423a8841a7ae6882e5771a7bb0</hash>
        <hash alg="SHA3-384">d2acdcfa97e16b7801c31856f741e1eb23e4807527fd29d61b7839c04f01969843f1fa06c23121e012e66d638321c2fc</hash>
        <hash alg="SHA3-256">bdebdc52e874ef8b7b237c89910c96e14826296efc51878cfcdf8217bb5086e9</hash>
        <hash alg="SHA3-512">fff9f58501a760e9b0a88a08b1a5c105d36f14cb6bd0c8e08f099520c53bec2f0e26eec656fa597ed98bc2431c1e7888078ff099fc7fa622d7a33e8e1386d42a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://microprofile.io/microprofile-openapi-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-open-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-open-api/microprofile-openapi-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo</group>
      <name>geronimo-openapi-impl</name>
      <version>1.0.15</version>
      <description>Apache Geronimo implementation of the Microprofile OpenAPI Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bca122a304f9a5446d1df33dd9541d5a</hash>
        <hash alg="SHA-1">997547c48cf6bf1c121966e7daa94cdbcae0da5e</hash>
        <hash alg="SHA-256">38a5ac2badc8e4ca83650a3ebed911350f7055c8bb945cda5d26a259b1c7f00d</hash>
        <hash alg="SHA-512">54eb3ad59a0997da35972b1aad9eaa30257163e34384b9697e6248847705a8680df8c3c416f4c7bf5686cfeee006f80445b3f62d30e5ed6e87e4e4e0fb9ff0df</hash>
        <hash alg="SHA-384">8aa31163ee9530c4a4ec9bbc85e90ab1c4bf66c2ef875f62c93504552021cd492e326a3af0aa4ac7ab0589f2cf55828a</hash>
        <hash alg="SHA3-384">acd095e39e4ab9f113504969b5874368b1c92eac10674da667899991e7affad1b70f650486dec3207bca88689815c69b</hash>
        <hash alg="SHA3-256">dcbe26d254108a0649c73fd4cb4cd6c4f1085c68650cf347920306fdab00cccc</hash>
        <hash alg="SHA3-512">5f020677e5c6974d60fba87bd2eb31bee50174859d5e892329cef7abd643c8475d354294ba8f4e27d47aa43453fb377eec227f94d9ced17646090821ca9a809c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/geronimo-openapi/geronimo-openapi-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/geronimo-openapi.git/geronimo-openapi-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>1.1.6</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9e0420bfd741a45d4f295e047cc09d5f</hash>
        <hash alg="SHA-1">3b1f26306abd9d2b1847cf62ee491d0d1b942c7f</hash>
        <hash alg="SHA-256">bc58a73d5ecb828f1cfaa8089f471f1d8e26280dc30fe5df242a191100769782</hash>
        <hash alg="SHA-512">10c5e88a7b33a57d63707bac2ecc59fe7d3535b2615b725ac7966b45c1582b45b1f50be951e0d0cf4dd23f1aa7c2420fc27630b62f33551d7ac0e81ee161962d</hash>
        <hash alg="SHA-384">6b01ff5cde9c0e0ff79beffda23c275f9600ace4b13335e0819f4f702999d4451fbee0be36d81e30b7ad7acd9e87e672</hash>
        <hash alg="SHA3-384">b209e9cbfebb7bc58a1bb91efe791cc4bb05cdfa3a5bd33df529f9f1a829790914b5954e370f44e86a4a9c30ae3b328f</hash>
        <hash alg="SHA3-256">c27f99717c6b740f3aad0e2d2494f15bed1a2dec70bc49684179b81a5022d6e1</hash>
        <hash alg="SHA3-512">2f220152a96b8f283079519e63fedcc0c9c35a948980f44597172a1d49a72cb0592c5ec1d24a79e6bcfd90d43a3b7988ec195b625d1f272714bad6619aae9ffd</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp/jakarta.json-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>1.0.2</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ddca13acc50cfa663599525a8d10bb04</hash>
        <hash alg="SHA-1">a0f7cf034442d1fd195ca78cf3d6633140d5928f</hash>
        <hash alg="SHA-256">29226a8ee37ffb7bfb56d5336c3bb93eeed8cebc5498152bbaae1d49ade2b8fe</hash>
        <hash alg="SHA-512">a791e99d5d0019c59ff7cf87a3a517c39412d1eac978e59ff0c73bcaf7e2844dabade4ad810f66bd4313d3833d93beff55a82ed130922ae3fea5b50d98489a30</hash>
        <hash alg="SHA-384">dee6917e5d5c8b845c66514ed00d1aad74e957d14c849389830bd6119999299b1d57f0e33b50795ce64e34bc00dfbb67</hash>
        <hash alg="SHA3-384">c9704fbfbf83190a655c2b0cddcc8f16abdf64cc623690abc9c86878ed87e6baa9cbeb06d60513d036d309034b0f984d</hash>
        <hash alg="SHA3-256">e0fd02a819ca7acbf0814b166582acdb058c0431840c44c6ad6a2cf53046ce05</hash>
        <hash alg="SHA3-512">6f13e4ae5cabc1c0c7fc7327aa5152521c0c3dfdc8def693748f3a61d42f726e471d269b1b6c48487053be90a0298ebd0937af310c6d373165b2c5e4fe6f182b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jsonb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jsonb-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-mp-client</name>
      <version>3.6.5</version>
      <description>Apache CXF MicroProfile Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ab7e0762452004e2e40b798a444c849</hash>
        <hash alg="SHA-1">2da6e719186ffa647e99272024695fa6cd609dfb</hash>
        <hash alg="SHA-256">d984d209ab503556dfb544c7098b23806e8f41e0fee09aa3810b732e8fe2cc8e</hash>
        <hash alg="SHA-512">49fdce4fe2a9ccc470377f47115f5140007dfedc6efbef716e45ca591cac9065e2e37276515b18772f1ddea08336e0b36e0471a418dc01c7a2625e5d69a19b2e</hash>
        <hash alg="SHA-384">01b22d3f7594b77504c04adc7f9a8b21faabd6c87eff0b145a3a2d36dcce304ea1f233bd1754a67b96af2e8bf61c6daa</hash>
        <hash alg="SHA3-384">6c869c4fdd0dc1b3d5a6c54248bc951d7e7d4e4d5f77be46b8ec4fa574b654acf4b2dfefb65d1600acfc3cfd2bef9014</hash>
        <hash alg="SHA3-256">0f15991be4a8b42fc5a1e08491d43bfc1f0331596c1c2be114992bd14e2a2f9e</hash>
        <hash alg="SHA3-512">22e39713567737e9f3a571501f9d8676f1ee77e32e6ed2e19269b3a5c07a1981bd946167f9a0892ef1e0c4f74cf0e9cfbc45d681006438c6a21d94ba9b4b76ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-mp-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar">
      <group>org.reactivestreams</group>
      <name>reactive-streams</name>
      <version>1.0.4</version>
      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eda7978509c32d99166745cc144c99cd</hash>
        <hash alg="SHA-1">3864a1320d97d7b045f729a326e1e077661f31b7</hash>
        <hash alg="SHA-256">f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28</hash>
        <hash alg="SHA-512">cdab6bd156f39106cd6bbfd47df1f4b0a89dc4aa28c68c31ef12a463193c688897e415f01b8d7f0d487b0e6b5bd2f19044bf8605704b024f26d6aa1f4f9a2471</hash>
        <hash alg="SHA-384">ce787a93e3993dca02d7ccb8a65b2922bc94bfaf5a521ffb5567300a9abc3c222ebbfffed28f5219934ceb3da5b3e9c8</hash>
        <hash alg="SHA3-384">68daf9498232897989ee91c1ad47c28796c028658cfe023c2907152cd64ac303a3bd961e5d33d952be7441bee7ff5f14</hash>
        <hash alg="SHA3-256">0c2165ea39330d7cccf05aa60067dc8562a15db7f23690c8d4fc71cd3e49fdd8</hash>
        <hash alg="SHA3-512">19c2d866a6c4d7c61ceb63d3b98324928eac880c8f23d84202c1145b4779438b1b275f1d20c74b06ecb0fbfe83baaecce3b4366ead0f7cc8b7b6916a8910c944</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT-0</id>
          <url>https://github.com/aws/mit-0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.reactive-streams.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@2.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.rest.client</group>
      <name>microprofile-rest-client-api</name>
      <version>2.0</version>
      <description>Typesafe Rest Client APIs for MicroProfile :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">428fe8cf75fa2ae50ba52dff56408f6d</hash>
        <hash alg="SHA-1">199e0041cc6ceee42aaf140f9a075a3133ac2293</hash>
        <hash alg="SHA-256">4e258b1500c71bad36fed031153421ac0178080af7ecd719ebe6b73b6c2e96bc</hash>
        <hash alg="SHA-512">248550a83d80d065fdf3f70e631cceff3bbbad535b5b5987ba46c62671c54fc33d4d90a7e7de7606bba9098b0099b8a76c248ac492a033cbcda20c37be040a6e</hash>
        <hash alg="SHA-384">8413d9c87986d71143c8dd119a45927b9b5bf2fe3f445ac99e0b36cb24a404af83a61f1af2cbe78038facb4067a0ad58</hash>
        <hash alg="SHA3-384">3ede8080ecaa789c6872c048810e37428bd151dc2d3fc834d3a904bd46b07708c25b727934103020ba5acb07d3fa4352</hash>
        <hash alg="SHA3-256">768876aa36daa4a481c298101a17de61f2ecb0087503cd0b62a59b52f08b4163</hash>
        <hash alg="SHA3-512">4b12cd2c93e9faffae6677378255361e4824cc20e3d54ecd0b3f920bf443873b92b29792f925962c8a70e7e5c4f9ee4c56a256fcac17c90e12c99748b1035609</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://microprofile.io/microprofile-rest-client-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-rest-client/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-rest-client/microprofile-rest-client-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-databinding-aegis</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime Aegis Databinding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b7990b4396a71a50a6d473f05e178d4c</hash>
        <hash alg="SHA-1">71302e8bf913b2dc13983d56446070d3ddb33d98</hash>
        <hash alg="SHA-256">667d97accd617d5099e4c02305761faac9795a7b6a8ac1e56b6a75f3344e1cfb</hash>
        <hash alg="SHA-512">c6a182e60761d86f8ac53c8d5781e688803f177fdd0bc7e6d14b03baaceb332742565223084131c004767ad572c8972802374035e06b143ca3bb0317a12fe120</hash>
        <hash alg="SHA-384">673f5c23e4374f3bc0456ebfe8f21a3f0861c5d81603b4636a97bbc15a4cd29050f5670be3bed6496d11c893d8ab4074</hash>
        <hash alg="SHA3-384">a0d6e3dad423a1e5feae1711c652427a078a24685a817f27dea1e318959e5585353dcd7a8ec6b8a472b2777826959edd</hash>
        <hash alg="SHA3-256">5ff7b9eeee01996ab617660ac90ce209a2448065f84568e1f2a438b344518372</hash>
        <hash alg="SHA3-512">aef5c5f621d3c699f4a4eb5500b0efe56932e6ddd55cbc6e5fb85c591074119932c3f31230f7d86b6a70c226ffd86bca4b08144b7f24566895371c5c7bb756d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-aegis</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-simple</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime Simple Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">665df0c0fce5905281755acbc276b3ae</hash>
        <hash alg="SHA-1">3d0f0f05bb5085f8ec3899892ef9eb1f9af41b90</hash>
        <hash alg="SHA-256">4246e3682290a4099490b89c96648bab38cbb61bb780ddbc4addcae7efc3bd67</hash>
        <hash alg="SHA-512">2d094c30c6b3cb6c101bc9c3f5a70fc42e83606b09bc4b9f990ead7457e043b2003bf4fc423a72ee0e5531d04da2d0be1b524f4e071d5a16ddf5d944d9aa216f</hash>
        <hash alg="SHA-384">9d435ab3174b6dc2802ccb6f88b07e654c06fae9213f301eef0e4704782c8061f75056cc646b99dbb3e2fb8df0a35df9</hash>
        <hash alg="SHA3-384">1fafaaf06842056d9be45b0fa8b6faa25182f54e14f293568f6fa7c16af515640c263faf6e6fc4d4a7d97142dfb03034</hash>
        <hash alg="SHA3-256">0b9006473bc81f6364bb1f7e6b784c1ddceb375220cb76bd4e078c421545bfaf</hash>
        <hash alg="SHA3-512">5cb9c9b7552f091f04e423d36c0e9e39289b2f883bd50f0b6824d7d388186fbcf5087d6ec16c1d8a1ce6f916a00213d013aae722b6be65a7ccabaf5deb6db2b0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-simple</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-soap</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime SOAP Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">88a0c5802b7007476f8312b8d8399c2b</hash>
        <hash alg="SHA-1">ff0416062c2a11ec43389d1cbff3072ad449b35c</hash>
        <hash alg="SHA-256">a06cff90de48b65565aef8de6fdd76416b6971811b9b1bcedf47dfe2c09df512</hash>
        <hash alg="SHA-512">af3873c750487853d81154c10d56cee6b8c29814b1a1264f1d1683be5318e0195a1629be25362b466f61a387151cd74e09252589d76afe5e9915cfa83ee690ab</hash>
        <hash alg="SHA-384">58262ecb5553b9a32f6eaec069dfca20e13ca42987f33824468cc3280c8dbf38ddc83f9a791edb9b606cee22d83de3b7</hash>
        <hash alg="SHA3-384">58e3324bd46cfb72c7130a5c6eabf167aea563c46fc915e3bc10f2c8033defd83b0842924964565cd0d2474bc8790f20</hash>
        <hash alg="SHA3-256">af3e6d0f7e40e1bc8de892261b859a4a3a343b1413b84f4487243b6068d666f6</hash>
        <hash alg="SHA3-512">8610038be6d67755e8a8ee02c06f4762c11f7dec7ab8556e736b70788d50dd7729be5366b61f8fdf8c753a3ebd66a1d8cb6bd4ec9da7478ae7402f0a1e493090</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-soap</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-wsdl</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime Core for WSDL Based Technologies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ae2b784952e59659be21caaeedd11090</hash>
        <hash alg="SHA-1">372e6c5c0b60f52341ba3a9a671351420418c83c</hash>
        <hash alg="SHA-256">53629e63ab6a444433671afbc1bf3c17da0e3720ff5e3142e010a4bbf041a3f0</hash>
        <hash alg="SHA-512">945602783254dec98f073ab43701aa47c558a17ef0c9b2b59003cc07cab970e92647870a142a2928d62f195818971b2496b571bd0bb2fb209e87ce115822ebe8</hash>
        <hash alg="SHA-384">aa2dcd2367eeaf22be1fc45c318fd56824c2b5e90d8bb2aad6dbff6c96b23eb71becc6959b107d83b08c177a755c530d</hash>
        <hash alg="SHA3-384">dca6d34883397ced443e6bfab3fae2db3f644ecdf023cca8fcd5670db009ea5f873dfd86485c731dc9a830dc4a8c8905</hash>
        <hash alg="SHA3-256">0ccc269d92b6f43f1fb0b3c2c9a59093853033ec11f55f9556826f445614e239</hash>
        <hash alg="SHA3-512">139fbe37c3b79ace64d014bdb3875082e59cd88700634d7ade087e76587ce598a9f350755395959170768d1c06322368dcf29ed66e5c92c2084f3661b71ba17e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-databinding-jaxb</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime JAXB DataBinding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d350e80e4f9637be5f8e5099ec851c1f</hash>
        <hash alg="SHA-1">4837263cd09da14fe3abda6fdb117c1c4327459e</hash>
        <hash alg="SHA-256">42c3ebae60dca75d9b2e82c378be0ed4e54586c69d0c576445929ad233d77dcc</hash>
        <hash alg="SHA-512">6b943d352a5bba0dea35da438d0c50a18651c15a7a894aae8d72cb5447986e75035f4ebecb74a74b4d2f68cdc122fb1307b935d65873badb600cd000ce429bbf</hash>
        <hash alg="SHA-384">c6832e11ae8c4e8f85269d85e8240372205bc7e6ed4280b14f221179009d2a1db871bf77223e4333e709547d8327921b</hash>
        <hash alg="SHA3-384">e08b32af6ae056bec33af17e84849072a54d5640fa1368db7ff10655f22b20d8b87f01e4f9b07671336aaa96a64667e3</hash>
        <hash alg="SHA3-256">fc2688bf977941cb381fbfa222abee8225b62066ab08af3b0ba349cee00ace3f</hash>
        <hash alg="SHA3-512">c3321518444ed62d99f22b77cc442ba50d20bb2c5279ddaebaaee7929e33a300b095117ba4559be8333936a9992fb6b94046b51b408299ff5b02e063ff1940f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-jaxb</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-providers</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Extensions: Providers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53f0b63d280aae5a88e6576961457665</hash>
        <hash alg="SHA-1">af19d774d5476f5bccf985ca646628cd096915ef</hash>
        <hash alg="SHA-256">09d98eacd8a746b82446bbf1b3522bcfc8505cb8de83c3711f0d00a0f4b86e66</hash>
        <hash alg="SHA-512">a71fcaa66bb692e944c5c9a60a50f8018b7e119baf0fa6ab2b95cdd8ac3b96dc53676b908365451fd2f48ec96552d403fd9dabe1bd3e0082f52db4520b69513b</hash>
        <hash alg="SHA-384">5de66e40d8f73b64a83f904ef73f3d250c69b875368364db2e1919a8b57746f552ffa58f52858c90ab805530f2f5b382</hash>
        <hash alg="SHA3-384">a5e55d02752a0c6002a9db22f0eb0e2fe3692df890b12547ada2c88ce78bd70c12423f3d70a5020c9c0215f42ad9e4f6</hash>
        <hash alg="SHA3-256">cb63778428c4dd262414990192a0adca5a73ed38ad0ddba424550fd24d18f933</hash>
        <hash alg="SHA3-512">291caf1cafa6af0237cacd085d03c706cc862558262c4a10abffedc7491ec5817996c132ecb57571a8826414d4f2ce7f254e9e4ff2214f9938f0e1f83f87cdcb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-providers</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactor@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-reactor</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Extensions: Project Reactor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">90c631fc4ce7a28521dd72d275e59fb6</hash>
        <hash alg="SHA-1">f089e4e6d496a25c71358f00d81f9319bd54f6c6</hash>
        <hash alg="SHA-256">0e9467e745a83c40f81018a0f5edd52ca00a6f46f8c010189a793327a4904370</hash>
        <hash alg="SHA-512">6a549e1210da8fb8886fa0a7ab32877258f68702943f7efc458fc5720b46183127f732e550df66537b6d7e5e5f28783feab74dededdf0cad45bb90f543b2b457</hash>
        <hash alg="SHA-384">fbc8649ff925960dad0b90e336bbfc596735120f4422f8b05edcdd35d039bd486d2c56e2c41c3fc487cd75da3b9ded4c</hash>
        <hash alg="SHA3-384">151fd23ebca5e7287c107e7333ebfbec2ec680e36748cc25ba72079db605589d26cf35e4ee26e6c97a711ad50d849c38</hash>
        <hash alg="SHA3-256">64e09297fa9d8932252d46d7ad5e0f32f3a0343302ac2335966c9b25259aa6f2</hash>
        <hash alg="SHA3-512">a89ddc60a621d78d4d6eef1d3649b6389db07dbe5bc9f6f21498437b7ba66646e147af2e6233c31a1ffe5dbc98655369de93d701a250da124c195ebc9becd0ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactor@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-reactor</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactivestreams@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-reactivestreams</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Extensions: Reactive Streams</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">690808350a571616018dc1012e9cce96</hash>
        <hash alg="SHA-1">27a33631306b61bde3ae1a7fd2fc08f7ed2de2be</hash>
        <hash alg="SHA-256">7698c8ccb29bd5dbe7e4abc257eae3ae2b97fe4cb629350f4ddece91e2fde324</hash>
        <hash alg="SHA-512">b76fef3b90bc36b4aa23a6f263c6707826bfbe890bae030557644c6961ecb6b45117a558f67e819f201adc3b56a8a8fc2729275f225acce0a007b57ad014f499</hash>
        <hash alg="SHA-384">26f2b4d1e9be702bd4b097dd6ad9de4e5c84d382478294962cad4fee760b6007ada3367aedaf3db644ada2799d0af6fc</hash>
        <hash alg="SHA3-384">60e04ff159f0e3d41409a453b9075431cfdd6dae95c6be86d2aac3320abc7f02d2b5089c7e530169d5522bb7a4acdf0e</hash>
        <hash alg="SHA3-256">ce064d93d8ec25449cec877b45f23ef292969a7b898d9edeede36fe540a2cca8</hash>
        <hash alg="SHA3-512">43f3bf13222553fc7b4d6a160829346547a7ec00225854078f1b5772747e2c2bd3475e0093ec3675282419637d3cafe22937041900fbdf478024cdc5aba685a2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactivestreams@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-reactivestreams</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.projectreactor/reactor-core@3.5.20?type=jar">
      <publisher>reactor</publisher>
      <group>io.projectreactor</group>
      <name>reactor-core</name>
      <version>3.5.20</version>
      <description>Non-Blocking Reactive Foundation for the JVM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a171266f2cafd6561fe2bd1e056b802</hash>
        <hash alg="SHA-1">1fc0f91e2b93778a974339d2c24363d7f34f90b4</hash>
        <hash alg="SHA-256">aa392c5df0790af7b580595b9f809661446613735125b95eed76fae6a2f4c6b6</hash>
        <hash alg="SHA-512">0724149a12a475699d4d495eca54b7d0adb2934fd351fa200aff2a57767bebcc396807c2bc5176a09a4047483dcb90cb9018634f55a2f24b8888339e5e972b4b</hash>
        <hash alg="SHA-384">0e58add99ad424b0b78e27e90a9322beb85fe2249aa330cbcb70a7af5690805224e924ce799b61c248a712bffffdff7c</hash>
        <hash alg="SHA3-384">237782074b680b95e37cf909608fff8b3f2cdbe253fabc7fab67fd10b0b0d46b8923369d8bef667d4612c0bca956de38</hash>
        <hash alg="SHA3-256">879b5c19f62c8c202d0aba5949f2995f06f12636bda3cb32e637c4b79bc9bea9</hash>
        <hash alg="SHA3-512">462274028a9736bd27eadd36ef20448cc267b3698ff2fec31a99c207237f04c5874f56c6690e5899920e8409bd6e83a62b228e02e3b18633415e06e65d704da8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.projectreactor/reactor-core@3.5.20?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/reactor/reactor-core</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/reactor/reactor-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/reactor/reactor-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-search</name>
      <version>3.6.5</version>
      <description>Apache CXF JAX-RS Extensions: Search</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6120c8c16e20b1aa6c04d1aa478ca48</hash>
        <hash alg="SHA-1">15d2efc70cf0be5a871f2b05d3a0f3c5b04ff214</hash>
        <hash alg="SHA-256">ff83973b05d77df5879627d7bb0cb3777290f39a2798238cbfd529aaebe0c450</hash>
        <hash alg="SHA-512">6baf4c2591c20728cd27c8f28427b91e6531e5a087e2ee8d34f47d0d9d704e643d982e407277221ab677d7a9be8dbea24f3998e6daa4ed7aedf5afac2a8293be</hash>
        <hash alg="SHA-384">494f0e93e98eb992d77d16f7f2450d928ac50c4a8ace558fcc19db4d9529efdbc701db4c48da0d2c4d52af14ff0cf6b5</hash>
        <hash alg="SHA3-384">cad2e0693ffe0b4ab425c39f7dc8c71667d26d7975f3b7ad6a6481797395b10c5bbcddaccc108b259597be366649c295</hash>
        <hash alg="SHA3-256">c76804beabc29ee5c825e17c19aa9eca5a9619a9b25afd087fa2b4fd61de3c8a</hash>
        <hash alg="SHA3-512">2b8d121e111a03a224f8597ed9c48150a817777024ccc066acc5c4b10e14eb376a30b4775cd9550d1012f3d7efb2e70636b92c33b965ee59b272bbb1129e7c34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-search</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-features-clustering</name>
      <version>3.6.5</version>
      <description>Failover and loadbalancing support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ceda57a35dbc0b2cb811bd2f1bf9667c</hash>
        <hash alg="SHA-1">1aece991dc005771f2c9c2a65ad3be99a86488ef</hash>
        <hash alg="SHA-256">fa368cf0be0b821c18c38d3922343b2a637c734f7a0213cc29ec19e37ab2f24c</hash>
        <hash alg="SHA-512">97f193077d668716399c756f6c7a4da1f9504cf3e7a532b63fb9e45cda69fe955a5d2cb7d852db23fee824209602a3a89b4e1c4b6a22a76c297b1e14c8618162</hash>
        <hash alg="SHA-384">fa20f60952a3375c18f76f6b28d8796117e5e5feab1955e1cb80588b46a4e4d35bf73a7149d6515d0838d42ae191d1ca</hash>
        <hash alg="SHA3-384">fac960596508c5dc85e9f3a966d40ebf53954972b322b5f0a01f18fed34798348a6074bf8021a0b42b7f31ee8dcdacd6</hash>
        <hash alg="SHA3-256">8ef6829bb37ac767822662d0785981bd9c93f7027c6787703f08cb6cf04ae6ea</hash>
        <hash alg="SHA3-512">3766e521d5b61435e08cb7d4bf5b5b664d41bc7335f7628a0ddfe95e6a05ccdcfa42026067f5075663348ce6323c76ccc331b98bdf1ee47c4783c424e5eb2f72</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-clustering</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.ws</group>
      <name>jakarta.xml.ws-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ce470c38b9dbdcb8e505d41d767be748</hash>
        <hash alg="SHA-1">529fe0136be92861e5a255fbc99146f1943c4332</hash>
        <hash alg="SHA-256">c8e0ba03c47cd5e996fd5d83540caaeab69cd8d531f128318d88e15467d112c1</hash>
        <hash alg="SHA-512">c160616cb796cb9441eb703e2e5b80976a6669c728711b539100eebee85cae2f74dba55cff044fc7032096f19d0be23a32aefececb0c63d58e1fe5add2f46898</hash>
        <hash alg="SHA-384">973a1bf8f42756846695feed46a95b51193aa02cc133e3a783ab5f3fa47b65bb7d8a490f8576ef38010dfba755c40e24</hash>
        <hash alg="SHA3-384">22e6df9c16bc66f0f84df11565e9ae7def462e44b8011d2a20b474740721cbb70c6a36a5259199b36ee274af8f7a905f</hash>
        <hash alg="SHA3-256">ab5acd41ae0bf6d4f6315121ebd807eef3f89604e6d5a57f9c2a955d5af32300</hash>
        <hash alg="SHA3-512">96010696c59baadc383f61839bf1989d3d7ff35e3e60d50a4dd508c39c0f3bd3100d5d0311feaa9d41525fb7378c86ba7b08c9527b4e8e6e8113b6b12b8b999f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jax-ws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jax-ws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jax-ws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.soap</group>
      <name>jakarta.xml.soap-api</name>
      <version>1.4.2</version>
      <description>Provides the API for creating and building SOAP messages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d19eb8a4a5401296985db733868425e0</hash>
        <hash alg="SHA-1">4f71fa8ca30be4d04ba658339df3c927fa21209a</hash>
        <hash alg="SHA-256">0b2e9db574869c09b18e7fe87482be2e4e14b3f3cc8207646595806eede77706</hash>
        <hash alg="SHA-512">640b1ad955bf9283d5c557de7a566bc4d100c8f6580e97ed4bcf24abe104225db6246fff18fa13932b3c45c877c6d560f7778eb115e6bd339768766f089901ce</hash>
        <hash alg="SHA-384">568580a4936eca8c4afa1e823c72579b010f77d7d7af613b92483dbb00f0d380f508057281e3020c68455f82d5c8997e</hash>
        <hash alg="SHA3-384">6c26b47985d5e8623c0b9cd38bbd1828c84004fe82237528e779069ecddb2fed23a8b93a009c641f6fb640e1d45a1b51</hash>
        <hash alg="SHA3-256">81ca7380850de707ccc791655de78e46b73fac45c6277fc283925c99f894de57</hash>
        <hash alg="SHA3-512">08e78282a1aa093c3673d3417d593b6fd962db3ea10457ee4f19d2f242ea5876b68dbe30b471d4b2e20f3d90c77ef71430975e52ae879f1f91040aa87b5478c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/saaj-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/saaj-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/saaj-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.jws</group>
      <name>jakarta.jws-api</name>
      <version>2.1.0</version>
      <description>Jakarta Web Services Metadata API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e3bc505722b1e84535d7edb3d582ca1</hash>
        <hash alg="SHA-1">7d283ef13e49c1422701e30639371edca788c609</hash>
        <hash alg="SHA-256">d4c321f47a72001977fa11d2df408db23bf5f46e954aeb2c6f1ecda4dfef8fd8</hash>
        <hash alg="SHA-512">27b4886f73e1da64772488f94be8c222e0bbea3126aa7baaf6a7d23cd4ffd2e91140aa1fa8c552a48c3013945668fbfe9f65fc48e37920a97af5dcec0cb01e02</hash>
        <hash alg="SHA-384">80c7d4de0f110beada45c37ed5b65d28a5c18b9a86d35b249e377657056878377a078a7791c527f70b72f02e51fedf14</hash>
        <hash alg="SHA3-384">42ebd5af1e9a9d41a1c830d0f6aa837754f5ce9f847094f6d6ed4f67b0724dec9ad822bb14c1f0ecb59819eaa2d91205</hash>
        <hash alg="SHA3-256">4ae39a77ee08c01f591910acaaffd277ac3a78ac8eb94e70878dc853723cb1c2</hash>
        <hash alg="SHA3-512">d4b21cccaa62ecc3885100400160e2908d281dfb1dfcdaf59b16885afe7ff7ec524ff22345d3871d46751583fb5e3c075899ac4a1ae800db3ff34971f4731efe</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-transfer@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-transfer</name>
      <version>3.6.5</version>
      <description>Apache CXF Parent POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">acc32db5c133b759ef2bfc89f58a4014</hash>
        <hash alg="SHA-1">2a0dd4627935e7844d714a07b1bc9f4ca983be13</hash>
        <hash alg="SHA-256">dddf0cc7e36921c17ba25f5e71e7724602cde4e5b268430474e7369e61749287</hash>
        <hash alg="SHA-512">4a0e079fba5af49e01ffb73ad874c38e35e25723f671960e76eb9b465d3cf1225a7d37f81600d0f6675e60955a21e29af100fdf43306ac13b09f32c4e1167203</hash>
        <hash alg="SHA-384">6ca2a561d20c60287ba79fb556d433d917447ed90f018b4012f1f831da3a9ec29ce598315874c084305480117abb2975</hash>
        <hash alg="SHA3-384">402599bdd237b026d2f7c19bdeedc77e1ae556ef015d4eee588789de03128d2f349fe609f9ad10a598867262018a6154</hash>
        <hash alg="SHA3-256">6b1f3d000fa50dd424afbaa0765282b95cd7a8e381baddc9135e57f694b3581f</hash>
        <hash alg="SHA3-512">3bfdfc9a408c6986d208741201c46710166f9935c37aa5842d28a1ba85127590d00e2e9efc2f9e775df610a28bdf82234d29b93e9e383c6a99769c54ae174980</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-transfer@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-transfer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxws</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime JAX-WS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c41944e96a12e06b2fe28770eeda113</hash>
        <hash alg="SHA-1">789d484c38e3e8a8b41c3f330c2aaf46e48266ef</hash>
        <hash alg="SHA-256">756c5ed9257bcd833ad62e51d76b23230b4938ef236aa41f6f28d7b9e93e7337</hash>
        <hash alg="SHA-512">2d044bac1f7b3091fe96f2a5b17b17429ec5ea7d606735aab180c877eb4704dfc2de063082de4e3d44e8633a51ce219b368a9ccacd823455c9d68cfed150788a</hash>
        <hash alg="SHA-384">2f5a4b91d2582377aa2b386a79c4edd9b2740b6c091806c649315948faf0d36b28e65867959d1193414a3a2e3022db83</hash>
        <hash alg="SHA3-384">e1e27d16b17f45001d946680fae774b33de4a0cc36340099d4de5461cfbdc7a4b7ab8bdcd57af2d06ff1d3a0a4324e49</hash>
        <hash alg="SHA3-256">24ac216c5767b84bb9cc126479932ed91d082ef9f012c00e8c75d9e0c65e6f00</hash>
        <hash alg="SHA3-512">3df3b4e76bb1c3e1378c7fbd3e48bd931a6a9002374536df60efe4ca38b4c891f65b17a1fa423e084374fa364f2156d9adbd305ec47ce4ee659763c3ade90d26</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxws</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-xml</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime XML Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1998bd21e611d9141ae904593b2215a0</hash>
        <hash alg="SHA-1">bf43fc112cfd110bdf2f458ff18302c93da8f0bd</hash>
        <hash alg="SHA-256">ad8e9dc9c542e2fc11b9550e582082d106c2adb3e55a632c185b488c19c42e1b</hash>
        <hash alg="SHA-512">6e6f1f243431c19bc1807b70f07df3efcb3d89ee1f1047a964479cc9f6663e8f49f72f2872cf331afdbbcf997f3d57859d0916894d22c11b8a2f1765a66ac6c2</hash>
        <hash alg="SHA-384">eb20889d0858fc56ed2d07b44a4ecb2567b4fca9b0376f0e4ab280d92cef772cd38c7098b30f14c1709f8cbd16cde04b</hash>
        <hash alg="SHA3-384">0f2cf6d5bc23edf725743016ba378bf90a69838accb6553855017c752f12505498deec2f0cf04726f6a25ef785a5fe7d</hash>
        <hash alg="SHA3-256">559df9d63c5de1ca3335d670d8cef5ea92b330c8dcb98f2a4844b35aacb57669</hash>
        <hash alg="SHA3-512">c6aa0d77f43ce4ff07b3efc49e51dadb738272e7c45b25f2edb13efbe6a20c538aa15e6a7ff3c517da402cf7d8e8cb58db5c2f4cc68def0239c78de0bee573fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-addr</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime WS Addressing</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec41dbf6cf992cb72084ca1b3f5b1674</hash>
        <hash alg="SHA-1">ec0b4b94ac94d61aecdde8363b154eca78cfdb53</hash>
        <hash alg="SHA-256">9f6948d4ea9e02ebbff49ba052d9c7ddb9b8e0a891865836ba2786ad6ae036b7</hash>
        <hash alg="SHA-512">b52b7376f391f52c4a1380f9bd4a88b3e3ead42e3eca5bd7a76c2c49dc885bdff896e5c4b2cdaa8bb73f0b013fc0309de1837f127bde52a9b50f5299fd935902</hash>
        <hash alg="SHA-384">a5e3d179c69e4fa1fbaa0706556f8492426d1ffb5764a467209fcc1647dcd7b263369c076acc6a27efd85dd9fd396340</hash>
        <hash alg="SHA3-384">b2051cb863753ee537238f14eae1a558a454edc84de29bf38e453eec051b1304e1be42adf68f8706d1ff132b0477a3d4</hash>
        <hash alg="SHA3-256">924e1ebb5798fda6f23974df2a1bb87026ed6b85f358b22ff3cf961b341ebe13</hash>
        <hash alg="SHA3-512">dd01e22ebf67200d509a6250e6b23fefc874dbf4bdb67c2dfa401d54f57d10cfe5cabf1f0010e479755835213be5ad44aa4c9d3b488f4f1151b93795be87eb0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-addr</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-policy</name>
      <version>3.6.5</version>
      <description>Apache CXF Runtime WS Policy</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5ed8e77d3f03379819b259d012233dab</hash>
        <hash alg="SHA-1">6a5d0a66505a3ea0a67bc1869fb9748c9fb01f19</hash>
        <hash alg="SHA-256">091cedccd7fcfb0a99b6fae9959b8f3ffb2aed35035d32f638a04b433d2e7c8c</hash>
        <hash alg="SHA-512">023d9377f9d053f9d89e38d4753c039273f7f825c2b7dcd6f1b7545e25d1cbc5308158755ec7ce853300f6bff6b5c7b78016b4095831813ab5135f93287f0b7a</hash>
        <hash alg="SHA-384">bbe15964491368a63d8680c819badac919a375780435b5a40ef289e0b46b7f4f7443ec99f55025af15559a9a8b64a125</hash>
        <hash alg="SHA3-384">94d87adeda34b6deb28a6ddba8c7a92d5a761e24287d4cc1198ac86b50bd94145b4b94eed1f99a15b2212df70206046a</hash>
        <hash alg="SHA3-256">673ab385f37bef88d759765de4645d492bb788bd65091d54bebb2a16f2e2741a</hash>
        <hash alg="SHA3-512">de3ae73a14e8988d9f163772116a21a57927d2b97fe531b1aaf365536ac4a57fb33f832ced076c7c11c6ece3f92157e79918192f54be60905b9f7a44d35534ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-policy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.xml.messaging.saaj</group>
      <name>saaj-impl</name>
      <version>1.5.3</version>
      <description>Implementation of Jakarta SOAP with Attachments Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c3bd20b7350f99f18f8c38fbed90199</hash>
        <hash alg="SHA-1">1cd4aa51ea7a8987fe930083e3cd05e2ac72505b</hash>
        <hash alg="SHA-256">21d451aa7dbe1254388ecc4e5ea71aabbc519c7d7344c9d93e9f79954f38b32b</hash>
        <hash alg="SHA-512">de46ee6d6e294954df3cac45dd7738490592478a240ce335e4f12a28fbac97c3728cf9b06bd87a1c295fe44a03fecce0ec50fb1a438a1180f285c10e80726fd2</hash>
        <hash alg="SHA-384">3efe236526171d9797f447525f7e814c08870eaf80df9434e58b6058c8b3b3eec654a165270e282e83364d280865f9bf</hash>
        <hash alg="SHA3-384">af04a963878dc17c290f126cfc11bc177dd2814df41790acb22cad81ca7c31f1a894862883127989a94922c7fecc3b7d</hash>
        <hash alg="SHA3-256">d1cac8bb371bd03a8980c79a3103fe569e51661ed97c4963381cb8dd0615f42c</hash>
        <hash alg="SHA3-512">d746b9d7e892a2a49624c066610096858e0e8d93bc6613f470a2c77ccf2ffd4bd4fa131c33cc5ab7e765940e66a2dd201379f2199352a10381b129e585dde3e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/metro-saaj/saaj-impl</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/metro-saaj/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/metro-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/metro-saaj/saaj-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.jvnet.staxex</group>
      <name>stax-ex</name>
      <version>1.8.3</version>
      <description>Extensions to JSR-173 StAX API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6d943e74064cc1e7986236699d6cd04</hash>
        <hash alg="SHA-1">4d69b68ee007aa15238cd4477392068b32747df3</hash>
        <hash alg="SHA-256">bee08da10bbc481418a1af70b9e9a80321b745bfb4dbdebbe98c1aa17c45caf8</hash>
        <hash alg="SHA-512">fb78de98748cfc5bb8326f324c7ac408552a19cec55278fef7900f31595215b85cb3ca31910714bd33eab695557ea550e154acf5919c0d56c7ea91755ae2c3b0</hash>
        <hash alg="SHA-384">a3b732402d31cc5b742491cb86ae551b237ef82e58ff287b34885578a969466bc0b36618325814d54a9669e2e0467cbc</hash>
        <hash alg="SHA3-384">ef34e014b2db5eb7948d175eedb1092f31099fcd0202cd332aef3591850d212d393c61ebeba0f29726ce20522ab167cb</hash>
        <hash alg="SHA3-256">e6c04ea88f87f34f9acf3c204f355f83ad754f5aa06a8f86a502b44f29549166</hash>
        <hash alg="SHA3-512">bb1330140ff310519c2a7e37ebaca8a3c29ebeb8de3e6b29edb591f4d8dc8177d350fccde6bc3d5dea5793de1aac6054ca6b132f4d4bac745e17176debc2ea35</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/stax-ex</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-stax-ex/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-stax-ex</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.12.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-text</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TEXT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.14</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2cb357c4b763f47e58af6cad47df6ba3</hash>
        <hash alg="SHA-1">1194890e6f56ec29177673f2f12d0b8e627dec98</hash>
        <hash alg="SHA-256">c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6</hash>
        <hash alg="SHA-512">a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced</hash>
        <hash alg="SHA-384">c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d</hash>
        <hash alg="SHA3-384">9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510</hash>
        <hash alg="SHA3-256">48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa</hash>
        <hash alg="SHA3-512">4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-client-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">28d2cd9bf8789fd2ec774fb88436ebd1</hash>
        <hash alg="SHA-1">51cf043c87253c9f58b539c9f7e44c8894223850</hash>
        <hash alg="SHA-256">6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f</hash>
        <hash alg="SHA-512">168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838</hash>
        <hash alg="SHA-384">ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562</hash>
        <hash alg="SHA3-384">b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1</hash>
        <hash alg="SHA3-256">fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64</hash>
        <hash alg="SHA3-512">b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.17.1</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7b3438ab4c6d91e0066d410947e43f3e</hash>
        <hash alg="SHA-1">973638b7149d333563584137ebf13a691bb60579</hash>
        <hash alg="SHA-256">f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23</hash>
        <hash alg="SHA-512">a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860</hash>
        <hash alg="SHA-384">ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5</hash>
        <hash alg="SHA3-384">ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe</hash>
        <hash alg="SHA3-256">f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df</hash>
        <hash alg="SHA3-512">29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.17.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore-nio</name>
      <version>4.4.16</version>
      <description>Apache HttpComponents Core (non-blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">597c450f3401e98103e835824ab43e77</hash>
        <hash alg="SHA-1">cd21c80a9956be48c4c1cfd2f594ba02857d0927</hash>
        <hash alg="SHA-256">4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4</hash>
        <hash alg="SHA-512">197cb4f4343a02d39d61db1c19bf10757aeb2078f51c4ace77a72a250b6d03b31fa1fc51f989f43df8c2a0cf8162a36664a8a935f4bbeb860c35770a3abd1899</hash>
        <hash alg="SHA-384">e8827b2eca484748dd776edcac779ae67b5c4394c5c2ac1a50c614b19142bdefb4c4e01f0cf376c578007ad515add88d</hash>
        <hash alg="SHA3-384">fb55a9718c2507954ffb779520b0233acdd0135222c7d01542083b3cd5dff669a8afffaf54d8bfe724e52c5c18c1403e</hash>
        <hash alg="SHA3-256">37554263bc837817c08dcfba6b4a5ee978fa1d9f99945d27c0f3ba44195501a0</hash>
        <hash alg="SHA3-512">18692a4310956c328ddebeac514a503904b84605463063f0539673f0480f0606c002eccd6f4dbacf91d124e11e130aa122efb855ec6b0aa0cf72ee0b26ac8ef7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-core-ga</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore-nio</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpasyncclient</name>
      <version>4.1.5</version>
      <description>Apache HttpComponents AsyncClient</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5346c547bfd0da64eb3dc54be9380d65</hash>
        <hash alg="SHA-1">cd18227f1eb8e9a263286c1d7362ceb24f6f9b32</hash>
        <hash alg="SHA-256">0c1877489a9d1ba4fa50f6cfcab11d1123618858cb31d56afaab5afdd5064d99</hash>
        <hash alg="SHA-512">1e33c7fdfa63f377ec4844b7744d2f8ec30dc7867136905ff5a5a6e5f94efa5b8159ba20e81f0048f48430cf63ada7411a3974a418aefa497d2b4fab3501f5ba</hash>
        <hash alg="SHA-384">9c4cf09ffeb61bccc3b67375f401c8a96c46bdee7c77f84e3227271a635e109a550526185407869e93ede8f081786977</hash>
        <hash alg="SHA3-384">25bcc09200af70f5624baf5ddb95ac6bf46daaffb938d141f72f63ef76df8b740ba3b50104da997cfe67c34bd520fa5e</hash>
        <hash alg="SHA3-256">ddb21eeb3e1c3f00ebcf397b58d8d972cc7ab7b140e8939654bf24b8b89382a7</hash>
        <hash alg="SHA3-512">f753a8b9607f42417912c3bddeda3f189ab9f469416dafdbcd29b1df7a358aa57deba8a79a5663fdd1a4acbe35b39a48fd24f889a50e05a4726132db85699ebd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hc.apache.org/httpcomponents-asyncclient</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/HTTPASYNC</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/repos/asf/httpcomponents/httpasyncclient/branches/4.1.x/httpasyncclient</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.asynchttpclient/async-http-client@2.12.3?type=jar">
      <group>org.asynchttpclient</group>
      <name>async-http-client</name>
      <version>2.12.3</version>
      <description>The Async Http Client (AHC) classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">334e9ae90fc4db1b16e177f09aa1fe31</hash>
        <hash alg="SHA-1">6dfc91814cc8b3bc3327246d0e5df36911b9a623</hash>
        <hash alg="SHA-256">107a4ace7a3586f8e8a027c6d7e9933c9ae56eeb1a6df347eed2e7b552e4e5ed</hash>
        <hash alg="SHA-512">b5152d3e1a01239f2041624815dba80633d1514932d9cf5d3c82d548736f856e057828da36e5bbb77cd826bab409b1501c08245d4bbc7e1ea21b00de91c43a34</hash>
        <hash alg="SHA-384">30ac33a492d4608fcfe37a6e4891f00d5e0d5d0e351e87beddee802dd33668203f1489669299bcd65a97e24bf608d30d</hash>
        <hash alg="SHA3-384">04418a9503fe4131298ea05f33479bb0f4985343e3b6a1aa13a4f3b2f6eeb62c9eb2e7a9092514f86fa3cda1ef6e8621</hash>
        <hash alg="SHA3-256">de57cb1ef3151f28f0c05c0fb97258c6c274f468781bf6985b22124d8600cc86</hash>
        <hash alg="SHA3-512">20b969a66f5a2e2d9095e82cd1236e9bf331d21e5620c98402673b669549c1bb70b3d5aa7b441f922756aa0e37a5d931e1027f5040ce1aff535581a136e73903</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.asynchttpclient/async-http-client@2.12.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/AsyncHttpClient/async-http-client/async-http-client</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/AsyncHttpClient/async-http-client/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/asynchttpclient/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/AsyncHttpClient/async-http-client/tree/master/async-http-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.3?type=jar">
      <group>org.asynchttpclient</group>
      <name>async-http-client-netty-utils</name>
      <version>2.12.3</version>
      <description>The Async Http Client (AHC) library's purpose is to allow Java
    applications to easily execute HTTP requests and
    asynchronously process the response.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e0d471baa6e7e4f9bd85220d1abbea0</hash>
        <hash alg="SHA-1">ad99d8622931ed31367d0fef7fa17eb62e033fb3</hash>
        <hash alg="SHA-256">e0bb76bbca0c85c68cab25dbed7989b00db5da8627cf69258f398d7d89bc9067</hash>
        <hash alg="SHA-512">f97efebb82bc6102eacaa3393d56f02fa7369638c5b54b426c54cc60138b4d9fb04705f2513fb377e8a7b5661d59f4cf8664deb50ef1c728a132ed68fddffbe1</hash>
        <hash alg="SHA-384">5e676ffdfdef71868da1563e6a73d00338dc13fb2ca32e192ca57cced767a5aad3fb911615704d47aa152110febbf7ac</hash>
        <hash alg="SHA3-384">270ca62e1032fcffa87f7d531c510300605b0d358563e38189f8d1354c44a54ac63779367b8adfd1f643793e03c168e6</hash>
        <hash alg="SHA3-256">cf7ee0cbe51d6da70f7bbeffff3bdfb9db45cca45a6144f72a3cc7c20ef109c2</hash>
        <hash alg="SHA3-512">73895206c94aaa5d9f4a3e2b52bdf3ea9ce8be26608b943fa8c33807957fea6c99278bff11246c52caf3cdb3a382220d58540164117a71e9d39638be1aa85aba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/AsyncHttpClient/async-http-client/async-http-client-netty-utils</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/AsyncHttpClient/async-http-client/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/asynchttpclient/topics</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/AsyncHttpClient/async-http-client/tree/master/async-http-client-netty-utils</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f418612c6f3e41f4c87cc8f06e164065</hash>
        <hash alg="SHA-1">14e28bab0173be10c9631a85069636a0d0221dfe</hash>
        <hash alg="SHA-256">9b7c70a5a8f8723f2047ee2bd29f859d94fc4276b1fd11c0ecfdd69f4b96b037</hash>
        <hash alg="SHA-512">2e502dfce25a23b4813ded375592d438d872ac41ea3599734991208b97ea5d7b97a3837c601d28de5eaf3f493e3db4542ae2ef70695725c48296a2f531c35102</hash>
        <hash alg="SHA-384">1c75b2390978d4a9e2986bb6c36acfb7c0c02bd92a54de7936b80b8babac5322945ad5cf9749493057d6ae5a69394b72</hash>
        <hash alg="SHA3-384">0a5a32ace5ac680a4fac7a376e82dfdb0545b98b4bae087471af67396bf30b2e6d3366f3cceb2825d22f2d937b990623</hash>
        <hash alg="SHA3-256">138d7dfc1cce59724557ce619b5acd6857439e28a46b72415c46e884438d138a</hash>
        <hash alg="SHA3-512">36b8fa00da08e063b5d5093a4cb240d1d7dd095b5364a5a0046e17a1967983092a8f99fa464d367dfa3f605a322acdfe41418ab3a299e823885f88bdf90b6a43</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-handler/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-handler</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver@4.1.60.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67fdf53b9566ba06d8946a281f2eca5c</hash>
        <hash alg="SHA-1">caba5004618d27386ee9d5ee8b23b09b6548fb0b</hash>
        <hash alg="SHA-256">192dcd724f97666c3287f7c375fcfc4a1d639941afbdaff68f49cc180906f9b5</hash>
        <hash alg="SHA-512">b95570a24232a5fdd79cb2e0974535056fcacc55a71bd532bdf24ccdcb379ab89f8da8063661c55a63f9839e821fe4f28a53e2dcc65015281cc17bb051fd5993</hash>
        <hash alg="SHA-384">e27ed7a531e015504d38e3b285e34362ed920a7c8e5b66372f96b943abbd3c52db2b32815a89d9a38b507f7811d73b63</hash>
        <hash alg="SHA3-384">deb5f28b41f54792de948267b9827c5dfb5697f8f463125c350a9dc4cdc3f9386b72840dfb7bec9638afcc1aaecf88d2</hash>
        <hash alg="SHA3-256">b5f5c140753703bdf7ddf8b2441b65234ec5608af34f006b1e405f84cc5137be</hash>
        <hash alg="SHA3-512">d7dee38d5d14a0a2333275e95394891bbce5c8ac0e208b23b7103936b577407b34db5243cde13f5d8b9d2ed334d2e043a8bb9816c1e98400c2d824f3396dcfb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver@4.1.60.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-resolver</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-socks@4.1.60.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-socks</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">63a724eae52cfd6074417bc6d500195c</hash>
        <hash alg="SHA-1">6f4573281df659265bd709fd10471c3e00ef6c70</hash>
        <hash alg="SHA-256">76bfb4306c67fc25ce6a817ef5ffb0cebc9250506a685fa6ec06052848c14efd</hash>
        <hash alg="SHA-512">b5c1d94a1fee13af0c6bcb8ed663ae6a987c3ea9adbfe57f229bd09492825d1e47eb019b7c2bafa061ee8adc348066e2f003c0a44569dc11652ed76bc15fac6c</hash>
        <hash alg="SHA-384">4117cdb794540c192104a7163e1b7573c8cd5065d297f926bb4751c3e4acfe491d376064187560ad7d3d252c8b3dc2d9</hash>
        <hash alg="SHA3-384">1a3151a1465236e9687f3829797672a3c0c161f1324caa24052c652e49a16a66137e7d24c48d37073f532edd216a1d12</hash>
        <hash alg="SHA3-256">29ff872963091547ec0c624a74df38cc1d8258d0cb1e795b24c82fd962839bc2</hash>
        <hash alg="SHA3-512">a9b3aa43f3118251436a3e71beef888af7479fbf2f46e75f2aa8289d72e7df696bc745dbb0d3550102c7e279254cc6dbe036546541204d7568df7835d9c867e8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-socks@4.1.60.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-codec-socks/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-codec-socks</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler-proxy@4.1.60.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler-proxy</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">787ed6ab8f37ccdac712dd44dc548673</hash>
        <hash alg="SHA-1">2352f12826400e5db64b36fd951508ce9a61c196</hash>
        <hash alg="SHA-256">7c797450f50a5bc549bade856e91f4bed95cc6396e85b720efbaab133b13b5d5</hash>
        <hash alg="SHA-512">b520d950b92a50ddcdaaea6a1c89f8b9db6fdec2aba2f984731728cf2dc79d00969a2f4a4cd4e30ae5f3d05fd754f8fa6f210d52ae531004fd8cb2735f57718c</hash>
        <hash alg="SHA-384">30500be26c26fb517adea33b8898a8c80e9a221717c2ff7b680ca3b3825babaa460e310bc06fb41537794edf5b5c27e2</hash>
        <hash alg="SHA3-384">583eeb560ea6c0f07428a1d829c293c7d8a9a3542e2a3c606de587598fb76499fa8e05b7bb1b8d0c97181d7ee24a98e1</hash>
        <hash alg="SHA3-256">52743cdb02e153b1e5e41f4a8b552bc8595440e2afbe37d41fe81adb6eba9a9c</hash>
        <hash alg="SHA3-512">d60e363eda7af322da4e4eb493efea9afe49fd2931670988939fe5d2080450343117595703054dfadacd9911fa00d0aa277ebbcdfb631ad293cb6e2e7c49ce61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler-proxy@4.1.60.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-handler-proxy/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-handler-proxy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.60.Final?classifier=linux-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29d7bda4d17bebc7ded02d5c81eb6b74</hash>
        <hash alg="SHA-1">048bd240fa29a4410e22b64b6d4c26429577d6f4</hash>
        <hash alg="SHA-256">8a7339ccfeb2ef88283a32226f207aedb963bd452e691f2e0de2c98b5758a79c</hash>
        <hash alg="SHA-512">926ab1f6e05e5d544c026e3a2d4863c0108c04020f99ee2b384b9ea38456f54f5ec8bee8c890b979b3b8c84e6557f18bf89fa305a9aa2cea5ea3ecca28a5480c</hash>
        <hash alg="SHA-384">792c53c6e0ee11a2006eb596f88c2ae5e509c558c1106a0eff95d4ca959966ce1eb4db6cfe6bd6fb8a9432eead272a75</hash>
        <hash alg="SHA3-384">276bf59a739f432ec4df49e6198726d5f3651dae0b18e660665822819eddef90b10dd1052654090da0c1588272651c1d</hash>
        <hash alg="SHA3-256">2cfb4718158163d765b5260c9b1074ace0d2a9ecf8e5f5a9e05fc1060605f354</hash>
        <hash alg="SHA3-512">1b30aee2c826986db5dad11341090807c5677f1c97ddc2421f9799499c78921cfd53b7a5c64e65dbb830f2cc547953fc67e287330e835ce76884bbdec86cbc0c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.60.Final?classifier=linux-x86_64&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-native-epoll/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-native-epoll</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.60.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-unix-common</name>
      <version>4.1.60.Final</version>
      <description>Static library which contains common unix utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">512e8f4ec47d4908b7714b83d5b0a161</hash>
        <hash alg="SHA-1">fad098b98df67e50135c67e4a26af56c7800daf4</hash>
        <hash alg="SHA-256">410155d54c989a7c8962a2a65b345309a31be162646f36a2abf6fa89cf9f6fe5</hash>
        <hash alg="SHA-512">6e9555ef1df43a01b7f6df237c6b72bc9a91c3191584b398898b8940126d10027dd26835786d5c5f8bf60eb6247e45daa353a6998738f3d50daa75c116c39b70</hash>
        <hash alg="SHA-384">d6df73522b2eaa634bd68a7e0769bee74a1bfaa591fa1c5c8e592012c567a5eebe2b5b7a6222527a04b69519bca9d51e</hash>
        <hash alg="SHA3-384">2064cba135d93dbc3f69c2aa0ffa4308a3d5e707eac1ac149ef52d65618a5d5411527b9508f5228547a797834b9cf55c</hash>
        <hash alg="SHA3-256">faf436ac0c3db3067b7e948339888ad609d295f1c23e5baacea7469ca19339ad</hash>
        <hash alg="SHA3-512">f975d92a2e9eedf77aea9be718a9652ca8c276bef8ba2b62fb28d381a887cbeeaad0e253853e2e6e92747dc055b7c2683ada834e34df1dfac0a2cf795d62074d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-unix-common@4.1.60.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-native-unix-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-native-unix-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.60.Final?classifier=osx-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-kqueue</name>
      <version>4.1.60.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">962299b6692114755a34dfd8a84f48e9</hash>
        <hash alg="SHA-1">b1f14b5d5b0e52e4385f1cd1a6c4934521a8ed3c</hash>
        <hash alg="SHA-256">67337e52e4bf24c39b52d1fbcadf04f762272726b437f03d3efcbbe98b22b27f</hash>
        <hash alg="SHA-512">8a9f13a8adc0397c4a0195a27bdf2d39abb33f5774aecf5eeffaa08f9713f693c36c990f97bbc99d8ff27e3e642e3b8aa047203906eceebe90d4b7388f9c3ba6</hash>
        <hash alg="SHA-384">25dbdd30280d6a4949e6e01ec3bb8a0a4fa24c64293d75a25427eb0b26fe0c92c8aad0003fc2778c0829ba14e60b40de</hash>
        <hash alg="SHA3-384">360b5a6811a9c18cbe03b982c87bed683f42b105b876561a376d862d99f8c03e74782c30489babab90510fc0d1abc00c</hash>
        <hash alg="SHA3-256">fcea5dccc702535183d78edc4c7a07b08b0f17f780b0ddf15df3b8d59f7696eb</hash>
        <hash alg="SHA3-512">9f333340a1a46b54197cbc452f24569ac284c62fdcbbc23dc7233e9e10406e05c99e7649528cd116df7a4054554c100e714e8af41e46e58a863f4b991dd297c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-kqueue@4.1.60.Final?classifier=osx-x86_64&amp;type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport-native-kqueue/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport-native-kqueue</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.4?type=jar">
      <publisher>Typesafe</publisher>
      <group>com.typesafe.netty</group>
      <name>netty-reactive-streams</name>
      <version>2.0.4</version>
      <description>Reactive streams implementation for Netty.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a10a0d529ec175ec5d5401a394e785f0</hash>
        <hash alg="SHA-1">0f77c8eaa7d5e2f2160b6d21ba385cf726f164b2</hash>
        <hash alg="SHA-256">eafc52d500b49e891db095ee7baac0420aea8a97015ab7671ba1f1ccabf799d2</hash>
        <hash alg="SHA-512">5e72d66dfb462146de2cae9a062c5dfc5d9e3bb0beda316a97261e108c04b02f5b03b4ed448495a0a1df6ec264144fe5046422b2a3f6ea30c67a02c7755b255f</hash>
        <hash alg="SHA-384">3119863e661a6b9e9ea967491d5cfcbb6b4d84f83ec5acc6c97fef5127d2f31ebf55d4e35611ccfcf65de8b85c7b7bf2</hash>
        <hash alg="SHA3-384">3f6f9f716b195c5033944e62c30a116de81265e17a62d3a1ed79fe47ea772eef6f9343de53b182024130b0445f138652</hash>
        <hash alg="SHA3-256">01807b478ec11d29805afb3a33a06ad7b6ae73f11d0260b63eef266e43040caa</hash>
        <hash alg="SHA3-512">a5cfd72d3ab862134fa841f9931ad9d2a677e6d6eac443dc453738552d6b6e6f055dcce0a2a95185d457a8520a34466ea9587e4f63738af3f17193cd5a82c294</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/playframework/netty-reactive-streams/netty-reactive-streams</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/playframework/netty-reactive-streams/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/playframework/netty-reactive-streams/netty-reactive-streams</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
        <hash alg="SHA3-384">83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590</hash>
        <hash alg="SHA3-256">5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d</hash>
        <hash alg="SHA3-512">0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.client5</group>
      <name>httpclient5</name>
      <version>5.3.1</version>
      <description>Apache HttpComponents Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">de1810a606b27192cbf5bbad9c25a648</hash>
        <hash alg="SHA-1">56b53c8f4bcdaada801d311cf2ff8a24d6d96883</hash>
        <hash alg="SHA-256">08346a757c617f6ecc66af9f099260adde1f3a1351fa81cb22fc17482b31f823</hash>
        <hash alg="SHA-512">4c2d75106af8470789f0e08305e64ad86528f2f737da230e561892d33dbca0b6e2dbced2a075f0744cee7801c06ef174481540661b3c9a1bec6d6f93938b05bc</hash>
        <hash alg="SHA-384">27470f74660b89f8a0af562a4edbd244afff4947b0fa7364c61e53ca49713efbca49e661214590f532c4acf9cfd66eac</hash>
        <hash alg="SHA3-384">d25be0f1c5e0c02de0adf7113e591f10bd7fab20c168a20b7d15c859b252a6dc3ae3a24098e838d95c179ab3107f07b6</hash>
        <hash alg="SHA3-256">9e22ce6935e71d12d1be70ef0b7cea9a87191c767de2904cb82fcb6e58d0e9b2</hash>
        <hash alg="SHA3-512">9d36e201e469dd357ef715bba7beba62dbea98daefcea3b793fd285c2ffade97d72b35a07f05015fbc2d5b4fa5db58ff5ecf40e1269582a6c3e53ed62cbf97f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-client-5.0.x/5.3.1/httpclient5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCLIENT</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-client/tree/5.3.1/httpclient5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5</name>
      <version>5.2.5</version>
      <description>Apache HttpComponents HTTP/1.1 core components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">419f7b3172ebee12dd64af978feb4351</hash>
        <hash alg="SHA-1">dab1e18842971a45ca8942491ce005ab86a028d7</hash>
        <hash alg="SHA-256">9552b9e06cef3170e37046092de115c33a7cb48ee7ef0d87f1d5650dee7e1b0d</hash>
        <hash alg="SHA-512">b23e90b4b891378c2e4ff35b16f4a1dd97d2a11ca10ee15441e82ccb3d1a7589ea50fa277e7f557db472e3946cf46f371a265a3bbd0ff70801d99a6c90f6bbf3</hash>
        <hash alg="SHA-384">01259db34f52668fd409912b49e8370a4916f0bc4e7e31a7219facc97041d842d06d8b9616273923775c1e28cb2aa257</hash>
        <hash alg="SHA3-384">844e77f78dbb01e36758c61bbad37c6e63d5cf2bc351788d649bdde4daa60b9a1fe2eee7bc8d105d3f4e95f822dfe9e1</hash>
        <hash alg="SHA3-256">d033fdbdca628a9c69aaf684766d039a663fabece75900064b3543d089b46573</hash>
        <hash alg="SHA3-512">1d46155ae902360a4f267ed08165f1424a0cab440b66d429b716187a96125e7bfcb90a71af7266ef2fd5a81d75ead59dbeacf4b943d404750487ff01c4c84903</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.2.x/5.2.5/httpcore5/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.2.5/httpcore5</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents.core5</group>
      <name>httpcore5-h2</name>
      <version>5.2.4</version>
      <description>Apache HttpComponents HTTP/2 Core Components</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d407b8144029db656ac5ba3d54ef801f</hash>
        <hash alg="SHA-1">2872764df7b4857549e2880dd32a6f9009166289</hash>
        <hash alg="SHA-256">dc1a95e73eb04db93451533d390ce02c53b301a10dc343d08c862f2934b3d30e</hash>
        <hash alg="SHA-512">72fbee55f173c43d9ffc0cc5a83d59e60be1002c06ab81de39ba700cc30b04e84fdfed73d3a8985d561a1aa8ac3ca905f9259d01b431e1ff14da6fae622f787d</hash>
        <hash alg="SHA-384">2f96537af2866fa96aae46138febe3009dca97cc9b4284cf18510c12d159ad3f5d34c3c9bafc8026215da81520331660</hash>
        <hash alg="SHA3-384">9900a3aeaf434d7f32a7500e29e16d354857ef34e6af3fb7de9e1ab7683b6a1c4bfa9b9f70bb779a8ec8d8be82b6bca4</hash>
        <hash alg="SHA3-256">da34ed59342e368229b74245d2268a457588adea9e276a1ac2fb57419c605f31</hash>
        <hash alg="SHA3-512">ca5b03cf34c7e344fd0b809c582e60f0eaea796372cf68e2e95087ac5943154e51472595f6554b810a5ac4789ba6f7c06cae46437badecbf31c57907123a49fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://hc.apache.org/httpcomponents-core-5.2.x/5.2.4/httpcore5-h2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/HTTPCORE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?httpclient-users@hc.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/httpcomponents-core/tree/5.2.4/httpcore5-h2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
        <hash alg="SHA3-384">3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286</hash>
        <hash alg="SHA3-256">794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17</hash>
        <hash alg="SHA3-512">fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
        <hash alg="SHA3-384">abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6</hash>
        <hash alg="SHA3-256">3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009</hash>
        <hash alg="SHA3-512">88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.core</name>
      <version>6.0.0</version>
      <description>OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cae291c61fe8b7a4476d713550c7ff49</hash>
        <hash alg="SHA-1">0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c</hash>
        <hash alg="SHA-256">1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931</hash>
        <hash alg="SHA-512">a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470</hash>
        <hash alg="SHA-384">8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c</hash>
        <hash alg="SHA3-384">b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c</hash>
        <hash alg="SHA3-256">5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0</hash>
        <hash alg="SHA3-512">9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org</url>
        </reference>
        <reference type="vcs">
          <url>private</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/osgi.cmpn@6.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>osgi.cmpn</name>
      <version>6.0.0</version>
      <description>OSGi Compendium Release 6, Interfaces and Classes for use in compiling bundles.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40a24e915b654df4aed69c7f0f663eec</hash>
        <hash alg="SHA-1">a3a5269424e5ea6488d30dedce8fabca11efbc3d</hash>
        <hash alg="SHA-256">dbe06105a0e3e46bc88425b3d7c682a2d8b6bd055341913b6c37e998c00c9176</hash>
        <hash alg="SHA-512">9fd431eea4abab1b8c9ca04820a62c7584eaa1cf3e669bf43eb6547aaee6fa1f740071f8dfbbb060f88139dd539b0ac91d671dd3d15ffcb3ecf5627cba2fcd19</hash>
        <hash alg="SHA-384">b6f125c8a6e9bc073067f6a33b917346c9c799d37b374878a0a1e10e9841b9c853f4a268b18aafaf401079b6c42163c0</hash>
        <hash alg="SHA3-384">2e4a451693bdf66d27589e2ce31f4284d783e38eb74e5d9a9ac588701e09cc0d3db918c9a1478d6414602b95d24d332b</hash>
        <hash alg="SHA3-256">d21a5eab944f11cb719532cd4b381f6c033d8532a97e35d39fe97e6af77892c9</hash>
        <hash alg="SHA3-512">d3b0001cb5d986e3be8cb2b754b84cc22c3a62c6c6cc1f00a5cb90f0c82f37b36e0bb88ba933c37435de8fd732cde8e767acc59ba548bec7425d6048392300c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/osgi.cmpn@6.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org/</url>
        </reference>
        <reference type="vcs">
          <url>https://osgi.org/git/build.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.hazelcast/hazelcast@5.3.8?type=jar">
      <publisher>Hazelcast, Inc.</publisher>
      <group>com.hazelcast</group>
      <name>hazelcast</name>
      <version>5.3.8</version>
      <description>Core Hazelcast Module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">111d59255bbe754033f3868a28aa4f53</hash>
        <hash alg="SHA-1">d028d2f586b4ecd993868e1b5f7c449be69b2c64</hash>
        <hash alg="SHA-256">025449efcb40418e626345d2b6011d8702ca72651b30d655edbd72e5324095f0</hash>
        <hash alg="SHA-512">cbb1b7254f66df12193373afa9ac4b5adb07171ba40648e2f86a7697a2a9f3de7ae5da5b0214e592f9e1c51f60854a8462d3bf4b37cca379aeb634cca9827270</hash>
        <hash alg="SHA-384">33b4af2930dbd08e7d9a982db143cc23f71ea60604b143ed48dc094dd8dcda4c7930ab1a74145f60f68948f681a92c6d</hash>
        <hash alg="SHA3-384">95aaa6fc6b91703e8f52f82be57927df5965ba6772804ec834158c2bbb0eded6b02cc588cd9dd0064d3a714b459c9337</hash>
        <hash alg="SHA3-256">7d4f348ddf6eef70a229f12105473d77212656d857648ebf56f83ccced35a685</hash>
        <hash alg="SHA3-512">badb86da41dba1451bd300365f50844661db6b7531c6c78e95f7d77c389a34e57b65dbad063eb5e304fd5da9f90fcaf6abfae6f5ae395124ffe5f1d0a46f31f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.hazelcast/hazelcast@5.3.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.hazelcast.com/hazelcast/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/hazelcast/hazelcast/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/hazelcast/hazelcast/hazelcast/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.activemq/activemq-broker@5.17.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.activemq</group>
      <name>activemq-broker</name>
      <version>5.17.6</version>
      <description>The ActiveMQ Message Broker implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3fd9712afc5515c88de597652064354a</hash>
        <hash alg="SHA-1">22b4f7a5540256abf361e419488cb07435a9fce9</hash>
        <hash alg="SHA-256">3688f17b52ca8ac9803dc5e3322c9ee7a77c455a86242fddeb95dd99112ef2c5</hash>
        <hash alg="SHA-512">8ecba54949fb77d3fba2c1c0bebd86268a576f7df902c285da3c5d445387a2a27e13c96f1ad7c94c681f7fa76c883aae7dca2c1a2e12bf1f7cbd66179051de52</hash>
        <hash alg="SHA-384">adfd522e9bc3b14d32bb8cd441cb26267170fd4cb42e7bf48e17d31b7cf22590cbc3d591621d1eb040a523397fd82f7f</hash>
        <hash alg="SHA3-384">3df9fe9e218a39722291bd5b6eb6afc54dac1bc48d375fd87478971540c4e6c8959934299eacb2928d55d2e42fe3090e</hash>
        <hash alg="SHA3-256">510c23244b6a5e48c02bc8be18d49ed5dbd6918e78f97e9f382f894098310884</hash>
        <hash alg="SHA3-512">93458cdb337e167e5b203e958c451cc39a68bc1f471e4d044cb8eef1e73c69cb19c10e407f5065cf39bf3748802f88eba96ac76abe34446811187de9e5dff666</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.activemq/activemq-broker@5.17.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://activemq.apache.org/activemq-broker</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/AMQ</url>
        </reference>
        <reference type="mailing-list">
          <url>users-subscribe@activemq.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/activemq/activemq-broker</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.activemq/activemq-client@5.17.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.activemq</group>
      <name>activemq-client</name>
      <version>5.17.6</version>
      <description>The ActiveMQ Client implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">194eae81574a4b02d4004c61c5ddbf79</hash>
        <hash alg="SHA-1">efaa3d7b73b10bd5e0b3e978b385b54c5b8dd497</hash>
        <hash alg="SHA-256">bc9671d7320747c6e5a141fc425e33e0026a129eb8418086aedabf8660e61af6</hash>
        <hash alg="SHA-512">3a6f72b49a8eedd28e5a2d6ae199a8799fb824b4e470e926a581aff9b3ae22498e895d3f6739f90fe8eea1f55d1b3e2f3ff19f602b132ce64342a7f8024c6ab7</hash>
        <hash alg="SHA-384">3ed68de072cef1b53f79bafaa3b4dd3b7a3fe6cd0241b9c73be9635c4c234487e3de5c1b8e99a7e220fc6c6a184583f6</hash>
        <hash alg="SHA3-384">28894f5b26e08226e02834f2b49ae5f2f9785d0ee83e05eeac9ea50d48247b9c021ce787af6ed51a0357e5b13d96d28a</hash>
        <hash alg="SHA3-256">1a56bf5d2e4e7f1216d5a897a6d8d637e1760e899dc2f100f19e6b55460df46e</hash>
        <hash alg="SHA3-512">3fcfb5467be70e64c89a4fb6893fa29ddcad23f13d37826c92a22814308fe0cc5a0d891e493237b8ea00be56b0336a055b3f2b51fed7ab6e5cb7ca2d6352eca4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.activemq/activemq-client@5.17.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://activemq.apache.org/activemq-client</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/AMQ</url>
        </reference>
        <reference type="mailing-list">
          <url>users-subscribe@activemq.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/activemq/activemq-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.hawtbuf</group>
      <name>hawtbuf</name>
      <version>1.11</version>
      <description>HawtBuf: a rich byte buffer library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a80061bd945ca0f13072861777ff27b1</hash>
        <hash alg="SHA-1">8f0e50ad8bea37b84b698ec40cce09e47714a63e</hash>
        <hash alg="SHA-256">c6b45db967f3b2b3e28fd2f0724b1730a89d3f5aa9eef3664de29caba219593e</hash>
        <hash alg="SHA-512">396966adf3e8cba09ff75297915d41ba6a7c60c327575dfff153f6617a1bcafff4a1ac0baa19d93b4ddcab511c5e23a6fd95aadf45e55e2057700da3b8991af0</hash>
        <hash alg="SHA-384">00cdf737bd5ec91e094928a5e7a17eb2277c61c58374c5ff707debfc2d88bf83cc81d36d15cee6150e184cec19976e3f</hash>
        <hash alg="SHA3-384">a2b982a00ff5f6f4c40651e47622f165dc19afbad8381a759a2ec809a137b65f944622ccde3dd7cd30457833bddc57d6</hash>
        <hash alg="SHA3-256">a1efa4b49a277072841059cba60cb6605ad0af69c2e9ed834d0b8da4f5e15a05</hash>
        <hash alg="SHA3-512">f0a5741c6e297b03fb24755d0377c8d25122cdab6d3a5bdfe2dd8acc481d2d2ec13331ca674de4f0ed562f2385ae892555d308dfb2bbf653067553f5fc4dbbda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hawtbuf.fusesource.org/hawtbuf</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://fusesource.com/issues/browse/HAWTBUF</url>
        </reference>
        <reference type="mailing-list">
          <url>hawtbuf-dev-subscribe@fusesource.org</url>
        </reference>
        <reference type="vcs">
          <url>http://fusesource.com/forge/gitweb?p=hawtbuf.git/hawtbuf</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-j2ee-management_1.1_spec</name>
      <version>1.0.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7e1708a3b808e9749b5789668fd9ca8b</hash>
        <hash alg="SHA-1">5372615b0c04c1913c95c34a0414cef720ca2855</hash>
        <hash alg="SHA-256">7ad780c72a92039bc07cbc09b6ee8d06571a1fbd92d4361a19a433d783b6e221</hash>
        <hash alg="SHA-512">32e38035e7a9bc63f31caa612421bdc33ddb9503e37c97b587490926d35831a8e3c2fef324acadc9a301aa977a761b36c94188a64e53e0aec8641b04a21b3597</hash>
        <hash alg="SHA-384">14477e45ed53f75c86013d6e72ee9614593a85af8a3da02cab19f6955f86de5cea99b201022c89fbd0ca4a7116ae279a</hash>
        <hash alg="SHA3-384">9945c84d6df1bdb1bb0f6adcfba44afaacbf5c499349228294e61f463f6df73b8a55ba99712758f68e43aad8791ff9b1</hash>
        <hash alg="SHA3-256">4c76fb813cc1e3f49aa97d2c555f1e69943e397b64af2eea6e555047d89d6e55</hash>
        <hash alg="SHA3-512">3cc42f6c7789b92a294864707d40c0456551e3b6b82221635d1bb96c93c4749f4dfe338013b1d3bf79cddacf47062d2a08374785d63eaa5c4c345b3120384c9d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/specs/geronimo-j2ee-management_1.1_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-j2ee-management_1.1_spec-1.0.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.activemq</group>
      <name>activemq-openwire-legacy</name>
      <version>5.17.6</version>
      <description>The ActiveMQ Openwire Legacy Support Module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bcc74eacff7f26c81274eae471794eaa</hash>
        <hash alg="SHA-1">22f96ca01c223d053f5e6c2372eff5a6de06839b</hash>
        <hash alg="SHA-256">9a7668edb947c819e87d8b99be7cd81c7ba4b3d60a3cb531e2487616fb459f3b</hash>
        <hash alg="SHA-512">454558df2ab41dd34a5a78547e3cf2167bbd4b5be7f5c80f039200df9d3575b84dcee8b181837aa28f93bb1fbaf22d72ad7661c139dd4dcdaf47952cf53352a4</hash>
        <hash alg="SHA-384">becd9a3f2af0c0ea8e7403e77d7c710297257085d0f2d5ab1b95fee88049fac1b52bcf433221519c9b689146cb30f005</hash>
        <hash alg="SHA3-384">7abb2bbc15e7f367dc8854878536c9b5113339eb7f061943816e348befddcf34897bf9dd49d439c0cf8d9b1dbbf706c5</hash>
        <hash alg="SHA3-256">2eab640246de70b924ba3f9f2918c0656f9b208d76c7751d744c9078d4f814f3</hash>
        <hash alg="SHA3-512">37bbdfba40c143dbfe7030b31d7f5f825001521fcd46f25034ef2feef6c97c1e188446eeccf799283541f4b2d3c58ad6a1709e0832e6c9b8f83d73ae795decf9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://activemq.apache.org/activemq-openwire-legacy</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/AMQ</url>
        </reference>
        <reference type="mailing-list">
          <url>users-subscribe@activemq.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/activemq/activemq-openwire-legacy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.17.2</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3e1ff7c1f0fda885946619a47ef9d5de</hash>
        <hash alg="SHA-1">e6deb029e5901e027c129341fac39e515066b68c</hash>
        <hash alg="SHA-256">c04993f33c0f845342653784f14f38373d005280e6359db5f808701cfae73c0c</hash>
        <hash alg="SHA-512">ec62267bf58aea531ec7f253e67974fac89e8aa61e7b54a7fb00edf3132ecb969b510630fd353adbbd2ab7d845a25702f168c296c57983a00bd6abc9ce3630f9</hash>
        <hash alg="SHA-384">d2de4602f779a456d0037f9d64efa8bcf9a1a9f06e3c628b2a3b2313319e22209cdfab9157f9251243bc05da870bdcf4</hash>
        <hash alg="SHA3-384">14618ad7737700ccd941feefd0bbbb7235ecbc1ac0cf22ba1bd72155eb68a800e98fe72f6ea03ab71cb9927a1d117d39</hash>
        <hash alg="SHA3-256">800f9886351c0968d6640e9c7e312c963b0146022fcfc27b173d06fe0c581041</hash>
        <hash alg="SHA3-512">49ff7e89ab8936043ac9371cc05c57bf88899a91ca11bd50227c58da9e6716c270e38c34bade5ba5cf39ed6443edf538bd25e85127c3e22f6788b84e14f3019a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-databind/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-databind</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.17.2</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e68e7e593ae47e106421688707683297</hash>
        <hash alg="SHA-1">147b7b9412ffff24339f8aba080b292448e08698</hash>
        <hash alg="SHA-256">873a606e23507969f9bbbea939d5e19274a88775ea5a169ba7e2d795aa5156e1</hash>
        <hash alg="SHA-512">006d3a054b22daa7f378b005cc29b3544dc7f3b509176e0eac946e0a3bafa73b824bae61b5183b61938b19044d2142a285da2fce2ffdaef5bfe91b2d8dcb6804</hash>
        <hash alg="SHA-384">edb09e196ede070ba1ab1b99e96be6049f60b664eb89e60e28f08327e510e7aedf8c4696bc719113d24fe3367b8b89b7</hash>
        <hash alg="SHA3-384">9c54c25762e7b5e05c5e17deaa35ef5b9af764fb3e19bd790479920d9fb7084f3e89dd2ea2ef2fd680e72aebe74ab271</hash>
        <hash alg="SHA3-256">5d1625676fc95b4625ef73658e47074a24804518d1455a610ff40b3017b1b86e</hash>
        <hash alg="SHA3-512">b4354ed913789689ac4f7dc7385aa2de383324a6b8ff59a2497b6b605c2451bec372c8a4335189c916b24c7a68e83102e0f53fca54c2389f2006ccc84a5eaa17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-annotations/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-annotations</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.17.2</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">50c2dab1f29136714d5ef5c6c640336c</hash>
        <hash alg="SHA-1">969a35cb35c86512acbadcdbbbfb044c877db814</hash>
        <hash alg="SHA-256">721a189241dab0525d9e858e5cb604d3ecc0ede081e2de77d6f34fa5779a5b46</hash>
        <hash alg="SHA-512">694ae3bf756421d925f833f59a6309c7748ac3a68b28ed4de8ce0d6f93347dfc19991d1106db911c7da78e20734e6f44a02caef751150378a6ffa638c80fc75b</hash>
        <hash alg="SHA-384">acc969e3c312f9d2694e3202eb601dbe2317cb9a444dcb67f6e0f00871f6d5593bebcba272afab55f2541c6a7a107842</hash>
        <hash alg="SHA3-384">890610781e8f8c3c1283d8f6bd446d19dd5d83107a852f1446d5d2a4fdb57ff611b36b2267eba46746a305607c5e586a</hash>
        <hash alg="SHA3-256">a4b8acc3fd90cc86a9a1507a3e51abf984521f9189218f17a3b551e0a7ccdf44</hash>
        <hash alg="SHA3-512">f55e7d0b7a68919c8f8d3b5472796ecb82df852a97b1bb4bb0b45d1f9408d50545b717e8632f7ff975b77541e4d4b35de6ed32eeaff556677227b0985a74172b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-core/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/jackson-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-beans</name>
      <version>5.3.39</version>
      <description>Spring Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2f99040fb8b0bc98515c87b968227d3</hash>
        <hash alg="SHA-1">87770ce736cbd777c07866cbc8a06b879765e3c8</hash>
        <hash alg="SHA-256">b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722</hash>
        <hash alg="SHA-512">53321d3395e51b2d0b6948adff4cce81a7a712c89af92ce27ad98a44e34bfb4efa0e617b951c0468deb0baafa258eaf61507982a6774d3d832593d129c93f3ce</hash>
        <hash alg="SHA-384">a4791a32da2ac30322814781da25680f019ef36e179461e6aee54e6f771081f1c61c673542b9e881d190988ecd98b5f6</hash>
        <hash alg="SHA3-384">3456cce03968d9d9a730b52e79c67615640e4d740d173fed9ddf98760fd2af7d28704df6ff0aa9e2935c17ca3704385c</hash>
        <hash alg="SHA3-256">c229d89e276b29a0fdda42fac26d7a0e526a994be452cdfff22bb03a504bf9cc</hash>
        <hash alg="SHA3-512">08d43059f6948f7cda0c6d344d09d8e035289e51f2ba824c19e4b3f0f0714af836e8feb163b578ccfe97a9cd744b42d8382b4ed3020ba367c032e5bc768226ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-beans@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-core</name>
      <version>5.3.39</version>
      <description>Spring Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">632d2a8c30962a69273775968c052651</hash>
        <hash alg="SHA-1">d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd</hash>
        <hash alg="SHA-256">3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f</hash>
        <hash alg="SHA-512">2629ed79a0a3cfe7e467ac1a10f6d0d93f8ebdf9fe79bf67d99e5797e4efdb6bb1fd54ef882676b2175beea14079ca5ac6d8218c94134a66bd544d83fc8dc2b5</hash>
        <hash alg="SHA-384">a58090e8a07cc13429b116c1d786269f3b1a1b16a63ce4711648e8f4e5c0b076e970dae2ee1e08fd1cb01158161b1bb8</hash>
        <hash alg="SHA3-384">43f84a96b238a4492e08dd79e4450ccaad4c4f3f8adb45f16632593de313cf88905546f892e29989d8553512006e7680</hash>
        <hash alg="SHA3-256">99cb56d841b5920987b296da3af76ae51d80f4f78b56da4b127e9187793461da</hash>
        <hash alg="SHA3-512">74b21906fe06a990b8f910032c735af31c78cbf322452aa43b8a9bba22ceedaa0e6ad51e1f006b9c075b79654e3298c086adc6a9036601f01b5e4eab6ae899db</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-core@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-jcl</name>
      <version>5.3.39</version>
      <description>Spring Commons Logging Bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b1e50a7529d9f3f87079542a03191729</hash>
        <hash alg="SHA-1">45181955845ae69c51c72746f00200f7babca558</hash>
        <hash alg="SHA-256">adbe656fc622e2457fefa09529d4b7c1126a3c4ff1c9306907764fcc93f1b725</hash>
        <hash alg="SHA-512">55d7b4fa71e1be507cf19bc18d6bce035946aa76b83e16152a18e822e08dcf571143936bbba8c6af5e57e8166352d807f53868fea5297eba1adcf5f65d9fdd16</hash>
        <hash alg="SHA-384">4eb784585a283b379f13aa35fa5107f0908eac57aa8deea3fbb4b9f81b1038083dc00b2adb1e0653ccd747e7c3d7d957</hash>
        <hash alg="SHA3-384">cee06c517ca2860169dbe6e47e184094ed9611a9ee6ae918ff638a9668a83de2bf191c6ff97cafea96acf4257125686f</hash>
        <hash alg="SHA3-256">8ae96d3c35f7a4c1e3e061ccedab452c9202d0080f7940f41f3c42747f30b7ed</hash>
        <hash alg="SHA3-512">60e9dbbde28887b2064d003238c55bdabb7e276d3c463e5a0af6d500e73d8d23d0c8a8fa3ff6203fb23534af29f50df36ab41a60c7a331536f1a723114aa7f31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-context</name>
      <version>5.3.39</version>
      <description>Spring Context</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">167e95de6f9de58b1ffff09990237021</hash>
        <hash alg="SHA-1">286538ca4b3890192d63c88fdd1616adde17dc0e</hash>
        <hash alg="SHA-256">9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633</hash>
        <hash alg="SHA-512">22325bb605dd8cac8cb45f5c9dc0dd87014a09bed374d7f34100a2fd7c77005a9800eb18cb1c59c3f84e213f06eccbfcceb82e0fdb99259d4c6418511a8bad81</hash>
        <hash alg="SHA-384">1248b95d26f7799c4390e8d8ddc26fae9d0fd17ec0e3a98c447c9eb1619816930fc90bf5438fa2e2e8f0cfcbb08ec3de</hash>
        <hash alg="SHA3-384">a26c04c0036e4b756de5c6d16938eb9b484a7926ff823156cebc9a8424d16e97923089e0d86c85837eb42be79f53a8f5</hash>
        <hash alg="SHA3-256">479e6199950aeb48fe2d1cded67adad5c64d4deb6878d6a304d942039e108fc3</hash>
        <hash alg="SHA3-512">ea603c614a23362d94d0493de1291fb5fd7136628d7c3be40ea5fa712a199be615114e8bb716657796f58e3c9d34a18a4b3fa83001520c25dc1fa8b50175b1a8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-context@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-expression</name>
      <version>5.3.39</version>
      <description>Spring Expression Language (SpEL)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41198683f2d488b4b2038b7d8e4b6d81</hash>
        <hash alg="SHA-1">25cf07399eb7ac3fc13888b20dc4d67124ec75bd</hash>
        <hash alg="SHA-256">d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810</hash>
        <hash alg="SHA-512">51ac6798959c99d98507a8c0912a93c872f27f44e0a2ebb7bf1d35ccc88c5569c7a07dea47d9d740d5b019a03ac2c9f03aefc94afb98fe2a3258ae0bf14c04e4</hash>
        <hash alg="SHA-384">f5996023c209e7b9befad9a09347733ec2527f1a19e00c8145fc87dcc04ed340f466ec165c7632b9973d83488148e370</hash>
        <hash alg="SHA3-384">ae6c0ebff1148eb5d28d8ee3aa678daf96cac5a39e7ca1e537305d60d8d08bc5a4ad005581b6ac82e2a93c3b6ca334d7</hash>
        <hash alg="SHA3-256">c8b1f84a895c6c5ff2f67bc811eb33e871ccbdadb3699fe724537aa80121ee45</hash>
        <hash alg="SHA3-512">49e2ee35d868318d5b50c3952ad6fcac7d0dda8786fcfe95663c24eaf8fdcbc20d761ab2931565a10c930ad91a5c25e81b370f1dfd190492e7fbc45729edc001</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-expression@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-aop</name>
      <version>5.3.39</version>
      <description>Spring AOP</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">47ef8946ec3f2f76f83cda172b9fd964</hash>
        <hash alg="SHA-1">3af1f0d73ec1e031c7083c848342989f413ca275</hash>
        <hash alg="SHA-256">aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85</hash>
        <hash alg="SHA-512">12d230913f57fd97476681016b70c411d2d2557c3aad6a1c86541563ab977786f29aa5277126e15efc1337d33a7e6fecc05debb32857bfa1f48c9943d9936205</hash>
        <hash alg="SHA-384">0533114467204ef925a88d4ab82bb8ae6cb8a7225d0dbd32ffb078912ca74b2fcbab04a4e2dfaa32b5488b154eb770a7</hash>
        <hash alg="SHA3-384">081665850a0db9cfaa3fe38ce89973ee2c3b81df85f361aba997e2a482d1b679a166f7322217a8629e295dd3b591736e</hash>
        <hash alg="SHA3-256">81dd17093016a3dce398bbc7cf29ab5923936a86565de1f8e22c09e7a7e5cdad</hash>
        <hash alg="SHA3-512">c7fb45772885a0c058e35e02231ab3e008810123f1ea889c97ee8f622a863b746f125f197ab1d353a1d982941f686f4ee793dcb291088b77cd6a442e4baccb3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-aop@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-web</name>
      <version>5.3.39</version>
      <description>Spring Web</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b940bc714d6e29570b5dfa92755eefc</hash>
        <hash alg="SHA-1">4ab03cd7376a6b3365d2798aac8d01dcd22c0174</hash>
        <hash alg="SHA-256">444f243b936119b5488029f2d9399a3980855c60b493b9e2811464c6433a2b71</hash>
        <hash alg="SHA-512">be8c054518263a8eb3a1a1294f5de68ba18058c6000e2d32be882c5e9dbdd7dc8ee2ff1f29d7cbb92cb7599fa7a1ecbe542fda3574c0d047ded5d4c70210420a</hash>
        <hash alg="SHA-384">dee47c3d8eee3e04a6392c00c97cb6cd31d4569fe46779a25aa2e846a3ed963aa0d4563dfa77e131727c5a7bbc42be1f</hash>
        <hash alg="SHA3-384">168efe9b5e5d147ef4c34fccd94d389c26e7f4a5d03bc97584aaacc873f0a23795ea6321b8463e814791f6006314dbc6</hash>
        <hash alg="SHA3-256">3d715a2d8e1731ee7b36ada0dca16a69d58f9733169870a90d8f9e142fd78f66</hash>
        <hash alg="SHA3-512">0bb03ae0a4b0afb2bfe4807096824d145e8b44b96812de366e96e8520accc10186119d3a9e12a239fb997b990e603446a28979053a3d369ac915a00bf49e6da0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-web@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-webmvc@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-webmvc</name>
      <version>5.3.39</version>
      <description>Spring Web MVC</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f428d04938f7d65077db3e269ca0d78</hash>
        <hash alg="SHA-1">89c465ff3d37629a60e1ad4886f61a09a459d639</hash>
        <hash alg="SHA-256">1ad8a2ba468c07024ba63cb7681bb30a2ecf8d91124f00fdb4a3d184131b87ed</hash>
        <hash alg="SHA-512">ac0f7826a9a1dd4a5ffba419c81914f163a6d638f73c1bf236dde8208a34378c7cc2d8247b8c43ddbd2dc40a2b061dc6f627f64ba86cfea2d425e7fb9f3bd252</hash>
        <hash alg="SHA-384">15cb5501483bc3e7a858bf6b296eaa78f245584a5e426d4c980b1322506698af4e0d0ab1575275ee552d18acf9b7e73a</hash>
        <hash alg="SHA3-384">b4de98aa79d10436e6f43a8c354561174453969737c3658cbda20b1ddcf5eb42cc5603e2138023e2a7c0385342086e32</hash>
        <hash alg="SHA3-256">106ec28453e9b8986e330a051960b18f2b66fd7675350a6e0f34ef1adf335970</hash>
        <hash alg="SHA3-512">0bf67a4b5ee980b3676089dd7dfc639767695189e628aa385a3d55f7672267b4be6dd6b13f7f14c33979f2982ad313ffac458eec08f01b787ed5ab7266074e31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-webmvc@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.osgi/spring-osgi-core@1.2.1?type=jar">
      <publisher>Spring Framework</publisher>
      <group>org.springframework.osgi</group>
      <name>spring-osgi-core</name>
      <version>1.2.1</version>
      <description>Spring/OSGi core classes. Offers OSGi-based application context and importer/exporter functionality.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07bb455a4e2c857e486a844bc9ff0b9d</hash>
        <hash alg="SHA-1">e5666dfac49c4b0488ef3f53e6d9232783697817</hash>
        <hash alg="SHA-256">edb83c342c00b4f38475cf9ac41649852c9b13df1985d33156a21de757e8a949</hash>
        <hash alg="SHA-512">75b03efe06825f73b2e0cc90cdf85a385561e60e0fbfb4255cf541e2506b2758538450c194d398a3b3871de88f97e63d49b698c4b083576ade6aaf6a07976249</hash>
        <hash alg="SHA-384">d97abedb91b1c310f5bcff9e59c7871730535af57044e14b3b2ff43b539acbff3d1e5713dba32ab0a2a491bdbe485263</hash>
        <hash alg="SHA3-384">9ecaa0624515e427c844a33cbf51166ead7479c9f49d03081bd19fc368bb2b6bbe962b09f2ea8748f6e06eca3ddb23e4</hash>
        <hash alg="SHA3-256">f3e95976374e11e9390ef5d11cd3ab73c2e9ca80634a2da15737506cff899741</hash>
        <hash alg="SHA3-512">2b8abcf2e738d1c6391e21d6b104e3bcb9f3ff5f69a97b4446639728a12d5345b31d14672eb310c948a2928d772a56b08552657a0380f257a9a08f8c2479071b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.osgi/spring-osgi-core@1.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.springframework.org/osgi</url>
        </reference>
        <reference type="build-system">
          <url>http://build.springframework.org/browse/OSGI-TRUNK</url>
        </reference>
        <reference type="distribution">
          <url>http://www.springframework.org/osgi/</url>
        </reference>
        <reference type="distribution-intake">
          <url>s3://maven.springframework.org/milestone</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.springframework.org/browse/OSGI</url>
        </reference>
        <reference type="vcs">
          <url>https://fisheye.springframework.org/browse/spring-osgi/spring-osgi-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.osgi/spring-osgi-io@1.2.1?type=jar">
      <publisher>Spring Framework</publisher>
      <group>org.springframework.osgi</group>
      <name>spring-osgi-io</name>
      <version>1.2.1</version>
      <description>Spring/OSGi IO abstract classes. Provides Resource, ResourceLoader and ResourcePatternResolver for OSGi environments.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65c9d299542c5764d31623c66ff8605a</hash>
        <hash alg="SHA-1">1f380b918e8d0fc111d7fcf902000f10e5ce5944</hash>
        <hash alg="SHA-256">af6bc7f2839061c7f1b6330b03faf6adc6e04972f3c6e4a4444bada0965b9870</hash>
        <hash alg="SHA-512">ac6e4174514c49e6c078821f2ec893ac9ee62aab60e8483e01896f4d56557cde6d803ce31d13af9b0a22cb01beef5c347bf3236131bfc20cbf9735050317df5d</hash>
        <hash alg="SHA-384">daf43aded7be976fe39a8d49da461073603d5bce7c78a37b1c749c5821919a2fb438b6048e2ccafcb7ef63a0c66dfa49</hash>
        <hash alg="SHA3-384">90029709e81587083d194effc0f0d1fee52ae707355a1aef9e2d1761505eb30f9682b6dd858e7949d40392fbb67f8d8b</hash>
        <hash alg="SHA3-256">82060fa628ba4dc73c21484343a429e16dae5ab3efcbd9a4c08bea4951a9ccba</hash>
        <hash alg="SHA3-512">d0abcf43db8a4b874e7dae904599daf1b5cbbc0fbfffc6b48d91bf31b94d143c5e1b3801f3dce7bf6d109d2d47de087221d1b0965a2ef704c0eb2d51316975d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.osgi/spring-osgi-io@1.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.springframework.org/osgi</url>
        </reference>
        <reference type="build-system">
          <url>http://build.springframework.org/browse/OSGI-TRUNK</url>
        </reference>
        <reference type="distribution">
          <url>http://www.springframework.org/osgi/</url>
        </reference>
        <reference type="distribution-intake">
          <url>s3://maven.springframework.org/milestone</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.springframework.org/browse/OSGI</url>
        </reference>
        <reference type="vcs">
          <url>https://fisheye.springframework.org/browse/spring-osgi/spring-osgi-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.aries.blueprint</group>
      <name>org.apache.aries.blueprint.core</name>
      <version>1.10.3</version>
      <description>This bundle contains the core implementation of Blueprint
        along with the "ext" namespace handler.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">720c3648602f867f58b1b4aa3b2a3ffc</hash>
        <hash alg="SHA-1">a7f7003cb8233197818155f91f1f6e8990e11cd9</hash>
        <hash alg="SHA-256">73162744e2f63dfb32a1938110c5d186645ec90fcd05dbc57b4a31c1b7e1bcd5</hash>
        <hash alg="SHA-512">e595514993eab29718ff95e9a71f3e39459fae60e1ea1a532fb86a5b99fa88dbb54eed0992da0df960451cd2fc78670722cba241ae91381490de7f071f41059a</hash>
        <hash alg="SHA-384">3a3ddad9ca7d6608716b9e446fd1ec6a4f5e36f1b66a27735babeb4197908ddd7df60db65e3b43dd275f3de628cd5cf0</hash>
        <hash alg="SHA3-384">2ecddb193fc430df97d7ae869348d950baf9c9eb1896e81b5a897c428339eea5102e89b7b581dafc5f15943bc4ba58a7</hash>
        <hash alg="SHA3-256">d82e13e86aa09dc6464a780033a3b4f953c9ad66314068e4e7d7cf98fbe3a49d</hash>
        <hash alg="SHA3-512">169327113c61303ab1db673ea3a6474815bb0feada8ff21754119ab13b7c1ec35cb5716eebf9c1df4bb0941757b979fdd422f7d529dd2101f399caa153c9e555</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aries.apache.org/blueprint-parent/org.apache.aries.blueprint.core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ARIES</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/aries-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=aries.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.aries.blueprint</group>
      <name>org.apache.aries.blueprint.api</name>
      <version>1.0.1</version>
      <description>This bundle contains the blueprint api 1.0.1 and the corresponding xml schema.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6d0a9938c0fc9c8d60e3711c77f150bb</hash>
        <hash alg="SHA-1">3637a2551bfc171f3e22d8622ef7d78ff9dcf8aa</hash>
        <hash alg="SHA-256">e4f28ef73a77494757561a1bef3ad7a74f2f247174c7946ba217948ba4776d8a</hash>
        <hash alg="SHA-512">359e43219a86a5f9129004710e224471c63a56de5f64ab8e37280a0380bdf13fd5352047bbfb19f3854124891b417b0db93a77723744ecf8dc6af477f85c1e70</hash>
        <hash alg="SHA-384">4534c9a78b361f374fe265c928c3ec3841605d1199e418be26aa5f1a857427afa013421835a9bab7585c73db44f77f0f</hash>
        <hash alg="SHA3-384">9b6626ababc0fd183bd5188de24776dca54de8bcd25491f1aa779ebc14b328dfa9e32be54479a70e7c42d3ce192f23fc</hash>
        <hash alg="SHA3-256">0aca2aa41674783f1f263cd958b96bc9982746743bfc24d9c0043c5681b94d10</hash>
        <hash alg="SHA3-512">722cec1e749c25a32ed4b6c38b71c6b083cdd89866f9150c421f5c54e4b4fe5fe9844bf813306cfe2a87f46a9ebc7ceabd19441ca17263404d3fea548ce8ba5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aries.apache.org/org.apache.aries.blueprint.api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ARIES</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/aries-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/aries/tags/org.apache.aries.blueprint.api-1.0.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.aries.quiesce</group>
      <name>org.apache.aries.quiesce.api</name>
      <version>1.0.0</version>
      <description>Quiesce API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b3fb687d31b16b9eba2d6d23248d8274</hash>
        <hash alg="SHA-1">3591319ac43345db1e6008e7f82f318746863f08</hash>
        <hash alg="SHA-256">0737c1406094aa348f31e23f0ee96a6f404327d0572fdc0b2d88c5e5e2a58d8f</hash>
        <hash alg="SHA-512">a7c74bdb7d930b14e5f71e87b2acd22dad7af0d3e4b452e0d7d64c8a8b0615c4f3108080c690b350d35d531a54ffc5b1321330e256b2ece5405883b751aa543b</hash>
        <hash alg="SHA-384">2c37bb68caef7967c640b3ac54f4f5853f8e097668eede95c13a4e04378eb6d46e1764c0dcac98abcd5ed49eb2735a7e</hash>
        <hash alg="SHA3-384">c725556fd9b49069c67ddc382f3a23642e5e3725fca04fb7d1dad1cef894eef82cb3720a65f0bccfd61dd97f61e9a24e</hash>
        <hash alg="SHA3-256">45ed6133aebf5281f9e59e1d89a8e34372b7f99dd880577e675c441a12652a05</hash>
        <hash alg="SHA3-512">c9c59e396e30a622f26d255104a1d238f66c237db837549b0b8bca65abde96b46f32e07e5242980d398d99f5144823db9ce6d26cc5214f2a00a0cc1ae91dcb09</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aries.apache.org/default-parent/java5-parent/org.apache.aries.quiesce.api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ARIES</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/aries-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/aries/tags/org.apache.aries.quiesce.api-1.0.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.aries.proxy</group>
      <name>org.apache.aries.proxy.api</name>
      <version>1.1.1</version>
      <description>This bundle contains the Apache Aries Proxy service API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86a5f630e8c521cff04b8a5ae0bc4ff4</hash>
        <hash alg="SHA-1">544dd6dadbdbb3c2fc9e3761ef044ca5b74bab7d</hash>
        <hash alg="SHA-256">33f03f0c4fe8341816da2606414382d749410c517cdd893c16cefd969e459f31</hash>
        <hash alg="SHA-512">1e023996517e3a1aeebea87144c08b2c563215b45cd64b351c90b626947e274d77a20eb9f0a26ce328c793ae0463945b7b88214ec5632396811b05b2bdffd07c</hash>
        <hash alg="SHA-384">71c5adafc3534c4bef9b4e98419a011cdeb5acd5a03bf3208a0ea597b398312bdba70a9df08cc8fa2efe42548c0f9c7f</hash>
        <hash alg="SHA3-384">b6ce4a210c226b39c23b8b0ddea396da393cddffb3ee17535a659f2d55aa01afb8fdb22bda0f04df60fbb3f1142908be</hash>
        <hash alg="SHA3-256">db264f008c1f377c7e6471ac277f2ec0c90d859de49ab9c0eed92b5c65d0f22e</hash>
        <hash alg="SHA3-512">992d4e6e422eaefabf9306fd198d4a315086eca43f7ef4a5fd4a961cca364c6ba93278f1d522d3986cd51f7b05301ea6254ec310b67c61ee9aeeec1fb0bdbe5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://aries.apache.org/org.apache.aries.proxy.api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ARIES</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/aries-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=aries.git;a=summary</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.xml.fastinfoset</group>
      <name>FastInfoset</name>
      <version>2.1.1</version>
      <description>Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">60067f13107f9ecf95abcdf73859e47b</hash>
        <hash alg="SHA-1">650c84348bbcf4461bd24d38e67f7a7ce687de24</hash>
        <hash alg="SHA-256">75d6635e09101ef1545d9a59bb4d9524ec6bf15246540af5435750f271612765</hash>
        <hash alg="SHA-512">964ef5eba0f6a7be5e4a9105e6748684618d5a4aad07818f681b7f1e9e74836113177e02194f042f5ccd32b45b1add8e048a4c761bacbab4923de52b9a0fd825</hash>
        <hash alg="SHA-384">aa369b0cd5d1cdbeb5ba173226f04ca062e623ddadc9798d5d1f3bad3b65ffcb8362281ddff7c856f2a9cd6b9822acc3</hash>
        <hash alg="SHA3-384">96848b3e4af52124abfd59a7a2c665572db88aa81e9f23f19d03039ff0d2f606df71df5b72567af7ced2f4a9f4394b6d</hash>
        <hash alg="SHA3-256">54e1da17f7d18ea00b2e89c76bc1ecb461638fc663bdb434fd1c38a633472e00</hash>
        <hash alg="SHA3-512">a1464f7a1eae780772e5233feb436d87fa8d97e15fd00f00ce6242d737eb03c491e747e7730e7485f96fadfeaeedb0d877e5bc821b976339a28cfc02435641da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jaxb-impl/FastInfoset</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-fi/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-fi/FastInfoset</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d3790292a30333a14b7fb1143864a9c</hash>
        <hash alg="SHA-1">a169a961a2bb9ac69517ec1005e451becf5cdfab</hash>
        <hash alg="SHA-256">4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4</hash>
        <hash alg="SHA-512">c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff</hash>
        <hash alg="SHA-384">7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06</hash>
        <hash alg="SHA3-384">ecb0a57c239dc254549520f73816a347f1204c47bb7ae6e5d4b6cd1f409af9ce583411faea2aec0894e5ff625c1b5f8b</hash>
        <hash alg="SHA3-256">7d69b19934e5f2cc435ccf681a796335b3e19a0e1b6522c615ee328f5bb9c341</hash>
        <hash alg="SHA3-512">498b8588dbd9f2f5215f380634553036e38856adabb582bb41980898d0bb9f9f80e48d244a3a798db389efd2131a1dbadf96d778668cda58f8aa1163875d3c3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67005a4cf5ee9cfd82edec1bdbecb32b</hash>
        <hash alg="SHA-1">ec8930fa62e7b1758b1664d135f50c7abe86a4a3</hash>
        <hash alg="SHA-256">7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f</hash>
        <hash alg="SHA-512">5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9</hash>
        <hash alg="SHA-384">ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7</hash>
        <hash alg="SHA3-384">e2089f8ce9b4e3c56017e6724e8ab9565f2015156ea10a844d9720d258709963b7c1b8254d288a94efdc32d6ebdd88ff</hash>
        <hash alg="SHA3-256">dd0147f1d51c44c201ae8986ec9dde0e8dfbe827ae8a8f16422c4706adbba018</hash>
        <hash alg="SHA3-512">31e9eec45c24a52bdd21ae8ce4494525495d91f8fd3d0947520d56a3c5280bac621487a78008fea4b39b86207397f5a16ad603b5048410a0e81e0927ad08270b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
        <hash alg="SHA3-384">2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d</hash>
        <hash alg="SHA3-256">50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e</hash>
        <hash alg="SHA3-512">286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-xjc</name>
      <version>2.3.5</version>
      <description>JAXB Binding Compiler. Contains source code needed for binding customization files into java sources.
        In other words: the *tool* to generate java classes for the given xml representation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a72119c65f4f7b4ef6a44b595d15610e</hash>
        <hash alg="SHA-1">9383e08bab9989bdd5c8194f8a6afce405d34553</hash>
        <hash alg="SHA-256">c8a7e9cfcb30509963c8414b83ee52835bddb8d6f095d45072e22444265c8603</hash>
        <hash alg="SHA-512">00b6d14158175c325868baf184750994bf926eb671bbe80fa3aa3e6345ebcbdd87264c6ab7e8b1d568e9dcaea237537994641466e0614a97003dcee9869d7dce</hash>
        <hash alg="SHA-384">18dca30e08d78037490e184a5676ca316261e98617ef20e865032bb45a162236346f1a7904524584023581d8e604ccf8</hash>
        <hash alg="SHA3-384">532e6fba4da6a54e45371c46d5cf8cff4d9b6af6f4cdc19b1f3b07a71dcd9b10d725680e41bb6c52138fbdb33a6ee11a</hash>
        <hash alg="SHA3-256">a22fdde7df745ebf6fbd8a36e8584b88904a7cb2fe7b92900fa484209ec6523c</hash>
        <hash alg="SHA3-512">39078112b225f0320e7364d5ef703b5913437dc1bfedce7dbf7a77215379e7311cae08f679791f4243b0e2252bf94b65d4e8f0b0187481951d873620a0ad8a21</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-xjc</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>xsom</name>
      <version>2.3.5</version>
      <description>XML Schema Object Model (XSOM) is a Java library that allows applications to easily parse XML Schema
        documents and inspect information in them. It is expected to be useful for applications that need to take XML
        Schema as an input.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a6f38a69df4a03ccd8cfd960a4d8f330</hash>
        <hash alg="SHA-1">554b3f1218caa8b0025029e13f61713ae1f2d52f</hash>
        <hash alg="SHA-256">b12dae9e93e2320fc0553825b21673a53b03579c38c02bc2168460b037f78dba</hash>
        <hash alg="SHA-512">d33959973043f81b6196911417d573d99c783fd352b3405c4254fb06c7e013a3ae5d72555f2e74f40041fe46d9944e9c357eda5acfc7b166ae9c93fbbc8d4079</hash>
        <hash alg="SHA-384">c65fcb3c50f35250391b9a50523daf12dfecacede8bc38f852cd436113477db1825e2d96816a53d72b9668a38e23b425</hash>
        <hash alg="SHA3-384">0af4859fbf6b76544b8ad2ef1f18eedba7560e87563a0ee80bc53b917f761c60ff16852fa997f4354fe8db0791e873c8</hash>
        <hash alg="SHA3-256">fd1b4859ccb864eeb37f4d485303258a1c32d0ceee3fe0c1ad6379cb342088d8</hash>
        <hash alg="SHA3-512">484a6612249c72dcac971bf0910d0d932f5d9ab405e88958fd358253206f7c5af2ee33030b18b8a9f5c12081d01cf509777f734b973daad48856573208746b3f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/ee4j/xsom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.xml.bind.external</group>
      <name>relaxng-datatype</name>
      <version>2.3.5</version>
      <description>RelaxNG Datatype library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">994ef1c97ae72090273827ab9be3cb90</hash>
        <hash alg="SHA-1">53a63e9f1c9c2aeabde92bbc349162bb6d5c194a</hash>
        <hash alg="SHA-256">3057368c745dd593630ed11c654e44275c9977b97542b1216399be8d5e009c65</hash>
        <hash alg="SHA-512">509c132d62959f7d495fa51273bd82b1e7890854ef60e9b48635aaf657d8a4692f69bb22a18d10804cddf063116e1200504d33057834243a3b166b59b9045566</hash>
        <hash alg="SHA-384">baaefef8a41f2fd041e2df75c3abd0ebddce859d389a9afb16c8b46ff8de69c864ddc7d8e99be835dbc41ec2908896a3</hash>
        <hash alg="SHA3-384">6128cef392ecef3e7299bd650fd0474971bdb2222ce2c8969dbf63ebc8b3a7657fc764edf07492b0f0662801f48f568b</hash>
        <hash alg="SHA3-256">ab45682ad33d670bfdef39d485d1d099162d126eea5fa7db6e49f2bdfb082e9e</hash>
        <hash alg="SHA3-512">d9171f68d1f1493dd4a6deb22ae8912cbaf47d841d4e5ca982f46a75e1a504e167c7fcec1e742e9b827edc1cce759d1f7f0078f2fc02b790aeb7e9868250a6bd</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/ee4j/jaxb-external-parent/relaxng-datatype</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>codemodel</name>
      <version>2.3.5</version>
      <description>The core functionality of the CodeModel java source code generation library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d8108f353a886be1b00869cf3365fa4</hash>
        <hash alg="SHA-1">08676b2435ca03c15a223d80f832208909908f84</hash>
        <hash alg="SHA-256">8b430f2e2ffff0ecae03fd9dfd6575dea91f4bedcdcf0ff6f25aec32afc5af6d</hash>
        <hash alg="SHA-512">0b09c634e0345fd9588df0e505263269aee9687801663c13a78dfd89901d6bd44c69a5b5f834c8ba8e1ac34a0f689283c1b71bb048b7e3c86e06208a4196fbaf</hash>
        <hash alg="SHA-384">ce60c3ef2ba4b2faa4e7e4ce65afbf4672de4ce1ad5d45d45b09f0c221d5024e336aea238c3c478ade443c37363ffdf4</hash>
        <hash alg="SHA3-384">a682c6718f0ef7c7513c608bad67cdfffcc08a2da90b65bc7310ec8efa72ef23d8f85d9615cc6454372a917456eb12cd</hash>
        <hash alg="SHA3-256">4ba4c0195617895b4d17c40678f077ffe1411eeaf204333d15cd1884885cf833</hash>
        <hash alg="SHA3-512">f89273380e0d6ad78414a66f41de21f6fe10226e09dbbc199e3ba2520c8bf62f061a77b83acb497aa15b5913317908a9afc5f3620dbae0b28817afcd325a16f5</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/ee4j/jaxb-codemodel-parent/codemodel</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.xml.bind.external</group>
      <name>rngom</name>
      <version>2.3.5</version>
      <description>RNGOM is a RelaxNG Object model library (XSOM for RelaxNG).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0cb79d2b94d2418392ac7dcd2f51169a</hash>
        <hash alg="SHA-1">636ab4fd5a2f438d5f4d904b3927a09d458631e9</hash>
        <hash alg="SHA-256">cb54790e7db343d137ba50ecb92df571fb93678606a9158b6551428679595a78</hash>
        <hash alg="SHA-512">85bc31997cf82ead9692f9aafd09b084022e1e95247dd8592a6b8ade2a930996336e5f3de7625fec46c7ee65ace95c916ec7b497c35ee19d8d9c71cde9538bc8</hash>
        <hash alg="SHA-384">1348ed39f1d62828c447ff6f82cd3dda3997ab1780ed234185f79b3490cdca317869fe59148ebf489e298c7c20e5eecd</hash>
        <hash alg="SHA3-384">e8802f5f37762907762b8b67320dfac84e97ed35199cb25df3b000871c7c19f69717eba6fd8f50deeb21566f240d877b</hash>
        <hash alg="SHA3-256">96e70f9039c4ea21bcd42a1f66d8dec9a60e2822d465df1dd22097d267578fb4</hash>
        <hash alg="SHA3-512">e6807741c3da198df82fe09d359d883d0bfc8a6bcc563aaab3bf4d4eba55e568ab8be10d6c77ad5320c908ac9b0e74a46cee1c0776e09e6b89e315431d4611c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/ee4j/jaxb-external-parent/rngom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.xml.dtd-parser</group>
      <name>dtd-parser</name>
      <version>1.4.5</version>
      <description>SAX-like API for parsing XML DTDs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b27b38e842491770c5a1953dc86468d1</hash>
        <hash alg="SHA-1">bd01768721835f13a6da58f6edea5f8c57ee7b3c</hash>
        <hash alg="SHA-256">a4cd6addced42e2f870dcca1716f459da51f06f2fe49430d2d128f147c8e929d</hash>
        <hash alg="SHA-512">6089a2fd6bda500009847a64a35d4a97cfd0febb7d236b37ced114607973fbd7b9c1012edbf00029508ef20be84364b249e9578ce908caa8f470c5e7f66b24f7</hash>
        <hash alg="SHA-384">e1f38a8ca4180c5858643a5a99d64c8f16ffe581554e3c2eb01aec588b95613fcb6454d11e9f791774a31bc38fa3c4f6</hash>
        <hash alg="SHA3-384">259d9f75fc653cd39e69222947ba8f9f91948c0625269d01e2bd273ba16694b0d77c87a69a4d94f013589acb9fc2a7e1</hash>
        <hash alg="SHA3-256">aa241d7403b32db46e375e44ed7737770b63ccc0e8ad920916902895615ac48c</hash>
        <hash alg="SHA3-512">7a234240a3d0d34a8ba7cd3d7fe3455fd05d3c20e693a45ce8c2908f13bfd8142e082696d382a04583b1c4c8b3e757b13e04946dda0e4f95b4c3d82693f9ca19</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-dtd-parser</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-dtd-parser/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-dtd-parser</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-tools</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">466851283328c997fc3c9008ba71b869</hash>
        <hash alg="SHA-1">7213eee4e9f65972968f03c9dd4df266ce42530b</hash>
        <hash alg="SHA-256">88369766d2f7bf7904595d295d759ef553de47f2b9fc7d0c82a42f602ed70af0</hash>
        <hash alg="SHA-512">afe4807d1522175447e2b85cb96f155f8531b2b4bbca6dfe6bdbabd61d409e161ec47614c2e047e809e0e736c8c953b72e96a270a721ba92b30a852d39ca6651</hash>
        <hash alg="SHA-384">308fb0a6938d378a8a8fe0d397bf94a07127798757aab2da95278579f0ba92a76a91b1c54dbcd488eef1878aaf9252ff</hash>
        <hash alg="SHA3-384">6be62f48fb3be58e9917831958767ad8a43f4cc914f94eaeef628a3cf9c509463bc77e8f7cd191e0c33213848abd51a5</hash>
        <hash alg="SHA3-256">c96b3d294798487a8524e4640501e26daf92b71d83bb397f18232db0fde4d5d7</hash>
        <hash alg="SHA3-512">e025b55187f3d7dce44ad30101afcface4efee38fa7529fe812768df1a8ffa14ba202a538f3d1eca73b6b6fd72e6d2b40d9e6ec50abb7bab1a35edea7dff4e9c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-tools</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-tools</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.6.2</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f322ee7db6505b01c8bfe5f54c5670df</hash>
        <hash alg="SHA-1">0bfe905f19ce0e60bff5b7adcbded2681a092ac3</hash>
        <hash alg="SHA-256">8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896</hash>
        <hash alg="SHA-512">00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703</hash>
        <hash alg="SHA-384">80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9</hash>
        <hash alg="SHA3-384">9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40</hash>
        <hash alg="SHA3-256">9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b</hash>
        <hash alg="SHA3-512">f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>xml-resolver</group>
      <name>xml-resolver</name>
      <version>1.2</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">706c533146c1f4ee46b66659ea14583a</hash>
        <hash alg="SHA-1">3d0f97750b3a03e0971831566067754ba4bfd68c</hash>
        <hash alg="SHA-256">47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1</hash>
        <hash alg="SHA-512">eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a</hash>
        <hash alg="SHA-384">3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710</hash>
        <hash alg="SHA3-384">717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a</hash>
        <hash alg="SHA3-256">bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46</hash>
        <hash alg="SHA3-512">762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xml-resolver/xml-resolver@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://xml.apache.org/commons/components/resolver/</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/bugzilla/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.validation</group>
      <name>jakarta.validation-api</name>
      <version>2.0.2</version>
      <description>Jakarta Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77501d529c1928c9bac2500cc9f93fb0</hash>
        <hash alg="SHA-1">5eacc6522521f7eacb081f95cee1e231648461e7</hash>
        <hash alg="SHA-256">b42d42428f3d922c892a909fa043287d577c0c5b165ad9b7d568cebf87fc9ea4</hash>
        <hash alg="SHA-512">3ca8556b80ca809b3a43fac31469702bbad62a00e63b11a304dad1e372d9f6c128357463a4c70c423055941c7e2e417f87a9474a204d189c8e4b62f42047c8eb</hash>
        <hash alg="SHA-384">6ae3963fd6a5e83b068a8344b88f6bfbd26d29cee64193025bc5e98195678e49826463da27a7a1c15cd83b2149d57a94</hash>
        <hash alg="SHA3-384">55a570386718064b422f9ebc0c0c07f0b37259e44a14c9a16c20e945402339b1d01b7d6969ef40d6b5baf5bce3e1161d</hash>
        <hash alg="SHA3-256">1ff48fdabab86a398b25e491e6ba4fd9b62d597314202628a3cfedf723c17f21</hash>
        <hash alg="SHA3-512">c23bb0b43fb0c39d4c9d2cce0cd38334fa7c253130f0bda3007d9f7d2dd451c0896ff4265ee2cc35024fad282f9ccaa398c19874775d9cabbb786843fae155d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://beanvalidation.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://hibernate.atlassian.net/projects/BVAL/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/beanvalidation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.7.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2cdd32d198ad31427d298eee9d39d8d</hash>
        <hash alg="SHA-1">f0ed132a49244b042cd0e15702ab9f2ce3cc8436</hash>
        <hash alg="SHA-256">8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281</hash>
        <hash alg="SHA-512">4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50</hash>
        <hash alg="SHA-384">166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed</hash>
        <hash alg="SHA3-384">e301862376e84df61c3547dbf637252750224fb5b74feb82f20e1527a8e3152c45f620192a9111a2db5e2f0e73ebd7ca</hash>
        <hash alg="SHA3-256">7edcc4ff09b3ace15091a8c550f552a324b5cee6c1527944db5823df7eba8d64</hash>
        <hash alg="SHA3-512">9d220edc5528e4d788605721490f3d29483dd4bd506765e85d781048419aa89b686a70e316b82ef2a856ead56bb7be6b5d52d77b7ca6f27d5e0e347e9669d731</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.7.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.ow2.io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://gitlab.ow2.org/asm/asm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail.ow2.org/wws/arc/asm/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitlab.ow2.org/asm/asm/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
        <hash alg="SHA3-384">3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b</hash>
        <hash alg="SHA3-256">ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881</hash>
        <hash alg="SHA3-512">14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/slf4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jul-to-slf4j</name>
      <version>1.7.36</version>
      <description>JUL to SLF4J bridge</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a3fe73e6cafe8f102facaf2dd65353f</hash>
        <hash alg="SHA-1">ed46d81cef9c412a88caef405b58f93a678ff2ca</hash>
        <hash alg="SHA-256">9e641fb142c5f0b0623d6222c09ea87523a41bf6bed48ac79940724010b989de</hash>
        <hash alg="SHA-512">0bb1e7343d07d41bcfb0c1ffeb2db28cbb35e7a80a409b80042f463b082a292976f09d719e319471e31c7bab716121728a16509fd385fc6e3b400b1b214cffea</hash>
        <hash alg="SHA-384">50e2f326fc00537a5fb3726c7c55556851b3be8b4346f522f27ddecf2fdb44adabae3197b30ccfd854c37d6734adbd8f</hash>
        <hash alg="SHA3-384">4ad0c3870852ac44530a9dcb992d947cd8708ee6f422559da41aaaa8b22d1610fb116b32d2c54df83b110b85487083bf</hash>
        <hash alg="SHA3-256">8e3f5aaaa27f618b52e610376d2a16c6f9dc8dce5e6c2bbe42131a590626aae6</hash>
        <hash alg="SHA3-512">e3da265406b5e69f02235ed7272a48f71cb8b6f0a696820e28e90fb5eafeeb311abf2a4e779b402f384c6a80470fd41116ee52a526f57040fae3b24cb3b19c01</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/license/mit/</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.slf4j.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/slf4j/jul-to-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.msv/msv-core@2022.7?type=jar">
      <group>net.java.dev.msv</group>
      <name>msv-core</name>
      <version>2022.7</version>
      <description>Multi-Schema Validator Core package</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a72d4cd61d172a84a1df6111b69f138d</hash>
        <hash alg="SHA-1">d045d4e12bde58cb8b33e41cfbddb13e59feceb0</hash>
        <hash alg="SHA-256">7b07b570799dabe2b25caff2183da9681303625f9d25ae7291bbb4878fde26e2</hash>
        <hash alg="SHA-512">6090f99b5559167d3d90cc48ab5195e62db13a50a45b33608645aef6ef58b46cc85ab524e77d442961b821704a8ffbea5f80fcfc85964c966264db70f40c26a0</hash>
        <hash alg="SHA-384">43ce24802782531b0b0bf4af5003aaa4bf4d255e91f8a71d88f5dbe072b1c0e7fba737f500ed61bf891e65a0806855da</hash>
        <hash alg="SHA3-384">58c2edad0d985ff8864ded526e09de1bef99fdf2bcd1d0049fc91d86f4aa67bfcf222dbe2d0701574251be8187b663d6</hash>
        <hash alg="SHA3-256">4a254dbc66464744e782b3dbfa1db432915b8c3b9d1f973d642b562902768d85</hash>
        <hash alg="SHA3-512">fbc9ce877a7e3ad415dd9e38a1943ec192f2c4f80fd4c9fcce0f49345defd6b61ed8ea9b18185c0a4c852b478930ee8058faf44299e709cf2b6688e7c02f444c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.msv/msv-core@2022.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xmlark/msv/msv-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/xmlark/msv/msv-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.msv/xsdlib@2022.7?type=jar">
      <group>net.java.dev.msv</group>
      <name>xsdlib</name>
      <version>2022.7</version>
      <description>XML Schema datatypes library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">62d56d3e06a9482ee9113e5cf2ef9f4e</hash>
        <hash alg="SHA-1">64637be89cc05fffe6b4c53371702f7c0fc73af2</hash>
        <hash alg="SHA-256">db2e8843cc44a18a739936990c8c2ad42ebf61d98c010d6a26b0383067e7b900</hash>
        <hash alg="SHA-512">3db1ad49a13548bc1fcfbfd82750b0225efad9e5ac851d0d0d93e5fe7a25525342f0b2a22d92759f122b395385ca073d0eed58940d76f4bac7101f35c5fb4bf0</hash>
        <hash alg="SHA-384">df4f7d156bdee83d36280be0db48f8b702cac071888829878892f02e9f503aa1592ae91466d2e88fab0007c3d71dbc73</hash>
        <hash alg="SHA3-384">30894efc85c63b89e1827800807b262dd11893191f7f2fb7aab4cc363b15afa6472785ecb043901b2e30f2a5d74627ce</hash>
        <hash alg="SHA3-256">dac2de407e64c54ba7bb78a43cf252d036c5ae837a1ae1fff437f36eee4d12cd</hash>
        <hash alg="SHA3-512">cf966b120dcc2f4b1bfba8d449da2fe3e01a6407bed5cec958225fa8f4f98690a5dec6ccb4674852c0570e7410b6e4d171ed79b45ae97a9a5ac153b23b92cee0</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.msv/xsdlib@2022.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/xmlark/msv/xsdlib</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/xmlark/msv/xsdlib</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/isorelax/isorelax@20030108?type=jar">
      <group>isorelax</group>
      <name>isorelax</name>
      <version>20030108</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b1520219bf23fce148e7be5c493ff1f8</hash>
        <hash alg="SHA-1">b21859c352bd959ea22d06b2fe8c93b2e24531b9</hash>
        <hash alg="SHA-256">3427152431cf7f967f92e69e5cac16147c5d8fb4b4e5a8a72f5291788efcff8c</hash>
        <hash alg="SHA-512">536a2f161269a14e02a02125c1ceccd8e54f0bf1fbcfb64d8846fab1b6ba11e2bde26a3f07c7b6a26f64d07f16d09fa6c750f2ee82979387916fe9a72e5f0359</hash>
        <hash alg="SHA-384">551808f1f91d196abdf957f4c0a0610b2e33af217cd01b43b63a1d5d3f5139e3fc82de854e0219ab5f1f91f7665303f0</hash>
        <hash alg="SHA3-384">d9efcc13f382784053ef8e2fcdce2680c70c6c2b1f1613e6188cfa8185686e703ebcc789fe73237d9ece44946a815b19</hash>
        <hash alg="SHA3-256">72f62ee40d69d4de6a4a5192a4990df9992fc27a6c63c72f3cd73834548efc08</hash>
        <hash alg="SHA3-512">b5c15c3ca62165a5e7c3c3ae2eefc805ba0fc31f56469a3d1765e28df55091144919579110d2ab9b463d9e56d223d309581dcd56b6f3158b54a8f8727a7c9928</hash>
      </hashes>
      <purl>pkg:maven/isorelax/isorelax@20030108?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar">
      <group>relaxngDatatype</group>
      <name>relaxngDatatype</name>
      <version>20020414</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd667fbdaf3190bdd8aee4e8e2d12d5c</hash>
        <hash alg="SHA-1">de7952cecd05b65e0e4370cc93fc03035175eef5</hash>
        <hash alg="SHA-256">2a2563efc911f431250214220570fac8ec3f43c3ec1e47328cee78062f81b218</hash>
        <hash alg="SHA-512">0f00b7fff744d0d5ebaa03733ec712a3c434f0e3dc91e42c2301471d9fc80ae55a2f2892ea2590bac8f70b0ca3bcd3744369f196774105dc69883c54d46f228f</hash>
        <hash alg="SHA-384">70c50ab15376798699afc7d625c89a2fa76c1398fe198006eae048a877bc005070b936fbc7caad97058d0a7f8bca900f</hash>
        <hash alg="SHA3-384">d336b5f43d1ba08a61deb977686e8e3d01310fa38f5aac22627eacdb8fc6d50fef1a25a11ddd7dcc782ae92bb824b903</hash>
        <hash alg="SHA3-256">5116706489428b75146de6eda532aa01a454dcd252231960103b4bbf142cb844</hash>
        <hash alg="SHA3-512">3948d5f716154a976c70a4b1fb730cd26fd502f747e6863db225827461fac1fd4fcf3baaabd937e7678bc4b149ce39ecf3293e6749727338a41d20bb5186d1ea</hash>
      </hashes>
      <purl>pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar">
      <group>wsdl4j</group>
      <name>wsdl4j</name>
      <version>1.6.3</version>
      <description>Java stub generator for WSDL</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfc28d89625c5e88589aec7a9aee0208</hash>
        <hash alg="SHA-1">6d106a6845a3d3477a1560008479312888e94f2f</hash>
        <hash alg="SHA-256">740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725</hash>
        <hash alg="SHA-512">3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52</hash>
        <hash alg="SHA-384">19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996</hash>
        <hash alg="SHA3-384">ca2e435e6d94fea0b1d025f16b7b540aeb84bb5ef286139fa42c04443d5ec87b5663863a761f125dc4a8114148c89ff4</hash>
        <hash alg="SHA3-256">8429876fe0bd0d4bf98130c31856f6accccd2af5986b459689f7b5b49f4bdeff</hash>
        <hash alg="SHA3-512">915711a72ea5b1773e3336afcaed273d65283e5e93ddf35a12b8473951cfd3e1454bf782945c7da5399922dda46277054185b182136f2dbc356d43adb8afec8c</hash>
      </hashes>
      <licenses>
        <license>
          <name>CPL</name>
          <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://sf.net/projects/wsdl4j</url>
        </reference>
        <reference type="vcs">
          <url>http://wsdl4j.cvs.sourceforge.net/wsdl4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar">
      <group>xerces</group>
      <name>xercesImpl</name>
      <version>2.12.2</version>
      <description>Xerces2 provides high performance, fully compliant XML parsers in the Apache Xerces family. This new version of Xerces continues to build upon the Xerces Native Interface (XNI), a complete framework for building parser components and configurations that is extremely modular and easy to program.

      The Apache Xerces2 parser is the reference implementation of XNI but other parser components, configurations, and parsers can be written using the Xerces Native Interface. For complete design and implementation documents, refer to the XNI Manual.

      Xerces2 provides fully conforming XML Schema 1.0 and 1.1 processors. An experimental implementation of the "XML Schema Definition Language (XSD): Component Designators (SCD) Candidate Recommendation (January 2010)" is also provided for evaluation. For more information, refer to the XML Schema page.

      Xerces2 also provides a complete implementation of the Document Object Model Level 3 Core and Load/Save W3C Recommendations and provides a complete implementation of the XML Inclusions (XInclude) W3C Recommendation. It also provides support for OASIS XML Catalogs v1.1.

      Xerces2 is able to parse documents written according to the XML 1.1 Recommendation, except that it does not yet provide an option to enable normalization checking as described in section 2.13 of this specification. It also handles namespaces according to the XML Namespaces 1.1 Recommendation, and will correctly serialize XML 1.1 documents if the DOM level 3 load/save APIs are in use.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40e4f2d5aacfbf51a9a1572d77a0e5e9</hash>
        <hash alg="SHA-1">f051f988aa2c9b4d25d05f95742ab0cc3ed789e2</hash>
        <hash alg="SHA-256">6fc991829af1708d15aea50c66f0beadcd2cfeb6968e0b2f55c1b0909883fe16</hash>
        <hash alg="SHA-512">bfd21f2350bf0bb546a68d3303f28c6a15cee1e630138c169344c3f65fe39a15e61c6ff4e5239f38f2f1f9e488eff4d5565a4a0774263064ab6a30aa9fcaaed3</hash>
        <hash alg="SHA-384">0a35ae0744f05973997b0710cc8d1d774867bc1c1b63ef5bf5f554d1b4c4ab42033f7819430e05ac623e7c8630aa7c52</hash>
        <hash alg="SHA3-384">b016ed02d907b21c90b4a2560aa4c778e8aad1b5ecb0ba62777f668166c6e7b8a0c0deef7d1e63b7a9b1092c64c8a4a6</hash>
        <hash alg="SHA3-256">875856aafff433840ee9933c01018cd18c0a13b46bd4472853698ef1dff83168</hash>
        <hash alg="SHA3-512">1587332fb01515a72b7856b1f566070dcd26fef33c5070039c28684215466a9b9d3a4625cf7181443e3c3a67a313a938cf0775f39b96daf43f5edd4772143c23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xerces/xercesImpl@2.12.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://xerces.apache.org/xerces2-j/</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/repos/asf/xerces/java/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/cglib/cglib-nodep@3.3.0?type=jar">
      <group>cglib</group>
      <name>cglib-nodep</name>
      <version>3.3.0</version>
      <description>cglib is a powerful, high performance and quality Code Generation Library, It is used to extend JAVA classes and implements interfaces at runtime.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e4ecaa32b058ce884ee7f06bee83144</hash>
        <hash alg="SHA-1">87271c95d5bc9e37e4981c9593ff14d470b6684b</hash>
        <hash alg="SHA-256">3366d2c88fb576e486d830f521184e8f1839f8c15dcd2151a3f6e1f62b0b37a0</hash>
        <hash alg="SHA-512">faa1d2121e87ae69e179e3aae217accd0834e0da716b91a029fd526e192612e71675f2740bedf48e23ef1edc45f672a2be1b3e78bbfb1ad59c96dd3d2feeedba</hash>
        <hash alg="SHA-384">a1c1a02a2938617bd839ac81a8a728742a41b6af0b944933ca07ce2de3eda67c1df054d68bb6ab4862d793de034ab68d</hash>
        <hash alg="SHA3-384">b6e252031b36488d99eb2f60f35446c0b8b4e82d71e59b0e6c70e7e63ec6b50b515f5d845b287e043e66544397af7aa1</hash>
        <hash alg="SHA3-256">d4186f80bd60c97113e5422eb101a3ab4612dd805a6da110938b7c7a2a2428f8</hash>
        <hash alg="SHA3-512">a5fff39de8d65db8b84fa3cf9501455dc27c30415167ba6a9e6abb26f36e506716f26a94b560a8237a4c6ac335443cf278d60419af929f7ae10de63dbf4740fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/cglib/cglib-nodep@3.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/cglib/cglib/cglib-nodep</url>
        </reference>
        <reference type="build-system">
          <url>https://travis-ci.org/cglib/cglib</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/cglib/cglib/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/cglib/cglib/cglib-nodep</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jdom/jdom@1.0?type=jar">
      <group>jdom</group>
      <name>jdom</name>
      <version>1.0</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8f97de82fc9529b1028a77125ce4f8</hash>
        <hash alg="SHA-1">a2ac1cd690ab4c80defe7f9bce14d35934c35cec</hash>
        <hash alg="SHA-256">3b23bc3979aec14a952a12aafc483010dc57579775f2ffcacef5256a90eeda02</hash>
        <hash alg="SHA-512">267bcff47fd428447eeb2a4b08886133b41d00d1bbdaad928234e88917499f7d06a8d7783702efa67149d12577d7b59265c1ff42dcc2cf75ba71ff9026e0e2ac</hash>
        <hash alg="SHA-384">3aea5cc32028432c8b33db64ced57b0937058ab8317120b72f77be99c1ffd1e0f021b3971889ffec6e13224614576726</hash>
        <hash alg="SHA3-384">66be7de61998d21a5d457d8053506f29ed1ed9105fd6f5ddc905ac3e43f220f02e017373e08ae1cf676bfe344ae80ccc</hash>
        <hash alg="SHA3-256">63c96e8cf73885e97ee5e5479c5a8d916ca42293df2183eb4f4566cd9af0c453</hash>
        <hash alg="SHA3-512">ef01573074c8352a782ddb248355d74bf5a3dbae980b0378f02965a6309513d39f567caf18993ac741e1be576fcc67973f1d64c22506dc976987c22bfdd762b5</hash>
      </hashes>
      <purl>pkg:maven/jdom/jdom@1.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>4.0.4</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f5d1d7a29978e4ae0be5a456ee1c65c3</hash>
        <hash alg="SHA-1">b8a1142e04838fe54194049c6e7a18dae8f9b960</hash>
        <hash alg="SHA-256">586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127</hash>
        <hash alg="SHA-512">1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1</hash>
        <hash alg="SHA-384">ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6</hash>
        <hash alg="SHA3-384">3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557</hash>
        <hash alg="SHA3-256">f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5</hash>
        <hash alg="SHA3-512">188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.neethi</group>
      <name>neethi</name>
      <version>3.2.1</version>
      <description>Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6d100128ec1e1417687c4fc65cf925f1</hash>
        <hash alg="SHA-1">2d239fd19646201c6dfcc01f3d805b9158d92c94</hash>
        <hash alg="SHA-256">9aafe21e37e11bebd3bd5b55aa5e97da79eabdd2af19faf0992cf7887d8db5f0</hash>
        <hash alg="SHA-512">6eee88d73b2f31c778af83bb6c443de252073636ddd11219c19437712d9695975cd6aabfeb5d8bc35e6736d0a19db477610f9c8ddae5821e914de9c85bec2f31</hash>
        <hash alg="SHA-384">2bc2f9f5a01c4a16432c0a91362adc9af2b740f8c14695e6a697dbc8e3ac6218b2104beafa7dfd296c4593c3aaf4135f</hash>
        <hash alg="SHA3-384">393cfa8d5c65a85d89d019c6ae3b8c51a3d2b50c093facecd859be921513468f416b39e20fd328d7928aa79287cb7b99</hash>
        <hash alg="SHA3-256">1389e5a6d0bb8b3860ae7b7843827743000377d6e9c0a0639ab1b4b652c65652</hash>
        <hash alg="SHA3-512">6ee240d4d1276438adeac59374dd836d7dc50eae93ef91c4293fa6942bda28f27494bc222889ea8b428bee8cd38b03e77f6e3cebd9a31060a982ba4d8f9fc6a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/neethi/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/NEETHI</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-dom</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a5a48691fe57e21ab2be1fe76545040</hash>
        <hash alg="SHA-1">9b6f4cba742acfbf02d9f8c2c190d261d1c8ff1d</hash>
        <hash alg="SHA-256">48a3b75f71cf06c37c960861fb94944c7d21ef295bdee5dd5e4b668a79c2819d</hash>
        <hash alg="SHA-512">30eeb576fc07821b0678b7084c6664c2e0f405f779cf45257b3e49b01a3f5eb97e43e6fd7797f8562346a49ced979e12215d6cbc6385c9404ef39e2516446b77</hash>
        <hash alg="SHA-384">b694f8b5b872260d8248abede928cb599e2ab52f4fe31a1ff414ca54937e43674fd23d4229462b3582975bf2209925da</hash>
        <hash alg="SHA3-384">92b9f8f18c24d5fc57786fdef5212c8c06e42dd7ef67253b02cdafc7fbe2e820d56531ccc5b4e19e3c24747d1e246751</hash>
        <hash alg="SHA3-256">686c979a85ebadde0640c834697864080a1a2bf1d07b6f7308b36f039a87d63b</hash>
        <hash alg="SHA3-512">2134424b936aae52ef7d66febe517a8622c0afefed3628bed8f252ebf9020c03d31320213cbdf8ee687887309c7e4cf81902d468840e222636dc60283d2383d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-dom/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-common</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22143a6aaa5af2e49cbb6668f84929f5</hash>
        <hash alg="SHA-1">8911e3b2befce0eab9014c4ab8104e81ac5d4b01</hash>
        <hash alg="SHA-256">c28d3f467d8988cd4f2b928eac42d652c88dbd9915d82078f73ef880c5f29e5d</hash>
        <hash alg="SHA-512">9f4eca4daf215684af2818a9f5dc1cbaec7487a85fe2973c89a657610e739e426f7067ea6222ee45c6ffb14111fe522931a6bb83ec505d72ead896993f11f9f2</hash>
        <hash alg="SHA-384">5ade6d25e7b0497b9077cdc6f8c8d7264c7a70d429fd84562ef3f0920ce6f0a1856fdc1cc139db5b82570e206ac6b01d</hash>
        <hash alg="SHA3-384">0c4c631764663a6a4d3ce2180b1faf65e754af1f74d7006b5c47e2e6e5fa059e12ce3048005a5e898b2f62399fa1e6ba</hash>
        <hash alg="SHA3-256">9e6a0a41725ea3fea82366b617156e46da106ce86d43b8f857d4500059089302</hash>
        <hash alg="SHA3-512">5d1023ab5032f20705ea6f163a1ff27c4e1a1fb123ac0a884670b13f19866c707dfb54efa7bb5ab73e4703b7aff3d18badc62f608cfc5e9172eee36755cd8582</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.santuario</group>
      <name>xmlsec</name>
      <version>2.3.4</version>
      <description>Apache XML Security for Java supports XML-Signature Syntax and Processing,
        W3C Recommendation 12 February 2002, and XML Encryption Syntax and
        Processing, W3C Recommendation 10 December 2002. As of version 1.4,
        the library supports the standard Java API JSR-105: XML Digital Signature APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bad235ebfca40a0514fba17fd742df51</hash>
        <hash alg="SHA-1">7f2baecd896ae8e8b02b6090220537bd950eccbc</hash>
        <hash alg="SHA-256">5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23</hash>
        <hash alg="SHA-512">a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e</hash>
        <hash alg="SHA-384">d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216</hash>
        <hash alg="SHA3-384">0ff82e0fcdb6a9b891a24160e19ca5db8558b41bf32f5eda45581a7982d903b81121a385f0030b90cb4a280b861217c1</hash>
        <hash alg="SHA3-256">355c1921dff3f01ece0170e63e55b599eec335dac51fdb055f9e46c1c15b105d</hash>
        <hash alg="SHA3-512">c158de9564db780b0f04b482d3d155c55119e94fd1887cc9abcc54a0ef9f44455b3e29b08596c3834928c2f15b6493ba73c957693484a3bd42f817597ad050fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://santuario.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/SANTUARIO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://news.gmane.org/gmane.text.xml.security.devel</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16822d1228404b5fc14a607f94c04b69</hash>
        <hash alg="SHA-1">c51f094b49d8875a9d1e51aefc01331dff461729</hash>
        <hash alg="SHA-256">c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4</hash>
        <hash alg="SHA-512">75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b</hash>
        <hash alg="SHA-384">ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb</hash>
        <hash alg="SHA3-384">a651fd502eea69e1025c14fa531afe84c20c83e6a68682e268d927ff011b0060cb90460e1a2e90ae3ede31d31ce3df31</hash>
        <hash alg="SHA3-256">26c7a7a35392bd0888ab2b161733c1f89658c7fa6522a4ab7e944d165d2ac5e8</hash>
        <hash alg="SHA3-512">253a6160c92bf0c6239f892fa7c9ee2ea12ea81ac4d743d9051179b02542bc28650835936b1d28296661e3364f0f3afe4b5a7dd999a3594be9a4049025955665</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-saml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-saml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-api</name>
      <version>3.4.6</version>
      <description>Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0cb5bed685408a677fff00c5cbcf4e8d</hash>
        <hash alg="SHA-1">cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe</hash>
        <hash alg="SHA-256">d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba</hash>
        <hash alg="SHA-512">eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18</hash>
        <hash alg="SHA-384">b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161</hash>
        <hash alg="SHA3-384">bfecd6532109185e6899a9015742ba963f112bdd87f1fc65de6ae5fee79efdd713595e37293baabbb1ad795caac3bfba</hash>
        <hash alg="SHA3-256">cb41663926db230f6fa29636ed2e12c911b61b20ca9999cb68484a30ce7c4194</hash>
        <hash alg="SHA3-512">d3888c26a5d5444a177c8152385fc62cae4378e572af200412b7fcf70030e8648fe7afa29549d2af79e8c68e4c444d2faef3fac783e3003d7a171c31057717de</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-profile-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-profile-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core</name>
      <version>3.4.6</version>
      <description>Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">078679e8cb6a0c3361eac985019e8e5b</hash>
        <hash alg="SHA-1">75b749a9ce605414d071ffabbf7e61cd11b9204d</hash>
        <hash alg="SHA-256">d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1</hash>
        <hash alg="SHA-512">d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681</hash>
        <hash alg="SHA-384">28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf</hash>
        <hash alg="SHA3-384">a24ea3fb379156161ade032197c27d23dc0b90a7ac58aa4681777ebd41d6cd0b8c5cf51a763a1ea4b7988d95ca319fc8</hash>
        <hash alg="SHA3-256">ada4392913150038c1013e55c75352710457af7e7c7eb6fc4aa64d8c4a06bb9f</hash>
        <hash alg="SHA3-512">8d0f682aaf6a85ebf3a14ef0099eedf3b4559818cf645ab818edb47b37b72549f0e453ea0e967acf8f11cd27c669e6f1d3d97969f5828b7ae212dda918827fe7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d55c4ec6f542c201b6d5aad5c7115138</hash>
        <hash alg="SHA-1">571c2b041583625850afefdb3283fcf17940f9cd</hash>
        <hash alg="SHA-256">a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce</hash>
        <hash alg="SHA-512">eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c</hash>
        <hash alg="SHA-384">6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0</hash>
        <hash alg="SHA3-384">d8fa5d16090bb4108067a26d54b4a9d7e74fd150602a556fab10cfd7f15b5314107316258fd916cffc894d6e952fc238</hash>
        <hash alg="SHA3-256">9c13c83cb3ab35a2229854a876ca14d55090697fc72f9a8dba0301df6d0f5201</hash>
        <hash alg="SHA3-512">c7208426ca5322a7cbf9256dc7e93e66b665f3824b0e35bc63de4b56e3ae6dd645ffa04a9d9795c1ef5c3411b8e90062a53fab781d5419041ac1e9d3b853441b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-saml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-saml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-api</name>
      <version>3.4.6</version>
      <description>XML Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83483c37e5b6cd7c234866d9b5e1ac47</hash>
        <hash alg="SHA-1">3f84e8ce2dc40c247247be036a3a5c6adfae4a70</hash>
        <hash alg="SHA-256">fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd</hash>
        <hash alg="SHA-512">941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c</hash>
        <hash alg="SHA-384">224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412</hash>
        <hash alg="SHA3-384">b658a6857afec964bf1d48efede2bb0c231f1a99aeee2c530ccd9620011a7988ee64a51723e6e1453216347001f0a336</hash>
        <hash alg="SHA3-256">b4fc6f538095a4ca15c07cfab4ea94492a7aa1b6b6d156bd1295c47242f886bd</hash>
        <hash alg="SHA3-512">8a829332f903f632741612468313f785155e4e9fae1abcd34c3dc827cf61aa7fc511f1e9cf9e67509c414c6cb95319db20bfe9c6794d3cfac65550faf7893dd8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xmlsec-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xmlsec-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-api</name>
      <version>3.4.6</version>
      <description>SOAP Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65e52ff6f3a55badf553ba021f08696f</hash>
        <hash alg="SHA-1">6e4dacb4caac0d5ed000719b3a772d384ceff916</hash>
        <hash alg="SHA-256">76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a</hash>
        <hash alg="SHA-512">ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474</hash>
        <hash alg="SHA-384">4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4</hash>
        <hash alg="SHA3-384">ab79fc2e03545b73eb8596a6cdfa7f0ec239de4809149b74ec2c3027f85503bdb03f892dd9c4eab8a86a1cf9fa5aa907</hash>
        <hash alg="SHA3-256">2bef86761f1771fb16032787f45dd24b23faa82d0446ba9cc08abd91357cbe72</hash>
        <hash alg="SHA3-512">dfc4b60bac6839e4c50c40ad899a577d1540b3a0fd9503d31689126a09def5388a40b1e993dab0954cdcfefac6dcbb631b83993b0eaba9d574e3941a33d9755e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-soap-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-soap-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-impl</name>
      <version>3.4.6</version>
      <description>Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6059e2364579e717f39aaa65f3e395b</hash>
        <hash alg="SHA-1">0dd4e7128d4de8c304827ecc972ee57ae46230fa</hash>
        <hash alg="SHA-256">78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a</hash>
        <hash alg="SHA-512">d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8</hash>
        <hash alg="SHA-384">3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209</hash>
        <hash alg="SHA3-384">7ba65c83bb503aee2862e0a538aaf11ebc4413f79b140635ca47e39b72acee985e7eea68371807420db6e92860d049dd</hash>
        <hash alg="SHA3-256">0df32d70a3ba9932429c07f57d4293ef05a06a9b5d0827fe9b1f1cdf7dcbde24</hash>
        <hash alg="SHA3-512">ae3077c04d8b341b5b8c2207a5394416e42f64d2c6b7e85a216a811ecb37705e732472a7326c5c1fb1805e48f8e19da2d42a365e244645d1fb5db635416fc311</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-security-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-security-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-api</name>
      <version>3.4.6</version>
      <description>Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b128a68409ed07d1094b40281576c3b</hash>
        <hash alg="SHA-1">d5cfb49df6b78b0dea66015040fe9940ace2fe71</hash>
        <hash alg="SHA-256">a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a</hash>
        <hash alg="SHA-512">a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766</hash>
        <hash alg="SHA-384">ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533</hash>
        <hash alg="SHA3-384">1a0e55d75f810bc988322668939869510a92af558fd21b2bac5180d75833d9adcabed88db5b546d7f2c63bc725315b9d</hash>
        <hash alg="SHA3-256">a51c5e0854fbad9049dbe4e77644c1e0796a9e35249989eedabdbb421406b982</hash>
        <hash alg="SHA3-512">11d2b36602e290aad73f8ccedffdc8bb99e679872cf47921e83ad62f48097bea3b720551ce58aeef0aea75ff21f3517f4d5215aedefbd9609368a3836f38fb66</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-security-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-security-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-impl</name>
      <version>3.4.6</version>
      <description>XML Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29d0993ae0e882f5ab843fdca178ad53</hash>
        <hash alg="SHA-1">f07084d063f046dc762b86f90ff1350c923aa6ac</hash>
        <hash alg="SHA-256">8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7</hash>
        <hash alg="SHA-512">0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496</hash>
        <hash alg="SHA-384">63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8</hash>
        <hash alg="SHA3-384">b89208a5305630e4b4c75708f854b2f57e4168fbdbbb700b682d3845855c069b8f6a986da4311201ba5afb049722a4a6</hash>
        <hash alg="SHA3-256">a80892cf468b16155284957ace6da1c8da86dcfade6f1c0c17cfe425e601fd44</hash>
        <hash alg="SHA3-512">424cac960c48b49ea540ee402b30627c4a26d139fef46259f00de32b4f753abba901c072616d4bb5d2bf23178b78d29b30d0ac344b6ef9ff3829c97c4116b43c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xmlsec-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xmlsec-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth.utilities</group>
      <name>java-support</name>
      <version>7.5.2</version>
      <description>A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8841e4abf4e88a32737d0f2870f2f4af</hash>
        <hash alg="SHA-1">1b0a80b8c0713e3d6233c643c7421ece305b544f</hash>
        <hash alg="SHA-256">bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2</hash>
        <hash alg="SHA-512">e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b</hash>
        <hash alg="SHA-384">4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc</hash>
        <hash alg="SHA3-384">c0324c49a4c7c8e4654f828ec353bb60e1951955a551d4078763839cf5d9cd1a6099c716811597e7024d79db4a42f0da</hash>
        <hash alg="SHA3-256">e0d86c58e70d7a17f9fd029bfbd5a3661182f15c39d745a02a8568092e860bd8</hash>
        <hash alg="SHA3-512">dc57c10272b416405e4c8e8fa1d51db9d5d72fc757c6c5dc49b888d1d0bb6f591083cd1edd0f642c71854177336d15e227bba0ee6c25c68dbe39d79e08a4132c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/java-support/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/?p=java-support.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <group>org.cryptacular</group>
      <name>cryptacular</name>
      <version>1.2.6</version>
      <description>The spectacular complement to the Bouncy Castle crypto API for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4cf54fbc0b44a3233b0daa8b4c0cb83</hash>
        <hash alg="SHA-1">c97954b8bc9fbf63393d6a3b9113a6ce70772b45</hash>
        <hash alg="SHA-256">7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01</hash>
        <hash alg="SHA-512">f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec</hash>
        <hash alg="SHA-384">5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191</hash>
        <hash alg="SHA3-384">a48cd3adf9dfc90e9dd0023e1c40d21369c198bb46a992ee01719e8a1e6deeab3f8215d9c1394c1306ca8a8268a201ba</hash>
        <hash alg="SHA3-256">2197138eff1b76c3743e9dffc896b3376b92c0c70f558f10a3277b84b82b63c9</hash>
        <hash alg="SHA3-512">79b5016a94ed082b321e812492a5ad11c25c4f143f0a2167643c5c6a7e08d35e54a1366468d232534a9428d5c05858241086f47057c2db3e9414935d985a38a4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.cryptacular.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/vt-middleware/cryptacular/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://groups.google.com/group/cryptacular</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:vt-middleware/cryptacular.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.10.10</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2a46de8a73ec7b60011429561ae72e3</hash>
        <hash alg="SHA-1">29e8126e31f41e5c12b9fe3a7eb02e704c47d70b</hash>
        <hash alg="SHA-256">dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3</hash>
        <hash alg="SHA-512">e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f</hash>
        <hash alg="SHA-384">7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87</hash>
        <hash alg="SHA3-384">9ba509d2d0ac83d7adf75ffc4d6949ff7e54adac022c3e2f23b2aa5199c3260d59ec01f5f97ae6b4ac1a8ff583a7e6c4</hash>
        <hash alg="SHA3-256">cbe7879898aeab28dadc4b6814303929e92ed8512f0d1ac4b20ee46acbaec873</hash>
        <hash alg="SHA3-512">4998f180686fc8407da93da5e30266d1a5e9f0a5f7209c92d379772f78eb349ed6a42934d2cd00f9e19ee3c2243cbd15be1fc05617720bf4e69256791d2724c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.10.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.joda.org/joda-time/</url>
        </reference>
        <reference type="distribution">
          <url>https://oss.sonatype.org/content/repositories/joda-releases</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/JodaOrg/joda-time/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JodaOrg/joda-time</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-impl</name>
      <version>3.4.6</version>
      <description>XACML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d8cb6a9cf8d68af9bc2bab3053d9a30</hash>
        <hash alg="SHA-1">542a94404fe6b51858cc291e18b1890772de555c</hash>
        <hash alg="SHA-256">2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146</hash>
        <hash alg="SHA-512">29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b</hash>
        <hash alg="SHA-384">b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c</hash>
        <hash alg="SHA3-384">671b231ece5429019e1a76a864b172c1f45cb0f3eea627e65728b848c03b53a52bac0b684cd3d089d0f3369563d4f4d7</hash>
        <hash alg="SHA3-256">ee73dcb676e9652bffa47c67a378ae6a2bdff544bb3087ee774dc7285ab19497</hash>
        <hash alg="SHA3-512">12311dac32d3991cfa12b3652fdeae1e958777d1d75960490685d413021b66cb9f0d2a213cb3b2605f1af4b0ac74479a29187d81ac93c755736d05114dcda9fd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xacml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xacml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-api</name>
      <version>3.4.6</version>
      <description>XACML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfb758241b65c48297e510c5c1b129fa</hash>
        <hash alg="SHA-1">2fc136cf70605b6e490daf01a28161cb87b0ffc4</hash>
        <hash alg="SHA-256">9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6</hash>
        <hash alg="SHA-512">7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3</hash>
        <hash alg="SHA-384">43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097</hash>
        <hash alg="SHA3-384">2881568cafcb486a27ff445020eacd2000f50dfde6e7ddc5ae73edded6eb4348158f21ce8d2f916da3d0e1d77310d8f0</hash>
        <hash alg="SHA3-256">8713d49d970b6b7329db615ce345ed64113ba8de7f6397104363d9ed0d43ced9</hash>
        <hash alg="SHA3-512">2185bbf881824ad73e4b0bdcb4de5bd21b721278647d2095930b49a34c10762bfb6877b67801e9ed72b40cfb5e99bc8916592f8e243d1716f3ad5d30fa0d9429</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xacml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xacml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0eaa70b47d18c2a7ae72ec0ce1e47038</hash>
        <hash alg="SHA-1">2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8</hash>
        <hash alg="SHA-256">536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620</hash>
        <hash alg="SHA-512">bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb</hash>
        <hash alg="SHA-384">87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1</hash>
        <hash alg="SHA3-384">011ea0e3ee1e3841f1fee624af4858616c6024558eb02d97f7883ae6509e9d22dfab3939662b35e084bf2cdb7c7e4305</hash>
        <hash alg="SHA3-256">fc04e058e55e63247059177067d310912348ec8ab591dec9efb1564c9d39220d</hash>
        <hash alg="SHA3-512">84dd06b742e56582f6e442403e96617affb74ff2e74f1a0137077f0d35ae7f9160296f15a954ed4021f8be691e0c5a132367e7bbee9391338522109e267b63f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xacml-saml-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xacml-saml-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75f667b52f160481e65e7c317ab1c20f</hash>
        <hash alg="SHA-1">d4d573d93257738309cd079a290a1da7ecdc762e</hash>
        <hash alg="SHA-256">c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b</hash>
        <hash alg="SHA-512">612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e</hash>
        <hash alg="SHA-384">ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6</hash>
        <hash alg="SHA3-384">60b81353faea47332bf171a5ba7cb17ce4f12a583eb616c186033b39395bb5b6be60047e7dfb549965eac0cd8ae8082f</hash>
        <hash alg="SHA3-256">2effe635e6699d715e92ec2ba4081142447b876a071d351176e1b702bd46b695</hash>
        <hash alg="SHA3-512">467b41af5816f2d307e6994e719e0205bf0fff26fe6f6cfb9b40b5cd2ae751aa0965ff761c65552f14cefb7ad159afeaf0c4bfae8a0ee8873dbdba008c640d73</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://shibboleth.net/opensaml-xacml-saml-api/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://build.shibboleth.net/nexus/content/repositories/releases</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.shibboleth.net/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://marc.info/?l=shibboleth-announce</url>
        </reference>
        <reference type="vcs">
          <url>https://git.shibboleth.net/view/opensaml-xacml-saml-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar">
      <publisher>The JASYPT team</publisher>
      <group>org.jasypt</group>
      <name>jasypt</name>
      <version>1.9.3</version>
      <description>Java library which enables encryption in java apps with minimum effort.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39327c7e38782102ecdb3c9dc4e8dcd3</hash>
        <hash alg="SHA-1">0d99ef9540f51c617f2a293b460f025d2ee563dd</hash>
        <hash alg="SHA-256">f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa</hash>
        <hash alg="SHA-512">99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821</hash>
        <hash alg="SHA-384">12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c</hash>
        <hash alg="SHA3-384">72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d</hash>
        <hash alg="SHA3-256">1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547</hash>
        <hash alg="SHA3-512">08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jasypt/jasypt@1.9.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jasypt.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:jasypt/jasypt.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.javamail</group>
      <name>geronimo-javamail_1.4_mail</name>
      <version>1.8.4</version>
      <description>Geronimmo JavaMail Bundle.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0f877ca397f77198f4c941bee52f0a4</hash>
        <hash alg="SHA-1">0c111549605e4fb904984e4f40299a3a653871ea</hash>
        <hash alg="SHA-256">e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a</hash>
        <hash alg="SHA-512">a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb</hash>
        <hash alg="SHA-384">f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e</hash>
        <hash alg="SHA3-384">a774aa04351e16186868d53d50b34a200705a89d468d4e8826a4d553fd2fdfdef828f187b7a8a70930d17ddd9163199e</hash>
        <hash alg="SHA3-256">3da74bc40cdf844aa9329375e8cad8f24296c4a1414e8fcd7a8a0dda27bc4d59</hash>
        <hash alg="SHA3-512">3f45a98ec3c92d4846a0fdea10010cdbea57ef109fa89ff1b789396a025adf8c87ce63cf2a24bd055a9e8f99b0e95b1b8d7ea9773bf4b1a8f5aa86bb7e8b2963</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-policy</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">267dc758c1af2ed453b64b3739120f53</hash>
        <hash alg="SHA-1">da9d12731b1a92f82ee4557c4b7f1e27b2acdf5d</hash>
        <hash alg="SHA-256">881e08717fc3126c218071e43c6ba73f97c1f0a6594ec4a7994ceea57b20e9a0</hash>
        <hash alg="SHA-512">a3b7962b0f6d342863a6d6a8dc324b4699f7f466c6877b8ed5dfc71d64577e28589674bd3914a2e03f4ef0a8b8192111e19a7e08678aaec90276444b7d3cf08c</hash>
        <hash alg="SHA-384">9792fa52d80beee44fad625758962043442df0d4502e003d61c2c12c385ae7302221548d5351a66abcb217896c44d062</hash>
        <hash alg="SHA3-384">245b61449e8e953925ee75928756f7743a473ab40552b9faff29872fa093780c05d3fb81e43f99aca5e8c85e754587bd</hash>
        <hash alg="SHA3-256">1aa589a755764cc5e89fd2db6791f46236dd97fe25ed185124106ea0f9150264</hash>
        <hash alg="SHA3-512">066f069c89efb486f1d857d6ee417ebcd5386bf2256b4a017b74683b3ea631957f71db5fb0630013ba44f7a155e0e6ba7a04f8e86214b545da756ae16169c88a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-policy/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19906deacbe98b6b397ae1dedbfc4676</hash>
        <hash alg="SHA-1">6566d7fe40028f3fe9313cee01fb2bcf2dacc8dc</hash>
        <hash alg="SHA-256">ca865a6aa9ab9d7c258952d72204c9549d791018bd692c7f5cd578f75a3bd0f0</hash>
        <hash alg="SHA-512">973f0d762ceb0688dc297e0366aa9d63f964b27d82298dd95d5f698bdba9a02920ed5f8c5c174d13ec9c898a71fa868aca7d201523443d9de6f877b8a35ac5a2</hash>
        <hash alg="SHA-384">0b199ff8bfd395cfc880bdcd1228dbd4f606a41bbd6cccb299e927515ac3647f87e0c0dc86d7a6d9da0dad6d62e89376</hash>
        <hash alg="SHA3-384">bd7e6e9bbfd821ef882089ad075a9e561bf5643fb44b84fc6311f082ce9813cb99d2d2171542b96885f656871b0710a2</hash>
        <hash alg="SHA3-256">c1f19b5ca70f3d89f605477a266e6c3fd04d49f6ff856df1eeb0b679f1d22008</hash>
        <hash alg="SHA3-512">a46ef49a5d1ad985fb7162a5a05bfc22d71b9f20ceb7723b5e0f71d274e28ae4f5d1f85eb64153d36c0ab6eba1705ad63de44a89fd22a0315b9c8d0e149d3394</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-stax/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-bindings</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">425078dc9882b2d35d6df5e74cb9368e</hash>
        <hash alg="SHA-1">24bdfca05e2f2b617e86b422331914e0f780bd49</hash>
        <hash alg="SHA-256">7f4e934497f11938c62f5654000d5dde7d6a3ab62d77bbeaa698194e1d8beb3b</hash>
        <hash alg="SHA-512">caa5a43ce4b3c473da2202ee8c116a09089fa85f0739d25a882655e98b8aaac392eff4c3ecd70e128f3c2e07f9f2718e8ebf877c0a74469840d5911f1766c3a7</hash>
        <hash alg="SHA-384">5a9b06de616f0c67a149e9fa0be8186c6f9c3d9f26c35cac02f303cb3cb1611f1547b6dc74c948f677d3145e3f5f9e28</hash>
        <hash alg="SHA3-384">eb026269a55ce75b686c0137e6d9073e63bc8f2f13a07cee41bf01c199adc56b7057f4f7a41daef023709e2236557f0b</hash>
        <hash alg="SHA3-256">e6917d3ef8a835a7fc22de173016b74005ed956efde97966f55405f37ec9896d</hash>
        <hash alg="SHA3-512">276a71da56303a8a1b4111c4dacd5c1fecb5581c5925d8e966249a19569a1d9ae2d9298484eafe37da2d910ee79ee271757cbea00cf5e24a47824ce7287ad153</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-bindings/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-policy-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7f1c2c0ed770eed1fafbcee7c92abaf</hash>
        <hash alg="SHA-1">f85b2e0719c1fba921299c43ba1406375eaf517b</hash>
        <hash alg="SHA-256">61b5aee22a0a6d11538de698a14f605f25a0a134d731564d3b1b51ff28de29c0</hash>
        <hash alg="SHA-512">ff866e76cee8f741f57d54cd23888d237d202ad5611ab99e50ae3cce84e2b20ca7984214a3694bed60ea8cd479258a94b46b10fc58926d5a7be0c247b72c3cfc</hash>
        <hash alg="SHA-384">888e100bf069efe000cae9b40214a64c33f99b99c42de0874895756bd718c824e0f11139611cb3ffd886aee8add560e3</hash>
        <hash alg="SHA3-384">3a7f348715b02f403f2c1565cdfe98a1da0abb1fb556ec0f1404638ac54518c852b9f3bdf04678c49ac6af9030a5bc70</hash>
        <hash alg="SHA3-256">a829246aa2e39cec7dc042a7676c33cb64c684eb5c4b92453721e5b05b4d7a6d</hash>
        <hash alg="SHA3-512">b751eca76c552a9cac33f1f1ce47f445284af4386f79b680f58d538f314e0deb2521ecd7f55fe9c5dba63bf7047cd4c55013039d2072d51c8be0b99ffe9ee8c2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/WSS</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@ws.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.78.1</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9646d6d9c087fd408fafe0e3cfe56c25</hash>
        <hash alg="SHA-1">39e9e45359e20998eb79c1828751f94a818d25f8</hash>
        <hash alg="SHA-256">add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7</hash>
        <hash alg="SHA-512">fb10c3c089921c8173ad285329f730e0e78de175d1b50b9bdd79c6a85a265af9b3331caa0c1ed57e5f47047319ce3b0f3bb5def0a3db9cccf2755cc95e145e52</hash>
        <hash alg="SHA-384">f800642cf1d359c49455421dcc1f6d4b4225d74128bc221fb6742703d5efe009eaefdac2b8139e2168e55815df32c91c</hash>
        <hash alg="SHA3-384">de3801b40050d6839874c0f00c933f42c89badc87a64d0664960aaed1b08f350ee5bc2f0575771a9b3a217012698d5d9</hash>
        <hash alg="SHA3-256">d6a7629eefcee11d7f9cfca72d6b87d2779785ed887987cf94ce7da011b9e373</hash>
        <hash alg="SHA3-512">6a3e7b0a180e61d17de3107876e0ccce6ddfa23c165827a585b10fac8cc3629ffde930e36aaff5df2327278e35631d9ab970923fe0e34d68876b7911f2a536c5</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.bouncycastle.org/java.html</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/bcgit/bc-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/bcgit/bc-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ehcache/ehcache@3.10.8?type=jar">
      <publisher>Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.</publisher>
      <group>org.ehcache</group>
      <name>ehcache</name>
      <version>3.10.8</version>
      <description>End-user ehcache3 jar artifact</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">35f94bd99bae66088df39d8a45e73468</hash>
        <hash alg="SHA-1">f0d50ede46609db78413ca7f4250d348a597b101</hash>
        <hash alg="SHA-256">bed87f71d8cd25a8a4ef65f274cc58301f28929a01417d0bee8d73953dc30bac</hash>
        <hash alg="SHA-512">deeafba63b4ff08f26721aa9b8582c486d4a12ad3889c3deadb52ca86cd71212550ffd71f7cefc8e58543fd0114f48cc086ec3c173091ea7a5c2f99a3919893e</hash>
        <hash alg="SHA-384">30be38713902e6c68cf32cc9ef5cf0a384d0dcacbe5d32e7dbdd8483c2f7002cadc68005a50084f1b56386e456023fc6</hash>
        <hash alg="SHA3-384">e349f39ae5a621ef760f7de6fde8a35140cb2a004d05653c9340779469dd61b18a0b8310c2a01b82cc02839bff58b7f0</hash>
        <hash alg="SHA3-256">6808204bcd31027ce377ecf6ece07ae9a39e209524201064663693cf763d6d3c</hash>
        <hash alg="SHA3-512">e0c691bdcdcd98b349b409fc0a0b7851a90090d71492cf882104007cea9adf2905e6ab59ba62d3241d4eff929beaf92eef09e7450cf58897b07f60fa30092992</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ehcache/ehcache@3.10.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ehcache.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/ehcache/ehcache3/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ehcache/ehcache3</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mozilla/rhino@1.7.15?type=jar">
      <publisher>The Mozilla Foundation</publisher>
      <group>org.mozilla</group>
      <name>rhino</name>
      <version>1.7.15</version>
      <description>Rhino is an open-source implementation of JavaScript written entirely in Java.
    It is typically embedded into Java applications to provide scripting to end users.
    Full jar including tools, excluding the JSR-223 Script Engine wrapper.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dec889e14cf8b3ceecba3a0f2d6dc0e6</hash>
        <hash alg="SHA-1">39e53f8e769ea9a7e799f266aa47c85edd99a29e</hash>
        <hash alg="SHA-256">2427fdcbc149ca0a25ccfbb7c71b01f39ad42708773a47816cd2342861766b63</hash>
        <hash alg="SHA-512">5619c4f52f1863c5d72cd9115c2e9ccff55c7e7a8f4f1395f73486120d94ab3900634fb29d54356a5b0fc2214570615d5f06e152260df971bb01c5bc4de4bb95</hash>
        <hash alg="SHA-384">195c8ba56fd1a1f5e21314e4a6555eefff667cb0cd481f158882f9960f83820d9d817dd33c267fc9af4e21f0a31d20a3</hash>
        <hash alg="SHA3-384">056b55c253835da419a21589a2417988e5741a78a50132229d56bff24cdf8cc5a829f420f06213241c085d2ca27e82b7</hash>
        <hash alg="SHA3-256">5562728b88e047554b29f636b62bdabfb8baae31313304c4c6d8d7a072c82058</hash>
        <hash alg="SHA3-512">703eab70abd6bcf392fd98555d77ed72dec7abce8f368c547ac62c2ac54096a059927132eaafe10d9fadee2079b7f1d10ab7c35ada33aa6e85e1b0d7bac27397</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.mozilla/rhino@1.7.15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://mozilla.github.io/rhino/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jms_1.1_spec</name>
      <version>1.1.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d80ce71285696d36c1add1989b94f084</hash>
        <hash alg="SHA-1">c872b46c601d8dc03633288b81269f9e42762cea</hash>
        <hash alg="SHA-256">18d9ff7b9066aa99cf89843f5055d2fe58b1abe4346ee9df0daf4ac18ca232d7</hash>
        <hash alg="SHA-512">94cb8660775596b298db93e11fdbb28d2a582b161f7a6d667d41946f59e8b114aa80e15c28c4186f05b43f432b1ac555d845ad870309609202382c3f6061e319</hash>
        <hash alg="SHA-384">9394c1de83480f01ec0893657990179ef67ea95b43bb4518219381968fd58d8f5f509d4cd3d4af5ae4b3df07f67a1ec6</hash>
        <hash alg="SHA3-384">0c47dd7e307f805f08b63a25f6f957b230cb207633820657d4293091420111096ee888d781843e7c36b56c6c54784034</hash>
        <hash alg="SHA3-256">c034a913df12c769e270bbf1500c81d2cc9bdf42118807eda224fc6e162fabc5</hash>
        <hash alg="SHA3-512">4814a6090372614ec478619836f6b133ff0719f3f082704d2b1648d0b749bc6216486904d2ac57c8a72ee307750955c5c7255293b4a36fdd57444e8a28a9cae5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/specs/geronimo-jms_1.1_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jms_1.1_spec-1.1.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.17.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

  The code is tested using the latest revision of the JDK for supported
  LTS releases: 8, 11, 17 and 21 currently.
  See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml
  
  Please ensure your build environment is up-to-date and kindly report any build issues.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7730df72b7fdff4a3a32d89a314f826a</hash>
        <hash alg="SHA-1">b17d2136f0460dcc0d2016ceefca8723bdf4ee70</hash>
        <hash alg="SHA-256">6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4</hash>
        <hash alg="SHA-512">dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa</hash>
        <hash alg="SHA-384">c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5</hash>
        <hash alg="SHA3-384">bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b</hash>
        <hash alg="SHA3-256">f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2</hash>
        <hash alg="SHA3-512">4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-lang/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LANG</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-connector_1.5_spec@2.0.0?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-j2ee-connector_1.5_spec</name>
      <version>2.0.0</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">feebbddea32964e994c2ccae59409fc3</hash>
        <hash alg="SHA-1">1da837af8f5bf839ab48352f3dbfd6c4ecedc232</hash>
        <hash alg="SHA-256">5e1b139d2ba782bcb323ec5a4063e6205d8546835d4b81dc82f0dd17c6ade184</hash>
        <hash alg="SHA-512">1e615ae472bede8d9741f24677fd6d9f1b9812e55eb5d2ed2ec450e36ed7f6d937ec4d4f1f23f3d58e85ae79f85cfc5fd595822d542989c0f34fd2e5b138694e</hash>
        <hash alg="SHA-384">07f0b5e351f0ddd04ee5cdbf3b1978a3ecbf39e0c24c4740a817fcbb6aa08f4ed419ba14433583010145a99b7330b189</hash>
        <hash alg="SHA3-384">569ada4bc32b8384d70c2584b5bf5ac90051f528890aeeb50168df4dcdf80eb26695d74935f699284488205d58b2ebcc</hash>
        <hash alg="SHA3-256">2e4529dacd5402e52c1735a9e11aed6bc8948b061a74a3d38d402439774acd0b</hash>
        <hash alg="SHA3-512">eae92dd2d1116d185cf213f5dd2e3c74bbfd314c3c4d305ce8533eb718ad4326746c72639f259b0027fa8d7a356a276fe1db0d7202be8564412b572c62e63306</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-connector_1.5_spec@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/specs/geronimo-j2ee-connector_1.5_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-j2ee-connector_1.5_spec-2.0.0</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-ejb_3.0_spec@1.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-ejb_3.0_spec</name>
      <version>1.0.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">68fcefd6e5603d976fc885f5152a007b</hash>
        <hash alg="SHA-1">d79076ee74c2349840a019c8d3af0b70a7d4a424</hash>
        <hash alg="SHA-256">01149629423968bac94bc2ca71e90cdf45456e5846d77a8fd67f4b86bac2e78d</hash>
        <hash alg="SHA-512">54a0ff485f4024681d8a6599ab07175741d329d536104d8c525750c895127608beb3c15b0013799910efa1c27e323c7de47ec2fee566f98de614a1bf9034d964</hash>
        <hash alg="SHA-384">c67bcea81da634682dc65f0790813caae90c6c9b181e3673d4d28da1ae937c0c385b2db3c47ee7322c3f10c6745ad0d2</hash>
        <hash alg="SHA3-384">9da2fc9e0ed9ec326381ec817c2c18c57f597382315f362c892c1c719532f59426e4063dbe29124f89b905d2afeed173</hash>
        <hash alg="SHA3-256">85b4c9a677f277863448694ec32ddf5f09f8c3f00969865c9ab5b8a96977d5a1</hash>
        <hash alg="SHA3-512">d3af96c52080ea520a8a792c0ac9751e9d7c22f4d6a772b822d5d0ab2abda81b4fec683ba313e24bede65a9432794a6788fb42b307388d092a31cc380972bdda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-ejb_3.0_spec@1.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/specs/geronimo-ejb_3.0_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-ejb_3.0_spec-1.0.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.cdi-api</name>
      <version>2.0.2</version>
      <description>APIs for Jakarta CDI (Contexts and Dependency Injection)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ff8956b6aa6e32e6f9064597d9c9f1bd</hash>
        <hash alg="SHA-1">58f497f362cd19c2f8842d75c491d270f0600e7f</hash>
        <hash alg="SHA-256">e71bbe0e4cacfce5b7d609021344d883531aa3e19321db17390f849fdb04a509</hash>
        <hash alg="SHA-512">d1d51ee835f7abfd87c4df3431ddd99d9c0603cf4efc129215516379a56a23c907a0503727bb5b604a0a88f887a5c6782536724e823a6f1e8331df4fa391d217</hash>
        <hash alg="SHA-384">d2f9399e0dd05773168b18993e7c00887ea02f689276d34cf5368f5100a447209f1f5fb5188b82b835b22d448183f078</hash>
        <hash alg="SHA3-384">472ad1589c164f82d7d2764eee2c4cd6299a1c3a849078b60ea05529d6d18d63a602b81cf47dfa9195a611d07ee3e752</hash>
        <hash alg="SHA3-256">8a58e19128f278cc5c66198e2ba48c84ddd6bbcb24cd874096e43347c54305c2</hash>
        <hash alg="SHA3-512">5b386c90b6b94edf2ba682b2aff63364f8cacc2c2ce33cb5ac0bf1898420a7ce33827550b6569f54a54c45ebe8d72405dd5ed6a7eacd5a30a763d68b847418bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cdi-spec.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/cdi/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:cdi-spec/cdi.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.el</group>
      <name>jakarta.el-api</name>
      <version>3.0.3</version>
      <description>Jakarta Expression Language defines an expression language for Java applications</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">528ed6138395d22fb54912b2b889e88e</hash>
        <hash alg="SHA-1">f311ab94bb1d4380690a53d737226a6b879dd4f1</hash>
        <hash alg="SHA-256">47ae0a91fb6dd32fdaa5d9bda63df043ac8148e00c297ccce8ab9c56b95cf261</hash>
        <hash alg="SHA-512">f76c94036f0f49d3cf9d1f90697fa96a97d94aba93a0dccad7b907d6c63ff3bceacc6fd40405ff68d6c248b13d056b3543ccb3d2b405917b2ccddaae78ad8900</hash>
        <hash alg="SHA-384">5796acb1f22b55e2713763584eaf2b62abbcfcee85530138006fbb55abb19b2c534b2887c28a2f5301168783416fb6c8</hash>
        <hash alg="SHA3-384">bdb09cc896874c0a4a3c470e355f2b23f954800510986753cfc2d4da41cb6c4de567b9014d618da3f89f04e36cfe620b</hash>
        <hash alg="SHA3-256">4fc4437d2638002741f4217003f3a9de47c037458dbeabee1a1a5bec96547466</hash>
        <hash alg="SHA3-512">5857452b1eb5e9ad141717dd9e989763e99a98bf49150ebeb66c423daee8e890ae9b89737abdebedd7ef7e47e6c2fd8cfeaa9276014fb6dc88134ccd2234ab5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.el</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/el-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/el-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/el-ri</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.interceptor</group>
      <name>jakarta.interceptor-api</name>
      <version>1.2.5</version>
      <description>Jakarta Interceptors defines a means of interposing on business method invocations
        and specific events—such as lifecycle events and timeout events—that occur on instances
        of Jakarta EE components and other managed classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">69ab3deaef95f1a6522e7e828694ab14</hash>
        <hash alg="SHA-1">20cbde692c555692ca835fb6ecb4a8c95acbe6e0</hash>
        <hash alg="SHA-256">210c4f0a5a8f387457d58afa3982b9abdd28f0a891e6289b329a6d8cf2210299</hash>
        <hash alg="SHA-512">70f3c36d4e48d52b7c23a5a019e5947b375f8c5c49cf6f305989460217428f62e43b1cb9cadcdeeb61979c6406abd50bbffda08572a048dd45b871566308c1e0</hash>
        <hash alg="SHA-384">de8479983fbe9cb409aefb286a778f58c00e3cc1a04681e73d394e7fff03cb9c2c405961b1c06f328e38be27e22bd2ca</hash>
        <hash alg="SHA3-384">8d65c279a249fa0a2d035ce6348bffcc3ba4a6e3cc3543fed8c4d29ea1a2785357b9f19bf55d9c9ce667a06dec081fd7</hash>
        <hash alg="SHA3-256">368289095b8324d747b009f448d8b508354eced1abf776d634e75019b4c4c269</hash>
        <hash alg="SHA3-512">080b664d0924a44a2afae7c2fee6f314fc991c240c5f727b2e2a6a0d4a0695bbdeb569501c459cf3f15f61ad4b70c087262d8ec155c8cfe3a35b115166843d2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/interceptor-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ejb</group>
      <name>jakarta.ejb-api</name>
      <version>3.2.6</version>
      <description>Jakarta Enterprise Beans</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">476df38dce227910570d7d1104f49089</hash>
        <hash alg="SHA-1">3c52a831bfe8118a27ed393234f1d1d3baa50a7c</hash>
        <hash alg="SHA-256">47bf067a03e2f4d57e37ff8acacfa57caefbf89d77167dc6f5c36896aaf8b1c3</hash>
        <hash alg="SHA-512">086c2ce8f9da22146d6fa1d96289700cfe11c6bf37542309a06a4779b8749657c7a477431a715430c0af2a66d85a188854a707c32d7772a09a838e2824b70a8f</hash>
        <hash alg="SHA-384">e0e638b0e590c5ecdeb259c2fb2825e0bfa6b5137c3fc821a713a16d3d715588a28a4b140a7304158381cfb5f965cf6a</hash>
        <hash alg="SHA3-384">c4e905907660751a873972f743c434d3f3017114908a45e28a91d3a6946262490e2cc7847501b06feff7c3982185dfbe</hash>
        <hash alg="SHA3-256">1968781ac2bf53e09e4781be0ff0831bd4a0e72a3f268e3f7f7e855a23001aa1</hash>
        <hash alg="SHA3-512">4c43b2298d53db0e8f0aa80a2b9db783df1efb37a6157d098068966fd44e95d8e0eb27ddb26ff84b81809bb423a1e3bfe394b153938bca3b1b7274385ed22771</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/ejb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ejb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/ejb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>1.0.3</version>
      <description>Jakarta Dependency Injection</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e008ed2a6509b7021595d6f70347dae7</hash>
        <hash alg="SHA-1">288f60226c596849c3c57926e8421c83b5abbe87</hash>
        <hash alg="SHA-256">abedc08deffccffe4fbc226f927f02575d8161a759948650179abb95144b9352</hash>
        <hash alg="SHA-512">47da1f09ef9c3c6085a40265e1d56610c5f6587b781e196e7feaddc47b926c967adf56e6dc6ee001f2b2b30b7574ea483e30169a1731d9ffd2063147a8d7fbfe</hash>
        <hash alg="SHA-384">131c7bc4fea9b91f24fcad7bf3a742640f50778de91d1f0ddb0ea745a54e926e646169edfe5408ba3732bd51f8f42b99</hash>
        <hash alg="SHA3-384">633597a26072f105bb7da63df7c3bda78a48c7a04b7e5de26a9ab9d1edab4f59fef3541fb782c51ac3cf57f646fd33bd</hash>
        <hash alg="SHA3-256">2dab558786f1460cdc32fd8e692203a9b756cdbc61f931ccd86a2b96526d496d</hash>
        <hash alg="SHA3-512">74de19fa21b0d299ae0f63e8628dd973a584b7b0db1a53603593955d2672a36042607fd00e9819398ef6582a4f4111d8a768533b2efef5ee4037afa89c8b2e9f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar">
      <publisher>Apache MINA Project</publisher>
      <group>org.apache.mina</group>
      <name>mina-core</name>
      <version>2.1.5</version>
      <description>Apache MINA is a network application framework which helps users develop high performance and highly scalable network applications easily.  It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">736e29bde17121395bcad67794487e16</hash>
        <hash alg="SHA-1">0e9a0b59d93f3095f0ae35909d7f413bf49ce1a6</hash>
        <hash alg="SHA-256">4cbe14958b044df2d3a22d9f954ed8a3cea12c2c6527d438aac81b4e9ea81041</hash>
        <hash alg="SHA-512">45e7d75cec824ef9237197d272886c6108126213674520ee2a6748336eb9aaff1f5c80d4b78d9240788ee9903ef61049aa2ff7545e4d7963e67fdf01408b7693</hash>
        <hash alg="SHA-384">f34457e93784a27671347ad522c3ee5b632182cd33bbe7c91733f533c23466ae72d52fd0002c5935f2b3d831f3f0939b</hash>
        <hash alg="SHA3-384">7a815b57b3416aa4eebb05bb0182109517ca8c177ccf51a64f22214c32aa5692524a64012e56aec5cf7cfda466cd2e45</hash>
        <hash alg="SHA3-256">e840b0cb0eaf7800a7893fbe31cfd8def9bada9d9aec6622d88069446a98f4d6</hash>
        <hash alg="SHA3-512">57fd442549ecb9f5f22f21515cddda16b500537411d074da9c74ea6be862ef31c387298f94c8383b110bb9f8cc762e1e32009913409630befddf0fc25ac484a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://mina.apache.org/mina-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/DIRMINA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/mina/tree/2.1.5/mina-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.atmosphere/atmosphere-runtime@2.6.1?type=jar">
      <group>org.atmosphere</group>
      <name>atmosphere-runtime</name>
      <version>2.6.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a2ebe6e92f16d7248ab163cbd305aa2</hash>
        <hash alg="SHA-1">842f0843fbd045e92bebc72756c51271314f77b2</hash>
        <hash alg="SHA-256">8c0ce6a671b68de0bd75ca03c693ed8c19bb4c7654d85b32753247b72757a5fe</hash>
        <hash alg="SHA-512">7087a9821ab993d1e8bb134c6222a8dd4cc70c87fed650c85a4adc898433099eb1330dae35c8c561a26fc8adbc471900e4c272702f3d63b0793ccf2059809358</hash>
        <hash alg="SHA-384">bd850ba7dcab9ea57c8b89206f3dd88890ced085227079c0878d313371e79de53b35593e72cd924f3d67847188cff92c</hash>
        <hash alg="SHA3-384">5149256deeb917c01ed9894563bafd20eff8599e3d8a1c7b7a4477b4d06422302c10abc7241ca585d2b476a804568470</hash>
        <hash alg="SHA3-256">c1e30d11ff1e03df1165e75cf2792f8b2a20d5a61496eefc6bc3cec8214239f1</hash>
        <hash alg="SHA3-512">a92dce4b0bc596f3df3013af7b8ea34c0e25dfe3f1c46c90d50eadeaa4e70943a55034ad011e973d796910d0c8183e6e69a741cc55a8a067431f4f6f2ad38224</hash>
      </hashes>
      <licenses>
        <license>
          <name>CDDL</name>
          <url>https://glassfish.dev.java.net/public/CDDLv1.0.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.atmosphere/atmosphere-runtime@2.6.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/Atmosphere/atmosphere</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/Atmosphere/atmosphere/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://groups.google.com/group/atmosphere-framework</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/Atmosphere/atmosphere/atmosphere-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">320c7028d441d678ee58a63f86588790</hash>
        <hash alg="SHA-1">80f0dece29a2c0269217e8dd1b6db6ff9710781f</hash>
        <hash alg="SHA-256">e6dbe971c59373bbae9802021c63b9bc1d8800fead382863d67e79e79b023166</hash>
        <hash alg="SHA-512">812b63cd7c35640244ca66b404eb8b272f5f4e350a02e525c5e33455d03cc24f942ed9f684d19b1261cdb5fdaeba61c381c33c232eceb160abb7d593a6de6932</hash>
        <hash alg="SHA-384">4b0f070495e91ff23afa484f73616ce7303da770e2bbb22d838b0d0ceeb3f9ef536c3b3d7dd173e08966f16afce6314e</hash>
        <hash alg="SHA3-384">a91fef744811b6e2c2ea76970772f219d797d34faf73f0cad5124bd0a8a3e744be6f4ab56648a6352f3ac75dd91b2733</hash>
        <hash alg="SHA3-256">133b7129d59a9c466aefaa0e6b79335311137e302415e4ece38a2683012de1aa</hash>
        <hash alg="SHA3-512">f4205f41f2bcc7484be44ae1e4a7f9d90bd9f6050b4f82d392e5fd23b20a63e4b6a9bc84862c1def666df3d18f33f3e2594dc33fd2803ffd3e001665e41c60f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-codec-http/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-codec-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6241a4cfb9c478bbd7aa12512b90735d</hash>
        <hash alg="SHA-1">9da10a9f72e3f87e181d91b525174007a6fc4f11</hash>
        <hash alg="SHA-256">39f1b5a2aaa4eab5d036dfd0486e35a4276df412e092d36b2d88b494705a134d</hash>
        <hash alg="SHA-512">84a3c702fc290a745c8e79717e008d48120c96c08d0cbf77f5e1f2126ea243cb67a9ba3fe035db9773932eb2e4ff07729e1ae6e661cb3fb9dc9954f24e0e3192</hash>
        <hash alg="SHA-384">dabf0c92ac9e3c9faac8ed487bc48c6a180a2996513cc141a1d49ad26d6af83b25f51fca3a7f0b3541d23efe04a175f9</hash>
        <hash alg="SHA3-384">ca9a2e38acfb4668886c4eabda1dc9b494b92f7258104eee515323875c0ee190eeba3e34ddf33a16f5bf91e686a24258</hash>
        <hash alg="SHA3-256">88ca0e7e041543cba984d2fb3823bc76876db06345b30954290c64f1f6b96e10</hash>
        <hash alg="SHA3-512">efe4692f947f2120a59804744439a905c920fc3983145fb24cf179a53d63f1393b67e585fac3d8f7b6affa5bbb1d674f5a9d6f2926de65c5be1a4f7a04f268d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-common/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c4ddfa85fddc7cdd84ef38c87c036010</hash>
        <hash alg="SHA-1">d5daf1030e5c36d198caf7562da2441a97ec0df6</hash>
        <hash alg="SHA-256">4a7b331d3770c566ab70eb02a0d1feed63b95cf6e4d68c8fe778c4c9de2d116d</hash>
        <hash alg="SHA-512">1eeaee80428a218a54b947816a0e8ed6f3b038f3b2ac11a52d85f3a07b207037866ce4fccd6f7b8be41be775cbc3922712135ce9ca2e0f5f485ebf81d21069cf</hash>
        <hash alg="SHA-384">d0a7324b431ef1af11bac658c54037aba2623db7f3da016d305967a976d1acfdeeb8a421c87146a356f1728888248bd9</hash>
        <hash alg="SHA3-384">f58100e42ffc9d185b274d9f3641bfa79e41c28c12a7c7e67bde279b3d8309e1a0f625020c9574db362f829a8a3265a0</hash>
        <hash alg="SHA3-256">16e844fe602539667f8a65929dbcf79e4e6b1c267c2bcae19395c062ca3dbcaf</hash>
        <hash alg="SHA3-512">c8d066abc224b4c513b41e42f05b09b1c25b986f1487f38db0fef80349ac8ea8bb610f3b37195fe7d424e729f18e6151664f16ab0ad44f9edf94efd6ec1ec1dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-buffer/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-buffer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2da3befce20eaf33fa8005e0797e03a</hash>
        <hash alg="SHA-1">39cef77c1a25908ac1abf4960c2e789f0bf70ff9</hash>
        <hash alg="SHA-256">c3d71faaa736ffd2c9260ab0b498024b814c39c7d764bea8113fa98de6e2bdd2</hash>
        <hash alg="SHA-512">b376a20c49c38225c42a334db0bdd0bd2fc3163aa8685cdd42e9f08a7094b814c0fcbaf95a3dbd303c52f637a5f3a6d8fd824871bc8bd35676accfc8d6208132</hash>
        <hash alg="SHA-384">4bf2016211ceafbcda0db05e0653753dd024ae17ee493bb3e865728b9cf9db1e0eed33d985cdd1061c38e46513679526</hash>
        <hash alg="SHA3-384">f1b2812c6a747c7851ac9941d9c18a67a8b301bdfe6a777c16a18a6ad13e38e97576ece5801bc261ebccf69e95e69430</hash>
        <hash alg="SHA3-256">9cd86a3962b16ba2cac59246a36ed9cf97133bfe558754c52581124be144cba5</hash>
        <hash alg="SHA3-512">c8c710ae783a605d419d9ebe2bcd9b6959720d243468b639e54524da90beac2c06d34ae7b986ab3b456ef09d04f6df2625deab86ebc6b7b195c1e7dcb38ae0e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-transport/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-transport</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5391594c6f5bbdd944e3e8bcecf3d9ea</hash>
        <hash alg="SHA-1">d326bf3a4c785b272da3db6941779a1bd5448378</hash>
        <hash alg="SHA-256">cd189afb70ec6eacfcdfdd3a5f472b4e705a5c91d5bd3ef0386421f2ae15ec77</hash>
        <hash alg="SHA-512">e4bd73e20dff3f5a5679e432694825a761fd9c4b966b3719e9e6fa9f9a32d6baac9d28a7fac4d6c1fa794f816ab16d791e80c49e6f2bb9668bf23833dcbda8c8</hash>
        <hash alg="SHA-384">6a88723a29a5f7dc983cc1c4e213055fcaade493ec87c46a23ba803fa7a3dddb55eb532c6aca7e92786100e2b177df7d</hash>
        <hash alg="SHA3-384">75ad0303645091e637605846ec65745789825df4cf83e67bd70d8fa1bed8fce8296682da5c51b32f6e47c611413977b2</hash>
        <hash alg="SHA3-256">cf167632650343c50d484310e0ef9ca2785ea424fb1f3b98c2cf4b581ddd6802</hash>
        <hash alg="SHA3-512">abd16c93f0304f0f5b7fba80927ec187ed617abfde4b68e66fef0e2e5124e8465029235e295387dc9d7295634f40a54b3f5b3c0817e0ad7cba46412aad385114</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-codec/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http2@4.1.115.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http2</name>
      <version>4.1.115.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f090639493545460256d9f290e6a8519</hash>
        <hash alg="SHA-1">0bc474c27c96e3a309da73160fbcfe0bd3aa85bc</hash>
        <hash alg="SHA-256">cbed9829a5d582e91e314e209edce9a0c2eb369f23bb4fb74a5bc8b7990222c2</hash>
        <hash alg="SHA-512">ae08f0d35f2e11ccaa47a8bb8b59ed1e8d1f5639cd000b415c282f15c6ffeb35b5de6bde467ecd7bf3117ed5b0ae7061e4554290cc05f044dd76667339ccf976</hash>
        <hash alg="SHA-384">fcc2a7dff4474c64f2f54a898041d0455b3022bb01fa1dc543f9e2914bba7de5fd5964de2a314d4b0e04fe4630f6485c</hash>
        <hash alg="SHA3-384">06264e9063d2aa97ad1e3233542e5332bc9c2cbdf5c32a9d3c58c168a1287861731fc7172497df4e47788650d408bbbd</hash>
        <hash alg="SHA3-256">ed9f0cc57375f8ad086f31651bbb587f2c1f45b5bd97920cc44b58ec9cc9351a</hash>
        <hash alg="SHA3-512">32e0ce82264d6641ae08e1f8a077397b32fc1e29a094f4b33247512f344eab697f6797a3506dd79c0cef2ec4abdb0f322a388b375b31a4a8d9a88cca89d11cc2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http2@4.1.115.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://netty.io/netty-codec-http2/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/netty/netty/netty-codec-http2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.persistence</group>
      <name>jakarta.persistence-api</name>
      <version>2.2.3</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0a655f398f8e68e0afebb0f71fba4e5</hash>
        <hash alg="SHA-1">8f6ea5daedc614f07a3654a455660145286f024e</hash>
        <hash alg="SHA-256">0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53</hash>
        <hash alg="SHA-512">1e07257b631ae3331a71d7cd9136152cddebbe786ba50c689bec618a9eb659be8e952fe0405db36332cb6c12c6c87c6d648e817c027ea8c6e0c660ce82f6f424</hash>
        <hash alg="SHA-384">d68e1f600244d7a3628244e0265208ce08881f4ea33a3cd1f085886f7ce755cdd44bc6788ebda1baf8bc23b1f3c844dd</hash>
        <hash alg="SHA3-384">fb77e58872d4e3ef6475094ea96f1ce32a1a7c3617393fcab47c47cb84f6995315c5f805d518c69a0cea751ce980bf13</hash>
        <hash alg="SHA3-256">3619596135b169649ed16b75972c39614192d2a802291a7eb4c1814ef7dc9ff8</hash>
        <hash alg="SHA3-512">045c7f1ec7f9191cd2ff35fadf5c037aa596a288189185fd10d5fed89cd3661b6353945083f4c3943c87e343b61a556699f43f00a0e928c165e52d57fe514fa5</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jpa-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jpa-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jpa-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jpa-api.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.lucene/lucene-core@9.12.0?type=jar">
      <group>org.apache.lucene</group>
      <name>lucene-core</name>
      <version>9.12.0</version>
      <description>Apache Lucene (module: core)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd2ac67819c84831a53ec739d4889852</hash>
        <hash alg="SHA-1">fdb055d569bb20bfce9618fe2b01c29bab7f290c</hash>
        <hash alg="SHA-256">6c7b774b75cd8f369e246f365a47caa54ae991cae6afa49c7f339e9921ca58a0</hash>
        <hash alg="SHA-512">de05976be1f68f02865f5a14d6140f195a4b0bccd2a8562dbe326bfe813199df2a4b63f696e2aeb7b8f96d0b74385fc3cbb057cb2c2e63263ae6886caccf9b9d</hash>
        <hash alg="SHA-384">d69a5f44c5bb3aa8f393bab34f5aa0ab4bf40c676677b0d5cd533f753298b0ade573c5b65698cb0f5ed1357502e91351</hash>
        <hash alg="SHA3-384">d2844f3eea9ec7e5ceb41141b8ab1ac772aedcee0173fec4f41ef12b34d09741127eb286861307ff15accd1387c58718</hash>
        <hash alg="SHA3-256">d511b3bfe155b9cdb95f6338ff8a10a4b29cb3678be0c2a93c286874abc2d350</hash>
        <hash alg="SHA3-512">9d813b4bd9fc35395f3144bfa9163e8069e77e5e224cd120c4627f2620b1f6b966a1bc325e0bc25602565aa32d053f600b577c8dcee0b2e7f126e41dc3c8324e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.lucene/lucene-core@9.12.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://lucene.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Lucene/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LUCENE</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/lucene-java-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=lucene.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.olingo/olingo-odata2-core@2.0.12?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.olingo</group>
      <name>olingo-odata2-core</name>
      <version>2.0.12</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a8a49655945f70025d847a749ff035db</hash>
        <hash alg="SHA-1">88d899f0e0af87768da841844e5cee7aba13db1d</hash>
        <hash alg="SHA-256">3d83e75a58c57316fc2698e53d077c9aa2fae856e799ba4dde907f08de0e3e04</hash>
        <hash alg="SHA-512">4ed76589240019bda97400e70a05115c0554164e1d26f9822c356e1e07d48588e023c18e82e56d0fc2a97849ef9b90d06452347362def1016ebcd2d871ff2f28</hash>
        <hash alg="SHA-384">157c98672de3e45ea8e5cf2adb602f5b0f14966e0fe504e26e064f0ba5ad665fd8e808dd134b72275b35b64f1d106fe4</hash>
        <hash alg="SHA3-384">ffdd4c641a27f9808b8b6d7b24573e3fce942e59d60acca1f870991bf41414e2473bc2b03f1069d6d76a1b3374cd6242</hash>
        <hash alg="SHA3-256">5b1189a94ef429b5bb3dde04b0e02bba75f3832758043758a093ed9cad43a3d0</hash>
        <hash alg="SHA3-512">7b8606d715280213da8c3ebd379e30228f90788a25a2b6e5dcf4e77e4cf7a0b90b033942441ea4a2e2fa279d85883623640fe5efd40192a559202b2175d75dd0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.olingo/olingo-odata2-core@2.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://olingo.apache.org/olingo-odata2-lib/olingo-odata2-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/olingo-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-apache-parent/tree/apache-25/olingo-odata2-parent/olingo-odata2-lib/olingo-odata2-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.olingo/olingo-odata2-api@2.0.12?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.olingo</group>
      <name>olingo-odata2-api</name>
      <version>2.0.12</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">612a1beea8dccd7314f4acf800241715</hash>
        <hash alg="SHA-1">13f72d621972e00ac7a2140599f2d079de93efb7</hash>
        <hash alg="SHA-256">ea741de75cddf574dcee41b9f67175c6501310345c42b393555fb7e16d99aac8</hash>
        <hash alg="SHA-512">01c6edcdabdc421a7843b0e2966248b89107c69566c0d199ec73130bf41d305f160cafe89401a104bad9f13fecbdd91c404344a823b053d5e0818fc5c393f9a0</hash>
        <hash alg="SHA-384">faa9647595318f9b5dbb5e4b9bae0f39f9c3b85a5ed13a4f560942bf93aaad03f6e9a228c037c42445f72f5d599294ed</hash>
        <hash alg="SHA3-384">b724785d5a05b82e02a2f26a26682896b29fea6afd93d5c96de8be5bef85365da4fb65574948e1684fa578fbf13e9917</hash>
        <hash alg="SHA3-256">2df6442a72ddf4670a176c020ce479e1c13892181d6afbf2eb45784882713453</hash>
        <hash alg="SHA3-512">6eda336557fd630705a64ce6b1031e1c111894e72bb7fa5e9e23afa48273b84c84c028c4122db29dd1923161b085f81ad2cc617b47e7b322e79cf2501d95a1c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.olingo/olingo-odata2-api@2.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://olingo.apache.org/olingo-odata2-lib/olingo-odata2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/olingo-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/maven-apache-parent/tree/apache-25/olingo-odata2-parent/olingo-odata2-lib/olingo-odata2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.4?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.4</version>
      <description>Google Gson library</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cde1963375c651f769d40c8023ab5876</hash>
        <hash alg="SHA-1">0695b63d702f505b9b916e02272e3b6381bade7f</hash>
        <hash alg="SHA-256">a35abbcf689eb3d60a2959e83a624831658b023220cd2edb66350993ebfdc025</hash>
        <hash alg="SHA-512">6f98270897b05bd2fb417551c8933fa90b415ad1e736e132032492d8481603beed2d1f4bda92504e01a30eac62da70209631c2d677c7ff5caf45ea324d8ca542</hash>
        <hash alg="SHA-384">9bbe3d83d761a5b010f8856897a17b9af479eb8b6c04744d7b5d7100b4c9994880cb17af299628f8e606567ef42ca5d8</hash>
        <hash alg="SHA3-384">2887d4e80cdd07ffa84779725b7987854d88a621f43d81efcd15d5b9d612246bad1d4a4a934c930487bbe418546b911e</hash>
        <hash alg="SHA3-256">2e2a4196cc306ac5af2d635c6b93a747dc36d75532479b1a62d58eada63e4957</hash>
        <hash alg="SHA3-512">53ae2f19c98a3b7216a448562b13feccded82e66d43fa7c5478088959ac8f5f8e579c2347ada2e09bb424aa2a2e81d55e801ea1746d5f940c333953a160f80cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/google/gson</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/google/gson/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/google/gson</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.5.4</version>
      <description>A StAX implementation for JSON.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6c3eeb572f5830303059fec2812821f</hash>
        <hash alg="SHA-1">174ca56c411b05aec323d8f53e66709c0d28b337</hash>
        <hash alg="SHA-256">fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda</hash>
        <hash alg="SHA-512">afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a</hash>
        <hash alg="SHA-384">1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a</hash>
        <hash alg="SHA3-384">bdf8be1abecf10eaae7af476a60914d28c7b0a2bdd3b7321f1810dd95f3b9d4b32dd298f74a7a7c8de3780cc7eef8e28</hash>
        <hash alg="SHA3-256">2a3de2fb5cb628021a96faad03cb9e66e74ba37ffc8bf6876df554b74b145086</hash>
        <hash alg="SHA3-512">de76fa3f7d6465479d2266a2e489e773276cbdbedd2a4903f219a9fc4e6d29f0c03f773b281793e2ed039669befe784727f2ca79f2db5ec7efa9fed614d45e5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/junit/junit@4.13.2?type=jar">
      <publisher>JUnit</publisher>
      <group>junit</group>
      <name>junit</name>
      <version>4.13.2</version>
      <description>JUnit is a unit testing framework for Java, created by Erich Gamma and Kent Beck.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d98a9a02a99a9acd22d7653cbcc1f31f</hash>
        <hash alg="SHA-1">8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12</hash>
        <hash alg="SHA-256">8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3</hash>
        <hash alg="SHA-512">a31b9950f929a7e5a600d89787ef40e42a8a8e2392e210d0c0f45b3572937670a18a524f1815508cd1152cd1eaa7275cb7430ba45c053be365c83c231bccd3f0</hash>
        <hash alg="SHA-384">9f85c56a77c699eb87630b9e8224068a34c296bcd9aadb52248dd4665036f5bf1048fe75e5cb590b59e7855ca716acae</hash>
        <hash alg="SHA3-384">590cfd9396424583879ca8ad732870406bab18325ac72fb2bbe188b9611278d6341700badf7cfc32525b8ff42900c905</hash>
        <hash alg="SHA3-256">a06b3fd2fd1d9f4306b58125484e3605a395afe5ffe2c801e43ae462f366a430</hash>
        <hash alg="SHA3-512">a6d25ce3c14f9065f06dfd0e68e1dad5c03bd5de0a302c44ca4733d2cb87ec1bc6f0abd36d65aeee8caf328b6881432c4b682fa4b4b1fa931c3c950de5129fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
          <url>http://www.eclipse.org/legal/epl-v10.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/junit/junit@4.13.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://junit.org</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/junit-team/junit4/actions</url>
        </reference>
        <reference type="distribution">
          <url>https://github.com/junit-team/junit4/wiki/Download-and-Install</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/junit-team/junit4/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/junit-team/junit4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.velocity</group>
      <name>velocity-engine-core</name>
      <version>2.3</version>
      <description>Apache Velocity is a general purpose template engine.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e761e6088b946b42289c5d676a515581</hash>
        <hash alg="SHA-1">e2133b723d0e42be74880d34de6bf6538ea7f915</hash>
        <hash alg="SHA-256">b086cee8fd8183e240b4afcf54fe38ec33dd8eb0da414636e5bf7aa4d9856629</hash>
        <hash alg="SHA-512">ec8ccd36d6cefd4325f39d6c215f4177900b7c0fb1e4e96b3c0d9391c033df4d5fb83b7899530f32738afa78c193d4dae700cd5c674954a34e7cf627a4fa1204</hash>
        <hash alg="SHA-384">5aa3f60e17efb01e2bae1d1169da36a55d7b3ede1d90b1f3e1d3984d2b78fa4bbbba2772ac404e9dae7b37812df11f13</hash>
        <hash alg="SHA3-384">5bc7a76a774653896a0b789726a581de3fbcfa40875945e514f5d8c2e972aeb43ffb2ce5c0da6d4a65b2ef442fc56afc</hash>
        <hash alg="SHA3-256">6ff993b508c05170c3dbd65f6080edf5cdb8b8fd2fa7b94f7d64f20a79d3de9c</hash>
        <hash alg="SHA3-512">c44791f0b9e6b3d28717ca56582e2c55bff208aa5bc7bc2cc91003afde0ec0111a55d585c9f09717747ee7e78a688e894b7962fb55a56eaf57413a9c365c567b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://velocity.apache.org/engine/devel/velocity-engine-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/VELOCITY</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?general@velocity.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-classic</name>
      <version>1.2.13</version>
      <description>logback-classic module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fc49f9a98304889b228adbbd7288ae43</hash>
        <hash alg="SHA-1">e9f3458e7354fe4917081237c01fa4999f4e1b86</hash>
        <hash alg="SHA-256">937afb220b91d8a394d78befdbf587c71aeed289d582e2a91e72a7d92172371d</hash>
        <hash alg="SHA-512">f82fef7616c900b3101c452817df961a2a0f17f553ee2796463271274a3d678abe01392ff4a8687b4625527ea7d2ed9686f8512ec0065f73b5821a50774fe755</hash>
        <hash alg="SHA-384">2ad26dc9243566544cfa75921e16865e19c79e73043b82d56dcfbadf3cbd75f50fcef6c47855f2578ca844dcee44565b</hash>
        <hash alg="SHA3-384">e120ebe93eae51e97c9f912a6f78c7d0fb7a0d92e10ad372ce41f5fc71859865d99837be839a52f5e043f9fe6c5f5260</hash>
        <hash alg="SHA3-256">5db19942aa9b8ad4f7b7b4940ebc67ccbe3042c3a840757ef3ea0ff8363e6acc</hash>
        <hash alg="SHA3-512">40a9b257f208da3bd4343944b31a8a7917653281cfbab2ec985b62fe2cd4172c2a0a5dcd2e9a0e348905d820f6080d8f62d0c99dc367f207cd4f2340d8951978</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://logback.qos.ch/logback-classic</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/logback/logback-classic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar">
      <publisher>QOS.ch</publisher>
      <group>ch.qos.logback</group>
      <name>logback-core</name>
      <version>1.2.13</version>
      <description>logback-core module</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">25736944b46d10756764364afcb455fc</hash>
        <hash alg="SHA-1">8ae4a32ed4937b5ebff6891a93c5e957f4e81655</hash>
        <hash alg="SHA-256">07b1586faf220c05821d0f3ed8e2e417e214c83f40641f76e8a90b134c31ff6b</hash>
        <hash alg="SHA-512">2e2300d56e69ab736f8e3c1dfcf96417af4ee3916c976c13826bcdb7b1246242ace58de92431207a01620731a7d7e740867e3889d0c6738b015610de201559c4</hash>
        <hash alg="SHA-384">f77c2bb9a0ca63883acfc92e07605e0f6c01b03d31cab9c6e9420bbc09afef8ff79c4410a63d1e4960f8a66ed2f2def5</hash>
        <hash alg="SHA3-384">b1a394dc63f7ea18ee4fe0cad5dea4512ec8c7aeca535cbcaf66bb4268f654c285fed03a36ec594f9e3a12f76334c9ab</hash>
        <hash alg="SHA3-256">8d4c885f8a83301773d4cdbe344a338d8147706fe67cfb0e67391638ebf3c28b</hash>
        <hash alg="SHA3-512">7fd8e471bf5fba787d068c03decb7dd3918905f132da581fdc9db35ac630b0e6ee7ab42aa50850aae1b0007f13110f39eee7f183f333f22cf15d761b926202ef</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://logback.qos.ch/logback-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/qos-ch/logback/logback-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.29</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">291e828f83cafbfe69be56df0df794bc</hash>
        <hash alg="SHA-1">e40f9425312c877a1a5ee8e8944bbc977112f949</hash>
        <hash alg="SHA-256">fe1aa4cce8c77930cf364073eaec3be04d3bf5ac0f87ca6498046852c848f4e6</hash>
        <hash alg="SHA-512">21f94bb56bbecbcd2aa77ebfdcd1c064136cb6bb92cc6a71937b4bc0f3f83681fd78db05cde9eb5969f4d2f370f4caeb6bc8daa617e87d962f55bfe71fb6fd85</hash>
        <hash alg="SHA-384">72b22a9595cb2352cfe066ad3b5cfded4a2e8db64fadefd6e03c131ced92ec8616328e4f9ede25829af5fbe08ef073c5</hash>
        <hash alg="SHA3-384">f3bc2b3d0a07cb148026dfec1194ed46f6a1fa4ac7db162ddc568c27a43ccea15c90908ed4a0050eefd4d069c743c1ea</hash>
        <hash alg="SHA3-256">26bd3785294063db22025f7efab4eb062a7413543bbc1ebe30d2dbb84361895a</hash>
        <hash alg="SHA3-512">5241638f8f33cf1777d52e65ee40a6f0497efeb2b75387c1748e94ebbd76fedc5c8b585a98a117bf12297418e1c063e9efc011f3e17c9ac975fc825ad296c010</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-core/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.29?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jmx</name>
      <version>4.2.29</version>
      <description>A set of classes which allow you to report metrics via JMX.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5c0a18a86dc8c7bd10b8041b0c0f7dc1</hash>
        <hash alg="SHA-1">92696a1c2459a3087b83783a9bb208ecf37e8931</hash>
        <hash alg="SHA-256">a0817f0e39bad59f51c6dec26efc5b5fd1ffb19101a4927d6b569aecab54492f</hash>
        <hash alg="SHA-512">e4f5f6b659dfa32477c580fc8b7d662fb0b3d6e451941b2bda85fefff197c64991d6d158029daf258d6b5b139d8bd2f7d4a7929385f0c631e111c8b9e29cf3d9</hash>
        <hash alg="SHA-384">976099167112a4b2dd9d08e1b30fbfef4f1d21bd9db4878ea6e7d971bd1a885b003851c2bae5bf401f7fa2cdd5a5a436</hash>
        <hash alg="SHA3-384">3e32de373d13c6bf94888c27ddb4245651a0e19e8443cc0d7271422e1873c615e4f6fe3166da7d19e10dfe311ea1d15b</hash>
        <hash alg="SHA3-256">c0296df48506a8d2068c5eea36f0d34fb105bb76411d92705421f0c0c916de1f</hash>
        <hash alg="SHA3-512">490c419ae4115ceb67aef6a5797b83fdae6fed6ba953cd4e0f9433663c0e82a7cd5a86c2c99cc3240267efc7895f5846e6f5fc1da51e135835616d229e559940</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.29?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://metrics.dropwizard.io/metrics-jmx</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/dropwizard/metrics/issues/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/dropwizard/metrics/metrics-jmx/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentelemetry/opentelemetry-api@1.34.1?type=jar">
      <group>io.opentelemetry</group>
      <name>opentelemetry-api</name>
      <version>1.34.1</version>
      <description>OpenTelemetry API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b14cb7cd1fb5621bd9daa199b01f8135</hash>
        <hash alg="SHA-1">b4aea155f6d6b1032eba85378564431cfd86f562</hash>
        <hash alg="SHA-256">3820fbe846e9f3cad55f0fe1ba72467da9343d1a14cc7a7bd536d4040ab17df9</hash>
        <hash alg="SHA-512">fdbfe8f7cef3a56be485b421a4f9f42664a5cd7fb9bf6a43f8438868bbcec75f5fe4ea72c7c8da4978326c1492ea2036f471522c69ab86d617715a0b9767e8bb</hash>
        <hash alg="SHA-384">1060691b3b7bf090bbea2d7c8f22bc1418ab853e6b27dbc9d00f85966601b6f43b5be0f65d14caabb389563f43d9182c</hash>
        <hash alg="SHA3-384">c551566e50619f540ddeaac1140f3b87e29631b6f6bbc275cf5c91841e886b21409c21d6fb0f4e5628a9a5d5329a16de</hash>
        <hash alg="SHA3-256">21c506455b1c405a053e22ce8e63ab3a103add28ff2024973fb03434ff9a7106</hash>
        <hash alg="SHA3-512">4d03186a3f914fef223c014cf34e953572a496439bdcd092044a8ec6c6167b594de82362eac62258eaa4391126156c9861bcd1c4ebb582616f917d4d06aa4b5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentelemetry/opentelemetry-api@1.34.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/open-telemetry/opentelemetry-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentelemetry/opentelemetry-context@1.34.1?type=jar">
      <group>io.opentelemetry</group>
      <name>opentelemetry-context</name>
      <version>1.34.1</version>
      <description>OpenTelemetry Context (Incubator)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1ded7fb606c1dec8ba83ce3d62219068</hash>
        <hash alg="SHA-1">3fcc87f3d810ce49d865ee54b40831559c5e129b</hash>
        <hash alg="SHA-256">62d34f3dbf37783dc0223afe612bccecdccf404eb25cef95a3ab90fcaa689975</hash>
        <hash alg="SHA-512">dbf6a588bc0842918a745c439d4e2dde35ed7a54cc10eef445d2e411d97db337cfe9dd65ac61a82057475ed6522240f5cba091f98b7c94a072eb4a3133b7d67b</hash>
        <hash alg="SHA-384">b3e96fa5b2adea7dfc73909183d03ec86a0eb7a3c2db5499930af6772b78a7c1bcb0ca58a8a4dccd9980da77d4c441fb</hash>
        <hash alg="SHA3-384">0d281e2b5604716d1e8fd60025b10afcb28d28a9652b6566172f36df16f6b0f814ff394d5df3d2c5e56338c5b2536ce8</hash>
        <hash alg="SHA3-256">aa56291d591bdbb5c937f87af2fce560dc21f6546834b594516cd2577016ef75</hash>
        <hash alg="SHA3-512">58c4c6da9e0436e8522797bd16567494dc9732cda474bfaee971ee59254b7f4f94eb6e94e80c73345d14352e605ba6829f0b4fafcaa7694c807e97ccdc57a943</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentelemetry/opentelemetry-context@1.34.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/open-telemetry/opentelemetry-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.28.0-alpha?type=jar">
      <group>io.opentelemetry.semconv</group>
      <name>opentelemetry-semconv</name>
      <version>1.28.0-alpha</version>
      <description>OpenTelemetry Stable Semantic Conventions generated classes for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f7a81d9adc4b18df9a55d688304edcba</hash>
        <hash alg="SHA-1">90d4d4dc28153eed4af75759b610a1bf81b77b75</hash>
        <hash alg="SHA-256">e8ab86e93cef09e421a6213f4cf18421fcc6e1f9cf0ab94b9a31ed4460ddf553</hash>
        <hash alg="SHA-512">b2778e7a5412ac16c53a98f383fbccdc4d57d52f804bbdca86d17c3a7cffc925f5cb7de6e59b0ab499ce33489f5ce2ca83a9973e2cee06642fd524f8faaad6e2</hash>
        <hash alg="SHA-384">6f1b88e67f6e6d0dccaeb8109c5cba0bcae14d548deabdb56fff0f7c50b2c205e4348f53216eac03dd8d0c8c8eecdba5</hash>
        <hash alg="SHA3-384">2c460f7c7fd63f4766e6fae3cc3691d5284f8e2a2c4b38a222a456f328dcc06d91b6c152d8ffccd298e31d538fb40a2c</hash>
        <hash alg="SHA3-256">4be216cb0e4764e24a6f5156e84751b2e7c2bd53b74fbd64a7a588ab20c5e0ad</hash>
        <hash alg="SHA3-512">7283ebd1ba7eca1385af933beadc7b56cc4c7f54746a9ce457f89287aa06fc8834ffff48e28ccfa55eb2ec489d7131a3560bae3a529b1856c5b11ccd62aec002</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.28.0-alpha?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/open-telemetry/semantic-conventions-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv-incubating@1.28.0-alpha?type=jar">
      <group>io.opentelemetry.semconv</group>
      <name>opentelemetry-semconv-incubating</name>
      <version>1.28.0-alpha</version>
      <description>OpenTelemetry Incubating Semantic Conventions generated classes for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fa7ea22f12ba8e9fff5962ad8f4a269c</hash>
        <hash alg="SHA-1">f4bc65abb433ef6acea751d0d40702027545c127</hash>
        <hash alg="SHA-256">4f1d39ec6833a9276d4d59109c6e8490a4f44bdd68cb342af2afe25dee544251</hash>
        <hash alg="SHA-512">d19b524faf87d1bd73badbe967a882af8351b33a985d0009b752ddd3d6f199ba92123aad78e2465c260861cd0ae3c2d2bd1fd971b9de2db7c14013b7c27f5370</hash>
        <hash alg="SHA-384">dc616090ca034b051c63e17fab353df273d43d70b6b72d0364776dfa66ab77ace5379ffb1cee08a1ed7d42324de4ce40</hash>
        <hash alg="SHA3-384">bf0ca11b702dea2e22e6ab5277811a8d46c9c4dcb9c9f4ba9ab6fbbbcf798139a06a770f666add8b87ef98cfd75b5e79</hash>
        <hash alg="SHA3-256">eb3c084ba9e206392ee8bc2023c68a7263cc5eb437ff2b66802b4814ccff354a</hash>
        <hash alg="SHA3-512">0c37bb5114dc1eef4d8a59f16ebaa37d7a30ddfe679781577dd70ec90ffde2850fec435694645398d8d42ce12ea970b7cc460d08ae2a4a03ac4d3df4add07a1b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv-incubating@1.28.0-alpha?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/open-telemetry/semantic-conventions-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-util</name>
      <version>0.33.0</version>
      <description>OpenTracing utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4256987096519a45c4b781fca070a15c</hash>
        <hash alg="SHA-1">132630f17e198a1748f23ce33597efdf4a807fb9</hash>
        <hash alg="SHA-256">22c5dfbb9b0e2f08f7371bf3d68372c7604c804d3129499b43f37a8877c4379e</hash>
        <hash alg="SHA-512">fbba29ff3d6018561077e9539ad9b72876424600eca3addb6a26981a4a3e52cb3dfd30f27945aff2b6c222c42454ce3ba67597171fd809a74c65b920f3a47c7a</hash>
        <hash alg="SHA-384">78b82902617ad05d422f2fadf9bc8dc5278fb469c4f15b368dfa5df374e9554e7600666819df7583fa5491527240d913</hash>
        <hash alg="SHA3-384">26b0eb1edfd0feda1cda606af7f8d9d91d3db5eb86737a26ecb6547be6d2cda77efd6078bb14c971cb4545b62c8feced</hash>
        <hash alg="SHA3-256">c804d49f71a8bd98965c571241abc99cb50cbe9a0216b0cc8c75c0b4197420b3</hash>
        <hash alg="SHA3-512">ff6edbcd5fe5a751a9f36402c10e7019eb7a0257cafb295632d33213a439397f79d84ea37155a82d8a7f781d2bcf28dc3e57532fe1aa79a5831688708913a09d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-api</name>
      <version>0.33.0</version>
      <description>OpenTracing Java API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfec41592934f8a1f3e782ff2967c985</hash>
        <hash alg="SHA-1">67336cfb9d93779c02e1fda4c87801d352720eda</hash>
        <hash alg="SHA-256">4534541b8e9f41a17bcdf1d09affe45b98c13574db6e529a93a58264b9472c7c</hash>
        <hash alg="SHA-512">931197ca33e509570e389cd163af96e277bb3635f019e34e2fc97d3fa9c34bb9042f25b2ba8aa59f8516cc044ec3e9584462601b8aa5f954bbc6ad88e5fbe5cd</hash>
        <hash alg="SHA-384">40cecdf9b5b85090c64750949de1c3c0e534904f6a82b4e325cfa8d54ed227c258e26e9b90ded0ecdd8ce06a2f4d76c3</hash>
        <hash alg="SHA3-384">a75e7f9376bb70e144c0a727a29017a73c7a1a8689a31f3e669c13748714f3ccd3f68a298b2140e44751c689d7b7d7c3</hash>
        <hash alg="SHA3-256">3d80a53a07617f4afb67ba116cb75f3156ed72e74f9fa0630bed18b09eb966c0</hash>
        <hash alg="SHA3-512">f57aa55916da311660b6c2c601cb51219595a47d0137aeeb09e80b77d32a67a5e190a30cbfe1a18612ef2a7963f859ffda41d3b71e0a8bbe615db44472731ca6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-noop</name>
      <version>0.33.0</version>
      <description>OpenTracing NoOp</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a65509c4cc3907bc0691c5141d3f1d2e</hash>
        <hash alg="SHA-1">074b9950a587f53fbdb48c3f1f84f1ece8c10592</hash>
        <hash alg="SHA-256">8529f91e10047b2b94cb21b50086a3d3913fa4da43594eddbd9ecf5917efe040</hash>
        <hash alg="SHA-512">c727bcf20504fa72bfc07456bdde3b0b50988632d85c7af78df742efd90a431c125f5d644273203fa211a62fc4a282455cf281c7c82b82df4695afbc5488577f</hash>
        <hash alg="SHA-384">06cc99bd895a70373944254c106ae5d98ddd2ecab4e03e3069260ac464ee3222f784bb169d49c2a54e79b15a7f691e36</hash>
        <hash alg="SHA3-384">9338711d5ba69bca9a33c6b7b82703b3cc83e3639cad28faa1581b2ef87b9d25b137aa3f37636f849c8c12c76a497c02</hash>
        <hash alg="SHA3-256">3197c8468fe94b13c7ef39616dd2c237c8951e95f2690027fe8b04d59a79ef79</hash>
        <hash alg="SHA3-512">8f0756b8ce287fb8ff84b4975a1bec4f6e650181eeafaea9b7df9f0d202ebad94b39e3ee13c445ccb491f33b85c8f62af8c615fb6688e28fee6ad32e3166b509</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.brave/brave@5.17.1?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.brave</group>
      <name>brave</name>
      <version>5.17.1</version>
      <description>Brave: Core Libary</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">458c25745827bfc312bb762406cfaf81</hash>
        <hash alg="SHA-1">079b16a62ed47a6e273d0d0f59c1f096d6f9f403</hash>
        <hash alg="SHA-256">1b01afb3908907f5e2736281db4bfa3f752727441265c20aca87803da2eaf18a</hash>
        <hash alg="SHA-512">8018fed5f4ac8127461ec62a1aff139fda7a07abcac41e5d3d51bd30b52eb5e207eeb776de631aa1ecfae4b4eac20c90ea1ea9ef37ef5b24f71515f02ba2015a</hash>
        <hash alg="SHA-384">32272307a07db007e18714ae3949c110dbd50818996baaa29c263f9112866e0c2fc92b34ef0fd193e0dee06c1ee51a18</hash>
        <hash alg="SHA3-384">62590e0e87d15175e6c2b6a30d31fb82c93edad943b89a5af7e230b5c507ecc27b0f6a7efbdbf3b56606344aed5eb363</hash>
        <hash alg="SHA3-256">1057eebe09287643a61bab4d20b2e342d68b6073de7157c9b6ec2311378feddd</hash>
        <hash alg="SHA3-512">98c1e24cca479aacd12897ef1c7da8dc1aba8df6a417e81531be78ed48e6597f21f2934c62ec0257bad2b3083c3db377ce4ab004988b730cb0c54c7b4953f0cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.brave/brave@5.17.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/brave/brave</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/brave/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/brave/brave</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter-brave@2.17.2?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.reporter2</group>
      <name>zipkin-reporter-brave</name>
      <version>2.17.2</version>
      <description>Adapts a Reporter to a Brave SpanHandler</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">82954db4408151796c351ced8ab7db9c</hash>
        <hash alg="SHA-1">d8d77cefbac0e683e48fcfc6f8a2c9fede5a9863</hash>
        <hash alg="SHA-256">c10b7f0e2e5dbb00217fefc3d4a659f2d55a71bbb79c9d7bab5db3cc2dc02774</hash>
        <hash alg="SHA-512">4b5e98dd8377a94724e2ee445635d493f736f99f77ecdd5fcd374f58b2adae2ba9eb7db0d4d4d7371c8686a13e0b1ec80a8f04b19d61fc652d45659d5aaa265d</hash>
        <hash alg="SHA-384">70564f3f6eb729fae5421ab95d37fa9826ea826e8c6427fd4db301beeea6d55f4802df14021461d5014369f99dc7a487</hash>
        <hash alg="SHA3-384">3a3c6a100eaa2237c4415090296a4af2ac03877224587d379d382cd62e1ed44ef8019dd6cce7145978d4cb782389286d</hash>
        <hash alg="SHA3-256">3adca0a0ee8d0b4ee0734713e51316844fce0784a1f39a26b9c876e1597c3f04</hash>
        <hash alg="SHA3-512">a39645356d4e106742a49c0ba4462eea2000c684cb29d9a81febeccd092e6522d14a0c202f5edbaf07e2f681466f299e99767b3adc9c257381c56081f826ad8f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.reporter2/zipkin-reporter-brave@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/zipkin-reporter-java/zipkin-reporter-brave</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/zipkin-reporter-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/zipkin-reporter-java/zipkin-reporter-brave</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter@2.17.2?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.reporter2</group>
      <name>zipkin-reporter</name>
      <version>2.17.2</version>
      <description>Zipkin Reporter (Parent)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d06c6aca985d682b8ca44d8e117acc95</hash>
        <hash alg="SHA-1">3a6993c04563a89097f92028b63d95996df9a00e</hash>
        <hash alg="SHA-256">b774d03db0f023e6de32975e11b21dbcade0bd4b6839df3cc7b22bdf33075ec9</hash>
        <hash alg="SHA-512">0fb426a05561e1bfedf1f4cc70a0e8611cdb42d0b938a10e8ce1abe7c0de5e1a0079950eae0a132b83a4c15d9977686691e3d7ff771a8f5306c708ed38f8d49a</hash>
        <hash alg="SHA-384">1be75d62f70b1fb5cb0a5a8328de04ac51e385736048272b24bd148d914ec5cbc838ed0b66b7dbc2e60260d822753ac0</hash>
        <hash alg="SHA3-384">8b686808e877a9deb9fb8a763288fcfa8ad8bbbc9a36b0c0a7c556763c4ae863751b50fb09fc62f2c3a41c906f11ced8</hash>
        <hash alg="SHA3-256">67e3a7e8279d6a7f65a02117dead441f5a22b262f75a41f4d0ff669c06481785</hash>
        <hash alg="SHA3-512">92f3f730ce154e20bff2bc456d21c113b812263bb48871c780f7cbc7c045a067b24b66a69134858a94dc7a55a924bf06ca14314b8a28015e13d6790f29713116</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.reporter2/zipkin-reporter@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/zipkin-reporter-java/zipkin-reporter</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/zipkin-reporter-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/zipkin-reporter-java/zipkin-reporter</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.zipkin2/zipkin@2.27.0?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.zipkin2</group>
      <name>zipkin</name>
      <version>2.27.0</version>
      <description>Zipkin (Parent)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e0f0b619e678eae1afe1fdcd518c84d</hash>
        <hash alg="SHA-1">4540e7e7d7c761d42d4b7287138f1d9c2025a45f</hash>
        <hash alg="SHA-256">70858209c6fbb28049ee75ce347dcc2e1ebf5e0dd3c961c27db3c226993b297c</hash>
        <hash alg="SHA-512">f5018a08ef64e2afe50f71ad00181a5b3d3e963856dc0db986a741d05ce281aa0a82221999229891f58b3b6073fcc8dbe9243a08ed89b5e37f32bbcfa141532b</hash>
        <hash alg="SHA-384">564c5138378af6406c9bb799173b81b75344376de0d52ee7697917e239f30ef917900482ebee1df2c730536b38ae567e</hash>
        <hash alg="SHA3-384">1fb5c6e7f8ef3d4ab527660c960c29b983259d0ca7c0f0d860807fae34510d8f17a2dc03ce7b3e1cd682c6fa671dd05d</hash>
        <hash alg="SHA3-256">2217362807f864445f6e380279528a7cfa06cc9939280eeaf9fb4060921d038a</hash>
        <hash alg="SHA3-512">9fbcd5f3f938cd15454672634e8cf3ccad5ebb02aa1642f1134ffcb85f40ba058f7f068d43e3174b7bc0301fed7c5d9010b64056a826fcc2858b2e943edc1479</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.zipkin2/zipkin@2.27.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/zipkin/zipkin</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/zipkin/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/zipkin/zipkin</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@5.17.1?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.brave</group>
      <name>brave-instrumentation-http</name>
      <version>5.17.1</version>
      <description>Java distributed tracing implementation compatible with Zipkin backend services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">80f63effade6e9afa861364d17a6d442</hash>
        <hash alg="SHA-1">e3c4e3b5718d9d6eec78beda89e4c4415b4cecae</hash>
        <hash alg="SHA-256">633822b4255edad5dbab33cb974bd326c9b037633a31e8f241243d07d5cba13f</hash>
        <hash alg="SHA-512">b221c2ce8b3db51ee1cffda0cc527d6ede5bece6d9f51f98c665cca098b9ec6197718fabf3ad487f7e570c02ae1325e3dc54a2d3a4625f9c51bd8703957e19d2</hash>
        <hash alg="SHA-384">537e5b34c61e6f5f6e827f34f57cf932c21f4f2990c22b4ab30f157e53d12953d057e8fdb7b9b16c61066a5fc976bee5</hash>
        <hash alg="SHA3-384">c2187c69e9914ea9064810358193850e5568683e9a74182aa83ce45a79af9aed16a99d810f7ccf093ce1be7197d97820</hash>
        <hash alg="SHA3-256">94f2bcb1aed82bbcf03683cb0ec7fb396812247886fb14ca434c41384763d352</hash>
        <hash alg="SHA3-512">d7b2c10486729c67cffb1339c03fac664c98c5f89c629d944a42948b0506c0b750b9e28c9da6e77ac3a6ab3e6b59c38ef78f892fb0bf0960ae9a8aaf1196c945</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.brave/brave-instrumentation-http@5.17.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/brave/brave-instrumentation-parent/brave-instrumentation-http</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/brave/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/brave/brave-instrumentation-parent/brave-instrumentation-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/antlr/antlr@2.7.7?type=jar">
      <group>antlr</group>
      <name>antlr</name>
      <version>2.7.7</version>
      <description>A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8f1352c52a4c6a500b597596501fc64</hash>
        <hash alg="SHA-1">83cd2cd674a217ade95a4bb83a8a14f351f48bd0</hash>
        <hash alg="SHA-256">88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c</hash>
        <hash alg="SHA-512">311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74</hash>
        <hash alg="SHA-384">2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57</hash>
        <hash alg="SHA3-384">bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67</hash>
        <hash alg="SHA3-256">babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8</hash>
        <hash alg="SHA3-512">3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/antlr/antlr@2.7.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.antlr.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.undertow/undertow-core@2.2.33.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>io.undertow</group>
      <name>undertow-core</name>
      <version>2.2.33.Final</version>
      <description>Undertow</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5849a5945a36e932fd6e6023458b968f</hash>
        <hash alg="SHA-1">0e34d675ce9e6a9029af4939bc373bcc2764b0b4</hash>
        <hash alg="SHA-256">01340d20bd7f722e359dcc8782ccf5ed4f6395c891b42d3eedc879969fe836f9</hash>
        <hash alg="SHA-512">eff1e8919e426c2466be853bc522c3eb3c062090a66ab1667398cb799c5429329b740b61bd0a3c244a16d77535f9291dce6eeb35bd016dddec638db017f6fe37</hash>
        <hash alg="SHA-384">6a76b0913c234e1929412dd3dcdaf1fb47966d1a98758343c892d3c579681b16ad069b1c001bff1980937f9fd7479927</hash>
        <hash alg="SHA3-384">9bb04edaa996da68ebdc125221066bfd7e4143a2c5383ba94a47d7124d26e9105e9384b95e0dfe52dd19870f4ea5bdad</hash>
        <hash alg="SHA3-256">0d525a6b90d4c172e3801da131b39fb95066058400ed3286f806f7c6ae9c37e0</hash>
        <hash alg="SHA3-512">47eeae539df74f6ce71d8a7ee64ad1e0cc1c387a8564d47dc8fbc0eeac2fa84d0a197160c8ddfa378d98a6301700acc2e0b0a4f8120c92a652344d552273da6d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.undertow/undertow-core@2.2.33.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/undertow-parent/undertow-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jboss.org/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/undertow-io/undertow/undertow-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.logging</group>
      <name>jboss-logging</name>
      <version>3.6.1.Final</version>
      <description>The JBoss Logging Framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">acab989faf62db02c092448e95614fab</hash>
        <hash alg="SHA-1">886afbb445b4016a37c8960a7aef6ebd769ce7e5</hash>
        <hash alg="SHA-256">5e08a4b092dc85b337f0910a740571d8720cfa565fabd880a8caf94a657ca416</hash>
        <hash alg="SHA-512">3dee7fadc04407538248def38fd0ae885c2aa454e2a38ecaaf7ef74abc1505f4efcd3e1a4e024c9f28d37fabb663c19cc3f29b7641b3094d5a504e93730c4a22</hash>
        <hash alg="SHA-384">26b1ba129bd9cd1777ba90da087d343698b1f7fa48b855ce0a1030afc1c7ae81433f75e7b8293eb42fc063ce35386280</hash>
        <hash alg="SHA3-384">7fbed126ae79578a4136d769f31d9d879e14cd0f0b78ec91515be7cfce5fea7f1c1ca10bf752d19edd5511d3d4ef5254</hash>
        <hash alg="SHA3-256">0de02a61df5dc9fbb8e9a344a8744356f3e867b4567ca2baa0bbf16a8763de01</hash>
        <hash alg="SHA3-512">2c7b522c04afab22900222f287da17c1526b3b3fd6a9376298613112918afb050af3d8ead2239be3e7dc3337ae74a636bf1963a1bc56426996b0f7283681bb3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.redhat.com/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jboss-logging/jboss-logging/tree/main/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.xnio</group>
      <name>xnio-api</name>
      <version>3.8.16.Final</version>
      <description>The API JAR of the XNIO project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d249abddd0b2fb672d282388296ecb34</hash>
        <hash alg="SHA-1">7c98c649a4583523c23cc0a7e62ddace1f486b54</hash>
        <hash alg="SHA-256">3572098fe1687dabd90f0222080fb158f63ca771c42ef1d39974434849f78bc4</hash>
        <hash alg="SHA-512">08a22fa1abe166b91c82a6a154efd1c3f6b1b2b56244a742eb421f981c6679c029b9c0adba95cc61362666d93607c044d4622b2d8f115573eaa7e5260c744f9e</hash>
        <hash alg="SHA-384">b73558b6fe973aec00ae4038a55c3a680cc2ee32d05782a0954df38ef993ae0414a22033fa0eaca2f1ddfd991ab49f22</hash>
        <hash alg="SHA3-384">62c46ad019aaf5256bc235237a746c7824af44fcfd2141d2a00d6b57e74fb7a08a2859d53a5144e54de49a07e700631f</hash>
        <hash alg="SHA3-256">8b3e2ebd13a584b288e75a22b4365f9c7d81501ff8f79ef89b79e1ade6e257a1</hash>
        <hash alg="SHA3-512">fd894ee035714ecd1278c07ddc32e396a379e7d50e69da8d1c6bc33263f1b9b6ce7a860a97463a4b0a8fb53cf3441fb62e1b9bb8bcae621b7c7b5dd5e98e0b2e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/xnio</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.redhat.com/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/jboss/jboss-parent-pom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.wildfly.common</group>
      <name>wildfly-common</name>
      <version>1.7.0.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f1c1941a984207798ab00b111cb20b3b</hash>
        <hash alg="SHA-1">b5237d5e5a46ede4e4e142d79623d04b59d11476</hash>
        <hash alg="SHA-256">02baad428c4a0fc2f503795d08644752a15731fb51c3da1add108d5e6ac5d283</hash>
        <hash alg="SHA-512">042d5eda338589b6ae76d76771da9961be950e47e095868da928d282fbd0baa8962147750f49412343788bebf2b3dd1f2ab1084dbf7209d8a3b1fdaeb6cd3bda</hash>
        <hash alg="SHA-384">03f33a089f88e53e2aec064f5ad02946d56ccc0c66fa409321aec6b1641a03b7244053da1b001a9dd0314e47e92103b1</hash>
        <hash alg="SHA3-384">08b40f8f265531e5c089dbe2e675091f11ebe5ad083c600f6d04d3476d7774f53543a5df2513b51de26f151b986f1564</hash>
        <hash alg="SHA3-256">fff026f0a2eecedfbe6035be3805c88fbd62b5e957261ff054b56a0a9d1c7876</hash>
        <hash alg="SHA3-512">6286828371c65d9017fd4181d4a64f1223904232daeab93facf438ae82fe23dda3a7439b4d12af17c5a2008fad1921bbd5a0e8a541fd1bd9f0e5db9a323e7da8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.redhat.com/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/wildfly/wildfly-common/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.wildfly.client</group>
      <name>wildfly-client-config</name>
      <version>1.0.1.Final</version>
      <description>Library for supporting WildFly common client configuration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">77f13d40c0fc70d05b48d43ac8ae2581</hash>
        <hash alg="SHA-1">2a803b23c40a0de0f03a90d1fd3755747bc05f4b</hash>
        <hash alg="SHA-256">80a4e963ce94ebb043ecb0f2c0e77d327f23dc87d81350b863752eedfa2c3bb3</hash>
        <hash alg="SHA-512">3f442478c57f7dfac7039f6c7ae014bb2d45cdbd690ee631a3349edbca414adfe1984d065d1439f9b1546fa15fbd032c3a6bfe008f1ad50eef74201467b9f55f</hash>
        <hash alg="SHA-384">fd6285cf6398f0395c538873c4e52292c467d5f752f47fb8040224b37ec4e39e410136bf040c33ba8b42b3d6cda58a05</hash>
        <hash alg="SHA3-384">a3f92b65c9914eba7d47ac858ff37d512852691df29d68dd01587e254dd370404a3f0243adf7821a677f1b88904124c9</hash>
        <hash alg="SHA3-256">6e6e537598960954ea18998ed44b696a21a662bfd5268c58dd1fab739882ce34</hash>
        <hash alg="SHA3-512">94f46f167853b771ead83d87a93e826512575cb5ef505b841b28d4d818a39f5fe0cbf8b9b155719b4b43569a6fbc4f2c36ab14bfca8fd43ab64963a547fdce74</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/wildfly-client-config</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jboss.org/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/jboss/jboss-parent-pom/wildfly-client-config</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.xnio</group>
      <name>xnio-nio</name>
      <version>3.8.16.Final</version>
      <description>The NIO implementation of the XNIO project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cbb086e0c716a013f13fc9e521249761</hash>
        <hash alg="SHA-1">9aab17706a371a212fd051b09c7959d29d051379</hash>
        <hash alg="SHA-256">cee1ad9674ff4615f492a314a986c77b7c223ae03255c77aacc60c6cea62d59c</hash>
        <hash alg="SHA-512">73fd6ec6db644af59117c97258cb28b00531d44edddb6933750da4e51813abf26fb144fd58a4e3efcaca89db53777dd48b94eeadb25f2a6dbdda80c01a4d7491</hash>
        <hash alg="SHA-384">61a38f0326afc3a809037019e4ccdd9d757d2b046477440d8a62363b3f361ac4c2543fd609cac163257875fc318a8c76</hash>
        <hash alg="SHA3-384">13ae855a808fa422f69947fcad6da3a6c39311eebca487e92479d382b1297bd45c5ee38199af7ce177830f0ba43eff6c</hash>
        <hash alg="SHA3-256">3f1f93dcd8c5ab33dbea4fc42998ab007a2322e5e26e33268f77ab99831bd0cf</hash>
        <hash alg="SHA3-512">1d381a909b745289ab58a365d09441b185978c726f3d02c20993a4a67c280fba18cb728d88b65622b4feef56beb86eaa909100b9bb8a6130efaa8c1729725a2e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.redhat.com/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/jboss/jboss-parent-pom</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.threads/jboss-threads@3.1.0.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.threads</group>
      <name>jboss-threads</name>
      <version>3.1.0.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">aa2e05c76a355ae521595ce39cb5776c</hash>
        <hash alg="SHA-1">9b260c0302f637a84a52d3d118214a3c59217615</hash>
        <hash alg="SHA-256">c9396af3b47ddddbce14335aaad5b85b49fa704f11e33da1c450fae3c3b98079</hash>
        <hash alg="SHA-512">12d2b4c6c4f732a4b9437ae6e893087981aa2d829c9bad7089cd4cb10bccd7105e136f694e43a36e5bf234ca81294117fd9f6a07795f77c0f80d8f748c8fa529</hash>
        <hash alg="SHA-384">faa1ae7a2e28a3b25502475d23b5dc31c25325f3b900a8aaef5109e43c3acdf77fd6ba5b899a921e044ae2fca1079d93</hash>
        <hash alg="SHA3-384">b8f036fb2e934fc19a529c55a96bfb5a51da9cb02b3410110c4e0855e12fd466fbf79ae69768c09be5d6d2523a8d3ede</hash>
        <hash alg="SHA3-256">5c84c887a910d85a533b711fafdbf03f2eb7c82d1b2c9411332787984a514659</hash>
        <hash alg="SHA3-512">ac244f6ae1e31a413e1c3a32647b49a839b486571991162517c45053eb3064bac6d8e9e5198c5cd2e78a5bd0352799d25fc4a0177eb1f5c594d6ca699358fb1f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.threads/jboss-threads@3.1.0.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/jboss-threads</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jboss.org/browse/JBTHR</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jbossas/jboss-threads</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.undertow/undertow-servlet@2.2.33.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>io.undertow</group>
      <name>undertow-servlet</name>
      <version>2.2.33.Final</version>
      <description>Undertow</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6a23d3d30adc7fb7eabadd2ead104aa7</hash>
        <hash alg="SHA-1">f17a145f82e5fb928300adec8835e2c80c22de99</hash>
        <hash alg="SHA-256">7bf22bfbf84afc71670d14875f2dd8d27e6188554f9126648fa558dc27c38d34</hash>
        <hash alg="SHA-512">d212aead4923c5ec7977187a8116d9523248260bc6aa7df17f2f3f1faf9bee765ddbdae4b3892ea21a28aada86ddcd193c66fba1bbb53c7fa462c9b24cd79c37</hash>
        <hash alg="SHA-384">23861a15a2c55987e2ace86bde11bcb31edee88d60696e4915a777041409715f55c11adbd8615ef8008e20b11d05e45d</hash>
        <hash alg="SHA3-384">8cea6e66b9be50d0d3aa03dc3edc48e6a09cb1b5a4a759f7505376259ed3ae71c1e591e86d81637622a8e390a851525a</hash>
        <hash alg="SHA3-256">01322832c929f37bbcd8f93815ff6b315b625e347d0759c230e351c5a427058b</hash>
        <hash alg="SHA3-512">07a6f53e067b894765dc0181bcf7bc5108974f7ddf50ce5659a6f0f4c646ce3f8bb09a395770ceae8d80ba059988b7811a4fbf32f4c6575cc5162c17e8c27993</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.undertow/undertow-servlet@2.2.33.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/undertow-parent/undertow-servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jboss.org/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/undertow-io/undertow/undertow-servlet</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.spec.javax.servlet/jboss-servlet-api_4.0_spec@2.0.0.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.spec.javax.servlet</group>
      <name>jboss-servlet-api_4.0_spec</name>
      <version>2.0.0.Final</version>
      <description>Provides, via submodules, a base configuration for JBoss project builds, as well as a derived configuration supporting multi-release JARs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f27d7566e3272cd05c9425fee887ab9f</hash>
        <hash alg="SHA-1">d7b4e3420cf0b462bc599738ea4360fd05c15500</hash>
        <hash alg="SHA-256">641fb980e96e766cd08f4daf54dbb6c4b104154f74f50c5eb0f5c24f47e77565</hash>
        <hash alg="SHA-512">f89ab90befb89e6fb06505fa453ea3291c0b664e548225e21b54eda93f0ca92de2216d4485ecbc9dd7d62f2f0523792d843696d9b2a986cf6e91c0afc0ed2a3f</hash>
        <hash alg="SHA-384">5ca1839ce17968be96ee651103efa793fa5520efebabdc8298a182d773e9f95140441fadbba31f694451c1c4a6da0242</hash>
        <hash alg="SHA3-384">67ce040c7a3bac206cd92f09328a9f1ee46c5a3f4ad3988fc27d14fcbd16195c32b6928fec1f7dbc230c7a161d5df6d0</hash>
        <hash alg="SHA3-256">5bb5be9767169299093d510c8044e5ed00007af51c90ae524b75fc22841cd4f1</hash>
        <hash alg="SHA3-512">3e68628db4074ebdb16b923d64bdc65a2406b4b815f68f147cf2d4c21e0ceaa6da0e4a34f9f4ffdb1edbf3aa579fa5d2bc19a8609f1108de3af11f3521ea711a</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.spec.javax.servlet/jboss-servlet-api_4.0_spec@2.0.0.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jboss/jboss-jakarta-servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.spec.javax.annotation</group>
      <name>jboss-annotations-api_1.3_spec</name>
      <version>2.0.1.Final</version>
      <description>JBoss Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e749fa3db958f32ca811bce62039facb</hash>
        <hash alg="SHA-1">b3744f492ce9a65d1197a5b24645dff93fa85424</hash>
        <hash alg="SHA-256">afc4e3b8701119c9a2ceb8cebe3fd1869a269de768d7d56e7b5051827a132368</hash>
        <hash alg="SHA-512">676a634cab53b730e48d2b4cf53d60f8d3cbf930241f97f2810e31dc7f76e9a18b093078d72c9c7b444bc8ed0904c706a72c6be815e7fb90da35db2c7d6df284</hash>
        <hash alg="SHA-384">a62d2d47a12907d2815c610258841f157a9cae47b4f73d6177aae62faeeefce83f6040ad16ccb1b85b6582ad9c018529</hash>
        <hash alg="SHA3-384">606d632a3e4be3e5ac390c59224283ae07db8011424db98f0144cc5da00d842c61b905edd914d5d11cc77bb3fea4e3f0</hash>
        <hash alg="SHA3-256">58a3554542f4e28164fabf87096c5dbcd389d7e4b573b2f7d70768fc57ac843d</hash>
        <hash alg="SHA3-512">fa5fc6ab388ad66e2949998ac19fe4554bfc73b7d8e9224a0374b9da3bef5cf4c200d56794740c5d9d98e2082cab7398d3d6b85ab4c815df8865ca9b308cdb84</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jboss/jboss-jakarta-annotations-api_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jboss/jboss-jakarta-annotations-api_spec.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-server</name>
      <version>10.0.24</version>
      <description>The core jetty server artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3bf41fefd50025558b7a442b0b8db297</hash>
        <hash alg="SHA-1">207d61a67bb15415ad6d6358607bb7c15d6a22cc</hash>
        <hash alg="SHA-256">2dc75ad0ad325ad5477209f544b0aa6126ce3c1f5d5bac92ba3379462b304e8a</hash>
        <hash alg="SHA-512">7af05918eb7bd158df8d61c43165fbb731a87fd2038b970f461ebf631b76a056672621cd241ce81600c33a92c1d6ad3663c9ad475dad99e954ee9104a198dc9d</hash>
        <hash alg="SHA-384">74333b2b82b85f1bd52b5972c3ec5a5a9628acfa2b45af98a4195937a7ccc67c76cfb23176c4f0a17e3550126fd4b0d4</hash>
        <hash alg="SHA3-384">c7eb7dc2460fd0118916c9829c821b1c211778b91c8100f9a988ce693c2c17559e2c1c927f219ce3e06a21423750da3d</hash>
        <hash alg="SHA3-256">6b8c6c71e25b0b3b01e539744d5e2fa956bcaf73329e812e5e0e3bce4dc55521</hash>
        <hash alg="SHA3-512">7aae1adcf6bfdb011c427c7c5c0afb0dc21dc40bfa7b041edc354a11c9005ec25251da5a24d6deae7e144d1f82de79a428d10105d3628ea3503f63f154de9542</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.eclipse.jetty.toolchain</group>
      <name>jetty-servlet-api</name>
      <version>4.0.6</version>
      <description>The Eclipse Jetty Toolchain Parent</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d63413e02885c25d0129e3d2936606f6</hash>
        <hash alg="SHA-1">959c5d83d08f5cddf56caff749e48b735193191b</hash>
        <hash alg="SHA-256">d90bf1f8a9d2ba89f4510bb51e1516dcf94ef6dc034e00f233654abdd78f2210</hash>
        <hash alg="SHA-512">758454d41cd0c08ec5b25c1e8ba7249fb11f753ea04c337614db9b99f2da9c1dd9a26bd0048aa6d1b95906d8aa67d0a9c719901b611d3017547adda9f7d4a289</hash>
        <hash alg="SHA-384">6f5cdcc8b31399438db38ef510c30399f4c2e3058ed8c7d9a6d9a425303c31c3f6d41a16e5d9416ddc6e5ca95164b7e4</hash>
        <hash alg="SHA3-384">f6c797c7ffe1fa8b7c68786718ae4f6e96a3a904cfb9ba3fe17c36cd2967796f6e1bc1ed09bc9dc2e74d1ade975526e9</hash>
        <hash alg="SHA3-256">1a2f5f3b79a4881afac16b2cecca63f9a18bee4d7b2f0509001e265da8df353c</hash>
        <hash alg="SHA3-512">443b85f02330d60eda46607dccd92e7f92bc5a3ebf85298ed0dcc28dea468acef800e854918c50300a4fe0fe42a111fb8ffb1be081e817a7a55dd353192f181a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse.org/jetty/jetty-servlet-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/jetty.toolchain</url>
        </reference>
        <reference type="mailing-list">
          <url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/jetty.toolchain/tree/master/jetty-servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-webapp</name>
      <version>10.0.24</version>
      <description>Jetty web application support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a4151cf4b71a4015c24b32c62f6a081f</hash>
        <hash alg="SHA-1">dc20b8b0e8a08cecc9a6452bb8a84d2d8e734692</hash>
        <hash alg="SHA-256">86d009a1bc09b8dacf882311823b48b3e1071a54cdf6c27ba73bcbdad0ccd9e4</hash>
        <hash alg="SHA-512">13593e6debca504fd4042c1647af58ee7af2c126ab1c7a4603d4ac2b969e60ea70418c77abf68fa9fbec56446b686593d62263c309cf4d3e99c64f92881b8734</hash>
        <hash alg="SHA-384">6e1f81abb4008919b7f3f6cf49a458bfbb3e516ca1a933e81a30b665c8adb7c705af49ab65753f31c702b2542765a24a</hash>
        <hash alg="SHA3-384">75eefa57d05ef4c4a16621cc9d050677654b982e703d40fc8b97df56e89438a7ccd0cba9d52dfb0287eabd13b22b5d8b</hash>
        <hash alg="SHA3-256">53502558dd93373dc1ca49162a787cfaa9db3f4d6453a1c92935b12caf7a3852</hash>
        <hash alg="SHA3-512">8d673a6be286a90c136cbb33152086abaa4ca43bb1f135b872fdc0f94e46d438be41bf2724c73b42a949ab76585b7d5927f0f4226bc0514ff97452a93cbe21db</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-webapp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-webapp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-xml@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-xml</name>
      <version>10.0.24</version>
      <description>The jetty xml utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">703fbe5ec263f90ebd251c3b3b9c12d5</hash>
        <hash alg="SHA-1">4c5e5dbeac56072d380752ff056314022309b9cc</hash>
        <hash alg="SHA-256">ac9a6fea2f07c9803b250869614d218430411fc36cb8d16cb748e847b3063e4c</hash>
        <hash alg="SHA-512">85ad5b97d13d9a97a712a3010fa2488a5697f7db6a4e849f1367a3f637af42f4055d8b8b665e854a63b7698b39c90b17eeff1f4d540ee6efea41a99e9bbcd265</hash>
        <hash alg="SHA-384">27399bb8ab09b28ff992c3396d6724fe9a48c7ceeefb1f51e4867f72f0e4f8b09df3478a5ff6aa80291bde4ec7fb3db3</hash>
        <hash alg="SHA3-384">a43306f44e3d80678d1ca93a9c3045ffe66b701d3454c768c4563f43e7197e46f0b3817816084e2dc367fbde1d28324b</hash>
        <hash alg="SHA3-256">76b89c95ef08a3d46e93e3adf5efba30622a5815b885dc890d5b0474b610dde4</hash>
        <hash alg="SHA3-512">52ac61537922606ba4c0091791c5a51515ebdf73c16743bdd26125aae4dd15f5e73101d8773af03935a0c865edb0fe069dd38965408573c809c2224a9eefc511</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-xml@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-xml</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-xml</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-servlet</name>
      <version>10.0.24</version>
      <description>Jetty Servlet Container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6da02d412612b5d3978ecb182e678faf</hash>
        <hash alg="SHA-1">e3dfbcc0d34d9c3f9cfdf678a0c5dddcd551858b</hash>
        <hash alg="SHA-256">d120bd324556b51ac9ce3276f2295e0a07adeb51cd291a6eeb33a5f5550ce319</hash>
        <hash alg="SHA-512">4c2ba36d9da9389df8a8a9bdcbe6e393e9cfac8e4f4bd2b60269f288146517acd8ef31d359fbbee6f254b063db32368520194b992de60876513fc22626815cee</hash>
        <hash alg="SHA-384">93729cf32fbfe82ece18fe495f03ed1da2f4ddb1c4e1f53a81233f8e8290de5b3a4897b5cb9e783901a70de305de4b1c</hash>
        <hash alg="SHA3-384">55477312ebc2bbd0b1998bd38dfe34c542324756eea4e728d98bfdbee3e7c4b37c94c7108830bfb08a0cd60d40ca73d5</hash>
        <hash alg="SHA3-256">8c88d1642138b697ca1f32012eb51b40e968ebd3f3b10d13a1f7d34525f0580d</hash>
        <hash alg="SHA3-512">284ac22ac2b6436994dfa92e1994e665b31eac2a568cb20d95cf07ff7954e70efbb4d1e36e47510021ff979b0de170d9d88564e9afbb9649abf2ed290d653b66</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-servlet</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util</name>
      <version>10.0.24</version>
      <description>Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">334546bf01578b86aa52509978f68f1a</hash>
        <hash alg="SHA-1">28fa6ce4265e5679590eeb7addadf0d5e73a71d4</hash>
        <hash alg="SHA-256">0d4fd31227030fe44933b09052557bad41e24730fe31d11ee6c5700cfb6157c7</hash>
        <hash alg="SHA-512">31c2c1b29526b52d7223a52148af5a0d39d0c99d47a1e82fea43ff3d585de3fcabfa3b72bfc164a77e0d5be255d9efea6e95d330b8a9288ae3bc8a7a42f0cfcf</hash>
        <hash alg="SHA-384">51654489548135805dbf3510d6105c179c85eaf92a85c5df37aef15bf249a343cb7279e998f8670e049182ad7d632049</hash>
        <hash alg="SHA3-384">fa079f55f4fda7ec0a0a17d448617983adf64748e410ec480a5973bbaefbb6d22df7d5d1017b460258c7e4b1736c4052</hash>
        <hash alg="SHA3-256">df6d30ed10a0c5f771d303c9699019baab3b27e39065941cf1204a49f07ad69c</hash>
        <hash alg="SHA3-512">125240c285bce8768e0089fe44287cbda077eea3fea8e425b9c8685a0570a73d89fb28800e415c7c2a28ee54e446f8e00190ef5e0343a64098ae6adcfbab7ace</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-io</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a5f3720e8e80b672319a7950bee32a02</hash>
        <hash alg="SHA-1">981c5cc38a79f085170bacd1b3dc3cd4276bb4c5</hash>
        <hash alg="SHA-256">28eab8bf42b4ea9c25d74b81e101cb0d3393856fafde7292b0fe93e558839d69</hash>
        <hash alg="SHA-512">22ae93fa0e42535eb9fc88b98a231f126a25e0d84ec7159ad8ce1279c23732e0a9bd71749e6412247d3c2863b64415373d96eea8e944e8caf9b6c2316d954b12</hash>
        <hash alg="SHA-384">3a36b02b64543728c023050cac3d22d970f6a623be0fa70c2be0270243dfd03128221d7e770e7f234303df7083142768</hash>
        <hash alg="SHA3-384">322ea35a108e3900533867b0e87a3477508639d4602ecc5f3bc4d3839e8dacd5d8e3fc04a562120a248e2ca92644aa3f</hash>
        <hash alg="SHA3-256">0d2414214c65fbe285b6499326522a970bc442073494dd50e9f972c7148ddcb4</hash>
        <hash alg="SHA3-512">e79c17ff3a4bc73a844484b92fc0af8c1ba929fbeeb444cac2e8ec646123047ae444fda3343e2473307dd0696b57ae3ee6522efc1054e550434ad7ab8b9f9b99</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-io</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-io</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-security@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-security</name>
      <version>10.0.24</version>
      <description>Jetty security infrastructure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">59f45eebf380545b5148b927fb6359bc</hash>
        <hash alg="SHA-1">a23ae41d62d716bf657618e8a21e0e5f4ae266d7</hash>
        <hash alg="SHA-256">1ace8258e5f048dce6a772ea28c333056331e61bdef99f9e6f1564a201ee9809</hash>
        <hash alg="SHA-512">7052891f0bad5ab326128a106d15da8e45d3883c7e5174a21ac000095ca3a05ea040fada337f5c6e5cb700e7401183639130a61447c0fd85a510efd6a7fe9216</hash>
        <hash alg="SHA-384">4c3e80862d63e4a827ce710c580527481c557f3f10501de20908d21058694eb11e82554f6967b00212342ae568b3b097</hash>
        <hash alg="SHA3-384">a347308b570b764630a472cc17316650ceb15956bb628b472d57f7df35c25d21d872f4c2d45eb9457593d03a4faf9331</hash>
        <hash alg="SHA3-256">cc7b645fa1d6c98bc6d8f0e9dd4a0f5e476109806e8f808e38c046b17d9d23be</hash>
        <hash alg="SHA3-512">d0ee9834ab3f1fac8c48f7c980116e3325cb0f0eecabe52cc28b8f0c0884e806602a623f9f11bf62937d401c27d6e307a9bce37794cafbdf2d42d1fe3ae6221b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-security@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-security</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-jmx@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-jmx</name>
      <version>10.0.24</version>
      <description>JMX management artifact for jetty.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a4e197aee728fc55bc6599d8184a69ae</hash>
        <hash alg="SHA-1">b778c387943d718da91584f26392776dbcbc29c3</hash>
        <hash alg="SHA-256">4890208e63f733adbccff11eab4594a3befce631feeb325a37641a7c2120a91e</hash>
        <hash alg="SHA-512">4e3c3264e0d138b5085ca7b3518d3df904543911f05fd0819a618d99a83600f977b96502022b2f99ffb2a3774778d7dcbbc694e630b328c6ac3b1132714d539d</hash>
        <hash alg="SHA-384">00d546812ab1622d2c28420e89a1efc29ba77eafa6969edc5a4ad8ca8cb90e1434c161bffbe8e346a2e7294f79e0e9bf</hash>
        <hash alg="SHA3-384">e4b4cb431bfbf70adea1b5d41641fc74b2db80be83349524c6f27417db98e56892ec5251f1d71e434eea33459da6fb85</hash>
        <hash alg="SHA3-256">47974e0fbbf3aab71006fe17a4c2aad2dbdd0babbf2451b053bc5e5bc048ef2a</hash>
        <hash alg="SHA3-512">291b0d48ecabb6e2e7c0d9d609d9f539db114b6dc58dac7116dfdc3312f0785e7a96be65f64b30e793e580b00cf89b621309d82055f4c2c50ae1db01f6c0a00d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-jmx@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-jmx</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-jmx</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-http</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5e81b97b2029917b9bc24a6ba6b5cfc9</hash>
        <hash alg="SHA-1">53b32e2ce8dd28134e8778415f06f83f2b839a3f</hash>
        <hash alg="SHA-256">9ab5bd88a654469a17f768fe628d63d5c660409db9cb82a112b3f3043cf27063</hash>
        <hash alg="SHA-512">6f138a38fc21669e57cdab33059891c5da82af8051d3e9538e93ec54261c21f804cd37953d47cc3e2e4d3628215b27c425cfaf21132b853b517319efe792d586</hash>
        <hash alg="SHA-384">42f32d33600716f89f9866c505b4ffb8bf78b08c6a652d9764e83753227e8fddce12f22f9ace1d0030f0ef7ffb2461e5</hash>
        <hash alg="SHA3-384">0480db309c050538d77536455a3d397a8be87b911009fccd9a3d26e048ae0d4b431b85938aa3a985ed00f5abeed552d6</hash>
        <hash alg="SHA3-256">76ea5e973e200499d24fd2cc3e54cc2fcaf45434600e522f86a7a94836c2e0c7</hash>
        <hash alg="SHA3-512">678be8ea40fecf761abe601e3d9d61da2180938e09974430fdb9a140bdc0a8e5b0ac6953f981d37443996a07b252809e6c40279931dc50f3571714b4a3e15b26</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-http</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-plus@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-plus</name>
      <version>10.0.24</version>
      <description>Jetty JavaEE style services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d65b18cba14548081926b2462798a20</hash>
        <hash alg="SHA-1">ab3846cc12b693187f4f2f9b5bc590c88a723476</hash>
        <hash alg="SHA-256">bb8537a786c037e2a2cffa938c45b61782ea71a5c8d14c08c11dad324744c009</hash>
        <hash alg="SHA-512">32f3803de0dab3341d3dda8e978006a47998dbcc7934ece7f254ab22624d129c58577e7bb73c54d23931b41ec88ff480d88d7ce15f2254bec67d563391525684</hash>
        <hash alg="SHA-384">24146dc18a1052e721bb34724887eed1316e523bbb45d0a83e6c1b7ce4814b65cd4dbcc308c3b1bd567080235f6ae5d3</hash>
        <hash alg="SHA3-384">127161586f493a0d623f715f7cf6294114147f4c6857d0be8e9374b908ba392126c0994f22a7e5be12da5bee32ca7337</hash>
        <hash alg="SHA3-256">152e5241e4e4fae7747fba1f32ca4dd85125b428457628d75c5d7bcf6a58d1c8</hash>
        <hash alg="SHA3-512">0b0440c77fdcda8efb0689adc13f0811bba7d42a83d801ace621fcb2ee89f5976bd216f37a61908e363b16ea3a7d9468a1c3123f3593e841c23489ee4f63c4ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-plus@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-plus</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-plus</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar">
      <publisher>EE4J Community</publisher>
      <group>jakarta.transaction</group>
      <name>jakarta.transaction-api</name>
      <version>1.3.3</version>
      <description>Jakarta Transactions</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc45726045cc9a0728f803f9db4c90c4</hash>
        <hash alg="SHA-1">c4179d48720a1e87202115fbed6089bdc4195405</hash>
        <hash alg="SHA-256">0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab</hash>
        <hash alg="SHA-512">764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e</hash>
        <hash alg="SHA-384">63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0</hash>
        <hash alg="SHA3-384">dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d</hash>
        <hash alg="SHA3-256">d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684</hash>
        <hash alg="SHA3-512">1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.jta</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jta-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jta-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jta-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-jndi@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-jndi</name>
      <version>10.0.24</version>
      <description>JNDI spi impl for java namespace.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86c1e750bf38ff5b72f8d6b3838f37b7</hash>
        <hash alg="SHA-1">4c409bcfd76d01359051b89bdfa92456290addc3</hash>
        <hash alg="SHA-256">98b0a394fd50a2562870419ecaae2902fca9979093f5aea10b21cc5116d9846e</hash>
        <hash alg="SHA-512">a3c13673cea69ba61a0aa3e67f53fb553d082743052e6d610de0c0bcc34a1fa475697b3fa547c598e9255ab658a799da069fdce71ec9d4f65d81779134dd929c</hash>
        <hash alg="SHA-384">5ae4a8ff1c75f8bc8991c7cf29e2558f496d3be609df84051ed717ec38d52e93016048608f1cdc4eff4fc522d9ce1ade</hash>
        <hash alg="SHA3-384">dbc3decea7b8fed9c5aa1fb6f638751bb52666d397747f0c071a2d8d59201dafeca96f001f4695acf4086522e6aab8dc</hash>
        <hash alg="SHA3-256">01fdd583aa2b4ef40d71282905f3d7ee38a67e9ed40b597553823b705fe43316</hash>
        <hash alg="SHA3-512">5d382c6db440b0496a0da38d3059267580cbbf2eb38c7f486578a51c6d6460acbfda398b51e6ebd30147968efb036a693484361abe6d444651091687e1d1064a</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-jndi@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-jndi</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-jndi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.http2/http2-server@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.http2</group>
      <name>http2-server</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0f0c91d5e0e5d858fcb44d9cf364cd02</hash>
        <hash alg="SHA-1">e5e06fa000b1d32e8a24f9fc9dffb06ef75b3282</hash>
        <hash alg="SHA-256">4cd91a40e4b4797ea212f6f28eb9d07ee823e31c501877894014d4bc899fc271</hash>
        <hash alg="SHA-512">ad28a3ad4338ed0b1e625b672cc871dd61a8ef66c59fa3fa02b598d686107d619d2d5cbcff6e2bc1cf4018f87f52079c209f49e488033b7fe559f6aefc9d9448</hash>
        <hash alg="SHA-384">9c4c66d95450bb1c97a03511464c6be695fbdc913edde8f8d8d7a06598be7ff8e5ba02700f0260b73c12487ea817632f</hash>
        <hash alg="SHA3-384">c8478127a8de98ff7f97e041e3a59d717c67961bc548af29229e73886094308cb07a9a570d90068f712ceeaee2cd6001</hash>
        <hash alg="SHA3-256">eb6e0bf5771a0044e080ff4e4feb9bcb9a24f6873498461368d9076f6d54108b</hash>
        <hash alg="SHA3-512">51271d1601892c8d57b435132ead1fb6190e145518e2f0882f5a377203ca715fbae746534eea4d3c1ce7b9701eeef57461487e944095877ca7f3ffcd7fedaf31</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.http2/http2-server@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/http2-parent/http2-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/http2-parent/http2-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.http2</group>
      <name>http2-common</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45db57aeeed3a32f13006e6aaa7903c0</hash>
        <hash alg="SHA-1">dfe726afcf29789057facd001589d382bb19d0b0</hash>
        <hash alg="SHA-256">c0ed3de4eca40ed6b8af917243d492763e808afa262b024df34e772fe9413e9f</hash>
        <hash alg="SHA-512">3a9ccba8def24b1d3de64f890badded1ef2e80499d07a007b3d6abbe614f059bd5fcbd98254917a7a41d6604ba093b769dae534988eef42be8db6860344e7622</hash>
        <hash alg="SHA-384">01fa90c4b5fb9a97bc4aaa99e1be1468ed9d0fb43d3c4259bf2523c11f302159239d8ee084732606fc7bfe509acc357a</hash>
        <hash alg="SHA3-384">7baec66d05eeb9631f4435cb150b26b7c6fca8117c5e69fbccf30c285095a9dd821a455b3c50e12daeecc49c0f58f53c</hash>
        <hash alg="SHA3-256">7e90aaa073b8e7922d940516fe09129f6c6873180e933bdce30171f88596866c</hash>
        <hash alg="SHA3-512">d317ee3989db468cb1f1f8d87b2708cc2e607d8b012e0e98cc50c9e92654c5799ace90f2af968136939b18282e040c46fc85b4baf5127ee4379e6479b14c16da</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/http2-parent/http2-common</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/http2-parent/http2-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.http2</group>
      <name>http2-hpack</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4517bae71a598b1b64e22b40a4798990</hash>
        <hash alg="SHA-1">aeed1b456d1c4362f969d2048d1343e6eae92dae</hash>
        <hash alg="SHA-256">b3b7c7e028c9edbfa476be7d9f7c6fea7be394e3d9aaa2170bb5c4213c79aa30</hash>
        <hash alg="SHA-512">dba6e87c08339bd969c72e7c5515e1f55495f691f46ac19dff7f69b037ef8b4bd6985869928579073b2b41dc5107d8a3932dba98ab1ff847fc2a9c90ff0a0f2c</hash>
        <hash alg="SHA-384">bb39d027d3d787741ec7cd032c0ad4b5f18becf714a67236cdbffb2276ef84f341dcb0e7918d8cb2dc362a4b2749338a</hash>
        <hash alg="SHA3-384">9e570b1541d163b0460a3b506aeb5ef14b8a0bd6c89db23d9e9d2d51aa30e0d6189fb65d1b55c1bc6914ff45d7ba2e2a</hash>
        <hash alg="SHA3-256">132e9edc373aae83333eac60ac892c4808660b425921102ffcec2ec6f9a0eaa9</hash>
        <hash alg="SHA3-512">a55403d1db0950878557ddfd16d49c297f2820758fc760027955c2af9c5c39068bfcb18af8b4ee68b7c5b3f5e960df2932dc9a793cb5f69fe31172796d3e5e20</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/http2-parent/http2-hpack</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/http2-parent/http2-hpack</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-alpn-server@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-alpn-server</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfc75e10472364bbd430a704c8c85f4e</hash>
        <hash alg="SHA-1">944ab45f8d038cd6fde9b021d39fa34b495c1b74</hash>
        <hash alg="SHA-256">f0584e943dac71752a384b39534c0dd4d5f3a0fc524fd5a83494037b8f201c68</hash>
        <hash alg="SHA-512">a4a8fb4dd9c32ae5fac187e20e784fd15f7e701684cb9fce8d96d82e92fc45f8d160bb18c23868456f3c50283aaabf66807246ef0b79cdd582f75fd28bf280db</hash>
        <hash alg="SHA-384">28b66f3b4384cf9e9be707d74646ce8ccd0a53bee089005e38b9f3e031ce5c0abc89406607be0fa21cecc129e8f6454c</hash>
        <hash alg="SHA3-384">9abe9bde45bc673bb1d71d71c851945b411265933ec596cc94261f1afbf85e0f2133ffa00bd6c46a34173f069bfebc18</hash>
        <hash alg="SHA3-256">c5a181a44c79d9a9b287fc9c9096e0f652396ba8daac7e67ef1df04235431228</hash>
        <hash alg="SHA3-512">aa7662a3613e503d6700438bd3c0835f1e342b4a532f6afe908c74c0a281ca307840c3ccae9932d60e0878737b158b2349b257adccaf1a0551f225693db4ab8b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-alpn-server@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/jetty-alpn-parent/jetty-alpn-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/jetty-alpn-parent/jetty-alpn-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jacorb/jacorb@3.9?type=jar">
      <publisher>JacORB</publisher>
      <group>org.jacorb</group>
      <name>jacorb</name>
      <version>3.9</version>
      <description>JacORB Core code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a940f9ad6175a39177160ce1485dec8c</hash>
        <hash alg="SHA-1">589a0cae1e8350b47f468e15251d467846527853</hash>
        <hash alg="SHA-256">cb833df39c6e30caca29f2c244901c2d5566c8c6aac3ea59842024c5f5264ee2</hash>
        <hash alg="SHA-512">097440eaa43797c9d348b1ad27d4aed4291761b5b26baf270b18ae18c05647f9569e4c90e0033d944b25ce141c96142588a7f44aa3aca44a09aaff3fb24d776b</hash>
        <hash alg="SHA-384">202649af3f139dd98fd254382a64bfb940a05f8191fb04992ac2ad79277e71cc9fe205916dbc1a2a655ece0c8e261ed4</hash>
        <hash alg="SHA3-384">41617272fc846e8cca3e5e14ae76580cdb729f9248e35e5d06856734f262d1e564a5adff192a1ea33827405f67e4c907</hash>
        <hash alg="SHA3-256">b1b5808fb3ada6da3ba6f4c6650995cefa3cd65bbfd26e49bbe8b96fda3e2545</hash>
        <hash alg="SHA3-512">348e7fccd0f1ad52b02f2edb5b39d57e4c70f867c00e22ec81a7358a97a5dd85c951bf5da5f5b5c4f641c94abd376fd5c7b5d1fa3a188448f64ffd427c69d439</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jacorb/jacorb@3.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jacorb.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://www.jacorb.org/cgi-bin/bugzilla/index.cgi</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JacORB/JacORB/jacorb</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar">
      <publisher>JacORB</publisher>
      <group>org.jacorb</group>
      <name>jacorb-omgapi</name>
      <version>3.9</version>
      <description>JacORB OMG API Stubs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6dc650cf37bcf15dcc6a2f6e745aa9bf</hash>
        <hash alg="SHA-1">0ff5bf7ba180c5534191ac9a02e7d6937748bf36</hash>
        <hash alg="SHA-256">247f565dfd4b0c1ee54b1e0a6288be84fc66ae961c34715171ca2867c6857447</hash>
        <hash alg="SHA-512">a8b17c3b3f7150b760f8375ba54ef2c826fa0e5cf96a7f84d7f409496df31628f27cbb6449a8114b9b5485bb950319c64d6bcb52f7db8862bb101890a55c0328</hash>
        <hash alg="SHA-384">86a076941587a2a23d49fb4af639380132895160c58e9d48a6deacea9b761d13f4130ce65ffd6a4df91a75f046013f8a</hash>
        <hash alg="SHA3-384">6a0739165a89f887fc1d9436816cc72bc27fb6491525497235fc649e45853d5f8aa63d2bef1be8f14b06d48a1b736915</hash>
        <hash alg="SHA3-256">a416b222bdd96907bea007389d9bac7ac29497b375ab96bfbd27bc48319cb5a2</hash>
        <hash alg="SHA3-512">dcd9a56dfb4cd9d062253a41dcef80f59e037afee155d75bae2ffb29a4037dd70df00f75bfb0af182823e517316015f4354a2a875bf10a5ff11ac7c36905c63e</hash>
      </hashes>
      <licenses>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jacorb.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://www.jacorb.org/cgi-bin/bugzilla/index.cgi</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/JacORB/JacORB/jacorb-omgapi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-jetty-server</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a0913e3a84ff556f99bc6970c666b834</hash>
        <hash alg="SHA-1">ff256bcfb950f89f951e46b8c3b763b05507800c</hash>
        <hash alg="SHA-256">02c275541234315e47dbd2b2526f3a36f576baa5d558947fa1a298fd127122ec</hash>
        <hash alg="SHA-512">927d95bc4dc0e06d915ff80121a4a7e9de2a405da0c1e623321b5b12d782e7c467a1eee9a57d5cf34d8e8bed820dfabb9a5dd093f1bb0839924bf15de657cb7e</hash>
        <hash alg="SHA-384">a8cad3c9ae842c44fa79cfb58525a32beece9db801bb1876cf0ad1a80f780d80a0a5f2ce362dadb467e3cd374be74611</hash>
        <hash alg="SHA3-384">e8b9739c6798c6115bba00275bd3ccb82d371c35c4d3018186798e3864a6914fd34912865e3b157c8d6ab17ab4e263e4</hash>
        <hash alg="SHA3-256">2fb8a992758c6a792aab1d152b8f956f1ddf3f01f277120ba5fedea2ab8abfb4</hash>
        <hash alg="SHA3-512">fc0f5b8b0eaa121368a4048562283ef93b8abf24b1e40b84792db221053b2049fbf1729e0698d0cc7c14a73567a330a930657cb0fccb46d4a23bd00e81ade15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-jetty-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-jetty-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-api@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-jetty-api</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e035bf166978e6b380fb847c8525329</hash>
        <hash alg="SHA-1">05a83727e97258e2b9eb4c0786fc027fbc4534ab</hash>
        <hash alg="SHA-256">6e57c06fb9365f851b5e216ce3f33af1bb0bdee03e87c1262411eb0ee167013d</hash>
        <hash alg="SHA-512">832bed4d2093694a4d921cdf35dca5c39e235910d83a1fe514e9124e159de3b81ce107ac9d7dc747f5c3786ede52a48c84bf7a314b5ea0db0805208b4860cbe0</hash>
        <hash alg="SHA-384">e588e5ad1a7e985e6fec283e051e973a793837399fbb53a4a734555d2ac694824b577f9efa4438491383aeb7e51da5bd</hash>
        <hash alg="SHA3-384">7be6d35010297a69f100e495bc49012112c666d967a9dfd5847c648c547ad674bdc0797cfc5f062f7ef41a887d866533</hash>
        <hash alg="SHA3-256">ac8f4d476792a95f45a7605de8f76bd54c25dae3afdfdbf5db2b69396d99e359</hash>
        <hash alg="SHA3-512">fae71332f40325115ee2ffae6e233a6ae2451ef72c291966923c430520b6914ec802cc7229acb012206295c1e5f2a7310a86933c3edaa7dad05ee0036f4d23d4</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-api@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-jetty-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-jetty-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-common@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-jetty-common</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ff469605cf376892cfc8c96af64c294d</hash>
        <hash alg="SHA-1">fe0fb5426f7863d63cd3c8f733c5d94d7e742eed</hash>
        <hash alg="SHA-256">175aacb47d87578a932483a1754c5077f83d8c41d7ba7ac90a5b2fccc1562dd6</hash>
        <hash alg="SHA-512">e5072876e2d9d80eea70d289db459504e4534bb9b3201a7392a20376e4191f2f14fbd7dff2ce00427370e41f60a840700a15d765c02412766429a550242d4619</hash>
        <hash alg="SHA-384">5eee4439116746cdf6058474e79c59542356bc43bd2cbb6c090af106cdb447a7ac2b5cfcafd5f75c976c895de25e8c27</hash>
        <hash alg="SHA3-384">83069f09d573f092c4102c4a5c9c7a6d5b48e6322f13b9493af48d886e8b777e8744993ec8faee432c76f3202c1355de</hash>
        <hash alg="SHA3-256">fe23750632415a193b68da31317d190adc319179935eb3ec13d45f2dbf202604</hash>
        <hash alg="SHA3-512">e74cf5363524dc52e353ccb0553b5f50c5c4091c47349794c1d9bac0bdec5d1c884d5e0341ed30fbaf0c37700cdcc289a72b145c4e80222f336acf2e465c837d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-common@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-jetty-common</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-jetty-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-common@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-core-common</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">525e5be3c80825dd518bd709513a93cb</hash>
        <hash alg="SHA-1">62ec045539829a9eac23c7c4a8519306818ca34e</hash>
        <hash alg="SHA-256">7973ca25c031debcf36b6c72996f4272437fc6e3ee794f0a18f0bc73aee2014f</hash>
        <hash alg="SHA-512">ba4c46de3433c0efaecfe88a975122392d7b8d15264fa11591a5971cf8816c61d36f02a69a3931df05af621295897f26427c6d84749bfd1242125067169f3ccf</hash>
        <hash alg="SHA-384">12ca9b44899f54b5b5fbed2208958b55a0b4c4562df93c00d94770f551c96903749e2e097b8591d1966a0303f799d43e</hash>
        <hash alg="SHA3-384">a1a8673a618f538309ce2aca33cae38a54136e716e6a9c58b00780a4cbe3fdce023496072a2d5dfcce94bfdb154525bc</hash>
        <hash alg="SHA3-256">574a369ba27aae707133f04c2628656fc62559648c14e9af8e93e31b864a0d68</hash>
        <hash alg="SHA3-512">1f5a3ebc161985fc3e524a2da2fbad488718ebc05a34ec8b405ba7dd620b737362e8eca94464918ae73052f290c81f908c4f5267c590202a921c4aee5a522254</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-core-common@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-core-common</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-core-common</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-servlet</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">db3fa76bb603605fd019463d3fec31b0</hash>
        <hash alg="SHA-1">38184beda84acf977f38e00ce094ff3d1d1b2c79</hash>
        <hash alg="SHA-256">d833ec8c8704b91f51796bef479c1ae0a173db813ac5639c901bbae9bfcc12ec</hash>
        <hash alg="SHA-512">ea0f6f64598593533c0c247a72ba9d476fe7f7984f87452978f859c786860843a3bb8bf1254f0aa6cb71803354ba43019cd20d7354460e795a29ca87f74e2325</hash>
        <hash alg="SHA-384">5ad52d3d57e7f5cab9485b1ec1ebbe3a5c34208ce0cdceaa5ebf2f4e9fe87cfd63636d591af594109a0cd97a2ddceabf</hash>
        <hash alg="SHA3-384">48944708e567d731fb3262ea845e2c1bf5844ccfebc16c67cca6770dc60d16c9125970d6bf051e3adf1e59cc6dfe49c3</hash>
        <hash alg="SHA3-256">2e792781ebed096493ddf219c2f39c0a00e9d905722ccae9ed9d71dedcad2282</hash>
        <hash alg="SHA3-512">afbafe64bfd41a7f84cc8fc63d257ad7ffc15fc416c95478581539040e406fda46a7362db1d98732ee6a6e8c7f9e8584ace09f9bcc59cb0cd8cfb228b078982c</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-servlet</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-server@10.0.24?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty.websocket</group>
      <name>websocket-core-server</name>
      <version>10.0.24</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">50d5e233ee0f98ca070d2f2d3da0700d</hash>
        <hash alg="SHA-1">ae30657a0e6118ed5b0aede57e918e3cb2683f1c</hash>
        <hash alg="SHA-256">0de276c039757c4b6f695c9e34be1810335437dcb31f1cba232e6a3d2430c061</hash>
        <hash alg="SHA-512">c728c8ff86f820c228cc1ccd43d4760fdcd4f8f23b8af631598b4bc27ddd50f2e5beb2cc42ca79d6e36db5dbf9223785c34172d20cf1190497220e36e886c76d</hash>
        <hash alg="SHA-384">334842d7c09b7cad72f1a686ab9350585598fac2776b14838130a26e4d0e291319f290f31072ed93a8b54d5582242055</hash>
        <hash alg="SHA3-384">507190b96ff46b3586fc52d3e213d3ab7bb680ed5f25f6f0a74c15b8160d6ea950cbaed017d5818bd25116cea15716b4</hash>
        <hash alg="SHA3-256">e252b387d9c77886e1f281b6b08e92a71d7d96984d06bcc1ff794ecd94307a01</hash>
        <hash alg="SHA3-512">82e49928ab2662b3365a2b5fcae88354dabe74094e80081215730436fd7a8c91b9fa9d859ad4a6542687b0354af88a4c5836103802396638e820af51b0539324</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.websocket/websocket-core-server@10.0.24?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jetty.org/websocket-parent/websocket-core-server</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jetty/jetty.project/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://www.eclipse.org/lists/jetty-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jetty/jetty.project/websocket-parent/websocket-core-server</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.reactivex.rxjava3/rxjava@3.1.10?type=jar">
      <group>io.reactivex.rxjava3</group>
      <name>rxjava</name>
      <version>3.1.10</version>
      <description>Reactive Extensions for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb8adba2b37f4bd2d5937231c7db7e34</hash>
        <hash alg="SHA-1">d980c75b983334eeb9a7ea1a252d044f5e6cdf77</hash>
        <hash alg="SHA-256">e9f256f9e805572dd5fd45b140db360d7dc444d0c383049b2d3d7ebf05d84aab</hash>
        <hash alg="SHA-512">c495dfd8e4dc51d34d221c80245fd61b56e9a6a6f104d15edb5a39a14a6e947a85f5f9d156aa658ebd1451018cdba10ab0fdfb9214a18423ccb29458f4fed512</hash>
        <hash alg="SHA-384">2c9c059fedbb548aa3725fd540777b8c8b10b0506138faf7700e4ed5a2cacf54ca25d6635f11c286e67d92db8cd7c250</hash>
        <hash alg="SHA3-384">850c3e7a838634e8129655ae4704e612a3b7eb8ca1b0bc2d617bcbc5d5ed5b690cd2a62cd56d9e3947d0ddfb6f5f2932</hash>
        <hash alg="SHA3-256">13ca581b062421a245cd753eca61f50e7ec5618b6e4410da6e7a8dcf52fd6663</hash>
        <hash alg="SHA3-512">9cdbcd9c7c608828f60c14772f68b670d9e0e4bb6b0a3921abaa4ee9d484cb44fc09a4f1c6ab601b67e94118a63b261d5d2367cb2d6b55484f440cbdfba2f337</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.reactivex.rxjava3/rxjava@3.1.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/ReactiveX/RxJava</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/ReactiveX/RxJava</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar">
      <group>org.dom4j</group>
      <name>dom4j</name>
      <version>2.1.4</version>
      <description>flexible XML framework for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8246840e53db2781ca941e4d3f9ad715</hash>
        <hash alg="SHA-1">35c16721b88cf17b8279fcb134c0abb161cc0e9b</hash>
        <hash alg="SHA-256">235a9167a8a199be04b5326d92927ca0adeb90d11f69fe2e821b34ce8433b591</hash>
        <hash alg="SHA-512">b647a1c9cbd8e8e0a855160b8522fff8e1d4df95e54e116a1cfe66d17083ff8b8ca6fe706d6aeea6e7d3e0116212af9a5f6c7fade642869a33fc7a971d116af9</hash>
        <hash alg="SHA-384">b85b6c9a7a89af8f44a3373a92e3b231932fb7ee6860b387ad2e383ad266cc6b613cc8128eeb324487ab44cbc99a5d22</hash>
        <hash alg="SHA3-384">5ac0aadfb93b247423464d54007a8c37de263240c398c7e4b356c7e99383aedb83ac80e04686568dd9927555321824c3</hash>
        <hash alg="SHA3-256">be92d913fea05e53a54cd2133f1ad5a75dea73a8a779b0b2288c9ccf149e455f</hash>
        <hash alg="SHA3-512">9a6605c6fd729562ae376713bd0792ba38b81ad4827d207ba055007b15ad6021bc05cf3d816b274826efdbb8aa640bfd93a22eb049d783672c7004d80b337b26</hash>
      </hashes>
      <licenses>
        <license>
          <id>Plexus</id>
          <url>https://fedoraproject.org/wiki/Licensing/Plexus_Classworlds_License</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.dom4j/dom4j@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://dom4j.github.io/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar">
      <group>javax.cache</group>
      <name>cache-api</name>
      <version>1.1.1</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dfdac9358e140e61c574abb1ada84dc9</hash>
        <hash alg="SHA-1">c56fb980eb5208bfee29a9a5b9d951aba076bd91</hash>
        <hash alg="SHA-256">9f34e007edfa82a7b2a2e1b969477dcf5099ce7f4f926fb54ce7e27c4a0cd54b</hash>
        <hash alg="SHA-512">7e2c2e421c46d66f35ae0c107c31ae28606562190871655efd38c60b335a10b1770134f88c8aada5a389e9e364be885713fe7d0464c2a9fbea06ec1102b2c3e5</hash>
        <hash alg="SHA-384">3740a5ddb6bf6d1627190fbabf06ffc19fb84a488c120ebf1bbc6407971905c7f415310a17c8db77ee90d09cb2301d3d</hash>
        <hash alg="SHA3-384">49c3aca710ab2ad62e4610ad0f3b76338079aa49e90e84cb18b59ced56caf9f6e2bc855e9900cb1b7748a1f3e0d160e2</hash>
        <hash alg="SHA3-256">ed71d13b59b8ebba5fb3f2f42da03e29d1fdaefef8fde375794a6598fdb702be</hash>
        <hash alg="SHA3-512">8b93ce37a0ea13bcb8f35a0237307f7b232c178d11e452d02c4383dbd51531eeb4a3c722778dfb95637412e6451a132f6031f0f4e3d51928a6b857160269dec0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.cache/cache-api@1.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jsr107/jsr107spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.library/org.qi4j.library.circuitbreaker@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.library</group>
      <name>org.qi4j.library.circuitbreaker</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4106ce6630c4b4e297613103d8e32ed1</hash>
        <hash alg="SHA-1">dfefb0f8d9f9b673572a7f9edd0f4c480c7f009c</hash>
        <hash alg="SHA-256">dfb1e6aec3567c293545834780ed11c312280c6b406677181bbd908fed165663</hash>
        <hash alg="SHA-512">057f42dad14bcd11815e114d637f489ac061b692f1dc40eb939564e21e18f701cf4e6b5572f76a2d53d7b9572f3a3110435142b65a0e5ff1ea392cec15096fb7</hash>
        <hash alg="SHA-384">dc74461a43c129ab888d791119fb418e657636b9cfeec92ec1989fb98941ccf6320a9e1696a484dd11836d18f671bfac</hash>
        <hash alg="SHA3-384">3ab8fccc05a05f2d1b460d00dff154bd4094bb2533e7ca645d75278fc5e315d925cbb9861768c130ad1c4c7f5cd582e4</hash>
        <hash alg="SHA3-256">14983f3b45b8b75a23238ae3123c89c0f34c582ebb6a83d4af58a5e145a1a9fe</hash>
        <hash alg="SHA3-512">538f9c4beac71ef35019edcf58ac2c805d1349b53c4097847acf2e4052c2ebb479cdcb8e73c7780750576ab26327ebe35779d2535821bbc81b75c3d3807866c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.library/org.qi4j.library.circuitbreaker@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.library/org.qi4j.library.jmx@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.library</group>
      <name>org.qi4j.library.jmx</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">57a76c066bb1edaaa5b6fffb4e5206dc</hash>
        <hash alg="SHA-1">2f2e8a0d0cd91d258ad844b376c93bb8d3f97913</hash>
        <hash alg="SHA-256">32b8bba8f6dfabbcd63665033926a048292d37f4c5cf6638b2396fa0f00c0a2c</hash>
        <hash alg="SHA-512">2167188e6a0e2418350abaeb3bf7ba145181718f90cacc7bd6280860d060631a0b6e5829c0b983f58c9cabbc1428dbf30c1a462f532c344871c941b64d180511</hash>
        <hash alg="SHA-384">153075cf8c7b7787c1df19e5e0ebdf0ac458675839236fdd6689001f076e31cf4553de7086066b0beac81dc1ab871fbf</hash>
        <hash alg="SHA3-384">71718f1e6be01e84151001db3ff77b85468cb8bd9a7349ffe534c47b62ade8376c49edbf54d8151456ca824f55a0e81f</hash>
        <hash alg="SHA3-256">5e2d6caacfa226b1646e6079697a1c380d4159c8a02a9f2385c78a3465577324</hash>
        <hash alg="SHA3-512">2eac0e2f2f607d782e7ee4b08524010bb48045792146f990ae84aa9c3b2ba486426df1be9a9a3916a44cce42c7f0b32d2dd0f6aaeac99307002a9cff230961f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.library/org.qi4j.library.jmx@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.core/org.qi4j.core.bootstrap@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.core</group>
      <name>org.qi4j.core.bootstrap</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6672ce9a8ccbee84d7e04836836f3175</hash>
        <hash alg="SHA-1">4c357337d764a6eac5aa127546c84f47b49a8f51</hash>
        <hash alg="SHA-256">c96d2f41ab0f5d15b2459762de6f4a69979a15f58d30706ac8004088df87e522</hash>
        <hash alg="SHA-512">74c7751fb418017627793c689800eebf1e22c509633fce1fef6545a318f8aebc50456f069444e9b2b31de25b5611d3ab8bb32a3d125d7829aa582ce5b33c65f0</hash>
        <hash alg="SHA-384">648582c7d96398db9116471900150ca1e26e9573753c44388f751d5c6e6bf19202efc49b35ffc9964a4d9d90837a71c2</hash>
        <hash alg="SHA3-384">8ae5d666e6fef9cb84d41e473696a5a40b85c84d01dc585fd916ede981951f97b3c62a236129115bdc3ecd16d28f1aff</hash>
        <hash alg="SHA3-256">024ba51c0c3d4a3b47833d71d6b7add5473be8db6ab55e72fbe87b96e61fe67f</hash>
        <hash alg="SHA3-512">5cdb66e38a160eb496b0323d09ce38c5db034640fc763433a267445a4a90d838e99dec2982ff6edd984f921b93ddad8be9c79fe0c1f76f621fcfdff6bf0158de</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.core/org.qi4j.core.bootstrap@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.core/org.qi4j.core.spi@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.core</group>
      <name>org.qi4j.core.spi</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a572d33df4ed69d51b9150be89db446e</hash>
        <hash alg="SHA-1">d4094dfc1526c2ef1de0a402f802f069c42ddc3b</hash>
        <hash alg="SHA-256">e20a027198ceb04948b116b49dc39968e77cac91422d96a1d481166ffcb63a0d</hash>
        <hash alg="SHA-512">13cf9e9d721f0d043fb002251ea0a54b8e0639201939edb26db7c4822dcaec2d7dd459354392496dee02f24af6d8a9507707a40807212eb25833f94848b06854</hash>
        <hash alg="SHA-384">cd070e0349ea2eb07be6467befc88f4e686b2b5765fec7fd106d6b138ad847ca4b1adfd8e11d33114e967b5532b212f7</hash>
        <hash alg="SHA3-384">739a0dc3d548a00595c111b9cbec3ba7089ca5b60c9702dd3991eafefcfdea60499124486c15f2db514264ec75f19099</hash>
        <hash alg="SHA3-256">dbf94364dcd8d540022c7c7b52b317b43ebb908ce4d791b290106182f22c1357</hash>
        <hash alg="SHA3-512">260125c1372f3e6a1fca0fe3c40258d280d26c2637dc08ec259aa8b4a14c1c85ddc7bb846a6213a5dbf807c4b08e5c01aceed37c6ad14c6e7ca9415538f00070</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.core/org.qi4j.core.spi@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.core/org.qi4j.core.api@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.core</group>
      <name>org.qi4j.core.api</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7f70962363e3cb0326088a792b2d94f3</hash>
        <hash alg="SHA-1">4c61ed71daad9fdbf3c47324f8b85bfed63cce08</hash>
        <hash alg="SHA-256">e2b46dd32965b48f0ae30a8147a23d2344f5878fd212fe0a146bc9e9ead0783d</hash>
        <hash alg="SHA-512">0c048d579906863cf25fd7c7fb7b5e9b56f1b996bea86039b0193f05171b34afefd376d29e919332d4e774e797ef5a64588968474e364782138d9b1206332acc</hash>
        <hash alg="SHA-384">7a6aef344fb87e9e7d727820585584e7f1745029bc15de522deb2206d85c8ceb6f48caca1b0e8ad88e2b5c2c855d9c45</hash>
        <hash alg="SHA3-384">1249f7d9f9450af6ee85112ac96e14a4d7f80e4a9d4c01063aaf129ddfebac44391b089a06241fd1aca5088002b649df</hash>
        <hash alg="SHA3-256">5677ed3c5f06e19ce97d51a63b56bae6374bb48caebedd31f4dde2533c253419</hash>
        <hash alg="SHA3-512">248a9e788dff4d5f39870c2794f62c857e7dc3f6a5b3454f3cb1f59f3ed0bdc021fd184d9dbaafd9e6c468b58d74d4384020d14401b13af3b72ddbdde851e50d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.core/org.qi4j.core.api@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.core/org.qi4j.core.io@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.core</group>
      <name>org.qi4j.core.io</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">02b048033ca318a5e72d9ae24d16ff50</hash>
        <hash alg="SHA-1">96b41d383333f52587a966a2a0f51ce766c6c6ca</hash>
        <hash alg="SHA-256">3ad578b9adfa52f4d32cfab815835aec7da14ca4d0cf383546f0448ac71efcdd</hash>
        <hash alg="SHA-512">ccf8f2c43f27b4c25d11ffa48bf8b0c5aedb53802d3a4fae81da7ad6f60ef67e99a9271df9784cee8f1ceb18e6cc97e72ac34157e7379ed68fbd8e6ffe67f3b1</hash>
        <hash alg="SHA-384">c3ce7b6cc53444eddcf3582c0a98a923b6fb518068e063612dcdb8d7bb0f87a9840014ecea18ff3934265d3f4c8e9d19</hash>
        <hash alg="SHA3-384">213125df147403c17cd69bb82810a87a6a9a828d13842fa259797083252cb07f063a8a51c27ddc3a843ba79912f7da1a</hash>
        <hash alg="SHA3-256">e5671bd07a0a28d33e23a9e9a37c8cb94d9fc7163682e00ca65d81ee21506b50</hash>
        <hash alg="SHA3-512">155bc7b5590cb533de9a30211f85c2321534e9e455cba018a58152e7ecb5c6c8338130382d632a9672ce3fdcfd9e2583c35fdc38c91bc991e1bf5bc9606d4eb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.core/org.qi4j.core.io@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.qi4j.core/org.qi4j.core.functional@2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.qi4j.core</group>
      <name>org.qi4j.core.functional</name>
      <version>2.1</version>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2311d5d6107f622bbe3b44e0186f9a59</hash>
        <hash alg="SHA-1">cd70d4fcc3b0301f7f9930f29681ac49d8302e60</hash>
        <hash alg="SHA-256">7d07704baf3b580b6d9fea320d2994fbfc7c2b77fae3db7ef47a4948fb964c81</hash>
        <hash alg="SHA-512">5ee22e122f795b87b9ebd83b3affcb67842b58264ec1c21494d81bd3cd5d9c4fb88267076c1603ca70e4509bc38fc731f066c3ca469dbcc75e3a6f9b7b1d34da</hash>
        <hash alg="SHA-384">7bcaf87b8409cdbb39089adce62aa9e015bd1e7657d6d212a7c56472e3c47659e3df7c12e0b815034951dcfa9d1c3a66</hash>
        <hash alg="SHA3-384">1387482c4608cfb245053b7d212b28e6daca26970c4f8fe1331e16e9d0a1d629966089fcef292744f461f7dac9d71da6</hash>
        <hash alg="SHA3-256">818bbca6fd8af132790cfd0283866fb863b879c54fdf9d4f1e6632705a4f1beb</hash>
        <hash alg="SHA3-512">2dc37e2c776fcc71d8c8f31ae42c67625e614f456a48fe5702f706755851305212fac63df492cda2977917e0adf6f90850619adda19f5e411960dca8d3d2f616</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.qi4j.core/org.qi4j.core.functional@2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://zest.apache.org/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ZEST</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/zest-users/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/zest-java</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tika/tika-core@2.9.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.tika</group>
      <name>tika-core</name>
      <version>2.9.1</version>
      <description>This is the core Apache Tika™ toolkit library from which all other modules inherit functionality. It
    also
    includes the core facades for the Tika API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61f7f9773d81f318c6f754fcaa794169</hash>
        <hash alg="SHA-1">bfd572826e7023dd6ceeefe1b4d0f6d3d8eef507</hash>
        <hash alg="SHA-256">1c5241991d9dcdcd74fea0a27600f31e8524a44c61a360e51564850367f96462</hash>
        <hash alg="SHA-512">efc6850e4665281681e232260fe33ac9a582be761f7af64e0489d5c15c5c3762a5b67c21536b7d0f157a7921674d74844e4779093a6ce190af1ee10e8eba08ee</hash>
        <hash alg="SHA-384">04ab55d8594224f7f7c3d65429cc0e891cf8ccc623154e19b565090e0de530a996506a12b95d6df4b1aede3099726804</hash>
        <hash alg="SHA3-384">dcb7eef5c30483fc6385e0491204c0a75404b2398fffc5791fbd9f3b991f36ceb82dcb6ff48a9a2a294d3ca673804e54</hash>
        <hash alg="SHA3-256">ae9cda5c5cb128887f62d0084c928b77b55bd76233bffc537bce70cabcd9ce82</hash>
        <hash alg="SHA3-512">1de0cae83002cd84ec8142adea333a1a015fc0a828c7f957b317e9a7d3b611ecd15888b1a3b79ada51261846335c2071ce749ed2d7f716fddaa2e93ff45f859c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tika/tika-core@2.9.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tika.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/job/Tika-trunk/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/TIKA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?dev@tika.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/tika/tika-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.16.1</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ed8191a5a217940140001b0acfed18d9</hash>
        <hash alg="SHA-1">377d592e740dc77124e0901291dbfaa6810a200e</hash>
        <hash alg="SHA-256">f41f7baacd716896447ace9758621f62c1c6b0a91d89acee488da26fc477c84f</hash>
        <hash alg="SHA-512">97eab31b073c5c57c8bcfaa2fec7b481a15a9a1f9ed864dfdc63b57f062b230557caa734c3133aca1165facb588c58db0185c07832241d70159e87a4bcf48008</hash>
        <hash alg="SHA-384">bd78e2eb3d005046d1329557d3a77529e98384d4d87940374eef432d73d5a06ef20fb7b0c44389de64496fe134dcf199</hash>
        <hash alg="SHA3-384">f9acc2f04f076328d17e2d0615da4367470b45b15f828008d8df57033401ae6b3b83b21cf9bc1745ff3cfe5a102bc48e</hash>
        <hash alg="SHA3-256">5d4bbe43356c92e3970b69892b44a10cc736ef8cb1bedfc753cc8df050520161</hash>
        <hash alg="SHA3-512">29440ccf2551b383c7e6cbdf78ef7784a421322e418da1be3fcd3251c8a826ffd5c6d1bea32b9c80e74744c035cc9cd8483e629e407110ff3133a05cb34bef93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.16.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-io/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/IO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.config</group>
      <name>microprofile-config-api</name>
      <version>2.0</version>
      <description>MicroProfile Config :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7488167caa7992717567052ce88c6378</hash>
        <hash alg="SHA-1">5d117d99750c2f4b53a5b49aaa4fce182d7b128c</hash>
        <hash alg="SHA-256">6c4642353e0390254c744b787b0a567d0a68f8ecfb84b50e4cf0666564a1e4a1</hash>
        <hash alg="SHA-512">de8ce71007f952e1ad5ec4cb431d3513f919c44056a1fd3f6bd36180ffed13b842c8cb08543299b984fc5eb20f41638ee1853637b3f6447503cc2fb874d98614</hash>
        <hash alg="SHA-384">0db9d41b5dd80889fb83eaf5cd072abe113043c0390cd132c7f6ce5c486d754a4c7b5e608c153850ef20c23cb0ff0e73</hash>
        <hash alg="SHA3-384">829b9dd096cb774e508210a1619122326b62cce3c027731e6db84a5f7e2c29ba7054301173312777bb5ff52afec6583e</hash>
        <hash alg="SHA3-256">816d66eb25569f5f19feeab522548a744f1cfe841d3bb7555781ae165b68c120</hash>
        <hash alg="SHA3-512">59d092383858f62de16254c7df97f7098469cfa937286917d596e63536f6da73d50b1a29096bdf37cb9296ba707691099929a51cc9d2ebfb0f6f865f816415a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://microprofile.io/project/eclipse/microprofile-config</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-config/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-config/microprofile-config-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.ldap/spring-ldap-core@2.4.4?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.ldap</group>
      <name>spring-ldap-core</name>
      <version>2.4.4</version>
      <description>Spring LDAP</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">607942651195ace60e1d50166eb4007f</hash>
        <hash alg="SHA-1">b7b536cc67bb5d589b5ca2dc9a25dd2da654bbd7</hash>
        <hash alg="SHA-256">741e6bd6786bdfb49319e83a30d4bab842f70a6ef1d48081c04f02b4134aef1e</hash>
        <hash alg="SHA-512">69662c2c7e89fb12eda5eadab7b672141aa7b9a6e22b80a5d3283e0be58940e24d652e23c77ca7cb47f3cdcb097bb2dce636986bd5855c0e54cde6770882b77b</hash>
        <hash alg="SHA-384">a4185152e83a79c571be1f63938fc0f4b33bf946277f78f0b6232fff175a77f8999aa8f0bf09ac7411db2621ffb1a331</hash>
        <hash alg="SHA3-384">d8913cc6768c078a9b0ffebc706a135136c2662b148a371a3bb979c3a0a9ac71b38461421f85ea8e881f5daff4dd9075</hash>
        <hash alg="SHA3-256">00622bfa63c84ee7c5ed602eaafd5d255e0cfa553e1a54aa1ec2ba2474d3e553</hash>
        <hash alg="SHA3-512">9c6970d91df0bbafe46970efc815ddd2ca7e15c6727e3b9ea9874bd50dc2bcbb5623c9da938fffa09247444b35b69ff48358ec26bb6509e84a0c5e71723f5547</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.ldap/spring-ldap-core@2.4.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-ldap</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-ldap/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-ldap</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework/spring-tx@5.3.39?type=jar">
      <publisher>Spring IO</publisher>
      <group>org.springframework</group>
      <name>spring-tx</name>
      <version>5.3.39</version>
      <description>Spring Transaction</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bf8fdd025fb8056049921f6369e17bf8</hash>
        <hash alg="SHA-1">dcfbf4d96f7d7a2c93d602c1b7920566d9e7da2d</hash>
        <hash alg="SHA-256">defdd2e72eb88729e40bc6773c6860d3c52136c46861d27806379562ffc4b21b</hash>
        <hash alg="SHA-512">07ed84095fc6ba9b144e83f34e9240769c91266f655be9804d94ba933886cc477536001d1363fe487d3d76b5f7e42ecf86323293d6654b9d3198dc72de2ac16d</hash>
        <hash alg="SHA-384">fa58219a03a83135b0d2b6d3a6daf6f89cee14c008b558f2afa68c6b6bdc9b974fdb2d4e0fdcc6e5160ae12af253038d</hash>
        <hash alg="SHA3-384">146b83f492ef8e52ad555b0c591c49bf9f15a798c11509c4e726180fb4d3dbee39e631bbc785a20926de8413745a7c75</hash>
        <hash alg="SHA3-256">eef688ac9c8b47d3efe4a472b708b14228bea7c6cac0fa9e37b42bafae7a8df4</hash>
        <hash alg="SHA3-512">0aa5126fcb0e86bf74f3bd509d15c5382a5c67b1ccc1742cdcd3ec1d42a88244dcd5437576f3abbc268a1506ee1355a1c02e4f2818d6a7d54b74edcc7cb674c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework/spring-tx@5.3.39?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-framework/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-framework</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot</name>
      <version>2.7.18</version>
      <description>Spring Boot</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0941c83c25204150f8bd73ae66c63fd1</hash>
        <hash alg="SHA-1">f6dbdd8da7c2bded63dff9b1f48d01a4923f20a0</hash>
        <hash alg="SHA-256">530f4e0fdfeb3a0e2b3a369d15cdea38fbdc1696f8b030c35a6ad65c27524950</hash>
        <hash alg="SHA-512">ff249cbcb7f240e6a03367ceb40a38aeb3584f79f62dc1e4713d6c024cd18c7870b370494f48aeb3b6f6dcaccf23057b5d5cba62eafba9128794f847c83a22be</hash>
        <hash alg="SHA-384">4cc8d00c03f85861c0f6fb5680c19771f7efba7cddfbe70bbccf8a510fad2bacd712658c3d9ef082903b3591a1acd41a</hash>
        <hash alg="SHA3-384">e0c92b1e87cb796b1c4f7215900b09926997995a2d716113194453167afa3fa6e9080d70b5a46255771d768a7a8b0929</hash>
        <hash alg="SHA3-256">a28d520293ac7bc6f04ed1b79818773b26e51fe954d3d3afee43bef4a91fe0c5</hash>
        <hash alg="SHA3-512">5c64fcb9758bc62a2c56f6067ff6e25eff045c83edd9c31ede00d928146c95d17da733b31a59a5f9b199224db26ae1e9008248bc39ecaa55ef770290c389db3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-actuator-autoconfigure</name>
      <version>2.7.18</version>
      <description>Spring Boot Actuator AutoConfigure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6fc81fb4748ef8be7250ccaf494b2f70</hash>
        <hash alg="SHA-1">1102948e3d7d3d63f64ad8de9864429023f2fae0</hash>
        <hash alg="SHA-256">dbf86740d1c5ab4554df9b18f22ae5be9a5b5712b86bf4ac4ece00e5b6a141ac</hash>
        <hash alg="SHA-512">a25bad39ed69c87d5dd96e5a29f7a51b047f46aa95c97c2e48f0a16ee6bf2ac83c1d6aae64f5f4c2adbcd051303e99c133e13dcf7231220e691445d714693b98</hash>
        <hash alg="SHA-384">cb5295620c5c9d92b88d1dacc8e4d2ac7ca603f7a93fa83ad34b64cb19857f6aab37b618e332533e9d50d122fdd31842</hash>
        <hash alg="SHA3-384">3c70624d3809b5060bc5143a0374ee750dd59dd405b805ead476c0c8d8e192e8d461bf6385a2471b912c9d18bd152cce</hash>
        <hash alg="SHA3-256">5f56156a53f86d18e39567150f97275c7e033d02134dde1aecb9054ac57dc183</hash>
        <hash alg="SHA3-512">20eb82e76c6baa4354ce53c884fe2c890bbf0177a6273d74327e55c4c418d0fa467f968d695a9bf28fa95686153214489083c3a441ca2f8756c6a7c6b6d84859</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-actuator</name>
      <version>2.7.18</version>
      <description>Spring Boot Actuator</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e5e94e4f5c7ac6f21bfad5b3986206ad</hash>
        <hash alg="SHA-1">669394598d18cf908ac5086a729ac331a321c38d</hash>
        <hash alg="SHA-256">b9518b9d91f3ff915840d31ee83e4d4713c69221f748a961fa03df90393c1f28</hash>
        <hash alg="SHA-512">b39390b97d486da3d609881c6f7c75679264371ed254b84d86bf2dafa1271e69bb9ab994479ab5eac921151cc22d5f4fa8cbf4c273432442a21fdc4de12544b9</hash>
        <hash alg="SHA-384">18cfd87f86ea8cd4669f68c050415c30b8c2be1970b469a1f17fa1074948e590de323d121440640c0b4f87388ee13ec7</hash>
        <hash alg="SHA3-384">414bee32ea9b631e451bc6f2441d6bfb85e6b4f5cb741e1f7d7f8a79fd11d600773524f8e2ff5b4897cfbd1860244ce2</hash>
        <hash alg="SHA3-256">a1f724c4894b10fbd7c7c1c4b6ce0bd19a094dd9bd25b90352ed55d9133bbd2b</hash>
        <hash alg="SHA3-512">9bbc397264a6056ee9e20fa7b5b416ecb3fad1c50bd72070b7377e27c1b3c341e08c76e85b58168577d6c1dae30f34ba104a48e25b27f4b9aa29487bf96565e1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-actuator@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jsr310</name>
      <version>2.13.5</version>
      <description>Add-on module to support JSR-310 (Java 8 Date &amp; Time API) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">712138e14895b15181e0b9af3292e222</hash>
        <hash alg="SHA-1">8ba3b868e81d7fc6ead686bd2353859b111d9eaf</hash>
        <hash alg="SHA-256">ef15ceddddc58dfbd686b6b7fd0853ed328ff08c628bd4a395734bec20ca857b</hash>
        <hash alg="SHA-512">8528107394baa9ddca5a182c8a99baffe650b3e52bf238c30d639a146413cdf24d872c631d5d8f67d3260c44f4575db3b338c8177756518ca109f92e72b389fc</hash>
        <hash alg="SHA-384">74b0a882cb7ceeb9cfc809c52190e20a9f16384f37f3ed8d11d2507ea6acf31ee0dad728853405dad19a7fb6d74c8935</hash>
        <hash alg="SHA3-384">a0f991810fa44d8662e85b3bd01057649474407f23223f0c42990461c191f6d047b7611588e09aab8863215e74403a67</hash>
        <hash alg="SHA3-256">bd7bf66a4bef0f485516f26f83d7d5aa42a06628e2afa98bc3de3499f342ff27</hash>
        <hash alg="SHA3-512">957374ef39359f03cbdec140f0237c79bd1c6987f2a0f75565338df04a8a65c39d9bb9af95c6b1ec0a65fe25b8504391100511b2f8f9d54016399f6ddf962433</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-java8/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-autoconfigure</name>
      <version>2.7.18</version>
      <description>Spring Boot AutoConfigure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e127e4ed0469cc5442d3c8e5e42e7988</hash>
        <hash alg="SHA-1">9cf147c6ca274c75b32556acdcba5a1de081ebcd</hash>
        <hash alg="SHA-256">1c4e0aadcb662b6149b536a2cf288003ffefe81a6cc69846e9f14976529a1b08</hash>
        <hash alg="SHA-512">9dd7de1ea8c2a418c99abb3fbb08b516802007bb4482a48ee8ba6eb20e6797f28bdea20317fee1fb9a951e70eebdc905259541524910d8fe4920244e3f800d61</hash>
        <hash alg="SHA-384">9146aa2bdc97ade209219c1ef1797739dc9c35a372349036cbbc3bb10056863c4bf42c75b6f1d63cd0dcc16c4f53dc3c</hash>
        <hash alg="SHA3-384">0b56b0ce3542507bb9c25bac9c594262d88732f7855a7e862d663c3a8314a2ea1c083786c0d6bb7172e7e7e2b056a991</hash>
        <hash alg="SHA3-256">4fd2e96cca4070c23c4210cb244b9673a5d8db742bd1495d8ab67a3bdb5334a8</hash>
        <hash alg="SHA3-512">6e06e174976f7de71828db0712c52cb6ef87b0913c946a00459bbfc4ecf93928b1676f22c8bb4af1833021f0131d020c73daf458e70088abb78c7c0c6116d92f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-autoconfigure-processor</name>
      <version>2.7.18</version>
      <description>Spring Boot AutoConfigure Annotation Processor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fd64e7ab45b1326e4a24aeeead1f49c7</hash>
        <hash alg="SHA-1">a3a8a98e8c61ad1e664a5b7b9a62ac133585ed59</hash>
        <hash alg="SHA-256">3f7df3b16cccdfca6f059f2e0d63b861744282273f2df3dd0ee653cf120f7ac5</hash>
        <hash alg="SHA-512">95e506d5bd80d0be44f2b5e0c3b05f3705acac7f51f8d0663a7f6452a7ea15f0599618bacbf57b525b844ede0729a3b98ade18d119c034a6e7457136981d0fa0</hash>
        <hash alg="SHA-384">64f80460665a81a860ef1c34c0a76d274b5462a0f1e9502d53a2fd75703ed98c15db12932372fa0e2f4746ca2bb8b425</hash>
        <hash alg="SHA3-384">72f93e8cd0f5ad4b0e961d50d095cef415d83a6df343853d99c6b7c8542251f2e82cbca0593bafea013b97f8eca47958</hash>
        <hash alg="SHA3-256">dd6b3a54d6cd1c38274898012ed945861ac059906c9bbfe0d1b4cfcfafec8e51</hash>
        <hash alg="SHA3-512">b404b528005b00dc89fea896cda63017c4f41caa59683dc1dfe8e91789656d319da063a27a839868e39b52e418b0412f530216917c2d74b9b66dfaf9e6123cbb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-configuration-processor@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-configuration-processor</name>
      <version>2.7.18</version>
      <description>Spring Boot Configuration Annotation Processor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">46f23c11c49166214396335e16ae3f45</hash>
        <hash alg="SHA-1">899128018a7962b3e4be665910bae65dff08d1b0</hash>
        <hash alg="SHA-256">79dc3480e94fe708b817097ee2745f8b1c19d650ce6ddd153c2f2ab068674dea</hash>
        <hash alg="SHA-512">a16cd8a5aea182f72e0c7b8245423add55430f461cdd996699745ecdafeef6ac8bca28e35be373bc931dbc1d5530da34ee3bd66a1e1b02ffea341ba9a97bc395</hash>
        <hash alg="SHA-384">599d4656b97dc65f3f1a2d977700e60f064dc2a618bad745fb035ccbec6db486cb759d04d827e65753ca3b6fd9651512</hash>
        <hash alg="SHA3-384">2950196ef2b853340dc213af4f7b5e7cadf3667b882778f82f66e4060a86a0dac2822698cc2af9295c5002176f298477</hash>
        <hash alg="SHA3-256">9d103eaa14e20239c0a67eb294e1870ba4672bbb353e514e018242ba0f033765</hash>
        <hash alg="SHA3-512">5cf595bcafb182ac4de2c630774d086b646f4b8018abd35d564935c328fe18e2ca2ccf7e5b4dc4321f1953203cb4f51c323e2612b9184ea13e75a660437701a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-configuration-processor@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter</name>
      <version>2.7.18</version>
      <description>Core starter, including auto-configuration support, logging and YAML</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">03fc89fcd959a332de7cdc22e6bdc60d</hash>
        <hash alg="SHA-1">e56b75105f9ace6df154fd47eeeeadc2f5791e56</hash>
        <hash alg="SHA-256">f67a5d913defa764295b6a0d8d13573624e437eb34e97d88c0e76bf181656071</hash>
        <hash alg="SHA-512">de5c7fcf8e96a942cd13b2e553cb8991cda8b5e6994287dbd266430771a4e38ceb34b03cf9c1028172aaefb480b7814b6b3ec82026b2aa7dd0336ecbd50b188f</hash>
        <hash alg="SHA-384">5120a2b1285383f0e8ffe7ddede39010d4ecb38a1367127f90d2a6cb05bf46aa98df109257748510b5f78e748df1a2f6</hash>
        <hash alg="SHA3-384">1ee1101c9eca71d9ed86f47d00d38b62940fbe16e1014468ac2f908118e05323b0775867966624e32354ca0d24f0f952</hash>
        <hash alg="SHA3-256">ceae29162e195a7a50807d4e9f0c6457b77de1776c9af60e6b3244e60c27774c</hash>
        <hash alg="SHA3-512">d961384bccfb30b38ca912de4b8a4e09859943d43a483a2a713475cb2cbf3cb9929834db12baaacc16907a5be894713b7500373f567034f6bbe7c951c0315891</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-logging</name>
      <version>2.7.18</version>
      <description>Starter for logging using Logback. Default logging starter</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b812106a59ea242570f1c55d71982495</hash>
        <hash alg="SHA-1">19f7c255ba5255116f58c3bbaf52c7b88ea6af3e</hash>
        <hash alg="SHA-256">202c0894dbfdeff7be005597ff98288133a62fe7f5593be4938400482d19dcb7</hash>
        <hash alg="SHA-512">c745b6b333b0f13295c828bca0639846ae33391bd5beb842f67a1086e2ef18ce44ad360926227db4c142b376a61dea0c355847f04cad84ecc4259ad391092211</hash>
        <hash alg="SHA-384">45a569a6247cde6fe45870ea2cf46ae29b061dc85a7a595ac766780c2a52cd629d5f522d0357d6fb2faa33a9581296d1</hash>
        <hash alg="SHA3-384">4f1d032cce6a320626c63a52bdd651139933bf95119b501a659726b69b9bbd0233e4432062fd4ac69c12d850f63032b5</hash>
        <hash alg="SHA3-256">89ab10e08b8263e2820211cc56980831393a8549992e1b2d9a0d26050714e29c</hash>
        <hash alg="SHA3-512">50a3277611644acd6e67a6c6130fd305429cfd7678cb410e8b906d6fc7b3e61e165f70ad4e96c31bcd5fde43429c30fa97279afb065b38167aa01a8510db3d87</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-to-slf4j</name>
      <version>2.17.2</version>
      <description>The Apache Log4j binding between Log4j 2 API and SLF4J.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">14b27a4266c6d71c949cb4591ee463cc</hash>
        <hash alg="SHA-1">17dd0fae2747d9a28c67bc9534108823d2376b46</hash>
        <hash alg="SHA-256">9bcfa5273527b950d79739d11e8f8080cfc881908fa2a946b4e891c0293094de</hash>
        <hash alg="SHA-512">c90bbaacaabeed35f80be4d723b54234fd137413888870d6e1c1b16c067cbede57d637a18f0d25421a9c419fc55a9c388ce235077cfd6497178dfe67c5d398e8</hash>
        <hash alg="SHA-384">c8374c05542d5a04a831a66596fe31cf385a303643e724840a70508aaa98e4870234aa8a26ac1f4fab167fe45bf34e6f</hash>
        <hash alg="SHA3-384">25c843c30137e459b94476843d8312a49d75b40d80469b1943b44a6bd2fd51f6b6f71b23d4bc559f91ae0f28763c7b0b</hash>
        <hash alg="SHA3-256">d0e8a8996e79cc881a10a55b4887436a9458625007f03b071230d1c4e96b54b6</hash>
        <hash alg="SHA3-512">6d0ec7c51ea40dee55c3c9a60ec198fe7461fba1f6b30a88b866608e83f47fb1328754b8fe33f3993f8c1ececc89c9ea83cb8b266f36fd9c1b8095946d330e2f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/log4j-to-slf4j/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Logging/job/log4j/</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/log4j/2.x/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOG4J2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-to-slf4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.2</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c39d90e7819c92c111e447bdf786a90</hash>
        <hash alg="SHA-1">f42d6afa111b4dec5d2aea0fe2197240749a4ea6</hash>
        <hash alg="SHA-256">09351b5a03828f369cdcff76f4ed39e6a6fc20f24f046935d0b28ef5152f8ce4</hash>
        <hash alg="SHA-512">8f986171ee6ca94ba8eacfc83b5b45bb87221c176076eb152715fcb4e1f351c4e9f88d56420fc02ee166ebe0b896fb52eda21355dec49302ab3e83a56b245d04</hash>
        <hash alg="SHA-384">e4ba0afbfd91ef295e6c1c1edfa7854e216a29705b5c4b520f803697ae6badf3630c5d55e56394954988fa88e62176b4</hash>
        <hash alg="SHA3-384">ef8ecf2f848bcb18790d79b1d4e0fac0582e94f226eb8c7039d7316bd9f4c472556a4052b4a93958eb1248c7a3756433</hash>
        <hash alg="SHA3-256">bdcccb79127c28c0f42374eeac65891e7c0d02f18e1469c705e946f74cfc89db</hash>
        <hash alg="SHA3-512">14a4d4f38dc5392f378e006994780d686095e1190d476fd18efcd4211bd4dcd64b699d79c5f4351c51f2d26a3ab98b4a49745df6dbd404e3bc981797a5b8c075</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://logging.apache.org/log4j/2.x/log4j-api/</url>
        </reference>
        <reference type="build-system">
          <url>https://ci-builds.apache.org/job/Logging/job/log4j/</url>
        </reference>
        <reference type="distribution">
          <url>https://logging.apache.org/log4j/2.x/download.html</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/LOG4J2</url>
        </reference>
        <reference type="mailing-list">
          <url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar">
      <group>org.yaml</group>
      <name>snakeyaml</name>
      <version>2.3</version>
      <description>YAML 1.1 parser and emitter for Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a1c2ee8923dcd6bd6d025751af5df37</hash>
        <hash alg="SHA-1">936b36210e27320f920536f695cf1af210c44586</hash>
        <hash alg="SHA-256">63a76fe66b652360bd4c2c107e6f0258daa7d4bb492008ba8c26fcd230ff9146</hash>
        <hash alg="SHA-512">1c9c78f0d102ae49a7c06f9e20c6a79a4fb9a2af962230ee6e136bda0caf10dcbb9deadc1c3ab15f74a4982ec8f8266217115e357329fde5b3f4f1858882de0c</hash>
        <hash alg="SHA-384">77b1d06e83fd51b83b13372d5ef2eb43c5a66f193db857cee947ae4e900e4a4a0c66a8074435984b9a0b007a69cc2b4f</hash>
        <hash alg="SHA3-384">550c4e7a119fd690f750317dc0e20ad7bfc7fa28fa0409fc572bc745d51340a60e9e2ce2af97f458daa561155130bb97</hash>
        <hash alg="SHA3-256">d1b540ee39c34ab1484be27d2dd56a14aa48f88668905f9ad176932f4b2cd5d6</hash>
        <hash alg="SHA3-512">879ccb34343ebd4ac4888091d97f393c5f75cbb066cf8cf1b9b3eb03a3442cb17326c60bd0db1403aa66ed1f0a5a0d548c96dbce74ebc5c3d6d93950f24b417f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.yaml/snakeyaml@2.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://bitbucket.org/snakeyaml/snakeyaml</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://bitbucket.org/snakeyaml/snakeyaml/src</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-web</name>
      <version>2.7.18</version>
      <description>Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0bfe77aa7415f3b86d70d41cf425ccd</hash>
        <hash alg="SHA-1">0dd62ea85098187b4604e78dc15a7ff87dba173d</hash>
        <hash alg="SHA-256">a74fab5f826b600e3c3f4cd7028c5c982b0bf1b849673629cbb758ae790a4c08</hash>
        <hash alg="SHA-512">599747fecbb1d9af1da3d3738556dab9d687a7012943573834fea81d61f0f7d1372db73be3d11775aa1fd08276ed154c933615c71955814e6ce33dce45c27d28</hash>
        <hash alg="SHA-384">faa13b7f3a35f0472c9fa16a5533caeafffbdbecf28c9c05cab7d4453c683001b75c41bfd36f51154a1cfff2d254dbe5</hash>
        <hash alg="SHA3-384">553e85f6c0f6afa1a35a2113350ee9fee9a6ef01c8c6caf699cf48099dda8dde8e8df1ab40f32cf481c56ec1dbe33333</hash>
        <hash alg="SHA3-256">b6ba3e42ef8b12d12acf5e3a04e558e214a2b4f9d0aa2f24fd60f1998614da6e</hash>
        <hash alg="SHA3-512">ccb25eb89d9002476667aa000e9197cd6198f9b99b6648a8c9b84c4003b3950516e714c717b577a9807f9237057073e953de37cb654f111556202de70f90599a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-json</name>
      <version>2.7.18</version>
      <description>Starter for reading and writing json</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4227a48b68fbd7fb37dd079ad3217226</hash>
        <hash alg="SHA-1">b6d9ed5cae0c1929a9e561bf4799a3dc93a10db1</hash>
        <hash alg="SHA-256">084f592d522dfa36790fe08d4d0b9cebe6683638889834ed2f885f3c42fecbf6</hash>
        <hash alg="SHA-512">77fb718087d19cebe385ffd2becd0fe2cc175e3d65a3e0e61056f08c84420b1e8bf51190dc8e6dc8c052771b80479a481422b9dcf329433d1fca35b5d200e593</hash>
        <hash alg="SHA-384">8509d70a003aab0df0115dc337c1206d10e44215f88a8c445df36246234c8714f6e25bda538426e46726981868fe780b</hash>
        <hash alg="SHA3-384">4c0545f2fa3f907674f69077d5799f80e510bd1ab3a42e0a71e07f811ddef448db09886ac7da998ac5e76e62485e7345</hash>
        <hash alg="SHA3-256">136a09d10ac354abaa5b9944242dcf7ee937fdab38354ce1c22cfb1c736eac09</hash>
        <hash alg="SHA3-512">821cf54d3f2e422ef4fd66e963e9b350d8363e09b007e154461d2396d6e0f7c1cdffb20f0fc90976cf9d1a26f7d03ea488598766fe199b8539689c2c5a2a8715</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-jdk8</name>
      <version>2.13.5</version>
      <description>Add-on module for Jackson (http://jackson.codehaus.org) to support
JDK 8 data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3803e35b61c5812310fd093c398b43b6</hash>
        <hash alg="SHA-1">1278f38160812811c56eb77f67213662ed1c7a2e</hash>
        <hash alg="SHA-256">e58761751fea8a00dc626aae1c5f1be38c5cfd487aeb333d933a4ab5f5a73c55</hash>
        <hash alg="SHA-512">c6d7382ea253849d6ed41d8a8aebb022fa6fe6ec715541add4a17108e6499423ceba053d0e92c8efdd1b6b69ea4e1d8f09a08ea450fcc9efd8849a647fd373f8</hash>
        <hash alg="SHA-384">b25a172a06638af1db197b99d65940214052958ffc815c4a68e80623b686a2ff4287629914c0f268205b9e7847ddb865</hash>
        <hash alg="SHA3-384">e53fb0072eff906a865ced67920e08e2b1ab59d24c169ca3308cb0fd3e680989b399162c99b7c3282a07bdf57eefddb5</hash>
        <hash alg="SHA3-256">26271bc0f9f16fcc0fcfc84f3c58ddbe34d88087144cdb0e2ccd5afc825bf96c</hash>
        <hash alg="SHA3-512">feca9c9606e01296be60aa86c5bb068f6886bb9bb00e18d83b0a5676f813ed1dda7e41cc09b96bb223bdecad45a0f350ee32089fa4bd02771302e65b9a0f0403</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-java8/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.module</group>
      <name>jackson-module-parameter-names</name>
      <version>2.13.5</version>
      <description>Add-on module for Jackson (http://jackson.codehaus.org) to support
introspection of method/constructor parameter names, without having to add explicit property name annotation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5c28a6ef0d19bcc62976eea35714047e</hash>
        <hash alg="SHA-1">a401a99e7a45450fd3ef76e82ba39005fd1a8c22</hash>
        <hash alg="SHA-256">e5fcf17369885065ddec9a9cebead8597c55de252dedf10a3c14eeed8affaca4</hash>
        <hash alg="SHA-512">b162a7524bcc424d55491bceed0fc8ba1993a6383f5035c68723f3ed0f48a4a9a8f281202d756a423de4562c343e8440cd8b7d14fa4d25140b934e3e75ca5be4</hash>
        <hash alg="SHA-384">51080f18b0d6f310aff4b3a200fff1af7250761d1d35c13fc5660d31bd990d72799231d8b6ca21bfbb8c0fca0caa9e5c</hash>
        <hash alg="SHA3-384">ee86179d6a075f6e93ea261429bfd9dbd6b6e723fd13dc23902cc577fd0c12277c8cd38e47c96f2df152d060cd9972ce</hash>
        <hash alg="SHA3-256">89b31b074f3d6d18fcd4141fa60567c080f3ba748df866d2aed119a2b30c3561</hash>
        <hash alg="SHA3-512">826f34f3042a1417605f125038e0231d47b42dd6808b6fcd6fd0ffdc4adcaa8a81ef23b58a64d3d38f0c91d67d0e5bb671c74f14f8b82460d39fa12f88ba1219</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/jackson-modules-java8/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-tomcat</name>
      <version>2.7.18</version>
      <description>Starter for using Tomcat as the embedded servlet container. Default servlet container starter used by spring-boot-starter-web</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2080ad5020671b7884b9564006bd09c</hash>
        <hash alg="SHA-1">c56e50e006448e75a8bde595dbc754ba294389af</hash>
        <hash alg="SHA-256">e4a44478556749137f28001c35d897efff31f39161606589cc355dcbf797c6f0</hash>
        <hash alg="SHA-512">6fb711f39e435c113e2547f894e1875b8cb936e33daca75d92f164b903124979917418e810b1d523932f374b0a1a1614f6078d135780e3b8a305a381608ea604</hash>
        <hash alg="SHA-384">7da3ee007874f94a583e57f0e30e636a7f749d0c312441fab4ecd4c989f5a5b5b3bbb888aca2ad0bacec7b358cda0ab8</hash>
        <hash alg="SHA3-384">c50fed31b5463dff64c1e2f9af8361082cf27757944b1bf6b44dd76cae8d979ab78b5463b3b9a99f54766446b4099709</hash>
        <hash alg="SHA3-256">2d9e204a70f2ce510e0d62f79d0fa69e75447bc75d156363f8cb7c8804add3d8</hash>
        <hash alg="SHA3-512">e3b07c20ac524ca8d98dd75b5c95050f5d4f4529e7459019b46137400c4b69287c38ce9aab6e170806db66f92ef988ff866b0358f6bde02a033fc652dcd7c731</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.83?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-core</name>
      <version>9.0.83</version>
      <description>Core Tomcat implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d4e2068023fe800fd22a9fe2529c290b</hash>
        <hash alg="SHA-1">d771e4343b0515c67dab2a09fe02f5d47550153f</hash>
        <hash alg="SHA-256">4ed404d5dea8652846f3c52c094764c2ec018f28a3561f1d27df700f7aa5b376</hash>
        <hash alg="SHA-512">10c615d33ffbc9d0500abaffb1faff1c034df93736b5c64fd3834881ebbb23564e3228800a9297fdc8d028c527c63feb8ec742385c778babca52711a921bf9ef</hash>
        <hash alg="SHA-384">074b778ecb57d5c7c3345ed3bf0e11492a64d37a66c1463d64811457219b19759e361cbcca1dac552924d63c683cc93a</hash>
        <hash alg="SHA3-384">bcc650fada85628c879a8844e59fa33a81353c0d8c3ee66fa9eb0c76077e54106b54a3073ee29974d3bb162ef2ac9f2a</hash>
        <hash alg="SHA3-256">15f748fcff0a1c6a5a93db4b2d207113d8067662fe3a8fdd6a26e8fcacace13d</hash>
        <hash alg="SHA3-512">d07df26263fe4ac5ded2d002197f18c99e74c8751446816f5f59928cc8e27a131fa992738e5ed8826c7b1d5ee94982edcfef94c09b6aa86b836b2d663d749ae8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.83?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tomcat.apache.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.83?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-websocket</name>
      <version>9.0.83</version>
      <description>Core Tomcat implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3ba44fc9bf48656f448a565318ea8c46</hash>
        <hash alg="SHA-1">9af4b7450296bb4eff93b2ee3e52ab69d07512e4</hash>
        <hash alg="SHA-256">b78130b05960761992787edf2cb4c0af18d1fe52b35119ad63712af137d7eb3e</hash>
        <hash alg="SHA-512">47e6e61fe3ce4a7dee30c1bb19bd1303ef20167a6ca2013d0a060eab84d00f68c8e6bddee615a255cd3caa66dc99122c127e92270415dfa69d822778c7142042</hash>
        <hash alg="SHA-384">928e00e9b8710bb1c265498081e72f338eae47fce5bac681b1c30838dc21148550cc177b6a14e87ebae50c6532ad6f55</hash>
        <hash alg="SHA3-384">e7a418167921ea0d6ab9bc89d78eb44ff686f0417eaded7f22170bc81d1c030abaa649e83566ce04f74842cd345a8a75</hash>
        <hash alg="SHA3-256">5b6f785b3c1feb2ed90a977e152770145ea57774f6941560049e998e8b11a306</hash>
        <hash alg="SHA3-512">bab14d7491ddda0943cd8d2655f52e0aa54a289360a2444139f291621339f7bb933b636bd944b66c95f24c8159ea759f4f0530721fd53c7fa2b9db8790f02798</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.83?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tomcat.apache.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.7.18?type=jar">
      <publisher>VMware, Inc.</publisher>
      <group>org.springframework.boot</group>
      <name>spring-boot-starter-validation</name>
      <version>2.7.18</version>
      <description>Starter for using Java Bean Validation with Hibernate Validator</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67cd195146e691aaaf3d1724ba6fb349</hash>
        <hash alg="SHA-1">5c37e1806f7b09b2c0efc7317fbe16be65ced66e</hash>
        <hash alg="SHA-256">172a1d733322cb2b48b14455f1c9a75dd8f13dc6da086439384568fe231f487d</hash>
        <hash alg="SHA-512">bbed0a63344ff5b9e9acf289f81583d4ba05cda3aabe6b9e82ab85ca3493bdd28e4b5623c66048f22c51fd2064447a5547eb90d28007853a8ee8df38e2bbff8d</hash>
        <hash alg="SHA-384">40bbe79545230cdd0fdfb776d1802c2c16f286ea68a1181199d6222647c9c61c92ac8293c51ef88ea26fd0ae103c7075</hash>
        <hash alg="SHA3-384">5424ee268e5b8194b0807fcd0bc4c14c01de441b14e4683e3238b716e15f7da4ce12410f30cdb5a933b802f9658d8f14</hash>
        <hash alg="SHA3-256">e634e04ec072ead8dafedb146508426e99a802dc85bb9a9d1c6170222a3eaef9</hash>
        <hash alg="SHA3-512">5bc27ecb8c00e08c9b56e16431d4e2437db092349449cd35280ba58a01ead9f03ae9260f4f78fa12e501ba0a02f5e8137645f0681c60a5dc181c1fc284c59c20</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.7.18?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-boot</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-boot/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-boot</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83?type=jar">
      <group>org.apache.tomcat.embed</group>
      <name>tomcat-embed-el</name>
      <version>9.0.83</version>
      <description>Core Tomcat implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eabd7f3ade6cb0cf36f7b238897b8f1d</hash>
        <hash alg="SHA-1">b0cdada70099c25f45fceb48e1ebce60d138a5ce</hash>
        <hash alg="SHA-256">a82c4cf8cf9e88d6891cbb4cbcb9f85f788e147c464cbeba15a2c83276f3344c</hash>
        <hash alg="SHA-512">1b727f18be3c943138eb0ce3aeba4bccae4f26013ba4f629ad44a57a205d268bc7fcbbbaf6c5ce3e0d6343840803abd0115945caec9d6d2d395fc320dfb30678</hash>
        <hash alg="SHA-384">42a202954d17ab4c0cbfad8071db442a8d5f101c74f6475fe743dbf9d5cf2237300c87e3b47f0ed3635acdddc734160d</hash>
        <hash alg="SHA3-384">2c5b2e47917d3f2766ea17635279b19c157744123830fb3e869b1022760bf208e70299db5982b5dba30912b6ad29fb7f</hash>
        <hash alg="SHA3-256">49fad43d1491cfab441f30db3494e871463c9cb8388c2b87ec2348188de5b5a5</hash>
        <hash alg="SHA3-512">cb43566c495e35a64055b4ea07d2438c8bd3e5a8666ba71c8c8c1acda83502912b043bb361c9acf1b803f4891a5d97bd749b11921226255575c68e9fcab2b7f0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://tomcat.apache.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar">
      <group>org.hibernate.validator</group>
      <name>hibernate-validator</name>
      <version>6.2.5.Final</version>
      <description>Hibernate's Jakarta Bean Validation reference implementation.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9bce6e6e05f6975c0d414a5e935c8107</hash>
        <hash alg="SHA-1">a68959c06e5f8ff45faff469aa16f232c04af620</hash>
        <hash alg="SHA-256">8d6d89c3204b30a01dc248352f43dba196140bf4adc5f437f63e2ad62a3d2144</hash>
        <hash alg="SHA-512">7c29acb57e7ac2c46e47c4f4b716f5518bdfcba81bfad333764894c6b7be679fc8cff1c3598b9210bfd0da1b704e8b11f9f71e0ed7e57bf0eea4fd76b65458f8</hash>
        <hash alg="SHA-384">db1a36d00f1e07ffbdb8bd2a24dfbb07e97703f6054ec86e8a2ba3e5848fa83955fd082c48436c4aab7cb864ec5f12c0</hash>
        <hash alg="SHA3-384">46a17e6d4fdda01a91bb5921001506169fd4bcaf8c0aeea5f959480eecad3b2b258b361968f12cf8ffbe454fcf5562fc</hash>
        <hash alg="SHA3-256">7523582fe81c98cff0fd8e2229eb1f8a703ef4e099d8af20931b095a21277b8f</hash>
        <hash alg="SHA3-512">b1478874a387b448085c6a1e0012ec5cf3aec808285d4ec6386cf15e1309d6d8fb0f21af9c4df8dc0c1bb50887ca4f90f85fa9c55250ea5541a1403f465cd073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hibernate.org/validator/hibernate-validator</url>
        </reference>
        <reference type="build-system">
          <url>http://ci.hibernate.org/view/Validator/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://hibernate.atlassian.net/projects/HV/summary</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/hibernate/hibernate-validator/hibernate-validator</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>com.fasterxml</group>
      <name>classmate</name>
      <version>1.5.1</version>
      <description>Library for introspecting types with full generic information
        including resolving of field and method types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e91fcd30ba329fd1b0b6dc5321fd067c</hash>
        <hash alg="SHA-1">3fe0bed568c62df5e89f4f174c101eab25345b6c</hash>
        <hash alg="SHA-256">aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b</hash>
        <hash alg="SHA-512">7fc4764eb65227f5ba614698a5cf2f9430133f42ec6e2ae53b4c724ee53f258541a0109fe0659e0b9e45729b46c95c00227e696b8d1addcd772c85f877658c9a</hash>
        <hash alg="SHA-384">28b4780b2353ebc08dbc02c9a343527a9062a0455bfb4ab135cb639c03e5dfd9c2250a835c44d5f17d275667c2009694</hash>
        <hash alg="SHA3-384">b194ace8f1f49f410286bd859866678b95a1b2c6f73e41f48291eb7438dffea57aaa9b177459038b6997771ce4d1cee1</hash>
        <hash alg="SHA3-256">50234c94efed4c816eb77bd2f70b869c9f89ddf8ee73dc25e354f4d0b81b3e1f</hash>
        <hash alg="SHA3-512">9886421726066b313a62283a6811b76d904ea1c1e9b7b2d850cb47afa189b03cdef053c8f7f6b79e77f2269c45f8cc2ed75c3389e96594b50987fef311d5a25f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml/classmate@1.5.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/java-classmate</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/classmate/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/java-classmate</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-web@5.8.16?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-web</name>
      <version>5.8.16</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">137862bb11c72092dd94d14d380fc784</hash>
        <hash alg="SHA-1">fade885f7f9df056dd5e3592d949e888cd82397d</hash>
        <hash alg="SHA-256">fe0843587f4dff188a1ecb822bf544c5f1c1ee46c757858a5a585039d8118304</hash>
        <hash alg="SHA-512">045c9da806578b9fd371340c65e692e7e8b034e3a46168b8850aa6c2cfc0e2b127506376dddf74e4822b71fae38ca931bc2c80e1a1a7e97c5ce64b6ecc0cbb67</hash>
        <hash alg="SHA-384">9f6096de45b6ed43bb6c492fa2af3198d1110eecefa962c0edefb16e34e4803c37af43b93545e941e2b970e00f1e4dda</hash>
        <hash alg="SHA3-384">496c70d44cd53d28844a314d3d543359ea70a742f6a466bbbe9ee7004fe60a6a6d9739d55e03cd42d40232ca0259b98b</hash>
        <hash alg="SHA3-256">230ea18fe0d7b3b3a90add52a7826d34286faf74ce10da1c97ed5c2cc3f3b9ad</hash>
        <hash alg="SHA3-512">cdb9b3718c13f89bdbdea2d522d41d1c2ccdd1606110cbdc918ec126d74e12ccb2c45952778a47f078187d471d414de239f66b5ed1070e1c4f25e0185181f4f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-web@5.8.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-core@5.8.16?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-core</name>
      <version>5.8.16</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c70ae997256d27ca6fb1c7a8b24e4248</hash>
        <hash alg="SHA-1">b3d21a1f967db39dabaca487ba3fe58972e6a9a5</hash>
        <hash alg="SHA-256">3be7d217048f5ea76fd6d0eddaa3169ad3bee0bba9c456e27670ec37ca33c3fd</hash>
        <hash alg="SHA-512">c8c48f735739c2e7bda912f8fdf15d7b5c193260aa0c990beae5b905f20bfdbfaf4e3d15a58695d764c160e289be6c2205a580a473df76cab4aaa4cf50f8f912</hash>
        <hash alg="SHA-384">3df88ecb4c6c4ddf6520190a37e7509435c44cd005418f8d492dd275579eef7040b32d899e223a32a5df0c982b9a811a</hash>
        <hash alg="SHA3-384">474ae3a8553e14f4b6958c7fc9e7c954d63a721110a81cb7b715f63d2ef052b670a6d3f11dfec4d1d7b424abc51e3b56</hash>
        <hash alg="SHA3-256">d02eff8f24e093db24709f233ec001460a99e202f7732b0892ad606049baa73a</hash>
        <hash alg="SHA3-512">244ee8dbffd8dc07951f2f7e4db083083cd0d0f1bbc19a038edff87314ee77d6c59a5316da433241d98ca99ee663fe3b8eaa6438fd964e56614676e3a5e992a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-core@5.8.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-crypto@5.8.16?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-crypto</name>
      <version>5.8.16</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">987ca02bb810d32c7d86968ff84e887c</hash>
        <hash alg="SHA-1">340f3bb882bea8e9eafc66671d4c8e50f11867a7</hash>
        <hash alg="SHA-256">e47acdd647997efb36609698b64a2bec37fa119210f88fad813aa53610433cfd</hash>
        <hash alg="SHA-512">bae232ec3ef888a3b4a42649cfedda64b6062e11345328849ef51d2e5b29f95fa5748ce00fddd82ddd07c637c0c27f436993722a3a106e8d46ff2d114ea16d03</hash>
        <hash alg="SHA-384">f3ec2d63ea989a5c05c02a10e3f33f125b9e645ee0c0f7a61d6b7a71a5ab128521eda64599db97b97a7cab4223c1c401</hash>
        <hash alg="SHA3-384">9e78ca33f92293b93addd854745873f8fbb398b01c5c4d2315195dfa6567734d0f1f821105cde0f055123b439df5faed</hash>
        <hash alg="SHA3-256">a54c13a4f14237327ed1ddb49c09fd04dcc7486ae37a6eb01aa1a7d3254e2c09</hash>
        <hash alg="SHA3-512">7a10dcf74d84044e3e1a5962896bed91241658a66e4598f40138eff8b3c8b56efe5fc427e03eb98a3afc5b9516428d52257edaaa87769922e50d1363d25cd3cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-crypto@5.8.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.springframework.security/spring-security-config@5.8.16?type=jar">
      <publisher>Pivotal Software, Inc.</publisher>
      <group>org.springframework.security</group>
      <name>spring-security-config</name>
      <version>5.8.16</version>
      <description>Spring Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1e386c77733c252f4b9a80904ccb1c00</hash>
        <hash alg="SHA-1">73bff85307254de9f30514db587420110aee72ee</hash>
        <hash alg="SHA-256">fb7218cd28ca5f82bafd4cc038d1727fc99ccfb0f3b38a8fc0545a93e9b2f8b5</hash>
        <hash alg="SHA-512">4a45cfa745a00277c18ddda65b1b1a2196c11c49f17e611847a4d77b880a950c2762e4a9c97f880f504e39745100f615c2df65dc7fc638fc35882e62f2d262e7</hash>
        <hash alg="SHA-384">26b1377b0efd7eed29f4b7c37251e0edb4bd6024004fed3cedc7e2541f8a05a8274792c9a6e8cf3f484f5c21bd8acfab</hash>
        <hash alg="SHA3-384">1ed5491009dca9eddf8318db196cbff184b47f49e880ea16f213c66a6bf3d2426ad8a88ee8d095ae96e1c4a1e9e1da42</hash>
        <hash alg="SHA3-256">cf964107899838bfbc531cd5a59d1334a40ee2adbe61baa368465e1b4e81370c</hash>
        <hash alg="SHA3-512">304b516f9df054336dcfabe8b63af1c3d509a3927a735f2956b159b551db017851bc64c3fafe64adab4c67c536301fd3213354956e3574203d18e05b8c0cbe40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.springframework.security/spring-security-config@5.8.16?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://spring.io/projects/spring-security</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/spring-projects/spring-security/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/spring-projects/spring-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jexl3</name>
      <version>3.3</version>
      <description>JEXL is a library intended to facilitate the implementation of scripting features in
        applications and frameworks written in Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a332e3beb67b3a2a20bd0a950fc57c4</hash>
        <hash alg="SHA-1">c76b4cfa436c3e79e04806e62656b09968c388ba</hash>
        <hash alg="SHA-256">07b0ff6c5a10ffb2e2c02da9e2c0e2e6702df44178cfb76881f69447fc386014</hash>
        <hash alg="SHA-512">879111d1c3ad021ea3961e49161b3ff6ba251044ffef1ca4d36d880d9a09b1f395e17eef221a13274303f44e116204ae4b2a3ee3e931f117fc901e321d59b5c6</hash>
        <hash alg="SHA-384">7a268bf2c903be86813fcc7f06158abf79d558ee59ebf03470ebd06ca6e6d169beb1c3600e07c20c4f95fa7827fde841</hash>
        <hash alg="SHA3-384">1803d239f17f7eeee6edb69d38c4473319fd4eeeb684eda5c38b577a7aaf42965ce41d9082d515d5007be9a0b0712d81</hash>
        <hash alg="SHA3-256">01163da5e720b6d1f6bf8b6e9e398d26a1be92b3f18ef6089d218d54166b0c01</hash>
        <hash alg="SHA3-512">8abdd72c14492340c05fd5d3555682a308ac00ac1b1e1e15ae38abc47f454f50db9e0727a49df72a50bf49f1447a6ca9dadc48b9ffd45a043bcbae9e5e050d3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-jexl/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/JEXL</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/commons-jexl.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
        <hash alg="SHA3-384">628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078</hash>
        <hash alg="SHA3-256">9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807</hash>
        <hash alg="SHA3-512">3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.micrometer/micrometer-core@1.9.17?type=jar">
      <group>io.micrometer</group>
      <name>micrometer-core</name>
      <version>1.9.17</version>
      <description>Core module of Micrometer containing instrumentation API and implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b5d781580eec5339429b401cf6fb1e38</hash>
        <hash alg="SHA-1">48bf67c0c7028e5f3124d1f9a31bdcf345596e65</hash>
        <hash alg="SHA-256">c350cfdc76c08356f12a60e840f2dbeaeea7540712d58b54becd6c302a86147a</hash>
        <hash alg="SHA-512">2ac846eabdb6f7cd849e3e4f0895d9106c10a423a731aff92715e8cd892633a93d6761044b1ddb6c1d430944fb31b4741023750f1fa9580446e5bc663fe72e83</hash>
        <hash alg="SHA-384">e35c13baea871bf2066ac58ebd5daad3c4d0b84e69cea8c3022fce78d33f617abd9fa82492464217369cc6d59a9af685</hash>
        <hash alg="SHA3-384">185baa7770b3f013141867fb88a1d555fd3dec49bdf654ef66943b90a50ef2a54efec2f0513c0a46dc2c49b07d647e85</hash>
        <hash alg="SHA3-256">fd42a1bef3324bc97bf3f96921e55e01f04ec4657ebbf0338196f579a2bcb804</hash>
        <hash alg="SHA3-512">3118a424f0562b7bd85bdb949903b907ad40343d0883cac8df21a32bfefb3cebaef7e19c874d0b43d12fa70b765992c48b567fafdba2bd955049afd8e9629b59</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.micrometer/micrometer-core@1.9.17?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/micrometer-metrics/micrometer</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar">
      <group>org.hdrhistogram</group>
      <name>HdrHistogram</name>
      <version>2.1.12</version>
      <description>HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b1acf3448b750cb485da7e37384fcd8</hash>
        <hash alg="SHA-1">6eb7552156e0d517ae80cc2247be1427c8d90452</hash>
        <hash alg="SHA-256">9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2</hash>
        <hash alg="SHA-512">b03b7270eb7962c88324858f94313adb3a53876f1e11568a78a5b7e00a9419e4d7ab8774747427bff6974b971b6dfc47a127fca11cb30eaf7d83b716e09b1a0d</hash>
        <hash alg="SHA-384">06977d680dafd803d32441994474e598384a584411a67c95ab4a64698c9e4cbd613e0119b54685cea275b507a0a6f362</hash>
        <hash alg="SHA3-384">b5ccb4d39bf7cc8ccc33f0f8fcbab0a63c99a94feda840b5d80fc3ae061127f1475cfb869b060933783a1f2eafb103a1</hash>
        <hash alg="SHA3-256">ef2113f27862af1d24d90c2028fc566902720248468d3c0f2f1807cc86918882</hash>
        <hash alg="SHA3-512">4fca2f75bdfd3f2ac40dc227ae2ef0272142802b1546d4f5edf9155eaeed84eff07b0c3a978291a1df096ec94724b0defb045365e6a51acfdd5da68d72c5a8eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
        <license>
          <id>BSD-2-Clause</id>
          <url>https://opensource.org/licenses/BSD-2-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://hdrhistogram.github.io/HdrHistogram/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/HdrHistogram/HdrHistogram/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git://github.com/HdrHistogram/HdrHistogram.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar">
      <group>org.latencyutils</group>
      <name>LatencyUtils</name>
      <version>2.0.3</version>
      <description>LatencyUtils is a package that provides latency recording and reporting utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2ad12e1ef7614cecfb0483fa9ac6da73</hash>
        <hash alg="SHA-1">769c0b82cb2421c8256300e907298a9410a2a3d3</hash>
        <hash alg="SHA-256">a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec</hash>
        <hash alg="SHA-512">bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890</hash>
        <hash alg="SHA-384">16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205</hash>
        <hash alg="SHA3-384">406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179</hash>
        <hash alg="SHA3-256">50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d</hash>
        <hash alg="SHA3-512">456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://latencyutils.github.io/LatencyUtils/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/LatencyUtils/LatencyUtils/issues</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git://github.com/LatencyUtils/LatencyUtils.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.spec.javax.rmi/jboss-rmi-api_1.0_spec@1.0.6.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.spec.javax.rmi</group>
      <name>jboss-rmi-api_1.0_spec</name>
      <version>1.0.6.Final</version>
      <description>The javax.rmi and javax.rmi.CORBA classes</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7ae7add11a83cbfee9950ab41d1b06b</hash>
        <hash alg="SHA-1">91c0dd9795b90a040bbd3eb591ce4f80bf084caf</hash>
        <hash alg="SHA-256">07615653320a010a648d164e77751daddcfea5602148aa4da2f052bc6af0689e</hash>
        <hash alg="SHA-512">7c4d42e4667ac945cb4a12465cf33b4a546e901ed9dc887113521226de3cdcece383539efb36b2a354911e558a998ef3c615af23e07db809e3b9a601f07f9160</hash>
        <hash alg="SHA-384">1db721c31ee3823afa8cba00836fe90fd101bf4eb59aefc62168de914494b077b337d4b77ddc73bba5e77d7411e8083f</hash>
        <hash alg="SHA3-384">b7225ba4cc04a86fa6a8cb69a354334087c281849ed911d9d2cd47b6f9a2f6a0be9ac2a1658caf79e0d9c5bd434e48bc</hash>
        <hash alg="SHA3-256">c882e0e97fbd3cbe6a51442f01475d1bcb05abdbb144f26e7d119daa0c586400</hash>
        <hash alg="SHA3-512">c6faa07271a730b8b93480c389202c9e25c58ba9eb0c3da85bb26ca724d7ecd8feccdce5f91f20fba535034bf5a6caf1559cfa3b4858b3af4ecbd1425e0f9579</hash>
      </hashes>
      <licenses>
        <license>
          <name>lgpl</name>
          <url>http://repository.jboss.org/licenses/lgpl-2.1.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.spec.javax.rmi/jboss-rmi-api_1.0_spec@1.0.6.Final?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.jboss.org/jboss-rmi-api_1.0_spec</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.jboss.org/</url>
        </reference>
        <reference type="mailing-list">
          <url>http://lists.jboss.org/pipermail/jboss-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jboss/jboss-rmi-api_spec</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-websocket@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-http-signature@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2-saml@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-openapi-v3@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactor@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-transfer@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar"/>
      <dependency ref="pkg:maven/org.asynchttpclient/async-http-client@2.12.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/osgi.cmpn@6.0.0?type=jar"/>
      <dependency ref="pkg:maven/com.hazelcast/hazelcast@5.3.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.activemq/activemq-broker@5.17.6?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.osgi/spring-osgi-core@1.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"/>
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.msv/msv-core@2022.7?type=jar"/>
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/cglib/cglib-nodep@3.3.0?type=jar"/>
      <dependency ref="pkg:maven/jdom/jdom@1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.10.8?type=jar"/>
      <dependency ref="pkg:maven/org.mozilla/rhino@1.7.15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-connector_1.5_spec@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-ejb_3.0_spec@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar"/>
      <dependency ref="pkg:maven/org.atmosphere/atmosphere-runtime@2.6.1?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.olingo/olingo-odata2-core@2.0.12?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
      <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar"/>
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.29?type=jar"/>
      <dependency ref="pkg:maven/io.opentelemetry/opentelemetry-api@1.34.1?type=jar"/>
      <dependency ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.28.0-alpha?type=jar"/>
      <dependency ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv-incubating@1.28.0-alpha?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.zipkin.brave/brave@5.17.1?type=jar"/>
      <dependency ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@5.17.1?type=jar"/>
      <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
      <dependency ref="pkg:maven/io.undertow/undertow-core@2.2.33.Final?type=jar"/>
      <dependency ref="pkg:maven/io.undertow/undertow-servlet@2.2.33.Final?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jmx@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-alpn-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.jacorb/jacorb@3.9?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/io.reactivex.rxjava3/rxjava@3.1.10?type=jar"/>
      <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar"/>
      <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.qi4j.library/org.qi4j.library.circuitbreaker@2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tika/tika-core@2.9.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.ldap/spring-ldap-core@2.4.4?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-configuration-processor@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.security/spring-security-web@5.8.16?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.security/spring-security-config@5.8.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar"/>
      <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.9.17?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.spec.javax.rmi/jboss-rmi-api_1.0_spec@1.0.6.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-websocket@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-http-signature@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.tomitribe/tomitribe-http-signatures@1.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.tomitribe/tomitribe-http-signatures@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2-saml@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.10.8?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-android?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@3.37.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@2.8?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.ehcache/ehcache@3.10.8?type=jar">
      <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.cache/cache-api@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/io.swagger/swagger-jaxrs@1.6.14?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger/swagger-jaxrs@1.6.14?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/io.swagger/swagger-core@1.6.14?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
      <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/io.swagger/swagger-core@1.6.14?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/io.swagger/swagger-models@1.6.14?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@32.1.3-android?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
    <dependency ref="pkg:maven/io.swagger/swagger-models@1.6.14?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/io.swagger/swagger-annotations@1.6.14?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger/swagger-annotations@1.6.14?type=jar"/>
    <dependency ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar"/>
    <dependency ref="pkg:maven/org.reflections/reflections@0.10.2?type=jar">
      <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-openapi-v3@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-jaxrs2@2.2.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-jaxrs2@2.2.26?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.176?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.30.2-GA?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.176?type=jar"/>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.26?type=jar"/>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-integration@2.2.26?type=jar">
      <dependency ref="pkg:maven/io.github.classgraph/classgraph@4.8.176?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-core@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.swagger.core.v3/swagger-core@2.2.26?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-annotations@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
      <dependency ref="pkg:maven/io.swagger.core.v3/swagger-models@2.2.26?type=jar"/>
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.17.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.17.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.17.2?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactor@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactivestreams@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/io.projectreactor/reactor-core@3.5.20?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-reactivestreams@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.projectreactor/reactor-core@3.5.20?type=jar">
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-transfer@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.5?type=jar">
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.5?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.5?type=jar">
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar"/>
      <dependency ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.asynchttpclient/async-http-client@2.12.3?type=jar">
      <dependency ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.3?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.60.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.60.Final?classifier=osx-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.12.3?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.60.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.60.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.60.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.60.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.60.Final?classifier=linux-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.60.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.60.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-kqueue@4.1.60.Final?classifier=osx-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.60.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.4?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.client5/httpclient5@5.3.1?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5-h2@5.2.4?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents.core5/httpcore5@5.2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/osgi.cmpn@6.0.0?type=jar"/>
    <dependency ref="pkg:maven/com.hazelcast/hazelcast@5.3.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.activemq/activemq-broker@5.17.6?type=jar">
      <dependency ref="pkg:maven/org.apache.activemq/activemq-client@5.17.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.6?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.activemq/activemq-client@5.17.6?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.6?type=jar">
      <dependency ref="pkg:maven/org.apache.activemq/activemq-client@5.17.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar"/>
    <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.osgi/spring-osgi-core@1.2.1?type=jar">
      <dependency ref="pkg:maven/org.springframework.osgi/spring-osgi-io@1.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.osgi/spring-osgi-io@1.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.core@1.10.3?type=jar">
      <dependency ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.aries.blueprint/org.apache.aries.blueprint.api@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.aries.quiesce/org.apache.aries.quiesce.api@1.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.aries.proxy/org.apache.aries.proxy.api@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar">
      <dependency ref="pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar">
      <dependency ref="pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.msv/msv-core@2022.7?type=jar">
      <dependency ref="pkg:maven/net.java.dev.msv/xsdlib@2022.7?type=jar"/>
      <dependency ref="pkg:maven/isorelax/isorelax@20030108?type=jar"/>
      <dependency ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.msv/xsdlib@2022.7?type=jar">
      <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
      <dependency ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xerces/xercesImpl@2.12.2?type=jar"/>
    <dependency ref="pkg:maven/relaxngDatatype/relaxngDatatype@20020414?type=jar"/>
    <dependency ref="pkg:maven/isorelax/isorelax@20030108?type=jar"/>
    <dependency ref="pkg:maven/cglib/cglib-nodep@3.3.0?type=jar"/>
    <dependency ref="pkg:maven/jdom/jdom@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.10.8?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.mozilla/rhino@1.7.15?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-connector_1.5_spec@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-ejb_3.0_spec@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@2.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@3.0.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@1.2.5?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ejb/jakarta.ejb-api@3.2.6?type=jar">
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.atmosphere/atmosphere-runtime@2.6.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec-http2@4.1.115.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.115.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.60.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.115.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.lucene/lucene-core@9.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.olingo/olingo-odata2-core@2.0.12?type=jar">
      <dependency ref="pkg:maven/org.apache.olingo/olingo-odata2-api@2.0.12?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.olingo/olingo-odata2-api@2.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.4?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
    <dependency ref="pkg:maven/junit/junit@4.13.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.velocity/velocity-engine-core@2.3?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ch.qos.logback/logback-core@1.2.13?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jmx@4.2.29?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.29?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentelemetry/opentelemetry-api@1.34.1?type=jar">
      <dependency ref="pkg:maven/io.opentelemetry/opentelemetry-context@1.34.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentelemetry/opentelemetry-context@1.34.1?type=jar"/>
    <dependency ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.28.0-alpha?type=jar"/>
    <dependency ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv-incubating@1.28.0-alpha?type=jar">
      <dependency ref="pkg:maven/io.opentelemetry.semconv/opentelemetry-semconv@1.28.0-alpha?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.zipkin.brave/brave@5.17.1?type=jar">
      <dependency ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter-brave@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter-brave@2.17.2?type=jar">
      <dependency ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.zipkin.reporter2/zipkin-reporter@2.17.2?type=jar">
      <dependency ref="pkg:maven/io.zipkin.zipkin2/zipkin@2.27.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.zipkin.zipkin2/zipkin@2.27.0?type=jar"/>
    <dependency ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@5.17.1?type=jar">
      <dependency ref="pkg:maven/io.zipkin.brave/brave@5.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/antlr/antlr@2.7.7?type=jar"/>
    <dependency ref="pkg:maven/io.undertow/undertow-core@2.2.33.Final?type=jar">
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.threads/jboss-threads@3.1.0.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"/>
    <dependency ref="pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar">
      <dependency ref="pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final?type=jar"/>
      <dependency ref="pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.wildfly.common/wildfly-common@1.7.0.Final?type=jar"/>
    <dependency ref="pkg:maven/org.wildfly.client/wildfly-client-config@1.0.1.Final?type=jar">
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.xnio/xnio-nio@3.8.16.Final?type=jar">
      <dependency ref="pkg:maven/org.jboss.xnio/xnio-api@3.8.16.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.threads/jboss-threads@3.1.0.Final?type=jar">
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.undertow/undertow-servlet@2.2.33.Final?type=jar">
      <dependency ref="pkg:maven/io.undertow/undertow-core@2.2.33.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.spec.javax.servlet/jboss-servlet-api_4.0_spec@2.0.0.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.spec.javax.servlet/jboss-servlet-api_4.0_spec@2.0.0.Final?type=jar"/>
    <dependency ref="pkg:maven/org.jboss.spec.javax.annotation/jboss-annotations-api_1.3_spec@2.0.1.Final?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-xml@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jmx@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-plus@10.0.24?type=jar">
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-jndi@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-server@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-common@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.http2/http2-hpack@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-alpn-server@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jacorb/jacorb@3.9?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-server@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-webapp@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-api@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-common@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-api@10.0.24?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-common@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-common@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-jetty-api@10.0.24?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-common@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-servlet@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-server@10.0.24?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@10.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.websocket/websocket-core-common@10.0.24?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.reactivex.rxjava3/rxjava@3.1.10?type=jar">
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.qi4j.library/org.qi4j.library.circuitbreaker@2.1?type=jar">
      <dependency ref="pkg:maven/org.qi4j.library/org.qi4j.library.jmx@2.1?type=jar"/>
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.api@2.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.library/org.qi4j.library.jmx@2.1?type=jar">
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.bootstrap@2.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.bootstrap@2.1?type=jar">
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.spi@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.spi@2.1?type=jar">
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.api@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.api@2.1?type=jar">
      <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.io@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.io@2.1?type=jar">
      <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.functional@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.qi4j.core/org.qi4j.core.functional@2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tika/tika-core@2.9.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.16.1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@2.0?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.ldap/spring-ldap-core@2.4.4?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework/spring-tx@5.3.39?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-actuator@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure-processor@2.7.18?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-configuration-processor@2.7.18?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.yaml/snakeyaml@2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.7.18?type=jar">
      <dependency ref="pkg:maven/ch.qos.logback/logback-classic@1.2.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jul-to-slf4j@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.17.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.2?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-web@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-webmvc@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-json@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.13.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.13.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.17.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.17.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.7.18?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.83?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.83?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.83?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83?type=jar"/>
    <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.83?type=jar">
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.83?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter-validation@2.7.18?type=jar">
      <dependency ref="pkg:maven/org.springframework.boot/spring-boot-starter@2.7.18?type=jar"/>
      <dependency ref="pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.83?type=jar"/>
      <dependency ref="pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hibernate.validator/hibernate-validator@6.2.5.Final?type=jar">
      <dependency ref="pkg:maven/jakarta.validation/jakarta.validation-api@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.6.1.Final?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml/classmate@1.5.1?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-web@5.8.16?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.8.16?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-web@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.8.16?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@5.8.16?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-expression@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-crypto@5.8.16?type=jar"/>
    <dependency ref="pkg:maven/org.springframework.security/spring-security-config@5.8.16?type=jar">
      <dependency ref="pkg:maven/org.springframework.security/spring-security-core@5.8.16?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-aop@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-beans@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-context@5.3.39?type=jar"/>
      <dependency ref="pkg:maven/org.springframework/spring-core@5.3.39?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-jexl3@3.3?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/io.micrometer/micrometer-core@1.9.17?type=jar">
      <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"/>
      <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12?type=jar"/>
    <dependency ref="pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"/>
    <dependency ref="pkg:maven/org.jboss.spec.javax.rmi/jboss-rmi-api_1.0_spec@1.0.6.Final?type=jar"/>
  </dependencies>
</bom>
