{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:46862452-e64b-35ac-a67a-2edc7463cf29",
  "version" : 1,
  "metadata" : {
    "timestamp" : "2025-07-30T22:14:32Z",
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-distribution-manifest@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-distribution-manifest",
      "version" : "3.6.8",
      "description" : "Apache CXF Manifest Jar",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-distribution-manifest@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-distribution-manifest"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-common",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8068f3bc21a0b289ccc8ae8ffb82e345"
        },
        {
          "alg" : "SHA-1",
          "content" : "8abd601ef3156db308f5489dc0413541514fefbe"
        },
        {
          "alg" : "SHA-256",
          "content" : "977021679a589768e75c5d3e44c5ce5bbe110e2822077229c74ab4c8b335a0b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c38d8090ce5e248ae30fdb1f80ffd8855ff5fc8b7b275e08ef18b46c1d359fc7f24508d0663910ce9085f0be0b4280cf615f2f2045f6eab258979f3606c196a3"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3934acf8bd8f5a004d5809948c343b8db0036543f3c38e0ccb2d23f5a1131a0a765740950f5e1cda28afd88be87f7f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abaeb934d2f7b84a0ef1c5678d210e2b9acd0896f6861bb77d49cbcae9a38773c2935f5d33ec54aa45c1144c3df4147e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0c412dc612e5fc03ef7911aedd6c648b1b7d7b31eecaefd13bbb790a5ee716a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "02ec1cd7a42b964dd1c79557dfa0c7993900c341d89fdb4318e4c557c37245c19452fd7ad4e235338130594ba2cd4f5232eb687210c144c1cdab703958ddc5b8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.velocity",
      "name" : "velocity-engine-core",
      "version" : "2.4.1",
      "description" : "Apache Velocity is a general purpose template engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41a3757dc9d701590be703d1f2bd2462"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b662837e8006d5c383bd128503ea86ef5b4d361"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c19157d1171d560088e485be97c93a7a2f7e9f56e517f0a30273c5c39df6231"
        },
        {
          "alg" : "SHA-512",
          "content" : "77150ed775e644be44d9f1ead19a880c8a02cba18dae97aec4ea8f14db04ee795bce35bd2e5314f2e95d40c01441da954327348f91addc9bb8d0cc9f7c00f561"
        },
        {
          "alg" : "SHA-384",
          "content" : "87cb5f02de5e137db4426938d783233d274b41786de2f27719e8469e188822911acce66992ae074b22a9ff47c0997c38"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a6671daa3dc0091fbca6fdcb7d8799adee1c1c5c68de7da0a0f07870bb22ed94fe9a705223bf23e90b7f7f5a4d12a5c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "71c8123c1c4bb5fb839e70d229545139b2da58fa3e3d9b09355d355b6f56c595"
        },
        {
          "alg" : "SHA3-512",
          "content" : "381c65e4a7026fc680fd37ffe53616f93b4dba2dc9cbd98f76c56e3e5a4ea2dbd5fa82e6b10da7df1dd3b1b4017d7a583a2777cef421f04412893b27e6202a22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://velocity.apache.org/engine/devel/velocity-engine-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/VELOCITY"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?general@velocity.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=velocity-engine.git/velocity-engine-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.18.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48b9886957920a4cdb602780ca345087"
        },
        {
          "alg" : "SHA-1",
          "content" : "fb14946f0e39748a6571de0635acbe44e7885491"
        },
        {
          "alg" : "SHA-256",
          "content" : "4eeeae8d20c078abb64b015ec158add383ac581571cddc45c68f0c9ae0230720"
        },
        {
          "alg" : "SHA-512",
          "content" : "c2c9d497fc1be411050f4011b2407764b78aa098eb42925af8a197eabdbc25b507f09fb898805e9bed4815f35236a508ee5b096e36f363df4d407232d50fc832"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fb3f101106e4ce3666d5c15d276ba86f7683a0ef35f0384edfcd579ea454275edbb7400795d265ec3a38e39997e79b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "aada7e3612cf3f6190a19fa7c3db74df1e13ec56b300be9bb4317d261d5877c84ab59ba9a09168becdbd82cd41961395"
        },
        {
          "alg" : "SHA3-256",
          "content" : "306d286d0bd7549c203cc802fd755d354c4f7926fa023f4e83623ba1a6261250"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6f1ecc684e309d7b9fc5c343792508fee935cd2119d962721662c5af88e4864ba6f47a863e083714f315f926c156de1970cd2fb577449bdfdc7bf98a4a451fa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-lang/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "group" : "wsdl4j",
      "name" : "wsdl4j",
      "version" : "1.6.3",
      "description" : "Java stub generator for WSDL",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfc28d89625c5e88589aec7a9aee0208"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d106a6845a3d3477a1560008479312888e94f2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725"
        },
        {
          "alg" : "SHA-512",
          "content" : "3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52"
        },
        {
          "alg" : "SHA-384",
          "content" : "19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ca2e435e6d94fea0b1d025f16b7b540aeb84bb5ef286139fa42c04443d5ec87b5663863a761f125dc4a8114148c89ff4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8429876fe0bd0d4bf98130c31856f6accccd2af5986b459689f7b5b49f4bdeff"
        },
        {
          "alg" : "SHA3-512",
          "content" : "915711a72ea5b1773e3336afcaed273d65283e5e93ddf35a12b8473951cfd3e1454bf782945c7da5399922dda46277054185b182136f2dbc356d43adb8afec8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "CPL",
            "url" : "http://www.opensource.org/licenses/cpl1.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sf.net/projects/wsdl4j"
        },
        {
          "type" : "vcs",
          "url" : "http://wsdl4j.cvs.sourceforge.net/wsdl4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-xjc",
      "version" : "2.3.5",
      "description" : "JAXB Binding Compiler. Contains source code needed for binding customization files into java sources. In other words: the *tool* to generate java classes for the given xml representation.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a72119c65f4f7b4ef6a44b595d15610e"
        },
        {
          "alg" : "SHA-1",
          "content" : "9383e08bab9989bdd5c8194f8a6afce405d34553"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8a7e9cfcb30509963c8414b83ee52835bddb8d6f095d45072e22444265c8603"
        },
        {
          "alg" : "SHA-512",
          "content" : "00b6d14158175c325868baf184750994bf926eb671bbe80fa3aa3e6345ebcbdd87264c6ab7e8b1d568e9dcaea237537994641466e0614a97003dcee9869d7dce"
        },
        {
          "alg" : "SHA-384",
          "content" : "18dca30e08d78037490e184a5676ca316261e98617ef20e865032bb45a162236346f1a7904524584023581d8e604ccf8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "532e6fba4da6a54e45371c46d5cf8cff4d9b6af6f4cdc19b1f3b07a71dcd9b10d725680e41bb6c52138fbdb33a6ee11a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a22fdde7df745ebf6fbd8a36e8584b88904a7cb2fe7b92900fa484209ec6523c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "39078112b225f0320e7364d5ef703b5913437dc1bfedce7dbf7a77215379e7311cae08f679791f4243b0e2252bf94b65d4e8f0b0187481951d873620a0ad8a21"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-xjc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "xsom",
      "version" : "2.3.5",
      "description" : "XML Schema Object Model (XSOM) is a Java library that allows applications to easily parse XML Schema documents and inspect information in them. It is expected to be useful for applications that need to take XML Schema as an input.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a6f38a69df4a03ccd8cfd960a4d8f330"
        },
        {
          "alg" : "SHA-1",
          "content" : "554b3f1218caa8b0025029e13f61713ae1f2d52f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b12dae9e93e2320fc0553825b21673a53b03579c38c02bc2168460b037f78dba"
        },
        {
          "alg" : "SHA-512",
          "content" : "d33959973043f81b6196911417d573d99c783fd352b3405c4254fb06c7e013a3ae5d72555f2e74f40041fe46d9944e9c357eda5acfc7b166ae9c93fbbc8d4079"
        },
        {
          "alg" : "SHA-384",
          "content" : "c65fcb3c50f35250391b9a50523daf12dfecacede8bc38f852cd436113477db1825e2d96816a53d72b9668a38e23b425"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0af4859fbf6b76544b8ad2ef1f18eedba7560e87563a0ee80bc53b917f761c60ff16852fa997f4354fe8db0791e873c8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd1b4859ccb864eeb37f4d485303258a1c32d0ceee3fe0c1ad6379cb342088d8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "484a6612249c72dcac971bf0910d0d932f5d9ab405e88958fd358253206f7c5af2ee33030b18b8a9f5c12081d01cf509777f734b973daad48856573208746b3f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/ee4j/xsom"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.xml.bind.external",
      "name" : "relaxng-datatype",
      "version" : "2.3.5",
      "description" : "RelaxNG Datatype library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "994ef1c97ae72090273827ab9be3cb90"
        },
        {
          "alg" : "SHA-1",
          "content" : "53a63e9f1c9c2aeabde92bbc349162bb6d5c194a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3057368c745dd593630ed11c654e44275c9977b97542b1216399be8d5e009c65"
        },
        {
          "alg" : "SHA-512",
          "content" : "509c132d62959f7d495fa51273bd82b1e7890854ef60e9b48635aaf657d8a4692f69bb22a18d10804cddf063116e1200504d33057834243a3b166b59b9045566"
        },
        {
          "alg" : "SHA-384",
          "content" : "baaefef8a41f2fd041e2df75c3abd0ebddce859d389a9afb16c8b46ff8de69c864ddc7d8e99be835dbc41ec2908896a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6128cef392ecef3e7299bd650fd0474971bdb2222ce2c8969dbf63ebc8b3a7657fc764edf07492b0f0662801f48f568b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab45682ad33d670bfdef39d485d1d099162d126eea5fa7db6e49f2bdfb082e9e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d9171f68d1f1493dd4a6deb22ae8912cbaf47d841d4e5ca982f46a75e1a504e167c7fcec1e742e9b827edc1cce759d1f7f0078f2fc02b790aeb7e9868250a6bd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/ee4j/jaxb-external-parent/relaxng-datatype"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "codemodel",
      "version" : "2.3.5",
      "description" : "The core functionality of the CodeModel java source code generation library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d8108f353a886be1b00869cf3365fa4"
        },
        {
          "alg" : "SHA-1",
          "content" : "08676b2435ca03c15a223d80f832208909908f84"
        },
        {
          "alg" : "SHA-256",
          "content" : "8b430f2e2ffff0ecae03fd9dfd6575dea91f4bedcdcf0ff6f25aec32afc5af6d"
        },
        {
          "alg" : "SHA-512",
          "content" : "0b09c634e0345fd9588df0e505263269aee9687801663c13a78dfd89901d6bd44c69a5b5f834c8ba8e1ac34a0f689283c1b71bb048b7e3c86e06208a4196fbaf"
        },
        {
          "alg" : "SHA-384",
          "content" : "ce60c3ef2ba4b2faa4e7e4ce65afbf4672de4ce1ad5d45d45b09f0c221d5024e336aea238c3c478ade443c37363ffdf4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a682c6718f0ef7c7513c608bad67cdfffcc08a2da90b65bc7310ec8efa72ef23d8f85d9615cc6454372a917456eb12cd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ba4c0195617895b4d17c40678f077ffe1411eeaf204333d15cd1884885cf833"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f89273380e0d6ad78414a66f41de21f6fe10226e09dbbc199e3ba2520c8bf62f061a77b83acb497aa15b5913317908a9afc5f3620dbae0b28817afcd325a16f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/ee4j/jaxb-codemodel-parent/codemodel"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.xml.bind.external",
      "name" : "rngom",
      "version" : "2.3.5",
      "description" : "RNGOM is a RelaxNG Object model library (XSOM for RelaxNG).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0cb79d2b94d2418392ac7dcd2f51169a"
        },
        {
          "alg" : "SHA-1",
          "content" : "636ab4fd5a2f438d5f4d904b3927a09d458631e9"
        },
        {
          "alg" : "SHA-256",
          "content" : "cb54790e7db343d137ba50ecb92df571fb93678606a9158b6551428679595a78"
        },
        {
          "alg" : "SHA-512",
          "content" : "85bc31997cf82ead9692f9aafd09b084022e1e95247dd8592a6b8ade2a930996336e5f3de7625fec46c7ee65ace95c916ec7b497c35ee19d8d9c71cde9538bc8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1348ed39f1d62828c447ff6f82cd3dda3997ab1780ed234185f79b3490cdca317869fe59148ebf489e298c7c20e5eecd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e8802f5f37762907762b8b67320dfac84e97ed35199cb25df3b000871c7c19f69717eba6fd8f50deeb21566f240d877b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "96e70f9039c4ea21bcd42a1f66d8dec9a60e2822d465df1dd22097d267578fb4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6807741c3da198df82fe09d359d883d0bfc8a6bcc563aaab3bf4d4eba55e568ab8be10d6c77ad5320c908ac9b0e74a46cee1c0776e09e6b89e315431d4611c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/ee4j/jaxb-external-parent/rngom"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.xml.dtd-parser",
      "name" : "dtd-parser",
      "version" : "1.4.5",
      "description" : "SAX-like API for parsing XML DTDs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b27b38e842491770c5a1953dc86468d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "bd01768721835f13a6da58f6edea5f8c57ee7b3c"
        },
        {
          "alg" : "SHA-256",
          "content" : "a4cd6addced42e2f870dcca1716f459da51f06f2fe49430d2d128f147c8e929d"
        },
        {
          "alg" : "SHA-512",
          "content" : "6089a2fd6bda500009847a64a35d4a97cfd0febb7d236b37ced114607973fbd7b9c1012edbf00029508ef20be84364b249e9578ce908caa8f470c5e7f66b24f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "e1f38a8ca4180c5858643a5a99d64c8f16ffe581554e3c2eb01aec588b95613fcb6454d11e9f791774a31bc38fa3c4f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "259d9f75fc653cd39e69222947ba8f9f91948c0625269d01e2bd273ba16694b0d77c87a69a4d94f013589acb9fc2a7e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa241d7403b32db46e375e44ed7737770b63ccc0e8ad920916902895615ac48c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a234240a3d0d34a8ba7cd3d7fe3455fd05d3c20e693a45ce8c2908f13bfd8142e082696d382a04583b1c4c8b3e757b13e04946dda0e4f95b4c3d82693f9ca19"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-dtd-parser"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-dtd-parser/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-dtd-parser"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-tools",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "466851283328c997fc3c9008ba71b869"
        },
        {
          "alg" : "SHA-1",
          "content" : "7213eee4e9f65972968f03c9dd4df266ce42530b"
        },
        {
          "alg" : "SHA-256",
          "content" : "88369766d2f7bf7904595d295d759ef553de47f2b9fc7d0c82a42f602ed70af0"
        },
        {
          "alg" : "SHA-512",
          "content" : "afe4807d1522175447e2b85cb96f155f8531b2b4bbca6dfe6bdbabd61d409e161ec47614c2e047e809e0e736c8c953b72e96a270a721ba92b30a852d39ca6651"
        },
        {
          "alg" : "SHA-384",
          "content" : "308fb0a6938d378a8a8fe0d397bf94a07127798757aab2da95278579f0ba92a76a91b1c54dbcd488eef1878aaf9252ff"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6be62f48fb3be58e9917831958767ad8a43f4cc914f94eaeef628a3cf9c509463bc77e8f7cd191e0c33213848abd51a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c96b3d294798487a8524e4640501e26daf92b71d83bb397f18232db0fde4d5d7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e025b55187f3d7dce44ad30101afcface4efee38fa7529fe812768df1a8ffa14ba202a538f3d1eca73b6b6fd72e6d2b40d9e6ec50abb7bab1a35edea7dff4e9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-tools"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-tools"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "jaxb-runtime",
      "version" : "2.3.5",
      "description" : "JAXB (JSR 222) Reference Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2d3790292a30333a14b7fb1143864a9c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a169a961a2bb9ac69517ec1005e451becf5cdfab"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4"
        },
        {
          "alg" : "SHA-512",
          "content" : "c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff"
        },
        {
          "alg" : "SHA-384",
          "content" : "7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ecb0a57c239dc254549520f73816a347f1204c47bb7ae6e5d4b6cd1f409af9ce583411faea2aec0894e5ff625c1b5f8b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7d69b19934e5f2cc435ccf681a796335b3e19a0e1b6522c615ee328f5bb9c341"
        },
        {
          "alg" : "SHA3-512",
          "content" : "498b8588dbd9f2f5215f380634553036e38856adabb582bb41980898d0bb9f9f80e48d244a3a798db389efd2131a1dbadf96d778668cda58f8aa1163875d3c3e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish.jaxb",
      "name" : "txw2",
      "version" : "2.3.5",
      "description" : "TXW is a library that allows you to write XML documents.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "67005a4cf5ee9cfd82edec1bdbecb32b"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec8930fa62e7b1758b1664d135f50c7abe86a4a3"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9"
        },
        {
          "alg" : "SHA-384",
          "content" : "ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2089f8ce9b4e3c56017e6724e8ab9565f2015156ea10a844d9720d258709963b7c1b8254d288a94efdc32d6ebdd88ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "dd0147f1d51c44c201ae8986ec9dde0e8dfbe827ae8a8f16422c4706adbba018"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31e9eec45c24a52bdd21ae8ce4494525495d91f8fd3d0947520d56a3c5280bac621487a78008fea4b39b86207397f5a16ad603b5048410a0e81e0927ad08270b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse-ee4j.github.io/jaxb-ri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://accounts.eclipse.org/mailing-list/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.istack",
      "name" : "istack-commons-runtime",
      "version" : "3.0.12",
      "description" : "istack common utility code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1952bd76321f8580cfaa57e332a68287"
        },
        {
          "alg" : "SHA-1",
          "content" : "cbbe1a62b0cc6c85972e99d52aaee350153dc530"
        },
        {
          "alg" : "SHA-256",
          "content" : "27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.activation",
      "name" : "jakarta.activation",
      "version" : "1.2.2",
      "description" : "Jakarta Activation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0b8bee3bf29b9a015f8b992035581a7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "74548703f9851017ce2f556066659438019e7eb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "6.6.2",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f322ee7db6505b01c8bfe5f54c5670df"
        },
        {
          "alg" : "SHA-1",
          "content" : "0bfe905f19ce0e60bff5b7adcbded2681a092ac3"
        },
        {
          "alg" : "SHA-256",
          "content" : "8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896"
        },
        {
          "alg" : "SHA-512",
          "content" : "00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703"
        },
        {
          "alg" : "SHA-384",
          "content" : "80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.2",
      "description" : "Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6949cace015c0f408f0b846e3735d301"
        },
        {
          "alg" : "SHA-1",
          "content" : "b0d746cadea928e5264f2ea294ea9a1bf815bbde"
        },
        {
          "alg" : "SHA-256",
          "content" : "a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe"
        },
        {
          "alg" : "SHA-512",
          "content" : "1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6"
        },
        {
          "alg" : "SHA-384",
          "content" : "3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517"
        },
        {
          "alg" : "SHA3-256",
          "content" : "174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-validator",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools Validator",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6002fd8bd4b33f6126b31bb0feacdd12"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8bceee46c3ebdf7619382a9136683314696da25"
        },
        {
          "alg" : "SHA-256",
          "content" : "ecaf386b04fe88bddef7bcdc5472dff8c1dfebb3ab6879939e1d291f6a8c3ff3"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5a67d251697db4999c9cb29f455b829c55fb99a12d83ee545adb8d9b3574bc42ee3d152234c7c238655621b5288ba87e9a88f915d31b623e4cc694a28c2a6c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "772011794a50ac6d43e6f36f2b1f14ad7881bf6589f167cadd7006cc4d2f1adc5b328c20e822d29605a19a1c870373a8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3295bc31fd8365e8ceac2e271a1a171d32b7baf8adfe5c340544bcb010c58ad279437ab8148c19f7c689c69541d30268"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b8ff8b24968c341dc6d9d706c93107f0829e323d09ada9d9b3d6e1d1d5d74d8d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d1f42404147afbab8c4db329f6d69ec69d63c141f1ae4cf4d4eac15fe62942893e8b5c331a7f5f65b5237e3ae0db33ac214a6a12f37cae419b192857ce5719c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-validator"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.ws.xmlschema",
      "name" : "xmlschema-core",
      "version" : "2.3.1",
      "description" : "Commons XMLSchema is a light weight schema object model that can be used to manipulate or generate XML schema.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76e1deab5e6e1caa5fed31b3482cd266"
        },
        {
          "alg" : "SHA-1",
          "content" : "5a83fc4e79d128f38c9e32138537060678151759"
        },
        {
          "alg" : "SHA-256",
          "content" : "648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f"
        },
        {
          "alg" : "SHA-384",
          "content" : "456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/commons/xmlschema20/xmlschema-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/XMLSCHEMA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-wsdlto-core",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WSDLTo Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a28cb5210ef630c83b07f58deede60c"
        },
        {
          "alg" : "SHA-1",
          "content" : "456f2a7b58a3ff1df29124b933ccde923b071a59"
        },
        {
          "alg" : "SHA-256",
          "content" : "845d59b8c47ea1ae7ffcd7c94ee4771f62775e119849e33b45979e2a1f7d5f29"
        },
        {
          "alg" : "SHA-512",
          "content" : "fcc66e255595ec8e2324bb7fdbce3ca5f5cceba09c2114fd5d8ee69c7994d576d9ef0f54f71bbfbb47afee87c635e7794ce347a141243b93fdde2edb1153a952"
        },
        {
          "alg" : "SHA-384",
          "content" : "11009ad9ada2c912a958279b2c1adc3d7cc7c74d1dac0f04999543df273fe4fc35c187ee5553e36713f674d9b757345d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5c08969f30ce6f1e081f204f44df58afe9f603c9eb27837da9dfabce72e6dc0f0efb2ee82ab1f014523594db5634f75"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5072ed4c26471c44803137ae26ef64adc13e8df0e5c9ebb7249fb51c54ed091e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0d2ef521aff42dd5717acf91424565f262da2fb89e90bae75d659cf61198fda10b48834b1f3761f7576d0144d0404c2fd5c4e4bf329be59339bc0b1af3caeb9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-wsdlto-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-wsdl",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Core for WSDL Based Technologies",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6b5e63bed537dea940969ffef846038a"
        },
        {
          "alg" : "SHA-1",
          "content" : "43095631c1907b2c56c7b4cc331605fee02d0ae2"
        },
        {
          "alg" : "SHA-256",
          "content" : "9ab81ff573ead47a0309ff2bc9ba91f14df403cfbbd15e795187de4e57177611"
        },
        {
          "alg" : "SHA-512",
          "content" : "b5c69e153ae7e61d9054947300aa235d58fbceab02507d44bf349cd36e7c033e478fdaeac408f597f51567d7cf6262d76b85265e7b542ef738e0fb44fff28f7a"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb1b3509e0b2ae7e5d4d33d2061e817dcff82a8ee13e8e82ae52ada24b3a00bcf131cf8e499cafc26fad2021301f5100"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6004a7ddbea9514791736a689faf633b2f26251a6c3c303a87feec66d61c13401bf645059375338faefed18fbae03ff9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e0f1870d5ed17f060a2afc931af9579035656cd48363df285d2e71c69d0ed21"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a0bc7dfb2b505edefcb71d7232b4a88ebdc9873fee814d00b5baca5cc38d7feccbe017fcd040d06e2f8043399edf3eb35ba8c325b8ab55027eeb6c775214bb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-misctools",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WSDLTo Misctools",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d1a58c1070f7a7fc3bfe8883f105f5ac"
        },
        {
          "alg" : "SHA-1",
          "content" : "4667772f43129c07516b82b64f4907575bcf1d60"
        },
        {
          "alg" : "SHA-256",
          "content" : "5344584553979a5970e0d0c3fcb0a1fc6bdcf04cc4101f77d40b8564ce1e2606"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3b611a5ee63e1c7ffef1a0d4cd5bb85acebd55a3b860e44a649cb262ad19f39f6b2fff32400b9f39658974d65089e80f593b4cc34633771e038f3cd36eb886d"
        },
        {
          "alg" : "SHA-384",
          "content" : "4fbc189d6db45b1de3ba279603e98ee2e649d4d25404801524ca019816690f5032f6ddb2f82c2330d5b3419a2046f21b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45082fc994d1dc18531577c7de9475642f1b02d07dfb95922142bfd49c3ad760ca8fdb67ac3833c405df3c2293f0d7a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3496a6acb8475d0cf2b60fc684cfac31a035c1b048fd87c80ae61979700263be"
        },
        {
          "alg" : "SHA3-512",
          "content" : "689049b1826ebca4691ff6626bf4c8c62f6962e2cbcf9a2ca70efc906e18553dc7f2e23cd7126262e053a24161ecdc8d23067c60c6c7be6322b21dce251c56e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-misctools"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-wsdlto-databinding-jaxb",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WSDLTo JAXB Databinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5cfbbd1d5d06d5b95749c5d5964eeae0"
        },
        {
          "alg" : "SHA-1",
          "content" : "45ee40f31c9ac5062641e96faa8254bdd3aee3f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1060df6cf41d2117e8600cb40e9fcd05f6d6769681b29f554bd3eef4d3bbed53"
        },
        {
          "alg" : "SHA-512",
          "content" : "02d2d786ecff89866a0d7b16cc1f501455c3a2cea1dd39e5896b9c510536e338b65d3907630a9e8084a27fab1ea0827f4c794e7642fa51cb01a608a5426972c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3650ea5f0d9a1480ad7f621b9d8ed057e97c5cc8727bfcdc218dfbc73976d29a9c3e70bf13503d40a9c169a62241150"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46e0eea79e591965cfe24a900162f78b9c47feeef08cb594c8b2e40d4715998cfbbe58f7b8a474bdd986b3db779bf79d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e5c6416eac4e7eefba9c895da81c406d468a83e33cef0d5db2842de5cce7c86"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d93de852cf75658d7ca754d8a9a0fe6a919391608e01a84cc7b19c401b0fc84cab7cfa12b67c6fea059fe6c506fac02331b1448ec22dcbb7c5877d9f90610b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-wsdlto-databinding-jaxb"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-corba@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-corba",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools CORBA",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c080be98a15de04299c54621b5580c1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d2cb3b8f19a8836bef1ecc99c763b4237b18f69"
        },
        {
          "alg" : "SHA-256",
          "content" : "911af9deef40454367f14519df9676722e198f57afad37e84c1f1fea2cf4f73e"
        },
        {
          "alg" : "SHA-512",
          "content" : "894111636b140200455c7567d67f69c2f55f5b4f3c9b85b8302d99a69791eb7e83b0db804fa415f392e4447f07bef2baa23674f04b5d3b9b0df007d004eb5002"
        },
        {
          "alg" : "SHA-384",
          "content" : "a53955bf3c1f331aee96b17718c8be482687e8568f2b79328269d76a6683dd5f91450cc1efe50e02fdabfceac7ec1334"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43da47afd873b5a37bde57c01669b864b7ac0a277e305aaa09e788b43b23343f53b81f865f57648d601a08f8b9a0372c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "912aa7f3aa3c254b373d44aa3a77c20d6443573fd908eba52e0922c7e845afe3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8948f0fbe71d3c7c45de6e56dadf1bc40331a8409765cf27805bedd603e731257b47a3ad6fcb694f3c16e4b8a36b21425d56297d1c787b0a0cdbc345731ab423"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-corba@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-corba"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "group" : "antlr",
      "name" : "antlr",
      "version" : "2.7.7",
      "description" : "A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f8f1352c52a4c6a500b597596501fc64"
        },
        {
          "alg" : "SHA-1",
          "content" : "83cd2cd674a217ade95a4bb83a8a14f351f48bd0"
        },
        {
          "alg" : "SHA-256",
          "content" : "88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c"
        },
        {
          "alg" : "SHA-512",
          "content" : "311c3115f9f6651d1711c52d1739e25a70f25456cacb9a2cdde7627498c30b13d721133cc75b39462ad18812a82472ef1b3b9d64fab5abb0377c12bf82043a74"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e811e531ce30a2a905d093a00de596cf04406413b60422db8252b46125cadf07b71459cf6ac6da575ec030a9bf05e57"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdf019332ae8714ef6a3904bb42bb08c1fe4feacf5e6137274884b0377d4e5b5f7aa9fe8e1ef5ca9b3e15f12320fdb67"
        },
        {
          "alg" : "SHA3-256",
          "content" : "babce5c8beb1d5907a7ed6354589e991da7d8d5cbd86c479abfa1e1dfc4d2eb8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3a8ce565280a157dd6e08fb68c317a4c28616099c56bc4992c38cf74a10a54a89e18e7c45190ce8511360798a87adc92f432382f9d9bdde0d56664b50044b517"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.antlr.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar",
      "publisher" : "JacORB",
      "group" : "org.jacorb",
      "name" : "jacorb-omgapi",
      "version" : "3.9",
      "description" : "JacORB OMG API Stubs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6dc650cf37bcf15dcc6a2f6e745aa9bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ff5bf7ba180c5534191ac9a02e7d6937748bf36"
        },
        {
          "alg" : "SHA-256",
          "content" : "247f565dfd4b0c1ee54b1e0a6288be84fc66ae961c34715171ca2867c6857447"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8b17c3b3f7150b760f8375ba54ef2c826fa0e5cf96a7f84d7f409496df31628f27cbb6449a8114b9b5485bb950319c64d6bcb52f7db8862bb101890a55c0328"
        },
        {
          "alg" : "SHA-384",
          "content" : "86a076941587a2a23d49fb4af639380132895160c58e9d48a6deacea9b761d13f4130ce65ffd6a4df91a75f046013f8a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6a0739165a89f887fc1d9436816cc72bc27fb6491525497235fc649e45853d5f8aa63d2bef1be8f14b06d48a1b736915"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a416b222bdd96907bea007389d9bac7ac29497b375ab96bfbd27bc48319cb5a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dcd9a56dfb4cd9d062253a41dcef80f59e037afee155d75bae2ffb29a4037dd70df00f75bfb0af182823e517316015f4354a2a875bf10a5ff11ac7c36905c63e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jacorb.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://www.jacorb.org/cgi-bin/bugzilla/index.cgi"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JacORB/JacORB/jacorb-omgapi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-wsdlto-frontend-jaxws",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WSDLTo JAXWS Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8c51ff3292809eb9986b9bb72a4db2cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "fef6da33e3898aec8bf599e08cf93799e87b168d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4b097140658d17a6527300cce43ef45ccf08e5782f08be68b531c1a6da8b6cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "97ffc1ad1b55798852897a31ce154e55c271c5df779c1c21b472784026d7af43d74146568e609c72fed54ebd4f3955f135cc93a5a92f136996f02e5ede7a6cb1"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f7d292aee239b431b20e7cdf6e12695b62ac84cacbed3b5139ff7bef72977f49d7351ad6fc90dc44c051a10c861191e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e49e838754ba07c92ef8582cb95d5b109f7e6e01a904be08dbde8eb15e3bb7e9aab00264c28ea04181b738b40038d77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d3c4a1d21b18010fbf07ae086699d71f4a403248b4679de60ccf3d8a82a50de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bbcf79c31950ff28652bb0e356193ece56d795ba5b3af6da4ff945526e6eb2f5b6386fff150a8a1308fc4ad68d3d013639c6d433c4a75d4af4eea1b5935e95e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-wsdlto-frontend-jaxws"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "xml-resolver",
      "name" : "xml-resolver",
      "version" : "1.2",
      "description" : "xml-commons provides an Apache-hosted set of DOM, SAX, and JAXP interfaces for use in other xml-based projects. Our hope is that we can standardize on both a common version and packaging scheme for these critical XML standards interfaces to make the lives of both our developers and users easier.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "706c533146c1f4ee46b66659ea14583a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d0f97750b3a03e0971831566067754ba4bfd68c"
        },
        {
          "alg" : "SHA-256",
          "content" : "47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710"
        },
        {
          "alg" : "SHA3-384",
          "content" : "717fa1ea46c7a6265351dd212a106870c427e71de0bde251a409ee6e7dfe02c61966ef306d20cea5d8712cf7bf58d07a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bb83f90bc8b898878455441b3712a2bf489b6584e6685e5cb82d78cab596ae46"
        },
        {
          "alg" : "SHA3-512",
          "content" : "762f05d93e4f9cc95a969f8fecad13f97064897c83f4e057e84fe054601275912b68be76bb50da7e8d90b30846712b77341eb26a6405c59c07b06e223e9b027c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xml.apache.org/commons/components/resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/bugzilla/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/xml-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.13.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.13.1",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for the purpose of processing and manipulating text that should be of use in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "15f58ad641b4e9fd3c8bfa0f766300a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "088b9f76d465e35a06cd439ddcb8190ff182931e"
        },
        {
          "alg" : "SHA-256",
          "content" : "76434bd2dd778ab140d84b3c6ffa40c40fe6219909f5ed1d8b8977c5ae8e50c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "18a91379bf2ce53a00506fc0d0aa2258b6e7663b37e13cf7dc78a3848774dff8e4cd5963e0fa8c4171c6e6a235c243fcd9d1c909044eb7b5d93a9c5c62277f8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "4195ba5539778bf51e0b6ab7ff3c30cff476eac482fb53363d13e6965376d097ae1a3357454d00924698d35a478e220b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bccfc8ccd64e4d220541f4dd10ae6e7c8305ddddacab4b7fe6194e25ab0924b44ebf27b72942995773239e0f62b7a7a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9be0b813a6a9eedfce10c84267b94c59712e92563ef7b4b2712b605bef305456"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a89b219a9829c34408bf49cb8562fe16f248ba8c2b744b012bc23d1e93e56b03cc6d81c3838768ada72ffa2e757f4f46c6ea04072c4ef918bbf63de68bee8593"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.13.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-javascript@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-wsdlto-frontend-javascript",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WSDL to JavaScript Front End",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "48e05051e8b7248a03f2cfef1e95ba99"
        },
        {
          "alg" : "SHA-1",
          "content" : "d3deb31e4374aba2ce3b0c441abd081055504f2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b75d6fa0571232269bd160e9fdb585a2a3abbceecf41313709274d75351b20b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "fd4ba5fa0b4faf6f66ba92cc6015f3c9194422c042b19d95788294828f95b32862266f15adc502dbb03b19aba26de4412248e97969ea2695e5e0468c8e53f525"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fc6659f42c34b62831a180e269edac2ef58be8c71f44b3aca835e53a4eccc86274227f7e3c8271e6cd7dc7ef961bc46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de13fb47800c0a91a9d7ddf98e121d4cbba94e95aba948572cde563305fcbc5f98fd529fbd4540f61127e0c627b9b5a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "20f488a1ba3532b18dbe834929f498277900a738f73664c79bd3eaae8c56a8dd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "be0f574882459bf702aa0b29bf4c124a4dcbfeb34f60034c203a5684a633c8decd930d220ccf30ba6e04bb539204ed02a8dd2ba7b1625533bdb93a9639cd2ec8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-javascript@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-wsdlto-frontend-javascript"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-wadlto-jaxrs@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-wadlto-jaxrs",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools WADLTo JAXRS Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e2e7e590c4e428ea36a15dcb2234734a"
        },
        {
          "alg" : "SHA-1",
          "content" : "404333041a684ff198ad1fb36667eadaae0e1bb0"
        },
        {
          "alg" : "SHA-256",
          "content" : "b5d3c935740057bafea53739ce5b8244607ef1bdb0ba91278310e6ec37925cc6"
        },
        {
          "alg" : "SHA-512",
          "content" : "5053360af2f20ceb6f4977df1c4ecfcf889cc60e9263c39cfb281b40538b475ee77bfb74abec5085c8546130eafaf7660d3feb3bc010dd3c35993d5af04e0fa3"
        },
        {
          "alg" : "SHA-384",
          "content" : "eb7cb8b5d78f35f8d2da27d2814fe941a2ca80959a8f03059c3cb9c3d660f450be10b0f8f8ae92fb8480f45b823370f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1945f40466106301790b3e57dad2bf4145ce168306fd18707b04816adc77838f1a90eea49ba4c7f53ba17ecf247ec73b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4cd7fdfb0d94eaef7ea9eb6edc13bbc0e22d2479a834c4f675be79289060c789"
        },
        {
          "alg" : "SHA3-512",
          "content" : "57b36408425cfaaf7f1747bdde45d032928cca6362aed5a4ce1423e13001a8127125fc276cd75ba58de39ee986d22a50f71317fd189908dbd93c7fa5ec474fb4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-wadlto-jaxrs@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-wadlto-jaxrs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-service-description",
      "version" : "3.6.8",
      "description" : "Apache CXF JAX-RS Service Description",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "764d8edd2edb6a757176a65a33b69bd8"
        },
        {
          "alg" : "SHA-1",
          "content" : "40e0fde7e7db8e7f2914b897676fe07b9850bbd2"
        },
        {
          "alg" : "SHA-256",
          "content" : "fbac1113808d3ddb40dc712d5959e5f07678a0060151c34b8ae73dbd7e12de7a"
        },
        {
          "alg" : "SHA-512",
          "content" : "20b00ae238def4c53d095d1cabf72275b0be8dfcf9bcf9642df89de113b3697e976955eeff509256909c4775cec2aaeca91d6c31fee5774ff43dc584a4120162"
        },
        {
          "alg" : "SHA-384",
          "content" : "600deb31d2aba726b166731ca983b08827dfd10f75585ab8f210eefdd97c815b5eb214fff92a95dbdfde1010b11bc4e5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b00db9c16b77be6bc99014e9da4d0ba4a884b61ab7323f699346e8979d62eb447564df74c166b6961c47bf54891772d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5ff1977baaa6e2bdf235aeb8a1327940776f434b96811a9c08a70cb4f2952e9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31d387f3c59bef0ca9b96ad794ab5e8605e2499973249265bd281a6ef7645d37f70d3cdfd09cddf371e5ef8c8d03419388ce7bf7499a41f7c0ed4468c4a1b592"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-tools-java2ws",
      "version" : "3.6.8",
      "description" : "Apache CXF Command Line Tools JavaTo WS",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e346792654374c2d77be63f0630742b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "57d2aabf6bf3f8737b663e6935862671c1b3661d"
        },
        {
          "alg" : "SHA-256",
          "content" : "d45d98f1aa6318ffcd2c924253683080abe64ac840f108b6a6ed21fd551bb640"
        },
        {
          "alg" : "SHA-512",
          "content" : "250a458e4fe2567168768e7c17c236e743f29134d7d404f2a25ffd6af8a827bb5967d0e3047afdac0ed2e9087f69bd156588db6f2425236d5ca63c151203b3a4"
        },
        {
          "alg" : "SHA-384",
          "content" : "a8f46a89c2be26b3f66c6fa9340282590f35dadb62a26169bd3834887ee2396f2b069b3b5180dab9fb7d46331fc42536"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e951c15ed948820608a1dbac484b4d20c17bd46e6580631b783a1c05ebc70d6ca3013a22e6447080fa2441a679cff7b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58471f128a3a3151ef3b6a5306b0f373ba1c5ccc9753437ef808b073e4099cb3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a0432fe7259842d4c8982cd7ff7dfaf8bd13535f1bd6032d757758ca8499aaf02f4379f683d67e162a08c4f4b01162fcb1c2d5fa58c230ff7caa131df4222fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-tools-java2ws"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjcplugins",
      "name" : "cxf-xjc-dv",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34db49d5e6479e389c3c8e9df9c91023"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2c0aa570e80251ad69f39850f2a0e4ddcb4fe5c"
        },
        {
          "alg" : "SHA-256",
          "content" : "95d00097d99d53a7f56a2e0543fb7ed1f4ab8233e157d75a56429096b00120b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "edb8b37c41c7fad26eea0f3d7a2537429ba615d6406b17405b36e8416d4826e2d979cbfc207142bcd95ecc533edcfee74d999b97691ef4517de4a4d3cfe37e60"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e915d2e07631d66006213fbfc1662940e4abc50d981c10a4b2189f6993eea4aa93b527440903ed52301039f370b678b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f3071f8a9f7235e2bfc7096482ddf4bf1806d3ad4d84d9e94c91db5aaad105bdbde4b8ff9b4a20a22ce8516ecbba20e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f45f27d67dc74ea5db4c0de042a54358be9999d5d3a449d68559fcb92208edec"
        },
        {
          "alg" : "SHA3-512",
          "content" : "231fe43e587d2dccc3ebce42e8ed83af25f32ba21b15ad8d06d513976d1db212c056d21cea3900ce01b4bd7aa1333e18c1ebb78fe90f6ff47d315da46b41f47a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-dv"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.annotation",
      "name" : "jakarta.annotation-api",
      "version" : "1.3.5",
      "description" : "Jakarta Annotations API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8b165cf58df5f8c2a222f637c0a07c97"
        },
        {
          "alg" : "SHA-1",
          "content" : "59eb84ee0d616332ff44aba065f3888cf002cd2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878"
        },
        {
          "alg" : "SHA-384",
          "content" : "004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.ca"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/ca-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/common-annotations-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "1.2.2",
      "description" : "Jakarta Activation API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cbb480310fa1987f9db7a3ed7118af7"
        },
        {
          "alg" : "SHA-1",
          "content" : "99f53adba383cb1bf7c3862844488574b559621f"
        },
        {
          "alg" : "SHA-256",
          "content" : "a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d"
        },
        {
          "alg" : "SHA-512",
          "content" : "e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaf/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaf/jakarta.activation-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjcplugins",
      "name" : "cxf-xjc-ts",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6dc6899ae39d6e8081ec38e41b66f436"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e28df1e5692ffc1bf2d06b5ba90363a8bf3b4e"
        },
        {
          "alg" : "SHA-256",
          "content" : "cff46a3a3fb76175e5608c8c5b26b40a85433c6adb23e889b06c88c4ba572119"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c9d8befaadaaa793cfab096a64fcb2288a8d673a6ed929930d081a4c29c866de0e6d1cc77a14e26c30aea4b33a770f8ac0e311709cccd893e4d69a522ed214e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b84542ce5c4d17ed56498350101d2d591fa027b8f067217dd681a1402dc87423b66e8354001061ff6bdf12909ad0b859"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7bb86c57580721e4cc803bec811ae157596b1e96fdb0d01e98d6a0c5e8d615d906aab78ef8e77ebbc9b40284e0d0585a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "edcc9319d40f457db2a92978aad81aed8bd486b8c7b6514606feb107066cea8f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79c1ae2193071c0e250613e68d4c44cb8407c318c45f6106ec94fb38dc0dcff230ccca81a2f9bb12f7f98e4b8c3bbe5a85f3e4322bcadc522f8748c59fec5753"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-ts"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug671@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjcplugins",
      "name" : "cxf-xjc-bug671",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9f45210aeaad7c8e109221c2eb7a4a9"
        },
        {
          "alg" : "SHA-1",
          "content" : "d1a3d167275f198664942fb788686e00fdf785a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "817ea2006a2e97daeca80accc6beb433fcc2fc1e15c41954162247c65809985a"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d2316509a6a2a75231272fbccbcee41462d0ea4b841c1d68c53f3deb707b12f68d3486e3764811f9d6dca952b4fae4f8f28f1ab22d6651b4c28d8abd035f083"
        },
        {
          "alg" : "SHA-384",
          "content" : "695c2f8a451e56030ec4b567a279b7309e42179bb2eae963618bc0d6818ca5327273a0ddc4eadfaa50642176adf7e5e5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3cf1b7ea228a1f4c1493b1b83d54a94a7351a617e7bf36ee1c8a7a605f52b13e21dab5841225d48285f06f80e4f9330c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4397f6cb4aede6214b098dbe404e036020a0bee25219bd28a222ed0a79aa45ad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67db1c900153b0b3cd876cdb0964bdafc27dc01a8039e4d21175e30b07e35c2987d08bc89e8a9aa6983a5fccb864747769616a11fddb0b0660cdaca9044aa913"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug671@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-bug671"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjcplugins",
      "name" : "cxf-xjc-boolean",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "44eb5c38b67c6a2c0f552188663a5bc4"
        },
        {
          "alg" : "SHA-1",
          "content" : "56d15097399ddaff0d39e5c4ef1837703cf7b57e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7851bf189480d5b81eb8e9683200c29ee376b8f9d9fbe98d7b6ca38f44983696"
        },
        {
          "alg" : "SHA-512",
          "content" : "13a4add14090d96640207c74947bd3eeefd223da59c6772767d4f331ce30b92e20ae2aac8a6c4bf7ec5eb73567caa90506c44146afac3b0c7fc3753fe673f695"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e917e528fcc8fff194b95e676b2d41559c968b41af09154e3e599c4629e7e1081ebbc41d46869ced38afeaa9dba60b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bfafded9f9909e18374eb9a76aa92fbd266243b7a1caae96a72684ade68b26c89a3e80d173529914dcee875210d20fe9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fcb31d54f3f1dc5f2328c3d6509b65b6cbc0e3754e6470edfe0303124d21ded4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd2be08a087506a8778827d04916422752771ee5005c1124cc42528a171bf9235b9172d2e4f0147aa32b7052bbc7d27bc1f5ea4b5cf4e423dd2a6abb3505dda5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-boolean"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-javadoc@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjcplugins",
      "name" : "cxf-xjc-javadoc",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8661e4f2c078c622697f4ae8ec5bf2d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fbafcf0fd30d78a1d8018b8116c6e056c71ad5d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "74172be7071f1f28256c612c7e6fdb1794473ebb36e0a76717f47f4a2dd214ff"
        },
        {
          "alg" : "SHA-512",
          "content" : "88486049b4495867ae9d226cf452c5a232eedb66ef4795e288abfd97b0104f6b122349d5d052b485287c96e77ee149ec8271c98045cdc39a3031227e61d6b72c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5fff314ca9376d8407957172687c8a08f3f1eb485bf55c41357028c2390a07260ad956e48387d4890e5b5e89be8af6fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "006e7faa63307d6f3fd0a2a106cf4b074cd0de755922cc10af4ebf602661b8b68b3e009f597dc20a2f0cfcfaca41767e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd0da905cf8ee80e61ef54ac3ace8aa6711e8727840ef5f80fc91088d291149a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8e1d08ed7f8ae7d671508f8c32747e7969c90cc11e4c98a247228b0234364590b44ab8a9a0a03bf7ce4a329ea723458c90cc3ac166e85c00411e74efb7551b12"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-javadoc@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-javadoc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.xjc-utils",
      "name" : "cxf-xjc-runtime",
      "version" : "3.3.4",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "312ed49989205bd5f8174ed130c71f2e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d728706a2ba6354aeb7a86248291891c75a6c14b"
        },
        {
          "alg" : "SHA-256",
          "content" : "e10d664a2ad84619a91e9a202ea99711120cc4162191e644771ea8a62300a1bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a35ffa4b5e7728d67d157d37fb1e00dfc07c5132372157390201c23f203ad1899fc49523945febbb481502ba67096dd468817e78b4cf79b5f83ba3306c0f801"
        },
        {
          "alg" : "SHA-384",
          "content" : "2508be81c4ca54be36735fc218cafafb3b84853105666edd4199e20c8c04ebfaf71c88909f7666768c3c512f292e5d02"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f516344e729a043ef2ba9c692d145da2c3e77172e8248c20c23c750c6cadcc798297a62d0df315db734db2c49dc742fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "305f04ef3984be069a5708b0e21ca1f540cc508b9f4fea1388eb71b57a2f6b63"
        },
        {
          "alg" : "SHA3-512",
          "content" : "35835f5236cb4d7fe17169ccf8a75f08b42b69ef7435fb062fb550ab0fa87ea69557a01f7219e489fb2ffeaff4b5ee826a8fe8670393051972a8cf7465648d0c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXFXJC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.4/xjc-utils/cxf-xjc-runtime"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-core",
      "version" : "3.6.8",
      "description" : "Apache CXF Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cf0a2847f4a2c4073eeb306af463ae0"
        },
        {
          "alg" : "SHA-1",
          "content" : "f57c697ffebf4524dba2b880d7828e618b9ab274"
        },
        {
          "alg" : "SHA-256",
          "content" : "6999606d6834e6c8a1eb7edcd83bce0c800378023b78fae377728d99e6956aee"
        },
        {
          "alg" : "SHA-512",
          "content" : "79d595a113e8c2671035d20933d922db71e9b73024171bc11f56ab9455b9e238a5df4f28d8c02d2ada13567d81d8a09e376a5ff219d18680158aac6c2124af94"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd3f9bdf6ef83759cf9cbc12682a465ffd1c47995e85211c2e217794b0c74c1712ede1faa8aae43dc3bf9211a717e891"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1846ebbba6ba27728ecfd397d7bf412a841808a6250bedf5aa2f57885956c67c4ef418bf1663dbfd4f64f1f3197c9ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "75fc0d8c84a5403bc743591ea6d3cac52a40526c7f7d202fb9126f31a70e235e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "97669b68ea2d7fecd257a017e621a4bcc92785ddf8293f13835409e567d6dcdf68fa38c3b5c5162301413f238e134c8f31a4195f387fe854251c9b6142745b77"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-features-clustering",
      "version" : "3.6.8",
      "description" : "Failover and loadbalancing support",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a403c07225920db4c5441795a0f831f9"
        },
        {
          "alg" : "SHA-1",
          "content" : "553e2cc699496c09b295a71219d1ef1ad6d11d2d"
        },
        {
          "alg" : "SHA-256",
          "content" : "173eccd954b72a161b4bd0ed595cfaecbbc7788f0240df2afa3f5f50f339a7d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "d673a360000694468dd37ee4e35cc4aee1b3b18b05e51e0b00007c76ea6271068c897c9d7ccadf9fc8fcd876f496abf91137d1838c8337e8c98388d9341af928"
        },
        {
          "alg" : "SHA-384",
          "content" : "81abd9b58e4e8b584c1aa3005ed41a70c86021f289e03abaebb452974cc4a8d4cf1b00e1edc20e6c0601bae410c81f10"
        },
        {
          "alg" : "SHA3-384",
          "content" : "729069afca727a2f8fe3f25d326943205dd4f965baaf5ed29d80d2a143db12494771b78abc690e59f8f1b5dfbeb79dbc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "797414dfaf82447c63a72ba60c7f1ddc2ec6ce00bacb5509470be21a9271e75a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b902ee9ced8c69361c2420bf8af17c877ba78cfd362536e98e622d7790909b35f6b12ffcd3eb6603864432a2cc0f14486290a3190ddb82b9f697bdb61334bfc3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-clustering"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-management",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Management",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1dee3f721ceb12e6368bfe8de66044da"
        },
        {
          "alg" : "SHA-1",
          "content" : "b282d0a69df27f187db186315fd65acc0754ffb6"
        },
        {
          "alg" : "SHA-256",
          "content" : "91f0dd0751e66fe47cf40daa58f7255a3d4a773f9c5f019511958d72231e14e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "d640d27cf0fe391a057d6940a99403228153c4aa0c46ae6f88c580bebb4bccfbfa1e21203381b012612f9a7d5a223d2e8bfb182f99623b6e11b42eadeb0a6222"
        },
        {
          "alg" : "SHA-384",
          "content" : "123ba7ec196036ade8a70f6c54ea748fa54c5d460739c41e22722a93ffef2fe4547bcd510bdc0ea360a7ad0db0299b95"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b7adde7a43bf76ea12a832cb27b01b6f67f57cb96c91c59d4137381dd8d969e645cb286a6fc3f45a45de0b8566549c23"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c95b2164a11660a911b34ae8c14325eaa0bbff8051bbabb3aeb7badc2965e69c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d32929bfc019060a798bd311a7fe3b44bcae6c730ca0eeb8b69e6aa1f12002959dc5e267b5ee0b8149d0681b64d6b1997bf6451d17482e11a8624bada48b126f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-management"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-local",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Local Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "916b885cfd3fa92bfa45489648ec4c5c"
        },
        {
          "alg" : "SHA-1",
          "content" : "7ac8569c2785aa845ed9b8b798b2474a58ed347a"
        },
        {
          "alg" : "SHA-256",
          "content" : "703b49e9cc8556757997f10af98ec06ca25362f1b1c39dee762951457aa7fec6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b0b159b7f5d1828a32151a9ca2dfa0f7ce9c1b2377e402886e605d60661b12cd4570101e9c66d05e3fa85c74e47dfdfabba9e42243b70360dcc1d88a7b5035c0"
        },
        {
          "alg" : "SHA-384",
          "content" : "f784e9a342b3b59f98e7e1a83d9d88a29ce1df919f5b966575abfd41558a4af2468f45a568243e8350d4ef22f0a09924"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e5298f975a76370ac0761d834f0b1fba46a1d5b07b82968754e7d23bb50e469f9ea04f11368afe324552ecb3dbc820aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7015903fd13b3daa95c596a4f0d67c57f8458ce7c2a3786d01a1a1ec3872a4a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "178be8ffe2abc12484211b994fbfe3bbd4173b3a73a829127373fe0e15853ee81eb2d1de541e9cd2fde36f3db25897f7f2c5dc4a77a71605ce27f63bcb0da242"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-local"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime HTTP Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "542773f45d4c57a2e4f29a2a4db79206"
        },
        {
          "alg" : "SHA-1",
          "content" : "c1a264691f9f3d0d38c89babbe81c8dc15b7d4bc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5a951898dfd3f5c2e8cfdf7cb9bd5a24801831fd1e96d30028867596c89645bb"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfa35bb7ca0915640658a33155886abb54315510ac0e9933061dbd05e70802e7e31ebdfddff01cbe4bbf5a1f56603c8cf7d278485e62b47c675b93b5fbe7756b"
        },
        {
          "alg" : "SHA-384",
          "content" : "437f7d3beadb2d800876f675da7001083fcd4db6e855c494bde2267f602616d546f09106bfcf6285a75694750bb09006"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1fe086dc733eb7020fe0bec8ceacf2791dad9d4a32cd6d148cea5eddb457561955e3adbe7f6f258a2a036788827d1f1a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "19cd110db37084f54697df99db3f19ccf171d03658b20c97ef35fc0fccb1f01a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483e05a555804da57c0a11e7a42f6a9c5eb7b1b64127192e607e28535c5c31b1d6d6f7e24585474a8af0ffc47238666ff02e15df9484d260b73e29266252f8b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http-jetty",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime HTTP Jetty Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f31b5c6fedbf18da62fc425d06e5e035"
        },
        {
          "alg" : "SHA-1",
          "content" : "70dcaff9030585680ad72b07c82dd4c18df8cea8"
        },
        {
          "alg" : "SHA-256",
          "content" : "897ccefb6afd81e97c815854de47b91b92f0e04cea43c0604716b2f3b8d757c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "b628fd8de5417f3a64de344aba5eaacb6df2172183ea6047027f6873b493c60e1be359fb26f0d63567c88ab3a07875c40c9d5e3dd64e9d27b4082ca76afc0c97"
        },
        {
          "alg" : "SHA-384",
          "content" : "451997193d444b4f7e2a02296da8a0e5047fa5407722bbfe85a70e79f89a41835de1c87b61bc9cd8ff90e8ca5a009afc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ea25f64577eb7af9fdd2903cce9a9dc5bd1c2337adcaf361285f9a9456debdc2116f668299fc251ffbcf547df7b1b32"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c91f29754833281c59624144fe8b839daf12a9987a3e1345d4a24cad2fbb5e30"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c093227871abf9d8013290f55d468f0d6553d08dfbfc35d7b50172e4fdb895d10a76bfa5fedbd8fde69f62aa3f21edae65a2404ae38031e150b0a81a38565b0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http-jetty"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.36",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "872da51f5de7f3923da4de871d57fd85"
        },
        {
          "alg" : "SHA-1",
          "content" : "6c62681a2f655b49963a5983b8b0950a6120ae14"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3bc3110dafb8d5be16a39f3b2671a466463cd99eb39610c0e4719a7bf2d928f2ea213c734887c6926a07c4cca7769e4b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ba2608179fcf46e2291a90b9cbb4aa30d718e481f59c350cc21c73b88d826881"
        },
        {
          "alg" : "SHA3-512",
          "content" : "14c4edcd19702ef607d78826839d8a6d3a39157df54b89a801d3d3cbbe1307131a77671b041c761122730fb1387888c5ec2e46bdd80e1cb07f8f144676441824"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.25?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "10.0.25",
      "description" : "The core jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d1dfb8d58af6d845c5a1ec346db85ba"
        },
        {
          "alg" : "SHA-1",
          "content" : "c756438486556cb56fe32e1ff9bfe72e7c70ad77"
        },
        {
          "alg" : "SHA-256",
          "content" : "7d4becb0279e47d3d5f207ef2c45f3d0c67d4567640f70e3cc8e9fbd9343d8fc"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c32a72ca46fb605a51536a1c1fad32b42cd68e5d72036413207bef727bf0b8df95865f17117656e63a7efd72a20949238ffc84ae53fc961b3d4a564d4ab7781"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d56994fa5feeace01f9cccdc4b1971792e2a92407100d2a3a631670db0b27d86275a479554e9d9c5babf2aa0f7d2894"
        },
        {
          "alg" : "SHA3-384",
          "content" : "81ddf081ec821827e83d171b0b6775cc9b99c9fff9a1c46f846eb541630ecf6ba9ba0a77e0dca47448cbb8daaeaf460a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cd860192c66ba1a8fd9c4fbb260d8654625fc202c95c4e7be2d6e5e6e924814f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f24f2f4b265056424f83fd691831469ecd1f5e680683d9cb8bdabf64b5ecb36238f2f1fe570019ade29d948f6cc3c6ac310b743244ac83e3011f1d89d9d0b4a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-server"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-server"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "publisher" : "Mort Bay Consulting",
      "group" : "org.eclipse.jetty.toolchain",
      "name" : "jetty-servlet-api",
      "version" : "4.0.6",
      "description" : "The Eclipse Jetty Toolchain Parent",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d63413e02885c25d0129e3d2936606f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "959c5d83d08f5cddf56caff749e48b735193191b"
        },
        {
          "alg" : "SHA-256",
          "content" : "d90bf1f8a9d2ba89f4510bb51e1516dcf94ef6dc034e00f233654abdd78f2210"
        },
        {
          "alg" : "SHA-512",
          "content" : "758454d41cd0c08ec5b25c1e8ba7249fb11f753ea04c337614db9b99f2da9c1dd9a26bd0048aa6d1b95906d8aa67d0a9c719901b611d3017547adda9f7d4a289"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f5cdcc8b31399438db38ef510c30399f4c2e3058ed8c7d9a6d9a425303c31c3f6d41a16e5d9416ddc6e5ca95164b7e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6c797c7ffe1fa8b7c68786718ae4f6e96a3a904cfb9ba3fe17c36cd2967796f6e1bc1ed09bc9dc2e74d1ade975526e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1a2f5f3b79a4881afac16b2cecca63f9a18bee4d7b2f0509001e265da8df353c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "443b85f02330d60eda46607dccd92e7f92bc5a3ebf85298ed0dcc28dea468acef800e854918c50300a4fe0fe42a111fb8ffb1be081e817a7a55dd353192f181a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://eclipse.org/jetty/jetty-servlet-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse/jetty.toolchain"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse/jetty.toolchain/tree/master/jetty-servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "10.0.25",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c5d62dc43e747c96adc2fa669a4e05ef"
        },
        {
          "alg" : "SHA-1",
          "content" : "476d6db3ea9c13740b74e3d70e86c3890522e9bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "2df7c0760d97ec58094babec6a8e48963e4c3b40628e1864bb8cde018d805607"
        },
        {
          "alg" : "SHA-512",
          "content" : "d0c5b3636c63ab7abf0be151c7a116af3f274eba23fdec471d9b441c6dccdc0ad4dff25c1550c1344ed2f78ca2649367fa208445e916c6f858d4e9f20ed9a065"
        },
        {
          "alg" : "SHA-384",
          "content" : "addc37ce4b1be7515692ca7d91e261dad18e86591faef98ae28972e0aef3aa296f467914e9f141ebe2bc97f4663bc670"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0ac974c307820784487b29690a4511b90399dbe4852503ae60b2e7fb546abd39b5d4aff49ad124dca6256f07139daf1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8430a7881876bcce6ab94c59de2ebe3d7f7d62bbe25f9477a17a0cc1c56a8695"
        },
        {
          "alg" : "SHA3-512",
          "content" : "95b4687522b5e5b45863f3bd29a954210de0bb13647569e488c7732d5b38eef27f375966a49206c8090ea628e97270f546526b773371bbb95a6da8fbd5fa5253"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-util"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "10.0.25",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb37ad4ce4b926277f84a8604427726a"
        },
        {
          "alg" : "SHA-1",
          "content" : "114d3abc13e65783581e7ec2235378069c5f33ed"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9a9de636ccbb8946bb40506741e7e40b2ecba1f630479c823a611fb2c717bec"
        },
        {
          "alg" : "SHA-512",
          "content" : "98ff23f9e2be7197c174d3a71610652c4a6fade592b4e2acbcfe3a25ae10200a4583ce13a79ad2033011d99a56d74d662bacd7cfc6d2407d3b0fe16b2ea2ce02"
        },
        {
          "alg" : "SHA-384",
          "content" : "2373c4439b729bc2c3f703e36fe0e789cb8d731187b8267ae71fc610056983d8e163624def8d286d300feaf721ec364e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7099717ebfc8fe879221b0f9e310bb6c52e8e2449688aba53421ada2433aa2782de186a94753d59e06a6800b62538054"
        },
        {
          "alg" : "SHA3-256",
          "content" : "68d3b2a48fe1c33122ea3668a153c2a091b0e22ee8839300c50ee67869fd1629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a9fe08ce89d2aae3666cbeef818c3697b7861ee0a5fac81d8ef78fcb6a493f192d077757a02b4fdbb65d62b148a93b6030f29862ac6cce899230091f9490f8a2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-io"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.25?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "10.0.25",
      "description" : "Jetty security infrastructure",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a78757959d2c5b610ef89129fe3c6ca5"
        },
        {
          "alg" : "SHA-1",
          "content" : "685d9c360301f5683ac762b81c8fb83b1ff4502d"
        },
        {
          "alg" : "SHA-256",
          "content" : "f5bcc385c26e57a39433302b67041536a2737726f78ec4cded708906c8f2c463"
        },
        {
          "alg" : "SHA-512",
          "content" : "a6f95960ea23adf92f37c54b53c499314a8195c1c26aceeca435f32b39392a1f517e9a8057fcecc147b004f63f46bec091a97464adcd26fb1033ff261b6c3f28"
        },
        {
          "alg" : "SHA-384",
          "content" : "e577f8f80988f7daf04a9102ad3e90f94d7cfe2d9522a1d20fd4d83eaa9ab10e5ec223d6aeb2eeb390aad84a3c5c44a4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a738980efb32606018d6b658339aeb5fcb919e786c83879647c2187d28dd2a70d51377d9fc2406a8439ba2226db370b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "508957581b1ea2f86761f40a4907fa5a9d2af6998bad53e373ad258873ff671d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1249872bfe2b4744a0603d6651dd71cfc2648a65d6fe3e2e529f2d77ac4e7babd385f2992bfd79781ea136a1175e50b963f0ee585c6aa6a000c4aa7dc3b0068"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-security"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.25?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "10.0.25",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b82cdeda57b1ef5c05d70a9e701f85db"
        },
        {
          "alg" : "SHA-1",
          "content" : "eaa6cd99b9ec7977ae07b2563f598ea0e31130ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "31d196f8292f9d66e4164be27335840a9564ca9274b327c0ee1ec840e4f17e63"
        },
        {
          "alg" : "SHA-512",
          "content" : "39c98b214dfcc373ec9bcbbacc9af09ae8f07c89fa3887d703fe59698a613a9a4cbb990eb88cc2aabd73722dd337cff13994c84b01f172587273a27c70109735"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f66566ea2ce0395afee0ca0eb10441b3b47a032b316b8e718ea14a5a909df384c88b73fc35339d9e463078449baed61"
        },
        {
          "alg" : "SHA3-384",
          "content" : "264cabdfdb39cea267b17752afa4f59b16c9332d0d87d262dc806eba6395f489eafb7f4ace5156928dd95da856eef2c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "efd75f85961b3184f0d91b1decc9c7ed433fbc6614607295d3ddc6a78892fe7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8bc3a45c2132c955fc300851e93e6d57b276f7d08dec4b8359cf543636d28417ae2f90e610b025eb17766b69caac4cfd330418325604e77a0337b5359b6dab7a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.25?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-http"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http-hc",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime HTTP Async Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d36e0c1da7e831219b0875651a431216"
        },
        {
          "alg" : "SHA-1",
          "content" : "574f8bc1f15b8fdacc75887d67b9744661317b33"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e8dc63eb27f39fbe3791313fc36024f29e77f88be335af039cd4b0b286b8e08"
        },
        {
          "alg" : "SHA-512",
          "content" : "334a9990798bac26b6af755859347ae567d3f53e932b9b3ea15424f2d839ad3c164185d935d28eb300890fc05bed440c6e3eceda9441f39d5cf5cb09b5e86993"
        },
        {
          "alg" : "SHA-384",
          "content" : "19af439f1c0dbcd1c6624cea6b6b9833df22d6d82cf9fc30298eaa7c961dd8f9165f715eb26230d55aaf96468d61b1e1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2452c3512ae8cd1a5447bb690e9c56f6487fcf2e1d95ced55f6829c91811c4404c2b06a13be7c53954fbb453e8ffb782"
        },
        {
          "alg" : "SHA3-256",
          "content" : "deef6a0f033eca439f2f16987ee6eb2300c6e8710f7d9407517b070cccc1f32c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "89baac618beae1e1a4689329f529ce77df4f6a5b85841cf1fcf0aee75d9214d6ebb52a5215cbe7f77737567e40e85a72654ea5a1813d38a232a2b061ace381e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http-hc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore-nio",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (non-blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "597c450f3401e98103e835824ab43e77"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd21c80a9956be48c4c1cfd2f594ba02857d0927"
        },
        {
          "alg" : "SHA-256",
          "content" : "4018736ede2d321034e8517ea90baefb31831a8608afccc446d8a699fb1d00d4"
        },
        {
          "alg" : "SHA-512",
          "content" : "197cb4f4343a02d39d61db1c19bf10757aeb2078f51c4ace77a72a250b6d03b31fa1fc51f989f43df8c2a0cf8162a36664a8a935f4bbeb860c35770a3abd1899"
        },
        {
          "alg" : "SHA-384",
          "content" : "e8827b2eca484748dd776edcac779ae67b5c4394c5c2ac1a50c614b19142bdefb4c4e01f0cf376c578007ad515add88d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fb55a9718c2507954ffb779520b0233acdd0135222c7d01542083b3cd5dff669a8afffaf54d8bfe724e52c5c18c1403e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37554263bc837817c08dcfba6b4a5ee978fa1d9f99945d27c0f3ba44195501a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18692a4310956c328ddebeac514a503904b84605463063f0539673f0480f0606c002eccd6f4dbacf91d124e11e130aa122efb855ec6b0aa0cf72ee0b26ac8ef7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore-nio"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.16",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "28d2cd9bf8789fd2ec774fb88436ebd1"
        },
        {
          "alg" : "SHA-1",
          "content" : "51cf043c87253c9f58b539c9f7e44c8894223850"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c9b3dd142a09dc468e23ad39aad6f75a0f2b85125104469f026e52a474e464f"
        },
        {
          "alg" : "SHA-512",
          "content" : "168026436a6bcf5e96c0c59606638abbdc30de4b405ae55afde70fdf2895e267a3d48bba6bdadc5a89f38e31da3d9a9dc91e1cab7ea76f5e04322cf1ec63b838"
        },
        {
          "alg" : "SHA-384",
          "content" : "ba9ceaee1a37ca3201d6a1315ecb0327b495489efd0baa155c219c475df8d3eb69fe77ab0026563db406497626da6562"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b9dc44dcc7cc86d5036f26d54c4003a2d72808ae7b07a0808bb53505c6d4281b5ad213eb1f3d0fef1113dec57cb0dfe1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd8ab51846476c6c18822151c9ec07b39a9633010b5d20ea937fc6910407bc64"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42fa528242981a9d70e4f68ab75a24292df5112c44c21b6f18cb9201ce747885ba1d4dc69bc3d14d0da46a6c2638f937c11bc45749abeb55dc89ddada90cdda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.16/httpcore"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpasyncclient",
      "version" : "4.1.5",
      "description" : "Apache HttpComponents AsyncClient",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5346c547bfd0da64eb3dc54be9380d65"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd18227f1eb8e9a263286c1d7362ceb24f6f9b32"
        },
        {
          "alg" : "SHA-256",
          "content" : "0c1877489a9d1ba4fa50f6cfcab11d1123618858cb31d56afaab5afdd5064d99"
        },
        {
          "alg" : "SHA-512",
          "content" : "1e33c7fdfa63f377ec4844b7744d2f8ec30dc7867136905ff5a5a6e5f94efa5b8159ba20e81f0048f48430cf63ada7411a3974a418aefa497d2b4fab3501f5ba"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c4cf09ffeb61bccc3b67375f401c8a96c46bdee7c77f84e3227271a635e109a550526185407869e93ede8f081786977"
        },
        {
          "alg" : "SHA3-384",
          "content" : "25bcc09200af70f5624baf5ddb95ac6bf46daaffb938d141f72f63ef76df8b740ba3b50104da997cfe67c34bd520fa5e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ddb21eeb3e1c3f00ebcf397b58d8d972cc7ab7b140e8939654bf24b8b89382a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f753a8b9607f42417912c3bddeda3f189ab9f469416dafdbcd29b1df7a358aa57deba8a79a5663fdd1a4acbe35b39a48fd24f889a50e05a4726132db85699ebd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-asyncclient"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPASYNC"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/httpcomponents/httpasyncclient/branches/4.1.x/httpasyncclient"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.14",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2cb357c4b763f47e58af6cad47df6ba3"
        },
        {
          "alg" : "SHA-1",
          "content" : "1194890e6f56ec29177673f2f12d0b8e627dec98"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6"
        },
        {
          "alg" : "SHA-512",
          "content" : "a084ef30fb0a2a25397d8fab439fe68f67e294bf53153e2e1355b8df92886d40fe6abe35dc84f014245f7158e92641bcbd98019b4fbbd9e5a0db495b160b4ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8ccaa1fa8ba7c421413e3c30375bd9c31284e837c476fd831e18043ad4187e92166f49554123108891241bed674b95d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a17dfcf12b2af3a9b006ec369f9bc78ba322348bf1a01146e0d4f3fec2bed6cbe8b2193fac5b4d5a0c3036c06477510"
        },
        {
          "alg" : "SHA3-256",
          "content" : "48f0a61b691e22dec9d6db8e0b58be4ca17a42a2846c82f0875de21f72bb0faa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4ad2c9adc761b7e813330f0dcad3f9978702896c7d0cbf81f60a472d550e320b1527be425ba597c8c9352d587e32e1d46ceb4c73e99c70a6190df4c699a7c2a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client-ga"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.14/httpclient"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.1",
      "description" : "The Apache Commons Codec component contains encoders and decoders for various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b3438ab4c6d91e0066d410947e43f3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "973638b7149d333563584137ebf13a691bb60579"
        },
        {
          "alg" : "SHA-256",
          "content" : "f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ac30c88a6c4bbdfa79cb697cd179627d2addae842e48e2ab167c4f9c5475d05ef4743f58fbed254dd7abc6f3877644fe"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f3fe1daf04e63f556d72f4f59f149327b65d899d6afe1de770b42faae2e323df"
        },
        {
          "alg" : "SHA3-512",
          "content" : "29901c3e6394dd87f13a91b5432c678ac144cb6c86271b06c57c73c0480b23a4688d0266e2dd04abf5e1d148a2e80e1215dd87d2cb5ffbf2c023409f4f5f8f86"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-server@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http-netty-server",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime HTTP Netty Server Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f00ebe8fe6ef96a8bf455a22a26ac01"
        },
        {
          "alg" : "SHA-1",
          "content" : "daf3beb8f7662112e51a63944a554f782a6d1541"
        },
        {
          "alg" : "SHA-256",
          "content" : "3064c6393a09416b1c0534290efd3db877896e05eefcee66ae5ddfd1b52bb8c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "ebbf48ef82cb0b408eacdc5723b1137b0ce93fce89439d58ecedf2e138a51a09341c6c3167f95db56fc249a6b796a04ff0cc68699579c6704186c898103d7871"
        },
        {
          "alg" : "SHA-384",
          "content" : "5de12713199ee12387c8b91da87b9f81d7be6fcb42c140fe0781e4cc023e3eb6996379590389889042b45252c097b26d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "24338fd4e324ad4ce96cacefffa2bd1f3b65e25d1fe6518c01d4d9c8a398a51aa8fc08183acc9641c1082cdce62a7f0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef3906f3c1ae2dc8fb5aeeded2e88cb1a73c471b3e9271036edbaf6e14af3040"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2e93f92046873473e5a11c4687a19b005c71f5065e396295f2b05d3b11d8e919687a4099a8dfa3e36315b9715572328769a975f9e32720218c97f6e9aa912b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-server@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http-netty-server"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b670e66ac1094bdf8bd88b7bd710624f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2071d0d90d840531581acab15bd974cc92b357da"
        },
        {
          "alg" : "SHA-256",
          "content" : "a7eeccb1b48a4ef9062f20c0d4f284ba4fec2d55823055278b387f53b9a5c7bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "dbfee903fc9bac78346bee2c4407c4eda3b5efa16c76b15dc9d9c2583d67186c7e9d6dec4bc1f7c95a9b43eb463594ce6283a2d4eae8ad8f699e9d43e97b8ee5"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c999c1fee2f7a003c6774e747d5df53ed5d79ec6d887d7387e54e8d2a9aba84b4763d35952c114749813acda68d4d54"
        },
        {
          "alg" : "SHA3-384",
          "content" : "78fa47a546cd66cb264c3403255563d6bfe7a707619986b9207142a87c425fe58b80aa2f19d7015d2cc1f406fbe1adf3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d8b981afe628b4ce6679ea8d6ca3935ce0d99cb5f7cb81caaf28b743e09726c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b562ac0819ef256ed2d9ea6ae61f8a7eabdc70690b63364e1880fd592b715860584fb85673df453835c3313a2d147a11d110f29d231f57866fce35683dc92117"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "24f685314c5a5332cd270ec22c52c83d"
        },
        {
          "alg" : "SHA-1",
          "content" : "ecb80ced8779d489a6e0224bae6c7802d0e621f5"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f8745b206c9ca9aa306baf175b3def26f31946b03c1a7b0dc84c4e32f8a0f22"
        },
        {
          "alg" : "SHA-512",
          "content" : "177524bb9f029ba5b00511410cb8f4ac7ceded5fde966b7df6999d09aef229409dd4cb2b4551e262db4d3723955f7988d636f1fce5152824d13c609b82137181"
        },
        {
          "alg" : "SHA-384",
          "content" : "5984b8b442f26aa6111047f97a06c673aac43c1b7d21c9d2ed3cf8ba97d243486357906c9738a77ffa032a9e37263289"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d329f4817e44eaf0f465cbf740017c0a289f939660bc6df8238bf69fd31f3519864c9dc7f2d6794eea60d721196a6c1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3fd0c602d4c539085ef087d98d18c25acc31c5b0bfe6c3c04f066841b6330f34"
        },
        {
          "alg" : "SHA3-512",
          "content" : "16951702cc907d2d62210d64d8872209c8bb845ab653c8337f4aaa4a9a3e578c6988bb4372d6f369a1b2197a0e7e3f5e32790aa8e51ad93ac00e62a810f48d7c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c01c106bf2774140b224e485f82056be"
        },
        {
          "alg" : "SHA-1",
          "content" : "f1dd38d14c9898d44b029fbfb3916632fbef547e"
        },
        {
          "alg" : "SHA-256",
          "content" : "b1d37c2b40d74552119313b1133bc18f79c3afb4913e0d5592795cd08190d396"
        },
        {
          "alg" : "SHA-512",
          "content" : "82b8dc4d8a6fe64776ca3e74ce7863ac73e888f5501ee81de94de61b5fab41ffb8f4d92794d9a90703d0b3d3d91328495e3d6e3ac013fd2e41a36740a235046a"
        },
        {
          "alg" : "SHA-384",
          "content" : "a06629113a0ea52e36e8649415a102f9871525a9a2830e20772378bbc104817e5c5e8d3d5783301a40b87a1b656c2607"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3e8845a97bde3c8dfeeb2374f688c6788506e4db27435e19c8db9ac9f5020cca1d86ebf6a79e25d2e1576b45ed8222b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d309e6067b8a1e9da30e8e4c3236938df8660740201b94b82a8a390c7cefa910"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0002306c380ab914392d0f20e32a88bf93891fb64ac841455d6a74ab478ead83c198c96b28837df36ddd013472ffa08c0ef7edb9db2f5ae619731a41fea044d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0804246400f110e4ea1c16b3336a5d1b"
        },
        {
          "alg" : "SHA-1",
          "content" : "aec24089c7c46f4a2f08d2cbccb788b6e4ef8238"
        },
        {
          "alg" : "SHA-256",
          "content" : "100277fb20875943b33b85587fc018975992f87d707c1f9701fab4791903cdc3"
        },
        {
          "alg" : "SHA-512",
          "content" : "b204cfd0b2924978aea00e0042e72d7dbe5d9be8f64fe67224cfd89cc120994b5c76f8f1683567163958b0b3b789545f7dd956df5f34e7602fd6679301ca3403"
        },
        {
          "alg" : "SHA-384",
          "content" : "f80f81d7a3ab009e031f09e3c092308bf59dbde71adc69cc537856363e9e7f5477b184145db634b20d193a667300125c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cecbe6e7649922c2fd4122d491bd76e1c5e3552d00654e359a273c8c4fd1aa9322c650476f0789f248a735ebd1fbd435"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1f7bce3c2cc9f4550269d48c4fbdece956b223ea5b22f211a32a64deb2aeeab"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1671f114179d39ecc5621e1ca6be34d92363b41262b5f1bd80a48f62019dabfffb3b407c718bfcf163ea7f142bdabe01f994b4fc9c7d58eeb1c6e9157c4f782e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b8fcd3d9ab4d180eeefecbc3b87dbc14"
        },
        {
          "alg" : "SHA-1",
          "content" : "49baab2c943f7c5d9b8f0367a9835008bac55103"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb1fc8f9be939bd551b7162714a7f5ac1e546939580c7c0a55496ae05630f01f"
        },
        {
          "alg" : "SHA-512",
          "content" : "ec97a26c9903597d6a40dfa969bc072432c2d4144f2c501d2005f5ab6f549821f2c089bdc3504dd8cade1bd75d1926e047c67a7c2c57458c7b2a11f350beddcc"
        },
        {
          "alg" : "SHA-384",
          "content" : "010c654aacc2ff40cbeaaf23c018f7a429a63ffaa875050924dc7b6556d785d940585dd5d57882a728219caf733fa221"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd3d161b0a427fd48ffaa941784c652aa824e32532eda4e7bd3080b286c2283724692800f3bbbb141f55734c38a04557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1d8c4d89dcfc263cf7c53f4be8fb520b6de1c268f08b8fcbfc886666faa1c16f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "62b6a6fda4574b91b3ff0fb7399171a17eedfa255e6a682e521542587d2c7d6862f90c4977bf694b34d7189e2452a880230250a88e8b7d5447b0e9edcf365832"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "06a01e1b0be8dfb4e3048e584b68bb31"
        },
        {
          "alg" : "SHA-1",
          "content" : "0b2220e74136521ce6777ab704e153c1478db54c"
        },
        {
          "alg" : "SHA-256",
          "content" : "43b1376fd9c19a5c785d4a0bf2b9c0c944b731d4e172b497be3f9b8dec955971"
        },
        {
          "alg" : "SHA-512",
          "content" : "a4c38e6dbff767c0853ebb3be5dfa341b7f5532b2b62350911bb4e579eda652c77a6cb74b9f8b341afac228fdb287701f02d5eb0cd162d161cb67d710ec2243b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b18c275034802ade641d4ae5678b59e7adb1d1ccadad2fc7b6fbd0ad6278639699a77e636b78fb953717f922fda643ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "87e156262992bfceaaf6675aca6d4d469a207213590474b97ac36f3e61607713c73ccebf2983ae04e5515d2cd2fc54a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8e5362eeb5ee47eb651e5c7bc877d9398246ead071da9474e108c837d8a039"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dead4e966cf371381c47d4faa477d783f6db338082e31f60951ca4296d2859e309ca6ee1e8dc65ad4372b4d3bfb59676a718bcec42db9e2f2c52ece50c54ed22"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30d74a8080eb3c298e2dad664e060028"
        },
        {
          "alg" : "SHA-1",
          "content" : "ddf6a8d67186c6cec71da202eb13c1d7e7ac85ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "231e2a2a028aeb91e7a8c4ba3676ff6a3004a1e9a35bcacb394e86ec7f70f5dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "6be785575c0259366b0cd36ef0e3d6e840805a129adf5f0542af21324d9fd124df575762d9efa185010813a7db344a14acbeff62ef31c39ee586c19f0e6d570d"
        },
        {
          "alg" : "SHA-384",
          "content" : "da1d8b284dae3fb3057820937c9851c5e38ac4475778340977a157641e78f681db8cfba9a914e96bac2fb36ba35f10ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "494daa1662c17884d58fda3e49d180955607c83d11a2f31d4bd7f0f6af9abe4f988443f771897b2c230b7c0813513674"
        },
        {
          "alg" : "SHA3-256",
          "content" : "af2cfb4f52c3a994af5cc4716e2edb82d66ff04feeae3e876dbcedaf9620d8ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e81ec783aa65be188c08ef7c9161b9642815abcfe93036c32d92b705d5a53f9ed03e168e47d795acb72bf4671aa12fd78d998961d69c31626a991bd0796c7e0f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.123.Final",
      "description" : "Static library which contains common unix utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75beb97c34b48bb43f1e8341282275f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3bf2e4b900b169419c636685e7d3981d20b904ce"
        },
        {
          "alg" : "SHA-256",
          "content" : "009b20c26a522633ddc2078e0845f098770648ee9d4bd494beea9955b895856f"
        },
        {
          "alg" : "SHA-512",
          "content" : "45b0419c155e57041e89c8d99453d65468bf13f494bfcf7ba119be76faf83be1de5635020cbda9f8b6bcb1ad90c47fab04880e5a0573a6552eec3dc3fc9f39de"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e91795a0154d9c6507511e96977224ad6241049cb7500069b2ccdd865c83f904cde6f0a989a0e14429c0bd7e16fb032"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94c028b71c3de1186baffa8167c8a1b45d88cc230a148fef89ccb072918717129414aa507ea7131dc0b7ba67f3cace7b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "690a77bc9de40c2a73c5979bb8114d9f5de5694c7008633153cb11e825a3fd42"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9a60ca12dba794a3a4bc03d29d3a3ca782a5ef20c38305633baa2f425cacce0eaadf144363af13d57135a1ec0242424296f8a8fdadc777ee0233a6c79c5140d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "4.0.4",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5d1d7a29978e4ae0be5a456ee1c65c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b8a1142e04838fe54194049c6e7a18dae8f9b960"
        },
        {
          "alg" : "SHA-256",
          "content" : "586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-client@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-http-netty-client",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime HTTP Netty Client Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6714bbbffbaa408a3a386c20df6d1b9a"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b2aed838fb1a996d482c0eb555cf1718c7410e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a318f427ff5bd65c31533b9ecb5bc8df8f67eec47c87af3508c906a2e0a2ff1"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b0d7e9c46392c26f6f9ef98ef0ba4a1d70a5ec52e52706cec51dc112b2e61b511ab3b3dac8d4cf54059cbe0d1026f398c3aec588766c665d7ba726846f28289"
        },
        {
          "alg" : "SHA-384",
          "content" : "c8d6781238c97c70c2f553beb1390f2e564ce5c71b27e736905e02347b6215677179a20382ef5e05c36ace591e23af2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ddcd5b43f8ad2595d6594320673f7f357e3d4f096cff1f33f01d5fdfcc705ed1afaf21f2f124f050f7317018ef66ce2e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5210cf5348dd7d809df0ce52f133b5fae861481e04e6ea8fc74a2b4c7b4c0019"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4e9cb64765114580b0b8ff866c59606e59f0030db167477d1ec270ac377c3115b9897c6f31180cea5f7d31b03ffbde704326cbb9d838b0889c04e0cd2d9a3ea4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-client@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http-netty-client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.123.Final?type=jar",
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec-http2",
      "version" : "4.1.123.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "97aa56296a137609c91b46ac72b1d78f"
        },
        {
          "alg" : "SHA-1",
          "content" : "b3f4a78343bb80e5e29e4bddde36910a0c09bbd4"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3cfec2c3942b20965176d6555742a0bea8cadc7c5ed79a2b587a0e1112d18f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "d89e1aa00e70befc20708242b559c0ca447e17b36e1c34692431a729a746ff2a96d7fee55739316674559b61eae434dbe047b65a65f5af0c05b316cc31fba5d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "302d40b0abb01fb4972c0e7c97a63956797781acc3a2d9f7dee6b10e8a30b6942f545bc83aae83285e5509d2ae4a58df"
        },
        {
          "alg" : "SHA3-384",
          "content" : "916892a7e57b20d1c4950dc3592e7b5d68a8ffd743af6d69ea9360b02b9a117a33c51bb89a89e6427fdf1f1d13a31c1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aeeecdf42a1892bbf5c21b65dea0007016bbc0d5b9fbee6f6e75c69783a50ca7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "24cf3725a4b7527bce0f998c049a2f40941bab77edb793eb92b06a42d426fd37daa70c98e202047b9000849ea553818329a4ed633ec2cf0db34c34731696f2f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec-http2@4.1.123.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec-http2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec-http2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-udp",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime UDP Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "280262888723cd38d186f0263cec945a"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f1da77f90d4cce0de900eeb85f4dbffdc77fdbe"
        },
        {
          "alg" : "SHA-256",
          "content" : "a996966f1a4ee10f565981aa7c65fd7c6e1c6eba91fb8ead4a1ffd25a0e2abcc"
        },
        {
          "alg" : "SHA-512",
          "content" : "7431aede2354c9d6524f83e04db1192feaa7bf2a02e16bf83e6e75380baabb8d382930875c7fa4a05c99d8726ecc38e7b9eb02e0fa28114643e8337248f58ad7"
        },
        {
          "alg" : "SHA-384",
          "content" : "3a836da7a92ef890df83b2959df29571ebce67a3a82f521f3ad9848fb51b41b407de3673a70b4be76ff685913eabc3ee"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e545df2be2f8e1ea9715f13fec11bc98d1ffe3b00f3b5b8e2ff8e4cb489144f8748b1e5e18286a068a3d427d53e4fa90"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2109ae13af8ef5e7a49ed003f6655070c5a76823dc73b38053b5e2ab174a6c8e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "695e950fb29938a3be2663cecadc1faea5195ef2819944dcc61b91d5e2580fcc9e5495bf702586fd600fd41f49c0c54650925a0c1e3a70be2543a431b9356118"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-udp"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.mina/mina-core@2.1.10?type=jar",
      "publisher" : "Apache MINA Project",
      "group" : "org.apache.mina",
      "name" : "mina-core",
      "version" : "2.1.10",
      "description" : "Apache MINA is a network application framework which helps users develop high performance and highly scalable network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d10fd27dbf56a5291e4cc2bb2dc6b5ce"
        },
        {
          "alg" : "SHA-1",
          "content" : "3d155b9fb9e1f6195cbaafed903091922c1fa608"
        },
        {
          "alg" : "SHA-256",
          "content" : "97147761d176af4c44d0e77bd8fa5fc19541a6652e74e8df83ec58f45f81a42f"
        },
        {
          "alg" : "SHA-512",
          "content" : "99bcef391a3ec14229ed6ed2e312974c1be69519c7bdf042b84eae34e9b9a8f7c776fcb07d9db42200b05f6f79737f4bdf31e85288b7002f3a15a96f612a11d7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fafb9ecda055ae56687f20d9d166bbe23c56563e8f5808d8f8ebf2fc73e7d35fc0c3277d46834d3037c88caa4c9ace2e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4a2ee73a56a51112d5b2b078454044b868924964e947997129677a5b6c2d6df76bb7c713ad5c0c74fcdad62783449a8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b239d284a26ace680cc3d727c069d2323d848da1dad6239b2ac33f01b685eb59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ec80c25d93be3c07e9918694e1a4c344c0c66115d518d2ffa8f1b067c6fb0128a2e82ea3500279f65565266c528aa31e6126a3eedaf0b08d2f11fd3920a43964"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.mina/mina-core@2.1.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://mina.apache.org/mina-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/DIRMINA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/mina/tree/2.1.10/mina-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-jdk14@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-jdk14",
      "version" : "1.7.36",
      "description" : "SLF4J JDK14 Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "92a69bfa46eafab6a2fdda99b8af36ad"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a18af6554bfe48b0f76eec98119c417da23c7e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "5bf64690af4e59876b8902bb0db3dd39c686a40abfed97d3837eeeec7a2922ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "2b711e432e9e2daf27c77d6d7611c1dfed65ffb41d346368351f717257983451615ed34aaadd70a7c4a8f6e6b88a649f13a2a1739848551782fa6be1ec95ec34"
        },
        {
          "alg" : "SHA-384",
          "content" : "38c730e83ed325acbdaa9c1d1916351a2be52ca2ccfd0427315c8867dbadbea511c53df7acb6398df2db8029be2057fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5be2c41eec6fa132151517ee75cff90f25f97579b8d8f06f0cafe4ae7e1ec87281edf00e489f69152ce0f198ca43cc17"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2e4c8ed0e75924a34fe6f43d3a1799e8c5b08420c44888de234ff71e3b7601e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2629291e760cb33b1989eebe2f033ec5bed85b620db91ab188e58fcb3f0a2abb34906eade7a4f1d7ba5bb6ee8cd59057d7c1ca99f7a65c7cbe16929a62eb2925"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-jdk14@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-jdk14"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "1.7.36",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8065610cde33ed9fd5d34367912c1938"
        },
        {
          "alg" : "SHA-1",
          "content" : "d877e195a05aca4a2f1ad2ff14bfec1393af4b5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148"
        },
        {
          "alg" : "SHA-384",
          "content" : "618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "95a189173932d8080d91de8b71b9d1bca49a330db7cad9c41d51fe9514a9f6299b24e31441f06681b3dcc188807dcf40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7aef3380fdeae9b7a4adfa6ad69c2c92f246fcdbd4fcd3d1056ee846d8ef92fb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da7d1b8e5a150300e1051dda5755df64275e5822256ef624fd8a37c582cc2774aadce97f8732de52e54b1c74e28ba601d3bfc3482abb4a24f7e9f779e7e8dd64"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-transports-jms",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JMS Transport",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9bcd5acb57cbc18bb7b74dd66878fd7c"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5b984f5e7067eed98f2bd5b096a3e0f8f87ca0f"
        },
        {
          "alg" : "SHA-256",
          "content" : "18a64031967cb6c64c3945463dd90c06adae31e0beb7d01bd0af7ea7dfe3c1ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "30c29feb3fd03793e98effdab4fa6974516572797865e89aa3426dc3f61e73d9763deb3cbde1a61f8391eef86852ed85de0b0cd475b3902e1403ece7febdc964"
        },
        {
          "alg" : "SHA-384",
          "content" : "9e7ca2f4683b1eb9db8a464c80a5d4d191753025472631197a9a10d0736defd8ef680c283ffda7306510c0847b67af1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ead14321a671fbd0e23c6c2a2992688ea1554e62cc000015bfad3124cc99429325870aacb075d3926a379152e35b876"
        },
        {
          "alg" : "SHA3-256",
          "content" : "926f866fd216f182d9c5c9a8120a875e70ae95e9f11e79929141381030132e71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6e774f6ad9eaec79a7c77a38ecb4869b727b6fb6bfac63f503e58bdd742aa439301b7223abd4395cd82341100e9ef6feb0a9076a74cc24e7e8378cc73d5ed956"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-jms"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "publisher" : "EE4J Community",
      "group" : "jakarta.transaction",
      "name" : "jakarta.transaction-api",
      "version" : "1.3.3",
      "description" : "Jakarta Transactions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc45726045cc9a0728f803f9db4c90c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "c4179d48720a1e87202115fbed6089bdc4195405"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab"
        },
        {
          "alg" : "SHA-512",
          "content" : "764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e"
        },
        {
          "alg" : "SHA-384",
          "content" : "63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jta"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jta-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jta-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jta-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-jms_1.1_spec",
      "version" : "1.1.1",
      "description" : "Provides open-source implementations of Sun specifications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d80ce71285696d36c1add1989b94f084"
        },
        {
          "alg" : "SHA-1",
          "content" : "c872b46c601d8dc03633288b81269f9e42762cea"
        },
        {
          "alg" : "SHA-256",
          "content" : "18d9ff7b9066aa99cf89843f5055d2fe58b1abe4346ee9df0daf4ac18ca232d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "94cb8660775596b298db93e11fdbb28d2a582b161f7a6d667d41946f59e8b114aa80e15c28c4186f05b43f432b1ac555d845ad870309609202382c3f6061e319"
        },
        {
          "alg" : "SHA-384",
          "content" : "9394c1de83480f01ec0893657990179ef67ea95b43bb4518219381968fd58d8f5f509d4cd3d4af5ae4b3df07f67a1ec6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0c47dd7e307f805f08b63a25f6f957b230cb207633820657d4293091420111096ee888d781843e7c36b56c6c54784034"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c034a913df12c769e270bbf1500c81d2cc9bdf42118807eda224fc6e162fabc5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4814a6090372614ec478619836f6b133ff0719f3f082704d2b1648d0b749bc6216486904d2ac57c8a72ee307750955c5c7255293b4a36fdd57444e8a28a9cae5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/specs/geronimo-jms_1.1_spec"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jms_1.1_spec-1.1.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-soap",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime SOAP Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7a7e2aaffb705867a830a8a6f82487bf"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb80a1e73ff287a38067cc33071801b958945014"
        },
        {
          "alg" : "SHA-256",
          "content" : "714010d44343c4f9e3c4ae890fb2f0d68978028df53ef931be7ef61ed65cc5c5"
        },
        {
          "alg" : "SHA-512",
          "content" : "ede6a4caed1441db2709835f309e8886bf005ad190081367132fb5ca56d9a2c83d8b2d1b974e217ce03d78e6339dd70f7010c457d2139f2cf0e791e1a515080a"
        },
        {
          "alg" : "SHA-384",
          "content" : "b94dbe0b287f2cb6ba603579b8b3360917e5cd3961a5b15de93895c76b7e4683c26eee3a4a580b836da043c4009b3431"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0f4699faf3da7b839aaab9fad77e1dfa69ba8c33d460f8d288b08cc620953182d56e641327499c3069aa9744ae6b2f69"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30c3617fa885638d7fd46ba8f39d2dd44740de189712a350ae705e82748b3884"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9bb135dbb95431e8c4edf44cfd5a5de3c971d4b8f355102505566c18be020c32f3e59ae9fbaa329d39d44208037245a41047cf7dc9f323b9380778b6503ec065"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-soap"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-databinding-jaxb",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JAXB DataBinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "788e14257c125aec8684ff17e2a050f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a836bc89857ccc72354fb4f5505c9fcace3129e"
        },
        {
          "alg" : "SHA-256",
          "content" : "a66e75716bb623310bf2828df2f1d986c71fd4394ea56d464a8f889fc23ef76e"
        },
        {
          "alg" : "SHA-512",
          "content" : "98e41885de58444769ea29ed8adb93c14b6007b84e334b85bc735ddd18985344d26c33fe65dc738cbbdc5ad7f3a669a168ed846e689b8c86f7a20a6e1806f884"
        },
        {
          "alg" : "SHA-384",
          "content" : "a252537f65ae8a6b532724b9d9f1b2a66e4e99a13f432491d83afd7038f225cb1830e6474a3b027e4c3f68c6bbc5b668"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dae6470bbf7772c526591189f0f9f6c025935db1aef03b13cb9b349bc40773b7273db94a90f6633beb274a4ca2875a37"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37b200e853abffb903f0f610eba898d60040c4644b78f78a40643fe4d1c4b19c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d182feb11a6425e4422dc60913919f0032c45df356203c754dadaa5ebf95c017d3459e0a3748d8e05da3ed965ed982744aa627d9e039c748b34588073f6754d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-jaxb"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-xml",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime XML Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22db419adfb72e692a6850dbf19fa530"
        },
        {
          "alg" : "SHA-1",
          "content" : "67c8b14f3399bd1fa17394239bedeccf584c8a79"
        },
        {
          "alg" : "SHA-256",
          "content" : "83f29c9c2d3ab2be6eba56033995783e6ac268d61bd7009eedaeb49f486e7c05"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4274c679fa370d24221cd602510d23d7baadbfa5cce1eae65795bda0df627a1bac4db418913e4b6d351a8211e5df27874db21a6919c5dbdf4b7144b7f65a133"
        },
        {
          "alg" : "SHA-384",
          "content" : "e0a262f716064d42dbc98fde4659a30f81bb4648663d23c63b1549299ef80d38564e376eea4460698d97b5edd2f807ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e92babcc740e12213299aabfe5e59c4e41d9dba41f48f76f07ec2e1aaf550a2fd7a0dc31e7622bab1166e52321ed498c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f84d252ce248aea20fb611436b86ce4f76468ab8bcbeed36f5668402560b96bf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0957706da26fcfb62379e2dbf8dd65c4c0912d0b20f90257a75c3d93e97276678b4f8216f8ad022e73bc72b1431fd8321d6d797822005ba86ffd9027240535a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-corba",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime CORBA Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f55c1b01d50c79c2d4b8353db001c58c"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac94b4f4472360681e6dfac7c69e31b73dd76e56"
        },
        {
          "alg" : "SHA-256",
          "content" : "9f45d39b54a9f4e5def22c318e51a47154829e85a1ba93e97989202194c1e64e"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d1090ec6dbf77f99422ffe6b83da4d830409bb77de0287fd4400cbbf3fc13c74856c3023004a0a45e385532cd43b4401a898d55aa1784b1a805f606693d0f7b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2ffc5491a70fb63de2a2b2db71d7f5c3adb5f99abcde831bed5645768e4ebb97b384d6177f5887ce35761e88f6d40f83"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80ae9b80fc032a85481cb7c06d8f21854335f9c66e93b610ff2a9b06f44cf422529f207424f2d7c0d8e6833c3bc86bb6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4bf49adaabaaae217d0354f6894082064a6dc0bc43922a115a421ce62055bc66"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dba58a496c1c1a398f55bd54273d135600ffb8c935d13e8c6c16d60bb1020fcf3f877cc4459777ec550d422dc802070f019a651e08d75041060472faf7cb19da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-corba"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-bindings-coloc",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Colocated Binding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae85d06384054ab7e894809ff167f2a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1588816023230a0dfb891d8551e2221cfae662c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b44e14b04e161ada4b40fb9ca97c2138acbc808be58fad9ad3afeec2d9b0348"
        },
        {
          "alg" : "SHA-512",
          "content" : "d76b07d14069da9125736c0348b5de8a9799a7e46d79ffda45bc88d5d485c56960bd700f5e4e27b43eb035997f68a5fe8a559d7ceaf8dd282a7bc85af2bb6caf"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef1a5d6be84a1aab72430ff93b46ffbae4840af9845a25173acd138888d27eedbbf849112840608daed7ff7dc1f8dfb4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a300c160e7d302f57890580e1025f7a31ea23dd694fecb4f1f7216ae8fa4db4cd7c913528bbcb09588d5cccd4019375d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab04de3d00ace68bca034098d403ff0a6ff22ab8cecee483eb64b9f9b50361ea"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ece60b0ee33a0ed9de153da1522b94f4889052e26a9d6f37fa4fcd5c07dfac002b58c5359ff8d90de24ac2ed488b07a07491f7d50697f4b5a803e5777b3e5491"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-coloc"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-databinding-aegis",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Aegis Databinding",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f5e9f313823c2915653cfa5515203fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "65afdc356826663b648613d3880423a05200593c"
        },
        {
          "alg" : "SHA-256",
          "content" : "9a77196a46920837555182ff9b16a7cc9727ce938a13e3d0383a60bba93389d2"
        },
        {
          "alg" : "SHA-512",
          "content" : "eeb9e00b552eeafdc59c873d95b2ba73b4d2c91d7c847fab1618b097658922ef60e3ad7e8d79230cf4887f47d8a4d65e62e3efeebe06ff317bad8e0762792a89"
        },
        {
          "alg" : "SHA-384",
          "content" : "f444192060a52f697ed0a890a2c276939f089d5300479f5427ea4c446d338fbe4b812b75961bb73c6bff53ced5dae021"
        },
        {
          "alg" : "SHA3-384",
          "content" : "17a6e6ad4887152a3a7495583ceb01816450fb9584198f71143bfec82a522bd4d61402d91d0acaae44398528909e8f3d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d88c5693fa1632c48c4f94443e23aed6b8515f1b8a23f57b78e7104e5d9147f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4212a705aad5cea0f9a4ffa2d7d4502d13644564c94aa5b1e2da3782cc6e2520d7e205fd48ac146b18f872d2997255a3da2aa34eeb4dffc244198b373a3c7287"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-aegis"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-extension-providers",
      "version" : "3.6.8",
      "description" : "Apache CXF JAX-RS Extensions: Providers",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8737bb45546d81a4f15adea149d4e3db"
        },
        {
          "alg" : "SHA-1",
          "content" : "06c0cdefce15c5b06563cfa65f1a6fc94b5c05f5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8f3bb79f1f85bd87d016561f0f458fa74459d6f013a5dc611d1c93014cefda3d"
        },
        {
          "alg" : "SHA-512",
          "content" : "70b8233eae2c70ccb3379bac1f7b5a46ba9266ed0687f6104397cb990aa59c46c73f309cf8bd5abfaf9857bfbdd8d5ae7d96215417ec81d4afe471efa105c998"
        },
        {
          "alg" : "SHA-384",
          "content" : "5bede8c71f9224addfcbd52a4ab7e031dafdc1ca31f5aef03af39baf0344cd66d4d43f10d327ba43318df905da643e55"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7070519ca0cfdf68747abe018d73b3abbfc8b1f7121f6737ebf7963fc6b71322d7d3a1d7f993eb0edb732c2e7fcbf3f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a48d6e575f03441cbd62aa2876fe8041bec9c295d16b56baeb62cd89a75e6494"
        },
        {
          "alg" : "SHA3-512",
          "content" : "77324516613768e189c23ceea239969250bfefb2937fcdabc24b60037b3aeaf07d0d2303fe48e9e7047c8c46b6978967e5a289ae610d6e92c13da980e4768adc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-providers"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-extension-search",
      "version" : "3.6.8",
      "description" : "Apache CXF JAX-RS Extensions: Search",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6cc75b182b6209d079dfbd8eafaac71b"
        },
        {
          "alg" : "SHA-1",
          "content" : "65f76966a479ee211712f96ea3d673ec3e83bb47"
        },
        {
          "alg" : "SHA-256",
          "content" : "7108e7ae36f8abd3c392fd328fa86e6487b59aa0210767fc7fac411355f35779"
        },
        {
          "alg" : "SHA-512",
          "content" : "159707433c52ab9ca8581cbe9e778357df18a553f393ff85a6938cf6a230493bbb8abc5f91600a77aa8279aff7eb50fa854ed4674afa19f2b8d06b10d5ee85cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "a29375fa5eafb0021db7d908214019e5ac9d17972d1ebcaaf07b211c6dffd521cad9fc4c2f31be5e0bfb4e4c8f5315e9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "358526f7b91bcb885c5273f7d69abe453182f0b2610add90405e98221f4471a07517f91c0a23c250529b294653f51b03"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7428e3a3d18ef88e1a279cb87b41a2030b5e9bca32dfad08760390592e07a2f2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8a1d8a19e073d2fe8ce8f5a82785c6cd58c807148e18316195eb11e2e1cda2be3c571553a441f11e4b46e03f5d8a80b2c6cd8df3e7c3ec11501d5dda6edb6816"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-search"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-cors@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-security-cors",
      "version" : "3.6.8",
      "description" : "Apache CXF RS Cross-Origin Resource Sharing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "faf2083a4f16e8e071f076cde3d499c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "3eb546c9b11df92bfc584c91fdf88029d8707608"
        },
        {
          "alg" : "SHA-256",
          "content" : "378a2b9ae93b5c0494c34c4058bdfdcbf3fb7e79a9011fcd26db2af6246ef11b"
        },
        {
          "alg" : "SHA-512",
          "content" : "a17b82f1ab6b233f3cfd89e68a4461ba85113d6cb7d4fc3b23c4641e7e411e0f7d77953edc6a918395edff6fd593d24f1e8cf5037197d88a0d7de4102fe1f470"
        },
        {
          "alg" : "SHA-384",
          "content" : "7bb49d8d626b25b2089aebc2369bb0ceba574c617ce9c87cdeabfa8739fd86efe7295397dce32b5e4602970ab3a9d0d4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "189275c792818db097421a1c5dca22b3d868260b1cedaa3d6de25a4aa68461eabfd1a15cbf394e47900c83899f21dd3a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e76e7f5e0f779c13912256cf9fb42026e0528a22c05f62aba424e61e68663fe2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bf5ed97fb9c16253dd63f36a5c74f48405a424871b9d7cfc0125a08be8192e6aff3ae4f859b19ec24bc5161b801d144af374ba725af249f1f6fa1dd329f9f078"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-cors@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-cors"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-security-oauth2",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime OAuth 2.0",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7e218e98e01cf87106180e96a888cba"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ca6eca569d478fbc74c477c4a09e897727c2302"
        },
        {
          "alg" : "SHA-256",
          "content" : "47ba7dbe3f3de2083e57eae463a52c8f287018293c3a30b6e89ac230a49f9529"
        },
        {
          "alg" : "SHA-512",
          "content" : "34adf6b3aa713ea6dfdcdcee22831981c7711eaa9fae5943c272a88d582ad66a790d6a2c78730641009af4a7dd9c2e6cf8241d6236571d6a3aad345b31223f49"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdace4f372851e55fd25f99bbee48166e3f05991208211b85a9adb98df01bffb29fab0f555d165371ec8b4b2a42731f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "03cebbac35b6a880c07e2be9dffc42234b0b776f80152caa87d9d5908e8bdd2f67bbf547102c032939f440fb69aea9f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b725d748c07a4c6cce1587d7ec2ed32bc88b2f7147f8e1824f66a6505df6c321"
        },
        {
          "alg" : "SHA3-512",
          "content" : "320cce112b2e31f16cbe07b1e08a88c01f4c4343164b10a69b0bd009df5b484172916c23eabaecd4a49fbd65571bb1070dffb8408e63e0660dd814c9144165ee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-oauth-parent/cxf-rt-rs-security-oauth2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-security-jose-jaxrs",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JOSE JAX-RS",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5f3a0fb78426fecc602283bd0824b424"
        },
        {
          "alg" : "SHA-1",
          "content" : "d35e3b1b9a4f10d26731df001ed808570d5210f5"
        },
        {
          "alg" : "SHA-256",
          "content" : "06dba381be25c3971585b68c8e5fe322d675c72d79a6edd03b93911032ac04de"
        },
        {
          "alg" : "SHA-512",
          "content" : "f3277b4796bf98e0b8aa5be4a538f107c19a25864cd9be4c41fc281c75cce3e29fa2829fd3afb367559ce452447be0f750d642d4fd93408015a3317aa02a2b1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "cda79ba6db279334ce0d26f2b68bef799fa72229e78e5cbf10cdb4be89a5e4444b301c3b534f1b0772f53749c4200264"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9d968469b3403945d108fe6737bca0f84b47c53b38e0b935d6fdd964f635462a9588393810271ebcd677bfd7e7e348c0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d5ad6b3b5215f3a1155fd80112d757b50e64568fa328467f17b643f010ba039e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "506340cfe85faddc5cf3154ba7b405e156df26c2b73de43fbb73fcf592cf9ad819cfa1b2777cd8a7a8f2660b2d015feadfe289381bdd3c9869fb3fea4e2a0fee"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose-jaxrs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-client",
      "version" : "3.6.8",
      "description" : "Apache CXF JAX-RS Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cd2c749f2a5171327b9e17aef7e44c66"
        },
        {
          "alg" : "SHA-1",
          "content" : "c94c389db045beea059e77c90ffc8ae7e2dc1de3"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe0aa5b3f56bf761886ab5997c2c69a866c6c1c4f8ec3456745f833691a6bccd"
        },
        {
          "alg" : "SHA-512",
          "content" : "2f06e4e55399124927b5d2860fe429996d973bf7d96b7b819263801aea6f30f9b4e20e5a81bd853d8eb61d2eaecebdf6078f71586d38b714f30b494187add0e1"
        },
        {
          "alg" : "SHA-384",
          "content" : "a00103b54d5a1d0a9ac19713382b40122bbe306e6d7248a7455a9563a2d51e8580597c510cee7260df77ac0f067c30da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e933616fc4d0c58ea2f50977be87834d169df183ab9d0311e3ef91062582c31cb831b7d027cbe65fc64792445f81964"
        },
        {
          "alg" : "SHA3-256",
          "content" : "344ad6d7f4017afb532459c829b8862099ba4892bbf8dbc9e2d5ac0333473592"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c58e4d91efb3845019960aca7dc49973312eb758652f15e5654d160cfde92d0e3e4fdbd28d761dac8e292b6ba981e9290b4fd405962ea2add5b021ebb95d52f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-security-xml",
      "version" : "3.6.8",
      "description" : "Apache CXF RS XML Security",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3e83b69f4d416fa3e5d0dcc305524271"
        },
        {
          "alg" : "SHA-1",
          "content" : "3396a0303fdbe21e2b43ff45aa1cda1b727663fc"
        },
        {
          "alg" : "SHA-256",
          "content" : "4924375961237b203a59402705c2d057c5185c03063347059cc1d0832d1a1326"
        },
        {
          "alg" : "SHA-512",
          "content" : "6bab9061ff94784ddbae44cf0d48031520a26bb0c9c4dcae0ef8d912d486f36f69528f75c5866cce044080d69084270e08e1d23fce99804142bdbfaaca8ae1eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "0868974afb2e931446a97c39ef653681970834ed5e31d55c7042f118e9a213bdc3f0914b6df67d51393eb1d6244ce7c8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "278a3af56b4504455c43f69b4223cd6a7778ef8bbcfa856012e7a6136944aa8e188756196a986e491f3084eff381517e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "49fb63083057a30b9182d724b370e41d01b8a010a20929e9136775f8a4fea95a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a7b89e942f5c08b0591ec909fe98a3530d1722e65fb138f5911992e55410b7a136aad66437a1debdd556dd53b5846b089f28060162cb5b4ae6cb7245b73ebe44"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security-saml",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime SAML Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e699306fc1284d244ab93ddcd26ee162"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c347d2ecfa7aeea0d71e57eb9f8f1a089c4a2a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "6655a328027c8085705ddd52f01ec7168c44cc3225299294e9b7958ae1b55766"
        },
        {
          "alg" : "SHA-512",
          "content" : "455a3097b613892ef6b228e33efdddd7c2c052d580d53723e88c34031513a1ad454a0bc2f5d12499c9744b1cc2f3102db5c3d047109682c0f5dc8e0406e4af0c"
        },
        {
          "alg" : "SHA-384",
          "content" : "33d55ec6e75a25924ad0fdd4ed32edea6de477934bc3f6e1eb24f3b050cb899f781035e55978cdfa73285dfbc824a54c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "076ec22f04ecec022939e3f44e1a5c8373d19c8be16342a1cdf41e9fcb5c0189dfba3c38f60943b3ddd25af83a046bf3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f9b7107159c247671f08405ebaaf64689bac9686b58d59e3463ed182c22295da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "27b597bf65b46f8975a86f68b12d871e6ec7f1a3524947cb755d438d3ff7917a196ab04e37f86c0fcf2f2697b24d627ca12939475e875871b8a22d0818f01a2f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security-saml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-dom",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a5a48691fe57e21ab2be1fe76545040"
        },
        {
          "alg" : "SHA-1",
          "content" : "9b6f4cba742acfbf02d9f8c2c190d261d1c8ff1d"
        },
        {
          "alg" : "SHA-256",
          "content" : "48a3b75f71cf06c37c960861fb94944c7d21ef295bdee5dd5e4b668a79c2819d"
        },
        {
          "alg" : "SHA-512",
          "content" : "30eeb576fc07821b0678b7084c6664c2e0f405f779cf45257b3e49b01a3f5eb97e43e6fd7797f8562346a49ced979e12215d6cbc6385c9404ef39e2516446b77"
        },
        {
          "alg" : "SHA-384",
          "content" : "b694f8b5b872260d8248abede928cb599e2ab52f4fe31a1ff414ca54937e43674fd23d4229462b3582975bf2209925da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92b9f8f18c24d5fc57786fdef5212c8c06e42dd7ef67253b02cdafc7fbe2e820d56531ccc5b4e19e3c24747d1e246751"
        },
        {
          "alg" : "SHA3-256",
          "content" : "686c979a85ebadde0640c834697864080a1a2bf1d07b6f7308b36f039a87d63b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2134424b936aae52ef7d66febe517a8622c0afefed3628bed8f252ebf9020c03d31320213cbdf8ee687887309c7e4cf81902d468840e222636dc60283d2383d9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-dom/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-common",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22143a6aaa5af2e49cbb6668f84929f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "8911e3b2befce0eab9014c4ab8104e81ac5d4b01"
        },
        {
          "alg" : "SHA-256",
          "content" : "c28d3f467d8988cd4f2b928eac42d652c88dbd9915d82078f73ef880c5f29e5d"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f4eca4daf215684af2818a9f5dc1cbaec7487a85fe2973c89a657610e739e426f7067ea6222ee45c6ffb14111fe522931a6bb83ec505d72ead896993f11f9f2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ade6d25e7b0497b9077cdc6f8c8d7264c7a70d429fd84562ef3f0920ce6f0a1856fdc1cc139db5b82570e206ac6b01d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0c4c631764663a6a4d3ce2180b1faf65e754af1f74d7006b5c47e2e6e5fa059e12ce3048005a5e898b2f62399fa1e6ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9e6a0a41725ea3fea82366b617156e46da106ce86d43b8f857d4500059089302"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d1023ab5032f20705ea6f163a1ff27c4e1a1fb123ac0a884670b13f19866c707dfb54efa7bb5ab73e4703b7aff3d18badc62f608cfc5e9172eee36755cd8582"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-common/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.santuario",
      "name" : "xmlsec",
      "version" : "2.3.4",
      "description" : "Apache XML Security for Java supports XML-Signature Syntax and Processing, W3C Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C Recommendation 10 December 2002. As of version 1.4, the library supports the standard Java API JSR-105: XML Digital Signature APIs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bad235ebfca40a0514fba17fd742df51"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f2baecd896ae8e8b02b6090220537bd950eccbc"
        },
        {
          "alg" : "SHA-256",
          "content" : "5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23"
        },
        {
          "alg" : "SHA-512",
          "content" : "a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0ff82e0fcdb6a9b891a24160e19ca5db8558b41bf32f5eda45581a7982d903b81121a385f0030b90cb4a280b861217c1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "355c1921dff3f01ece0170e63e55b599eec335dac51fdb055f9e46c1c15b105d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c158de9564db780b0f04b482d3d155c55119e94fd1887cc9abcc54a0ef9f44455b3e29b08596c3834928c2f15b6493ba73c957693484a3bd42f817597ad050fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://santuario.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SANTUARIO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://news.gmane.org/gmane.text.xml.security.devel"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "16822d1228404b5fc14a607f94c04b69"
        },
        {
          "alg" : "SHA-1",
          "content" : "c51f094b49d8875a9d1e51aefc01331dff461729"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a651fd502eea69e1025c14fa531afe84c20c83e6a68682e268d927ff011b0060cb90460e1a2e90ae3ede31d31ce3df31"
        },
        {
          "alg" : "SHA3-256",
          "content" : "26c7a7a35392bd0888ab2b161733c1f89658c7fa6522a4ab7e944d165d2ac5e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "253a6160c92bf0c6239f892fa7c9ee2ea12ea81ac4d743d9051179b02542bc28650835936b1d28296661e3364f0f3afe4b5a7dd999a3594be9a4049025955665"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-profile-api",
      "version" : "3.4.6",
      "description" : "Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0cb5bed685408a677fff00c5cbcf4e8d"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18"
        },
        {
          "alg" : "SHA-384",
          "content" : "b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bfecd6532109185e6899a9015742ba963f112bdd87f1fc65de6ae5fee79efdd713595e37293baabbb1ad795caac3bfba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cb41663926db230f6fa29636ed2e12c911b61b20ca9999cb68484a30ce7c4194"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d3888c26a5d5444a177c8152385fc62cae4378e572af200412b7fcf70030e8648fe7afa29549d2af79e8c68e4c444d2faef3fac783e3003d7a171c31057717de"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-profile-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-profile-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-core",
      "version" : "3.4.6",
      "description" : "Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "078679e8cb6a0c3361eac985019e8e5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "75b749a9ce605414d071ffabbf7e61cd11b9204d"
        },
        {
          "alg" : "SHA-256",
          "content" : "d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1"
        },
        {
          "alg" : "SHA-512",
          "content" : "d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681"
        },
        {
          "alg" : "SHA-384",
          "content" : "28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a24ea3fb379156161ade032197c27d23dc0b90a7ac58aa4681777ebd41d6cd0b8c5cf51a763a1ea4b7988d95ca319fc8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ada4392913150038c1013e55c75352710457af7e7c7eb6fc4aa64d8c4a06bb9f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8d0f682aaf6a85ebf3a14ef0099eedf3b4559818cf645ab818edb47b37b72549f0e453ea0e967acf8f11cd27c669e6f1d3d97969f5828b7ae212dda918827fe7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "group" : "io.dropwizard.metrics",
      "name" : "metrics-core",
      "version" : "4.2.33",
      "description" : "Metrics is a Java library which gives you unparalleled insight into what your code does in production. Metrics provides a powerful toolkit of ways to measure the behavior of critical components in your production environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07e03dc5ac57b62c6f0343c57764eecb"
        },
        {
          "alg" : "SHA-1",
          "content" : "703e6a1d55238024576a3e0d253511bd4d9c02bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ee5624bc5e671f3cdf8d7e59350c1de2d5b0a0db7278a311b811af7e080269f"
        },
        {
          "alg" : "SHA-512",
          "content" : "77830111c706e267dccf0a76ad10cbe833e234452fbb223bc5c0c0a4433480897b3b537c1b3a314bb121bf0f8839b26c1ffa15e1fe1497717f03a1ca7c46ca5d"
        },
        {
          "alg" : "SHA-384",
          "content" : "5f3cea5897854225ba3c7a51bd8f6accf6960927d61b696d3466d28d2e64e2f30682ed8da0cb39f50d0a7994663f5a4f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e2d1f6c61e04c501775aa15ed643eaa615df68cc9e5ab08c9ab790ee3d782c2c72423e863b6d27582004e5210c69659b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "069331e590719cd76bc1047f206adb2d151cfb18ca98f91c694b18f34f047bb5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce4314d7a4a8e3ad5dd3541ca02ee164651162c875e19579271377452caa7ce66e7f284b964a759093bd5545a80f0b80a2ed31474b57a1117f1d86bdfa02307c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://metrics.dropwizard.io/metrics-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/dropwizard/metrics/issues/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/dropwizard/metrics/metrics-core/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d55c4ec6f542c201b6d5aad5c7115138"
        },
        {
          "alg" : "SHA-1",
          "content" : "571c2b041583625850afefdb3283fcf17940f9cd"
        },
        {
          "alg" : "SHA-256",
          "content" : "a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce"
        },
        {
          "alg" : "SHA-512",
          "content" : "eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c"
        },
        {
          "alg" : "SHA-384",
          "content" : "6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d8fa5d16090bb4108067a26d54b4a9d7e74fd150602a556fab10cfd7f15b5314107316258fd916cffc894d6e952fc238"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9c13c83cb3ab35a2229854a876ca14d55090697fc72f9a8dba0301df6d0f5201"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7208426ca5322a7cbf9256dc7e93e66b665f3824b0e35bc63de4b56e3ae6dd645ffa04a9d9795c1ef5c3411b8e90062a53fab781d5419041ac1e9d3b853441b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-saml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-saml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-api",
      "version" : "3.4.6",
      "description" : "XML Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83483c37e5b6cd7c234866d9b5e1ac47"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f84e8ce2dc40c247247be036a3a5c6adfae4a70"
        },
        {
          "alg" : "SHA-256",
          "content" : "fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd"
        },
        {
          "alg" : "SHA-512",
          "content" : "941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c"
        },
        {
          "alg" : "SHA-384",
          "content" : "224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b658a6857afec964bf1d48efede2bb0c231f1a99aeee2c530ccd9620011a7988ee64a51723e6e1453216347001f0a336"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4fc6f538095a4ca15c07cfab4ea94492a7aa1b6b6d156bd1295c47242f886bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8a829332f903f632741612468313f785155e4e9fae1abcd34c3dc827cf61aa7fc511f1e9cf9e67509c414c6cb95319db20bfe9c6794d3cfac65550faf7893dd8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-soap-api",
      "version" : "3.4.6",
      "description" : "SOAP Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "65e52ff6f3a55badf553ba021f08696f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6e4dacb4caac0d5ed000719b3a772d384ceff916"
        },
        {
          "alg" : "SHA-256",
          "content" : "76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474"
        },
        {
          "alg" : "SHA-384",
          "content" : "4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ab79fc2e03545b73eb8596a6cdfa7f0ec239de4809149b74ec2c3027f85503bdb03f892dd9c4eab8a86a1cf9fa5aa907"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2bef86761f1771fb16032787f45dd24b23faa82d0446ba9cc08abd91357cbe72"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dfc4b60bac6839e4c50c40ad899a577d1540b3a0fd9503d31689126a09def5388a40b1e993dab0954cdcfefac6dcbb631b83993b0eaba9d574e3941a33d9755e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-soap-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-soap-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-impl",
      "version" : "3.4.6",
      "description" : "Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6059e2364579e717f39aaa65f3e395b"
        },
        {
          "alg" : "SHA-1",
          "content" : "0dd4e7128d4de8c304827ecc972ee57ae46230fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8"
        },
        {
          "alg" : "SHA-384",
          "content" : "3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ba65c83bb503aee2862e0a538aaf11ebc4413f79b140635ca47e39b72acee985e7eea68371807420db6e92860d049dd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0df32d70a3ba9932429c07f57d4293ef05a06a9b5d0827fe9b1f1cdf7dcbde24"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ae3077c04d8b341b5b8c2207a5394416e42f64d2c6b7e85a216a811ecb37705e732472a7326c5c1fb1805e48f8e19da2d42a365e244645d1fb5db635416fc311"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-security-api",
      "version" : "3.4.6",
      "description" : "Security API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b128a68409ed07d1094b40281576c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5cfb49df6b78b0dea66015040fe9940ace2fe71"
        },
        {
          "alg" : "SHA-256",
          "content" : "a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a0e55d75f810bc988322668939869510a92af558fd21b2bac5180d75833d9adcabed88db5b546d7f2c63bc725315b9d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a51c5e0854fbad9049dbe4e77644c1e0796a9e35249989eedabdbb421406b982"
        },
        {
          "alg" : "SHA3-512",
          "content" : "11d2b36602e290aad73f8ccedffdc8bb99e679872cf47921e83ad62f48097bea3b720551ce58aeef0aea75ff21f3517f4d5215aedefbd9609368a3836f38fb66"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-security-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-security-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xmlsec-impl",
      "version" : "3.4.6",
      "description" : "XML Security Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "29d0993ae0e882f5ab843fdca178ad53"
        },
        {
          "alg" : "SHA-1",
          "content" : "f07084d063f046dc762b86f90ff1350c923aa6ac"
        },
        {
          "alg" : "SHA-256",
          "content" : "8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496"
        },
        {
          "alg" : "SHA-384",
          "content" : "63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b89208a5305630e4b4c75708f854b2f57e4168fbdbbb700b682d3845855c069b8f6a986da4311201ba5afb049722a4a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a80892cf468b16155284957ace6da1c8da86dcfade6f1c0c17cfe425e601fd44"
        },
        {
          "alg" : "SHA3-512",
          "content" : "424cac960c48b49ea540ee402b30627c4a26d139fef46259f00de32b4f753abba901c072616d4bb5d2bf23178b78d29b30d0ac344b6ef9ff3829c97c4116b43c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xmlsec-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xmlsec-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "net.shibboleth.utilities",
      "name" : "java-support",
      "version" : "7.5.2",
      "description" : "A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8841e4abf4e88a32737d0f2870f2f4af"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b0a80b8c0713e3d6233c643c7421ece305b544f"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2"
        },
        {
          "alg" : "SHA-512",
          "content" : "e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c0324c49a4c7c8e4654f828ec353bb60e1951955a551d4078763839cf5d9cd1a6099c716811597e7024d79db4a42f0da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e0d86c58e70d7a17f9fd029bfbd5a3661182f15c39d745a02a8568092e860bd8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dc57c10272b416405e4c8e8fa1d51db9d5d72fc757c6c5dc49b888d1d0bb6f591083cd1edd0f642c71854177336d15e227bba0ee6c25c68dbe39d79e08a4132c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/java-support/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/?p=java-support.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "group" : "org.cryptacular",
      "name" : "cryptacular",
      "version" : "1.2.6",
      "description" : "The spectacular complement to the Bouncy Castle crypto API for Java.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4cf54fbc0b44a3233b0daa8b4c0cb83"
        },
        {
          "alg" : "SHA-1",
          "content" : "c97954b8bc9fbf63393d6a3b9113a6ce70772b45"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec"
        },
        {
          "alg" : "SHA-384",
          "content" : "5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a48cd3adf9dfc90e9dd0023e1c40d21369c198bb46a992ee01719e8a1e6deeab3f8215d9c1394c1306ca8a8268a201ba"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2197138eff1b76c3743e9dffc896b3376b92c0c70f558f10a3277b84b82b63c9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "79b5016a94ed082b321e812492a5ad11c25c4f143f0a2167643c5c6a7e08d35e54a1366468d232534a9428d5c05858241086f47057c2db3e9414935d985a38a4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU Lesser General Public License",
            "url" : "http://www.gnu.org/licenses/lgpl-3.0.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.cryptacular.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/vt-middleware/cryptacular/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "http://groups.google.com/group/cryptacular"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:vt-middleware/cryptacular.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.78.1",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9646d6d9c087fd408fafe0e3cfe56c25"
        },
        {
          "alg" : "SHA-1",
          "content" : "39e9e45359e20998eb79c1828751f94a818d25f8"
        },
        {
          "alg" : "SHA-256",
          "content" : "add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb10c3c089921c8173ad285329f730e0e78de175d1b50b9bdd79c6a85a265af9b3331caa0c1ed57e5f47047319ce3b0f3bb5def0a3db9cccf2755cc95e145e52"
        },
        {
          "alg" : "SHA-384",
          "content" : "f800642cf1d359c49455421dcc1f6d4b4225d74128bc221fb6742703d5efe009eaefdac2b8139e2168e55815df32c91c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de3801b40050d6839874c0f00c933f42c89badc87a64d0664960aaed1b08f350ee5bc2f0575771a9b3a217012698d5d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6a7629eefcee11d7f9cfca72d6b87d2779785ed887987cf94ce7da011b9e373"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a3e7b0a180e61d17de3107876e0ccce6ddfa23c165827a585b10fac8cc3629ffde930e36aaff5df2327278e35631d9ab970923fe0e34d68876b7911f2a536c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "publisher" : "Joda.org",
      "group" : "joda-time",
      "name" : "joda-time",
      "version" : "2.10.10",
      "description" : "Date and time library to replace JDK date handling",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2a46de8a73ec7b60011429561ae72e3"
        },
        {
          "alg" : "SHA-1",
          "content" : "29e8126e31f41e5c12b9fe3a7eb02e704c47d70b"
        },
        {
          "alg" : "SHA-256",
          "content" : "dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f"
        },
        {
          "alg" : "SHA-384",
          "content" : "7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9ba509d2d0ac83d7adf75ffc4d6949ff7e54adac022c3e2f23b2aa5199c3260d59ec01f5f97ae6b4ac1a8ff583a7e6c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cbe7879898aeab28dadc4b6814303929e92ed8512f0d1ac4b20ee46acbaec873"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4998f180686fc8407da93da5e30266d1a5e9f0a5f7209c92d379772f78eb349ed6a42934d2cd00f9e19ee3c2243cbd15be1fc05617720bf4e69256791d2724c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.joda.org/joda-time/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/content/repositories/joda-releases"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/JodaOrg/joda-time/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/JodaOrg/joda-time"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "30.1-jre",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, Google's collections, I/O classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f8966f27f06101a08083bfa9f9277e7"
        },
        {
          "alg" : "SHA-1",
          "content" : "00d0c3ce2311c9e36e73228da25a6e99b2ab826f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e6dd072f9d3fe02a4600688380bd422bdac184caf6fe2418cfdd0934f09432aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7a8098c0af7746c8a97a8cc8245166c14ee9213f67943d9d1962c94699f58d789c1e103de9cd407c4f20cd4be4e89814643560e5dae0b3f629312f2b1a2a8e2"
        },
        {
          "alg" : "SHA-384",
          "content" : "12f54fff188f49a7d7284836768f198a6b002a1773ab80311c69449cec0544744938b8818b70cd1811cad830efb6a76d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2671b086b98b63915f471cc76f8ec281c12e94e14129bc35e0695f73f28e2cc1292abfcb18626ee9ee8691e587c674d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6e498cb0c02bd5e60cf8feb9523b81056422df54be0e1f8d1da65b7aa454c8d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a9d4cf2ff036032a0beef6249fa471c5d7d6a26e25b99995825c37555eac3fc53ca78e5c6f207476b258fe178f9ca7bf0551442632b7565279ad6c20f099b82b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/guava"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/guava"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "group" : "com.google.guava",
      "name" : "failureaccess",
      "version" : "1.0.1",
      "description" : "Contains com.google.common.util.concurrent.internal.InternalFutureFailureAccess and InternalFutures. Most users will never need to use this artifact. Its classes is conceptually a part of Guava, but they're in this separate artifact so that Android libraries can use them without pulling in all of Guava (just as they can use ListenableFuture by depending on the listenablefuture artifact).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "091883993ef5bfa91da01dcc8fc52236"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcf1de382a0bf95a3d8b0849546c88bac1292c9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae"
        },
        {
          "alg" : "SHA-384",
          "content" : "67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1460875f0331c5fa3791772a6a322a7db180261bc2adacf7271df1fbf3b088a587a755a604c039982cb593c5cfc1f101"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ea86406e75fcd93eafe3cde1b3135ba485f1bb9b75fed98894a0bf1f0aee04f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "52ac0f487ab5dd27c9f2e54fd1d84c7a620cae9d49be4072aa2b11501787bf4391ddaa13d02eccdf19e8eea46aecbea5f6064b26777c1b836108a280652e04ac"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/guava/failureaccess"
        },
        {
          "type" : "build-system",
          "url" : "https://travis-ci.org/google/guava"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/guava/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/guava/failureaccess"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-impl",
      "version" : "3.4.6",
      "description" : "XACML Provider Implementations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d8cb6a9cf8d68af9bc2bab3053d9a30"
        },
        {
          "alg" : "SHA-1",
          "content" : "542a94404fe6b51858cc291e18b1890772de555c"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146"
        },
        {
          "alg" : "SHA-512",
          "content" : "29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b"
        },
        {
          "alg" : "SHA-384",
          "content" : "b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "671b231ece5429019e1a76a864b172c1f45cb0f3eea627e65728b848c03b53a52bac0b684cd3d089d0f3369563d4f4d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ee73dcb676e9652bffa47c67a378ae6a2bdff544bb3087ee774dc7285ab19497"
        },
        {
          "alg" : "SHA3-512",
          "content" : "12311dac32d3991cfa12b3652fdeae1e958777d1d75960490685d413021b66cb9f0d2a213cb3b2605f1af4b0ac74479a29187d81ac93c755736d05114dcda9fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-api",
      "version" : "3.4.6",
      "description" : "XACML Provider API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cfb758241b65c48297e510c5c1b129fa"
        },
        {
          "alg" : "SHA-1",
          "content" : "2fc136cf70605b6e490daf01a28161cb87b0ffc4"
        },
        {
          "alg" : "SHA-256",
          "content" : "9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3"
        },
        {
          "alg" : "SHA-384",
          "content" : "43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2881568cafcb486a27ff445020eacd2000f50dfde6e7ddc5ae73edded6eb4348158f21ce8d2f916da3d0e1d77310d8f0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8713d49d970b6b7329db615ce345ed64113ba8de7f6397104363d9ed0d43ced9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2185bbf881824ad73e4b0bdcb4de5bd21b721278647d2095930b49a34c10762bfb6877b67801e9ed72b40cfb5e99bc8916592f8e243d1716f3ad5d30fa0d9429"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-impl",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile Implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0eaa70b47d18c2a7ae72ec0ce1e47038"
        },
        {
          "alg" : "SHA-1",
          "content" : "2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8"
        },
        {
          "alg" : "SHA-256",
          "content" : "536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb"
        },
        {
          "alg" : "SHA-384",
          "content" : "87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "011ea0e3ee1e3841f1fee624af4858616c6024558eb02d97f7883ae6509e9d22dfab3939662b35e084bf2cdb7c7e4305"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc04e058e55e63247059177067d310912348ec8ab591dec9efb1564c9d39220d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "84dd06b742e56582f6e442403e96617affb74ff2e74f1a0137077f0d35ae7f9160296f15a954ed4021f8be691e0c5a132367e7bbee9391338522109e267b63f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-impl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "publisher" : "Shibboleth Consortium",
      "group" : "org.opensaml",
      "name" : "opensaml-xacml-saml-api",
      "version" : "3.4.6",
      "description" : "SAML XACML Profile API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75f667b52f160481e65e7c317ab1c20f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4d573d93257738309cd079a290a1da7ecdc762e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b"
        },
        {
          "alg" : "SHA-512",
          "content" : "612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "60b81353faea47332bf171a5ba7cb17ce4f12a583eb616c186033b39395bb5b6be60047e7dfb549965eac0cd8ae8082f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2effe635e6699d715e92ec2ba4081142447b876a071d351176e1b702bd46b695"
        },
        {
          "alg" : "SHA3-512",
          "content" : "467b41af5816f2d307e6994e719e0205bf0fff26fe6f6cfb9b40b5cd2ae751aa0965ff761c65552f14cefb7ad159afeaf0c4bfae8a0ee8873dbdba008c640d73"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://shibboleth.net/opensaml-xacml-saml-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://build.shibboleth.net/nexus/content/repositories/releases"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.shibboleth.net/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://marc.info/?l=shibboleth-announce"
        },
        {
          "type" : "vcs",
          "url" : "https://git.shibboleth.net/view/opensaml-xacml-saml-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "publisher" : "The JASYPT team",
      "group" : "org.jasypt",
      "name" : "jasypt",
      "version" : "1.9.3",
      "description" : "Java library which enables encryption in java apps with minimum effort.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39327c7e38782102ecdb3c9dc4e8dcd3"
        },
        {
          "alg" : "SHA-1",
          "content" : "0d99ef9540f51c617f2a293b460f025d2ee563dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa"
        },
        {
          "alg" : "SHA-512",
          "content" : "99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821"
        },
        {
          "alg" : "SHA-384",
          "content" : "12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "72ba6c5ea5781cf7f627fc1e847c68e0064947cd75587e028a443b2d8056c6434cb5be8a0e3c6170f71fae6d67719e8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1cf8809814fad98e8204220110becfeb901050ea9aefd9cb4607adf76631b547"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08f3aee5e0c3b57cb0be5f8f2de7b2429793c717dd25fb74e20eaafcaf1cfac3721cf184d179a4c507d90fd864b300f3e83d15ebbeb937637d8eb1d1bf779d48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jasypt.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git@github.com:jasypt/jasypt.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.geronimo.javamail",
      "name" : "geronimo-javamail_1.4_mail",
      "version" : "1.8.4",
      "description" : "Geronimmo JavaMail Bundle.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f0f877ca397f77198f4c941bee52f0a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c111549605e4fb904984e4f40299a3a653871ea"
        },
        {
          "alg" : "SHA-256",
          "content" : "e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a"
        },
        {
          "alg" : "SHA-512",
          "content" : "a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a774aa04351e16186868d53d50b34a200705a89d468d4e8826a4d553fd2fdfdef828f187b7a8a70930d17ddd9163199e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3da74bc40cdf844aa9329375e8cad8f24296c4a1414e8fcd7a8a0dda27bc4d59"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f45a98ec3c92d4846a0fdea10010cdbea57ef109fa89ff1b789396a025adf8c87ce63cf2a24bd055a9e8f99b0e95b1b8d7ea9773bf4b1a8f5aa86bb7e8b2963"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-addr",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime WS Addressing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cc28acc5e6ca4a62f32353d3298e8ff"
        },
        {
          "alg" : "SHA-1",
          "content" : "263e6afbceff5e30f7c8730787ef42f083cb5ea6"
        },
        {
          "alg" : "SHA-256",
          "content" : "43399f00670cbe5d58b09d1eaf3d4af1127d9cb4e42555ea02851f1167a84201"
        },
        {
          "alg" : "SHA-512",
          "content" : "89ac6f92f01f40b298922a7a8a9cedd7fa3c5ffbc5ff771bbc0539b050742287e0218840831fac87b17ded3de82142234723501f42627efaf689356d04f77c56"
        },
        {
          "alg" : "SHA-384",
          "content" : "20d7431ca485a6f2b4a355a6363b32ad092e56b7a9362fd48afc501a3c1090d5d962077da8930071d5ae90c25693ae03"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0d87be939eed31ed82e11dec279040ba4383739889387d893d196fd16fc0f6595c1322046a2f4afff9622b066fe9852c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "23cf558f188557b89ac74bcb60d6c761536b3acb29fc1bae36edd7a343709e7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4af354e8deae72028e38a692735de6bdf0c12fd0af911e981d130de00a8647905d0cc19ed20c0d37433dc1253dccf0a8073675c63fa69eacc3b517866a80d4fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-addr"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-rm",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime WS Reliable Messaging",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c218a74f3ab7839037f7d2ced98432c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a7882c494e2f8877caaf30211f4fc23e05949bb"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2d81fce94b73514646c974497b7a8b74b30b9c8d9b379465080db7e7f10d62c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f1f8e84ef79ec7732b5b587bfb62d6f0a4ea66f4dbdb6cc7aa74a239b66c0e88cc4a808e36f967f38a2e3bf65701b68a7e57bc3e5eedc7ef71f025bfe30e9192"
        },
        {
          "alg" : "SHA-384",
          "content" : "9628215c4f62e349a21404b90c626508d566d10c0f37076a131fe96906d2f2d8560a6d0c0a0551ca4a5aaa265bd936ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5e15dd9585f53b515af5cb3c67642c22863435075c67231af389c19253ae4781d93b5f3bb6fcc2bb923143b5d76025c4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c6700bb7833ae1084066cc890cb9e75737a84246e9e574406b175c79c04e61fc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f7bd449ac4da32e4635f8ca99892173a7c2aefe9b40a25c2a88ca979f334b9b0dc5d6e6c21458f9734a90221d676fc9aa1991c6d7b56e5e4decc81294d27f93"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-rm"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-policy",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime WS Policy",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d06752f1a85f16741b8b0ea822f34f81"
        },
        {
          "alg" : "SHA-1",
          "content" : "9fdb16a5287dddc99ae69c41190abe2bd58c8547"
        },
        {
          "alg" : "SHA-256",
          "content" : "432bb192bf763999f01c68a069d0136a24c63abed546de4f5d04376dd6b1a487"
        },
        {
          "alg" : "SHA-512",
          "content" : "d80fdd27c7a8e16cdc6eaca0fa7f1b8172f0c927f091e233d1a873ff042c6170ee4b2c4ed8661e562dce6d6e06ab8e630e3f8bafa51380cd4aba9b5c35fe8e5a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f0163cc32df7a189f671efa9bfcf7f851d20ed1498dd2b9b0b0739d29d18b8c4ada988a58c2b266e1612fb89f99a654"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c61128667181eb3ce5d94f0dd3b9623f51e715d24af33655e9b0c9b3aa08b8a69339723e2555baead0ab8f630fd34f09"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cdd2a68da7a3c519353e5e46d804dde392fa6bcc09dcb2802e0324ea59985429"
        },
        {
          "alg" : "SHA3-512",
          "content" : "13e4467fa27b78d88b9f8019ae566b35b0bbbd846822c569cfe5f0682e31b1efa19abfd6fc5bc87d648d796d909eced446ff09c49ea080b37a6ab2b8e535f690"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-policy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.neethi",
      "name" : "neethi",
      "version" : "3.2.1",
      "description" : "Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6d100128ec1e1417687c4fc65cf925f1"
        },
        {
          "alg" : "SHA-1",
          "content" : "2d239fd19646201c6dfcc01f3d805b9158d92c94"
        },
        {
          "alg" : "SHA-256",
          "content" : "9aafe21e37e11bebd3bd5b55aa5e97da79eabdd2af19faf0992cf7887d8db5f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "6eee88d73b2f31c778af83bb6c443de252073636ddd11219c19437712d9695975cd6aabfeb5d8bc35e6736d0a19db477610f9c8ddae5821e914de9c85bec2f31"
        },
        {
          "alg" : "SHA-384",
          "content" : "2bc2f9f5a01c4a16432c0a91362adc9af2b740f8c14695e6a697dbc8e3ac6218b2104beafa7dfd296c4593c3aaf4135f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "393cfa8d5c65a85d89d019c6ae3b8c51a3d2b50c093facecd859be921513468f416b39e20fd328d7928aa79287cb7b99"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1389e5a6d0bb8b3860ae7b7843827743000377d6e9c0a0639ab1b4b652c65652"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ee240d4d1276438adeac59374dd836d7dc50eae93ef91c4293fa6942bda28f27494bc222889ea8b428bee8cd38b03e77f6e3cebd9a31060a982ba4d8f9fc6a6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/neethi/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/NEETHI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/ws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-mex",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime WS MetadataExchange",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd26fee04a314f473bd5aeca841ba54d"
        },
        {
          "alg" : "SHA-1",
          "content" : "1257b05b662ad86d667b90d65edad851ba1dc070"
        },
        {
          "alg" : "SHA-256",
          "content" : "be46883e508d6a33f995f9b53345264b884e37dbbcedfa1ba73d1dd44f80975a"
        },
        {
          "alg" : "SHA-512",
          "content" : "e6209f1f24acd205fa522119f3726c7808e28d30d0bbd904a5c3781568d62d1587bfaddad9c5dfdcd0bf47669ed88816a20da7050371d949270f6dedc9648b78"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2231c96e5530caf42032175c21abf2dfc433ccf3078fb4b0ae4d9a924c4b0e6868b7ec39954188a980b00d26851aee6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45838a0040a2986da6d04d80b4f1f8933b6a1ac6e1e8398f0428214c1eece9146e738f0a0eee5a06c736d6fd0ee71286"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb27c623f383c851c6a6e0fc3f8d2d257a127e91f2c37d1b5f34d90f678a647b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dc3151503c9570a085d2bee354b9e569d27d06678cda94141d970c3e0cf977a6586a786fef7374f5258529723cec56b01f07a715fb1fba1021205ead8a448e60"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-mex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-ws-security",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime WS Security",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "31ca3788a78be83e859848617080c6a7"
        },
        {
          "alg" : "SHA-1",
          "content" : "ede6b325fa7bb5f5d9f17fa3dfca766c50d07db9"
        },
        {
          "alg" : "SHA-256",
          "content" : "a2a9dbf205250486db910cf69d1d2481772de748bdc015bfac20ab74f915046f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5d65fbab6776c885e5f1abb00890bd5f3cc9f1c6be21a83e54805e54dcaeb388c9c0c7d443cda967d883263cc2f0788c1da1341537ec55fc462c284f18f87f87"
        },
        {
          "alg" : "SHA-384",
          "content" : "61b9d2cb1273161db1e3fa9df10e0c2b3955c8f1e9ac3998732a046d72a171d5014154c528cd820ca7459958acc679c1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ce4220229fed362b73b28aaa8257750d25b50ae428975a4036028f5f3599907d81b9a2861e1a58bc072623673c504412"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f631d606f091a179c58256199e71701a08d58b7ca2289bb06d83c1d5b473f221"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e08aa8082e987c779368ff5628185441f603d66d0718763f5bbedd6d9a11a8d6d3fdcab51cefb020b91775bca1d974048fee53ec2a2e230f9f0d649d4de344ec"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
      "publisher" : "Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.",
      "group" : "org.ehcache",
      "name" : "ehcache",
      "version" : "3.10.8",
      "description" : "End-user ehcache3 jar artifact",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35f94bd99bae66088df39d8a45e73468"
        },
        {
          "alg" : "SHA-1",
          "content" : "f0d50ede46609db78413ca7f4250d348a597b101"
        },
        {
          "alg" : "SHA-256",
          "content" : "bed87f71d8cd25a8a4ef65f274cc58301f28929a01417d0bee8d73953dc30bac"
        },
        {
          "alg" : "SHA-512",
          "content" : "deeafba63b4ff08f26721aa9b8582c486d4a12ad3889c3deadb52ca86cd71212550ffd71f7cefc8e58543fd0114f48cc086ec3c173091ea7a5c2f99a3919893e"
        },
        {
          "alg" : "SHA-384",
          "content" : "30be38713902e6c68cf32cc9ef5cf0a384d0dcacbe5d32e7dbdd8483c2f7002cadc68005a50084f1b56386e456023fc6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e349f39ae5a621ef760f7de6fde8a35140cb2a004d05653c9340779469dd61b18a0b8310c2a01b82cc02839bff58b7f0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6808204bcd31027ce377ecf6ece07ae9a39e209524201064663693cf763d6d3c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0c691bdcdcd98b349b409fc0a0b7851a90090d71492cf882104007cea9adf2905e6ab59ba62d3241d4eff929beaf92eef09e7450cf58897b07f60fa30092992"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://ehcache.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/ehcache/ehcache3/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ehcache/ehcache3"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "group" : "javax.cache",
      "name" : "cache-api",
      "version" : "1.1.0",
      "description" : "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ac907ad12e9a7ac5d41abf703855002f"
        },
        {
          "alg" : "SHA-1",
          "content" : "77bdcff7814076dfa61611b0db88487c515150b6"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c980ad1ae4a6dda3bdb62986c3ef5b41ccf766e12353587ee4e4307e27e155a"
        },
        {
          "alg" : "SHA-512",
          "content" : "35824a03ce90b198aafb18e7943594ed833b257bf02e5ef9690d782224e6838232298430627455bb5eb7a91bcd42144b34273cf8473719d7d7f64638164c89f9"
        },
        {
          "alg" : "SHA-384",
          "content" : "1f6c6204e9653fa989340ae361cb0372dc852057383cf72d881ddf1838ab59f46297fd4a217e4b171144d48918d4998c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5258073222820223be540f5393426023e0d0cde7a432ba4338fb134a28e867b52cee569ff3c4e5032f660b85fb4caca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0190bf39824bdcab1879086ebeae5f7fff7fd1a349f832663787274f2c5934bb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d24dc13d9d2aa0e01f37732bc96395962882bfa197c1cdc81fdaf8c8530bdaa7654944b2ecbf966719ffe793861e3baf44f129aa73489ede55a36ff67e155cbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jsr107/jsr107spec"
        },
        {
          "type" : "distribution-intake",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-policy",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "267dc758c1af2ed453b64b3739120f53"
        },
        {
          "alg" : "SHA-1",
          "content" : "da9d12731b1a92f82ee4557c4b7f1e27b2acdf5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "881e08717fc3126c218071e43c6ba73f97c1f0a6594ec4a7994ceea57b20e9a0"
        },
        {
          "alg" : "SHA-512",
          "content" : "a3b7962b0f6d342863a6d6a8dc324b4699f7f466c6877b8ed5dfc71d64577e28589674bd3914a2e03f4ef0a8b8192111e19a7e08678aaec90276444b7d3cf08c"
        },
        {
          "alg" : "SHA-384",
          "content" : "9792fa52d80beee44fad625758962043442df0d4502e003d61c2c12c385ae7302221548d5351a66abcb217896c44d062"
        },
        {
          "alg" : "SHA3-384",
          "content" : "245b61449e8e953925ee75928756f7743a473ab40552b9faff29872fa093780c05d3fb81e43f99aca5e8c85e754587bd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1aa589a755764cc5e89fd2db6791f46236dd97fe25ed185124106ea0f9150264"
        },
        {
          "alg" : "SHA3-512",
          "content" : "066f069c89efb486f1d857d6ee417ebcd5386bf2256b4a017b74683b3ea631957f71db5fb0630013ba44f7a155e0e6ba7a04f8e86214b545da756ae16169c88a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-policy/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19906deacbe98b6b397ae1dedbfc4676"
        },
        {
          "alg" : "SHA-1",
          "content" : "6566d7fe40028f3fe9313cee01fb2bcf2dacc8dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca865a6aa9ab9d7c258952d72204c9549d791018bd692c7f5cd578f75a3bd0f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "973f0d762ceb0688dc297e0366aa9d63f964b27d82298dd95d5f698bdba9a02920ed5f8c5c174d13ec9c898a71fa868aca7d201523443d9de6f877b8a35ac5a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "0b199ff8bfd395cfc880bdcd1228dbd4f606a41bbd6cccb299e927515ac3647f87e0c0dc86d7a6d9da0dad6d62e89376"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd7e6e9bbfd821ef882089ad075a9e561bf5643fb44b84fc6311f082ce9813cb99d2d2171542b96885f656871b0710a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c1f19b5ca70f3d89f605477a266e6c3fd04d49f6ff856df1eeb0b679f1d22008"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a46ef49a5d1ad985fb7162a5a05bfc22d71b9f20ceb7723b5e0f71d274e28ae4f5d1f85eb64153d36c0ab6eba1705ad63de44a89fd22a0315b9c8d0e149d3394"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-stax/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-bindings",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "425078dc9882b2d35d6df5e74cb9368e"
        },
        {
          "alg" : "SHA-1",
          "content" : "24bdfca05e2f2b617e86b422331914e0f780bd49"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f4e934497f11938c62f5654000d5dde7d6a3ab62d77bbeaa698194e1d8beb3b"
        },
        {
          "alg" : "SHA-512",
          "content" : "caa5a43ce4b3c473da2202ee8c116a09089fa85f0739d25a882655e98b8aaac392eff4c3ecd70e128f3c2e07f9f2718e8ebf877c0a74469840d5911f1766c3a7"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a9b06de616f0c67a149e9fa0be8186c6f9c3d9f26c35cac02f303cb3cb1611f1547b6dc74c948f677d3145e3f5f9e28"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eb026269a55ce75b686c0137e6d9073e63bc8f2f13a07cee41bf01c199adc56b7057f4f7a41daef023709e2236557f0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e6917d3ef8a835a7fc22de173016b74005ed956efde97966f55405f37ec9896d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276a71da56303a8a1b4111c4dacd5c1fecb5581c5925d8e966249a19569a1d9ae2d9298484eafe37da2d910ee79ee271757cbea00cf5e24a47824ce7287ad153"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-bindings/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.messaging.saaj",
      "name" : "saaj-impl",
      "version" : "1.5.3",
      "description" : "Implementation of Jakarta SOAP with Attachments Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c3bd20b7350f99f18f8c38fbed90199"
        },
        {
          "alg" : "SHA-1",
          "content" : "1cd4aa51ea7a8987fe930083e3cd05e2ac72505b"
        },
        {
          "alg" : "SHA-256",
          "content" : "21d451aa7dbe1254388ecc4e5ea71aabbc519c7d7344c9d93e9f79954f38b32b"
        },
        {
          "alg" : "SHA-512",
          "content" : "de46ee6d6e294954df3cac45dd7738490592478a240ce335e4f12a28fbac97c3728cf9b06bd87a1c295fe44a03fecce0ec50fb1a438a1180f285c10e80726fd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "3efe236526171d9797f447525f7e814c08870eaf80df9434e58b6058c8b3b3eec654a165270e282e83364d280865f9bf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "af04a963878dc17c290f126cfc11bc177dd2814df41790acb22cad81ca7c31f1a894862883127989a94922c7fecc3b7d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1cac8bb371bd03a8980c79a3103fe569e51661ed97c4963381cb8dd0615f42c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d746b9d7e892a2a49624c066610096858e0e8d93bc6613f470a2c77ccf2ffd4bd4fa131c33cc5ab7e765940e66a2dd201379f2199352a10381b129e585dde3e9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/metro-saaj/saaj-impl"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/metro-saaj/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/metro-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/metro-saaj/saaj-impl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.jvnet.staxex",
      "name" : "stax-ex",
      "version" : "1.8.3",
      "description" : "Extensions to JSR-173 StAX API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6d943e74064cc1e7986236699d6cd04"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d69b68ee007aa15238cd4477392068b32747df3"
        },
        {
          "alg" : "SHA-256",
          "content" : "bee08da10bbc481418a1af70b9e9a80321b745bfb4dbdebbe98c1aa17c45caf8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb78de98748cfc5bb8326f324c7ac408552a19cec55278fef7900f31595215b85cb3ca31910714bd33eab695557ea550e154acf5919c0d56c7ea91755ae2c3b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3b732402d31cc5b742491cb86ae551b237ef82e58ff287b34885578a969466bc0b36618325814d54a9669e2e0467cbc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ef34e014b2db5eb7948d175eedb1092f31099fcd0202cd332aef3591850d212d393c61ebeba0f29726ce20522ab167cb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e6c04ea88f87f34f9acf3c204f355f83ad754f5aa06a8f86a502b44f29549166"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bb1330140ff310519c2a7e37ebaca8a3c29ebeb8de3e6b29edb591f4d8dc8177d350fccde6bc3d5dea5793de1aac6054ca6b132f4d4bac745e17176debc2ea35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j/stax-ex"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-stax-ex/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-stax-ex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.wss4j",
      "name" : "wss4j-ws-security-policy-stax",
      "version" : "2.4.3",
      "description" : "Apache WSS4J parent pom",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7f1c2c0ed770eed1fafbcee7c92abaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "f85b2e0719c1fba921299c43ba1406375eaf517b"
        },
        {
          "alg" : "SHA-256",
          "content" : "61b5aee22a0a6d11538de698a14f605f25a0a134d731564d3b1b51ff28de29c0"
        },
        {
          "alg" : "SHA-512",
          "content" : "ff866e76cee8f741f57d54cd23888d237d202ad5611ab99e50ae3cce84e2b20ca7984214a3694bed60ea8cd479258a94b46b10fc58926d5a7be0c247b72c3cfc"
        },
        {
          "alg" : "SHA-384",
          "content" : "888e100bf069efe000cae9b40214a64c33f99b99c42de0874895756bd718c824e0f11139611cb3ffd886aee8add560e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a7f348715b02f403f2c1565cdfe98a1da0abb1fb556ec0f1404638ac54518c852b9f3bdf04678c49ac6af9030a5bc70"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a829246aa2e39cec7dc042a7676c33cb64c684eb5c4b92453721e5b05b4d7a6d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b751eca76c552a9cac33f1f1ce47f445284af4386f79b680f58d538f314e0deb2521ecd7f55fe9c5dba63bf7047cd4c55013039d2072d51c8be0b99ffe9ee8c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/WSS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?dev@ws.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-jaxws",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JAX-WS Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a95b28d2f06d30f391b35366e34cce42"
        },
        {
          "alg" : "SHA-1",
          "content" : "0794d0971d4c3d6455ab88ed286bf494ae282e4f"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a1db47e4d5a0d643e8e5dd8ee1aec208970af759803d91951ed8c7bc28fdd3c"
        },
        {
          "alg" : "SHA-512",
          "content" : "8448e9e7cf6f9a215f5da76fde8a15a2ec3348fc2ddc644a7306fab625d537b7d9783f7684dcef32a9bf0b6ae8b1af249349193d2545d927816360e285c15936"
        },
        {
          "alg" : "SHA-384",
          "content" : "f451a00be0feac20c4c07e3aae2acabdb923afc1b8d421a1c3ca56d8daeaf5b8b9d69ef73de56b91f8bcdef047679805"
        },
        {
          "alg" : "SHA3-384",
          "content" : "19993d7ae2bbadf2c4a8d501b7540dda113804768e08e5f365b8a7b8c4853ce61b3c90472cf4e10f52c78800fb56f160"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45f2209da1d4500ffd8d8a2577d6a43105828c4c0bcb49ffad1e4d99ed471ac3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7fb72402308200e0c4def29e66cc64a10d0c42eb58bca67d8807f8d102a81c0419474959fff313847edb4be934ae6c7f942a0a3ae6ba1c565bab52c25d12e18e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxws"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-js",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JavaScript Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c84e1e3e6aa328ec4db25780a69f798"
        },
        {
          "alg" : "SHA-1",
          "content" : "d4346ae41743d96e2ba61f0082a520535bc61726"
        },
        {
          "alg" : "SHA-256",
          "content" : "73ab6c3fa816504555685cd58410a28b325847af74cd09fbbc42905e8935ebc6"
        },
        {
          "alg" : "SHA-512",
          "content" : "46ca5ee69ae5b09ffda397a671d6577b6c6c173d2844ea457a25e77118c424f777d7c35e4c7864b72caee145bdb1f1ec23fb6896ed290e4cc1093ae45316e89a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b05c13b65b5dfee09fa34e00d3a60c2940528d0b4cc8184461b7593bb5b8da88d58ea02b995fd9578b98424d6fbf73e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3e1fd99bac10ea93902761a91451161653b3e842a8ede526fc90e2d539ae7906ee64079a774b84884022d35e4fce1d60"
        },
        {
          "alg" : "SHA3-256",
          "content" : "27a0fbc1d23fbb75729d4b9f54a59f1debab7f5a368c8ece0a6e03d5d6c9bf2c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ba76bfbae965375c166b46413f0dada646ee4145827b218fb898122dab3eb788bb89f742df95d501ca24a9ec67171a085b45d8cde545b5e93a3035cb9b995e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-js"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "publisher" : "The Mozilla Foundation",
      "group" : "org.mozilla",
      "name" : "rhino",
      "version" : "1.7.15",
      "description" : "Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users. Full jar including tools, excluding the JSR-223 Script Engine wrapper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dec889e14cf8b3ceecba3a0f2d6dc0e6"
        },
        {
          "alg" : "SHA-1",
          "content" : "39e53f8e769ea9a7e799f266aa47c85edd99a29e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2427fdcbc149ca0a25ccfbb7c71b01f39ad42708773a47816cd2342861766b63"
        },
        {
          "alg" : "SHA-512",
          "content" : "5619c4f52f1863c5d72cd9115c2e9ccff55c7e7a8f4f1395f73486120d94ab3900634fb29d54356a5b0fc2214570615d5f06e152260df971bb01c5bc4de4bb95"
        },
        {
          "alg" : "SHA-384",
          "content" : "195c8ba56fd1a1f5e21314e4a6555eefff667cb0cd481f158882f9960f83820d9d817dd33c267fc9af4e21f0a31d20a3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "056b55c253835da419a21589a2417988e5741a78a50132229d56bff24cdf8cc5a829f420f06213241c085d2ca27e82b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5562728b88e047554b29f636b62bdabfb8baae31313304c4c6d8d7a072c82058"
        },
        {
          "alg" : "SHA3-512",
          "content" : "703eab70abd6bcf392fd98555d77ed72dec7abce8f368c547ac62c2ac54096a059927132eaafe10d9fadee2079b7f1d10ab7c35ada33aa6e85e1b0d7bac27397"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MPL-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://mozilla.github.io/rhino/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-simple",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Simple Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f4e8b1dc05e42d4ba0333ed1d5d20dbf"
        },
        {
          "alg" : "SHA-1",
          "content" : "5af305b78321231e59eaf64f50d2fc3c99a68d29"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ebc7b5e32f7d3c6ef51d885e0154a717e83be9101e2c2aa4b0edc1e4cfaf8a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "e464c19f8a1d229c485575da28070cd1b6367ba7af212f9bca0350ac2089eee9251ba551d1244f2e795b5e7e62a51a792c13b5efca8853e2ef5d8d556d60d5ca"
        },
        {
          "alg" : "SHA-384",
          "content" : "03fe7d8e282365fd0044f8b353436c0448f38edae746f7901f79ae06bd965e4e25ef75799eb134b9ce8a8b2d98eb835c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01def8ef8da7c2a55c2ecb8f87127ff2e3796a44a503fc97b3cede1ea834b36fb2e2b98b9460d7037423f9cd396fbb15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1dab001fddd5621a1bf8c7bd817ca299dbfadec97c2243414591184ce08e7fe3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a42c55a23e94abc8a4fd4bbd38b17098ec09bba7ca9055871d14e850fda231fbea9390026cc45924ee2a6094ce77928965e8f7305c1b3b36f137b757d2353aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-simple"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-frontend-jaxrs",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JAX-RS Frontend",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfe0f0864566467cd3529df0bf224d14"
        },
        {
          "alg" : "SHA-1",
          "content" : "c9ec25aeb1d309a69d7047fb91b8978787e37671"
        },
        {
          "alg" : "SHA-256",
          "content" : "6500d11a10ff8b8ed7463de3aa59b32649a8e52c45dbf04dc7e84295310e6942"
        },
        {
          "alg" : "SHA-512",
          "content" : "a73c12f20b82e363d8b62f836e146dc3d5f2f2d8714c26c1f339379a324ddf71576ac6a6cc9fa04768c20b21a28fae62da006ffdb03e223b0ae4b7f735819f46"
        },
        {
          "alg" : "SHA-384",
          "content" : "198aa2f180bb6b4d29702ff976ca214f2078b9e320440d0e3ae13ca8c9f0671a9ffae5b3fcd78ffcca16cd885d57d711"
        },
        {
          "alg" : "SHA3-384",
          "content" : "01ef2d72652d0b3b16eb1ca3d3891cb71b198059496c4d6326a28622c95c10d4f8f5a2d56b9d6bcae196777e37940a72"
        },
        {
          "alg" : "SHA3-256",
          "content" : "72c16d9b4ab85e4461d25271fc4be51147bf91c053ca21a65a327fb40e50d85d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1835718a91033eeafdbaf0316cac1610fca9b43fdce0aa6d129824c17fd9dced0ac150015397f6e9d3a7f379bda7a8e279e569f9381c5d9eb56b0ebbf2a4ca8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.ws.rs",
      "name" : "jakarta.ws.rs-api",
      "version" : "2.1.6",
      "description" : "Jakarta RESTful Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c3892382aeb5c54085b22b1890511d29"
        },
        {
          "alg" : "SHA-1",
          "content" : "1dcb770bce80a490dff49729b99c7a60e9ecb122"
        },
        {
          "alg" : "SHA-256",
          "content" : "4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf"
        },
        {
          "alg" : "SHA-512",
          "content" : "c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286"
        },
        {
          "alg" : "SHA3-256",
          "content" : "794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "jaxrs-dev@eclipse.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxrs-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-security",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime Security functionality",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fdf63bd55f62c9929f5fa1ab451ad8e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd0bbcd43e0c0399651ce5e1bfc89e038ef0a0c6"
        },
        {
          "alg" : "SHA-256",
          "content" : "56f1ed369d3be5312afb7ffe064afc40f7d683f8665583fc4aab2ac2e254b5c7"
        },
        {
          "alg" : "SHA-512",
          "content" : "290cb389b82b9b2b73e1d3de260039238dbdb236c11ff63bb8b5fec33c2adfde3c3c076795ba2a4bc21ef28fa346d4ccd506254ece2fe497650c45ba5125331d"
        },
        {
          "alg" : "SHA-384",
          "content" : "a048c8a98cefcd95c13f79fc320f7552f646075cf71e4cbde4c2ffe340094bdc292ea664fafd281dc505731348e27088"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2c3bb12476bfff75a0091c6ee8303de49b05ee711ccb0a3c67aa92f4ef40216cf6c4d28b5ce8f2803dcb86fa0bef25b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "65ca283f46fe7838193b59a8df2c38e4333ee0f8dd7af3368b219ed0030d80d6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "161293f53dd3889e188611caf69d1f67afacb6a5ea4d3e8d262e151cc66047e482b4e6cda240e9f02c5dca66e761bccc1ae564e888b18341d506b29d6bd781ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-javascript",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JavaScript Client Generator",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b4aa7cdeadcc89add8022ffdfae48d11"
        },
        {
          "alg" : "SHA-1",
          "content" : "7fef0377895664c41cb3b447643296308864cdc6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa00a1a989328b67c7422fbd6bd2555d25ea4cd5a0d2007e0a9654f9da2aeb77"
        },
        {
          "alg" : "SHA-512",
          "content" : "15d930b7ce31e4dcd22f17139bf771901bb054ad5b8bec90859c4dfa34272baca47110165defe42799776a8213eb4deec59b95141821507c9f170d0b97bf51bd"
        },
        {
          "alg" : "SHA-384",
          "content" : "1b7a5f7bfe3573cfff88891404f1a76ce340ebdfe60404d2adac35c1ae113dd7678642deaf1b91fcb300a11eba2f5db8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e143562914ea79eb6fc3f4a781d5af4d1ac63f9700c092c478e348d05b2bec47927386986c75e85f6c0e167e4dced7c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0b7a13e451164db0081a0c230e860605e90b234afa0613679814fa8b32b48086"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2216f0eda54198e42a507e0d9d260dba3bc450477564001b1612b9ebb214948553faeb001e0ed8deeec33ff94873d4136d018e0fcf1a0f4a76ca8a15c55e7f0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-runtime-javascript/cxf-rt-javascript"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.services.sts",
      "name" : "cxf-services-sts-core",
      "version" : "3.6.8",
      "description" : "Apache CXF Parent POM",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "931deff7a4ec24ef12cfb2a5979b687c"
        },
        {
          "alg" : "SHA-1",
          "content" : "da0ca9a2205f158d67f6eb23339697e202623654"
        },
        {
          "alg" : "SHA-256",
          "content" : "7937e8ac6c47d92fbc4a45bbe27d6cc1ca55a4ae23fc7a0ed286ddbb1b74cfac"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb008bf95354fdd39908c16ae0de73e805e869bff8a71a5351d6b6c20abd6c551c6c6bc01f6d13a63db2f6d4d4890cea17b63bcea19d4b2d2b9d0f25ac545906"
        },
        {
          "alg" : "SHA-384",
          "content" : "36b4dddc348c7634e6079d921f4da22d7caaafa511d3702edfd1f053be4289a58b077d5deca127cfb162c5af51553a79"
        },
        {
          "alg" : "SHA3-384",
          "content" : "073c4fc241ca309bda4ec1e6f2dedc0cb55fbb275db300c7b5337ae1c3a643acd08c2eeb19496fd417080a50d6027b9b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e591a2ab7df55925916a29911d7a561556b30f8d16b921f90c4aad57036e253a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1f34038889b19114a6303b8df2f53e9bf79c75b3020941d674da07ec6c83686e2d059cb6485d29bee99569f73d9c76f57217cb17036ce69bd6ad42db867ede34"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-services-sts-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-security-jose",
      "version" : "3.6.8",
      "description" : "Apache CXF Runtime JOSE Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c676c447984b04630c82d45e624d8a1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7b470f934aa83b1e55871ccd9dd41d0a842dba7e"
        },
        {
          "alg" : "SHA-256",
          "content" : "67267e236a2c2e7d97ab75cd066219c37c2dec21afc850a19a4b2709e80ff8f2"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a45bb0b8fd91830dc3b99ab37a3d89a0336dfbed13e6f01cb1183cdd96a5afece9f2a44d237131223953f089b2afebdd082e6d8054deb2227f9c18ba86ce396"
        },
        {
          "alg" : "SHA-384",
          "content" : "9133b90ca016f1fc1f96334cfd5f773f9ce126146bb5bbbe04479afa717db54005450a56658abc530820f0d999f3d687"
        },
        {
          "alg" : "SHA3-384",
          "content" : "71fb1793eb785190bf3f6f3aa8f57e20f1a7f46bfb6bc7c4fb18d57479ff1507535c4e71a6757f0380d6c1fc2224f3a5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6584e0c020cca0ab3fe8a2a61f8cb756c494577018a6d4b85db0e7b05af6df91"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c6b58b43c2dbd10cb9d0d339c3371cc42232729b0bce2cd57625b78e66ca12db97a3ee3e14df9a8a88884f53759e071ec78b8990e6618c8359d5a796ccf25293"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-security-jose"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf",
      "name" : "cxf-rt-rs-json-basic",
      "version" : "3.6.8",
      "description" : "Apache CXF JAX-RS Extensions: JSON Basic",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1dfa8f483cff415ea91d9989ef82177e"
        },
        {
          "alg" : "SHA-1",
          "content" : "6b51f0ab2d461750d8951036fe1a81f0ac0e3bbc"
        },
        {
          "alg" : "SHA-256",
          "content" : "d22d9e8ae044b0c3f83755aed0915b3cda51fe76aa4791234e555c3f9ca904cd"
        },
        {
          "alg" : "SHA-512",
          "content" : "9dee1fb0e5e45183086b04a02d0612c1fa16c4fcfb16873cd1f16a834223ee4063affa9d4797253354d92b8a4d78fb84aee71a5ca126bb7098cfd2f588771900"
        },
        {
          "alg" : "SHA-384",
          "content" : "69aeb2c1577c03f0b040d616d95e7148ed4db946a840371a08c14e690809a0f78bf14ec86f4dd8a93dabb193cc952b4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f10faabeff25ef917770a8bbdf979da559af6addec8f421e26a090514a47c96be94cb6a35cba70d2f394d9e32563fe59"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fcbb836b955cd430cd8664ff10ede0870a60803f412479a33ebce97af00767ac"
        },
        {
          "alg" : "SHA3-512",
          "content" : "eddb48b10f56d8e88e5b488e4d35be7f5cb046b047aa5a7be741b79f94fe7fce6119bbef8d2c87170e25d7d69ff4086a5effa0b5c9bdfec8210d7da6ca217e8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-json-basic"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-context@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-context",
      "version" : "5.3.39",
      "description" : "Spring Context",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "167e95de6f9de58b1ffff09990237021"
        },
        {
          "alg" : "SHA-1",
          "content" : "286538ca4b3890192d63c88fdd1616adde17dc0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e644fc33bece9a9cb82538167a1b9640ae7b7d80252e893d89b8926a2f81633"
        },
        {
          "alg" : "SHA-512",
          "content" : "22325bb605dd8cac8cb45f5c9dc0dd87014a09bed374d7f34100a2fd7c77005a9800eb18cb1c59c3f84e213f06eccbfcceb82e0fdb99259d4c6418511a8bad81"
        },
        {
          "alg" : "SHA-384",
          "content" : "1248b95d26f7799c4390e8d8ddc26fae9d0fd17ec0e3a98c447c9eb1619816930fc90bf5438fa2e2e8f0cfcbb08ec3de"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a26c04c0036e4b756de5c6d16938eb9b484a7926ff823156cebc9a8424d16e97923089e0d86c85837eb42be79f53a8f5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "479e6199950aeb48fe2d1cded67adad5c64d4deb6878d6a304d942039e108fc3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ea603c614a23362d94d0493de1291fb5fd7136628d7c3be40ea5fa712a199be615114e8bb716657796f58e3c9d34a18a4b3fa83001520c25dc1fa8b50175b1a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-context@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-aop@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-aop",
      "version" : "5.3.39",
      "description" : "Spring AOP",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "47ef8946ec3f2f76f83cda172b9fd964"
        },
        {
          "alg" : "SHA-1",
          "content" : "3af1f0d73ec1e031c7083c848342989f413ca275"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa706e4f749982c0bae5fa637433c44c24f0fff5d16dc41deea6d30c3dfa7c85"
        },
        {
          "alg" : "SHA-512",
          "content" : "12d230913f57fd97476681016b70c411d2d2557c3aad6a1c86541563ab977786f29aa5277126e15efc1337d33a7e6fecc05debb32857bfa1f48c9943d9936205"
        },
        {
          "alg" : "SHA-384",
          "content" : "0533114467204ef925a88d4ab82bb8ae6cb8a7225d0dbd32ffb078912ca74b2fcbab04a4e2dfaa32b5488b154eb770a7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "081665850a0db9cfaa3fe38ce89973ee2c3b81df85f361aba997e2a482d1b679a166f7322217a8629e295dd3b591736e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81dd17093016a3dce398bbc7cf29ab5923936a86565de1f8e22c09e7a7e5cdad"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7fb45772885a0c058e35e02231ab3e008810123f1ea889c97ee8f622a863b746f125f197ab1d353a1d982941f686f4ee793dcb291088b77cd6a442e4baccb3e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-aop@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-beans",
      "version" : "5.3.39",
      "description" : "Spring Beans",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2f99040fb8b0bc98515c87b968227d3"
        },
        {
          "alg" : "SHA-1",
          "content" : "87770ce736cbd777c07866cbc8a06b879765e3c8"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6697a5d8facb81aa75e5a46d959d4256da9ce3b40d33f3b5bbd42a8b1ed5722"
        },
        {
          "alg" : "SHA-512",
          "content" : "53321d3395e51b2d0b6948adff4cce81a7a712c89af92ce27ad98a44e34bfb4efa0e617b951c0468deb0baafa258eaf61507982a6774d3d832593d129c93f3ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "a4791a32da2ac30322814781da25680f019ef36e179461e6aee54e6f771081f1c61c673542b9e881d190988ecd98b5f6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3456cce03968d9d9a730b52e79c67615640e4d740d173fed9ddf98760fd2af7d28704df6ff0aa9e2935c17ca3704385c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c229d89e276b29a0fdda42fac26d7a0e526a994be452cdfff22bb03a504bf9cc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08d43059f6948f7cda0c6d344d09d8e035289e51f2ba824c19e4b3f0f0714af836e8feb163b578ccfe97a9cd744b42d8382b4ed3020ba367c032e5bc768226ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-core",
      "version" : "5.3.39",
      "description" : "Spring Core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "632d2a8c30962a69273775968c052651"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2bff2eedf27b51d6ef9a2fc892aaff5b7a768dd"
        },
        {
          "alg" : "SHA-256",
          "content" : "3a1ddcf05420a9181bd9cacb6062a3edc493e14d555961ad50e1a6360eb1e75f"
        },
        {
          "alg" : "SHA-512",
          "content" : "2629ed79a0a3cfe7e467ac1a10f6d0d93f8ebdf9fe79bf67d99e5797e4efdb6bb1fd54ef882676b2175beea14079ca5ac6d8218c94134a66bd544d83fc8dc2b5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a58090e8a07cc13429b116c1d786269f3b1a1b16a63ce4711648e8f4e5c0b076e970dae2ee1e08fd1cb01158161b1bb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "43f84a96b238a4492e08dd79e4450ccaad4c4f3f8adb45f16632593de313cf88905546f892e29989d8553512006e7680"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99cb56d841b5920987b296da3af76ae51d80f4f78b56da4b127e9187793461da"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74b21906fe06a990b8f910032c735af31c78cbf322452aa43b8a9bba22ceedaa0e6ad51e1f006b9c075b79654e3298c086adc6a9036601f01b5e4eab6ae899db"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-jcl",
      "version" : "5.3.39",
      "description" : "Spring Commons Logging Bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1e50a7529d9f3f87079542a03191729"
        },
        {
          "alg" : "SHA-1",
          "content" : "45181955845ae69c51c72746f00200f7babca558"
        },
        {
          "alg" : "SHA-256",
          "content" : "adbe656fc622e2457fefa09529d4b7c1126a3c4ff1c9306907764fcc93f1b725"
        },
        {
          "alg" : "SHA-512",
          "content" : "55d7b4fa71e1be507cf19bc18d6bce035946aa76b83e16152a18e822e08dcf571143936bbba8c6af5e57e8166352d807f53868fea5297eba1adcf5f65d9fdd16"
        },
        {
          "alg" : "SHA-384",
          "content" : "4eb784585a283b379f13aa35fa5107f0908eac57aa8deea3fbb4b9f81b1038083dc00b2adb1e0653ccd747e7c3d7d957"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cee06c517ca2860169dbe6e47e184094ed9611a9ee6ae918ff638a9668a83de2bf191c6ff97cafea96acf4257125686f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ae96d3c35f7a4c1e3e061ccedab452c9202d0080f7940f41f3c42747f30b7ed"
        },
        {
          "alg" : "SHA3-512",
          "content" : "60e9dbbde28887b2064d003238c55bdabb7e276d3c463e5a0af6d500e73d8d23d0c8a8fa3ff6203fb23534af29f50df36ab41a60c7a331536f1a723114aa7f31"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.springframework/spring-expression@5.3.39?type=jar",
      "publisher" : "Spring IO",
      "group" : "org.springframework",
      "name" : "spring-expression",
      "version" : "5.3.39",
      "description" : "Spring Expression Language (SpEL)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41198683f2d488b4b2038b7d8e4b6d81"
        },
        {
          "alg" : "SHA-1",
          "content" : "25cf07399eb7ac3fc13888b20dc4d67124ec75bd"
        },
        {
          "alg" : "SHA-256",
          "content" : "d5337774d889fcdc9c08b0c8b8aaa1018d4c95b9b441db0118f7ae4d328f2810"
        },
        {
          "alg" : "SHA-512",
          "content" : "51ac6798959c99d98507a8c0912a93c872f27f44e0a2ebb7bf1d35ccc88c5569c7a07dea47d9d740d5b019a03ac2c9f03aefc94afb98fe2a3258ae0bf14c04e4"
        },
        {
          "alg" : "SHA-384",
          "content" : "f5996023c209e7b9befad9a09347733ec2527f1a19e00c8145fc87dcc04ed340f466ec165c7632b9973d83488148e370"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae6c0ebff1148eb5d28d8ee3aa678daf96cac5a39e7ca1e537305d60d8d08bc5a4ad005581b6ac82e2a93c3b6ca334d7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c8b1f84a895c6c5ff2f67bc811eb33e871ccbdadb3699fe724537aa80121ee45"
        },
        {
          "alg" : "SHA3-512",
          "content" : "49e2ee35d868318d5b50c3952ad6fcac7d0dda8786fcfe95663c24eaf8fdcbc20d761ab2931565a10c930ad91a5c25e81b370f1dfd190492e7fbc45729edc001"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.springframework/spring-expression@5.3.39?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/spring-projects/spring-framework"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/spring-projects/spring-framework/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/spring-projects/spring-framework"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-api@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.services.wsn",
      "name" : "cxf-services-wsn-api",
      "version" : "3.6.8",
      "description" : "Apache CXF WSN API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d458c0385b4bad9fd39ccf1b1a4153c"
        },
        {
          "alg" : "SHA-1",
          "content" : "f729c5b362b332c4cf0a3b821355c6a99316a9fe"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e921e7c3bd99fcae94b0babdfea40cd44b234019222a65cbb6c9b01726e75e6"
        },
        {
          "alg" : "SHA-512",
          "content" : "e87c075c1b8fc75d68f0d17c649de6e37eb05a028bd1ae1d34cdbd913247a59c219b146518c3ad9f4a0b21e55911495de171f40506bcc32c99a2f841b9955ab0"
        },
        {
          "alg" : "SHA-384",
          "content" : "8b92519adee4511156e43a70e6e6d47d90069e5878aadce067dcc6e3e78604afe00c8a9fce826e242e4520f9b770244b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96c5144d3431af7d5b42d1740d090b789d570dcf597c83fee16e37e6fabd4c386a4ae967baf95ed691f8d2bdc259712e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b7b8b73298e8e6facd6ed2be80a4b44602b5dee72a95d1c263808fc13b78c0cb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03762b3e9443c988536b6a0636e86850b6c29ad1a4f04e98cbfe00a369b958591312090bc48eda7fe8df2781e2e92d952d3b30b33e69faa0886cb3b010d29775"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-api@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-services-wsn-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-core@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.services.wsn",
      "name" : "cxf-services-wsn-core",
      "version" : "3.6.8",
      "description" : "Apache CXF WSN Core Service",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "69130c7cda949bce13b679037101a25b"
        },
        {
          "alg" : "SHA-1",
          "content" : "d54650fc98f9de01637ae87f29c80feaa907efb1"
        },
        {
          "alg" : "SHA-256",
          "content" : "02df822b36555c4bdd95fa5a9a0cd1fd1275478e5d1680da359e3c014a68ab35"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb15196dcad34592306fa9848360ef0b7ca0a97ef2e29627fae3ff56442bba0bdf5dc172bece97abc695dac4b0444b5df3b4bcbdd1165e916babde16db259dd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "7db2cffacc6698ece7802f88b15125e4eb13900a8240dc9f19222a782516bf0dadf497464e52d99b208f158ea40a6746"
        },
        {
          "alg" : "SHA3-384",
          "content" : "35cbb150a0e40980fc138b61f2089a039e6df1ee20da53cbe295abcf8027120064c89047dcb4242dbdf2996d55096814"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa4f388b0136bcd938c838d6e1d6425e975e56142f3f472ddedea821811d7752"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c225407086230ec0b04d9e3bbeabcaf6f2175c2a82a9c3dbe4aaa9561b8024c9c85f1321921b61d9cb83c53a8e4cc24c7b52451d56ff1a535055db642cc116dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-core@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-services-wsn-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.activemq/activemq-broker@5.17.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.activemq",
      "name" : "activemq-broker",
      "version" : "5.17.7",
      "description" : "The ActiveMQ Message Broker implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f52664520cdaa4813a37d2ce0e2b0698"
        },
        {
          "alg" : "SHA-1",
          "content" : "49fa8699dc2aff9d81b943efcde1291358ba809f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8dafad655bdc31beb98bbdd5bf9f85b3ef488f01bc78fd8d3cecb9ed16f6237"
        },
        {
          "alg" : "SHA-512",
          "content" : "70b0a05dd655206ec97f48b1541cefa212c4635fd8f4faa2069b9bffd5d51a7d56c85c6981c23768c7c251fce53380d3e837470ca79bebb5d6705ef70fc27c41"
        },
        {
          "alg" : "SHA-384",
          "content" : "d40da18496139e84468599b595c903717bdfaf799c92ac288ae54ce08927bed03c705961a90ddbf88edf7b81f8293ef5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e9847d0cc14d72f695214cf6c3d3a73d3bf13798faa332ff77eee073d097c9fccd56419bd6c1a9dd30aa9250ed0eca6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e696c0cd841bfd2067d40eae0a96c9bdfae1dc5de2445056dbf613008f2950a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b89f8a133bfaa90784a407697610297fd5affd8e45857adb1189493acd7a3cbbe328921070221aff6b16bf109d6f0eb4771c21698210ffcb8628f6886b5d748e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.activemq/activemq-broker@5.17.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://activemq.apache.org/activemq-broker"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AMQ"
        },
        {
          "type" : "mailing-list",
          "url" : "users-subscribe@activemq.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/activemq/activemq-broker"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.activemq/activemq-client@5.17.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.activemq",
      "name" : "activemq-client",
      "version" : "5.17.7",
      "description" : "The ActiveMQ Client implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2b87be33d11465ac9d21969b215bd7f2"
        },
        {
          "alg" : "SHA-1",
          "content" : "6fa652a3ed6ebd87e7b1cdd2f83b691619d69244"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f3268237959f10838169a40ac2d7f6ec3b055a53c58d979e712a500327cf73e"
        },
        {
          "alg" : "SHA-512",
          "content" : "5dac858628ec3cabc4557d217db5d3d4f901b8dc7d4f046fdef9b1d4e41c923752303da8f985a1a2c33e652bc15f12e72f0e2b71391d31d3d3a09884eae0307c"
        },
        {
          "alg" : "SHA-384",
          "content" : "cde85b8902c6cdd8e0d33d6eaad68f3db2605dbb7227649b77b1afd68c30d86f6c7482f01ef3d3b111915a9e14404de9"
        },
        {
          "alg" : "SHA3-384",
          "content" : "816ec6d5268dfb6dbdb248db0222985bff32e1f0ee843a061cc85f5bafc60f21299c20501b8dec5326011620dfc56817"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d7c2725995535af957ee6ccbea4d8506e99640db276688f80fc4503fe3b8ba60"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e60be89819eca3177a74a1b64c2c170485b343251a1875f7dc53bc79843f1cd7a0e3ccb71954a70d9501b628c78c6078704ec78460dced8a6f7bb17328f4fca5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.activemq/activemq-client@5.17.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://activemq.apache.org/activemq-client"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AMQ"
        },
        {
          "type" : "mailing-list",
          "url" : "users-subscribe@activemq.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/activemq/activemq-client"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar",
      "publisher" : "FuseSource, Corp.",
      "group" : "org.fusesource.hawtbuf",
      "name" : "hawtbuf",
      "version" : "1.11",
      "description" : "HawtBuf: a rich byte buffer library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a80061bd945ca0f13072861777ff27b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "8f0e50ad8bea37b84b698ec40cce09e47714a63e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6b45db967f3b2b3e28fd2f0724b1730a89d3f5aa9eef3664de29caba219593e"
        },
        {
          "alg" : "SHA-512",
          "content" : "396966adf3e8cba09ff75297915d41ba6a7c60c327575dfff153f6617a1bcafff4a1ac0baa19d93b4ddcab511c5e23a6fd95aadf45e55e2057700da3b8991af0"
        },
        {
          "alg" : "SHA-384",
          "content" : "00cdf737bd5ec91e094928a5e7a17eb2277c61c58374c5ff707debfc2d88bf83cc81d36d15cee6150e184cec19976e3f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a2b982a00ff5f6f4c40651e47622f165dc19afbad8381a759a2ec809a137b65f944622ccde3dd7cd30457833bddc57d6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a1efa4b49a277072841059cba60cb6605ad0af69c2e9ed834d0b8da4f5e15a05"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0a5741c6e297b03fb24755d0377c8d25122cdab6d3a5bdfe2dd8acc481d2d2ec13331ca674de4f0ed562f2385ae892555d308dfb2bbf653067553f5fc4dbbda"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hawtbuf.fusesource.org/hawtbuf"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.jboss.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://fusesource.com/issues/browse/HAWTBUF"
        },
        {
          "type" : "mailing-list",
          "url" : "hawtbuf-dev-subscribe@fusesource.org"
        },
        {
          "type" : "vcs",
          "url" : "http://fusesource.com/forge/gitweb?p=hawtbuf.git/hawtbuf"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar",
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.geronimo.specs",
      "name" : "geronimo-j2ee-management_1.1_spec",
      "version" : "1.0.1",
      "description" : "Provides open-source implementations of Sun specifications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7e1708a3b808e9749b5789668fd9ca8b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5372615b0c04c1913c95c34a0414cef720ca2855"
        },
        {
          "alg" : "SHA-256",
          "content" : "7ad780c72a92039bc07cbc09b6ee8d06571a1fbd92d4361a19a433d783b6e221"
        },
        {
          "alg" : "SHA-512",
          "content" : "32e38035e7a9bc63f31caa612421bdc33ddb9503e37c97b587490926d35831a8e3c2fef324acadc9a301aa977a761b36c94188a64e53e0aec8641b04a21b3597"
        },
        {
          "alg" : "SHA-384",
          "content" : "14477e45ed53f75c86013d6e72ee9614593a85af8a3da02cab19f6955f86de5cea99b201022c89fbd0ca4a7116ae279a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9945c84d6df1bdb1bb0f6adcfba44afaacbf5c499349228294e61f463f6df73b8a55ba99712758f68e43aad8791ff9b1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c76fb813cc1e3f49aa97d2c555f1e69943e397b64af2eea6e555047d89d6e55"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3cc42f6c7789b92a294864707d40c0456551e3b6b82221635d1bb96c93c4749f4dfe338013b1d3bf79cddacf47062d2a08374785d63eaa5c4c345b3120384c9d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://geronimo.apache.org/specs/geronimo-j2ee-management_1.1_spec"
        },
        {
          "type" : "distribution-intake",
          "url" : "scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/GERONIMO"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/geronimo-user"
        },
        {
          "type" : "vcs",
          "url" : "scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-j2ee-management_1.1_spec-1.0.1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.7?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.activemq",
      "name" : "activemq-openwire-legacy",
      "version" : "5.17.7",
      "description" : "The ActiveMQ Openwire Legacy Support Module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "47ddbde94e902143befd414efd0ef98b"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4915b7339ee0cf131d7da8e9ce17d8b47b7ebc2"
        },
        {
          "alg" : "SHA-256",
          "content" : "127ae9b852ad41bfb3ec0389b1cda82cd39b5455243a192adef5ed0248a26f8e"
        },
        {
          "alg" : "SHA-512",
          "content" : "f412bf9b3973347415d2bbd668ddcf515df4cefabfd2447b0c1ab84e566d214e733b3d1f8c7996136feec6c3b35ae182860c003d127e8121ca3790d3677e16b6"
        },
        {
          "alg" : "SHA-384",
          "content" : "54ff2b492f9b82bd44c36294f51cb2e719f288c534e6f4c101a822b61007748992afd551e0a30c6deea81384ded40cb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b6d82b3d38a532fdd268539c8149587eec69f0ca8b0aeabcba5f16b29f310cfcf635f6cec78b902f12939276e819efe2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e1d656ada533fae95c8a00f765fc87a4b90aaacf9d376ef4b0b89cbc446e2d94"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3497811e954c966a43803731a3684ba389cba9d859029cb9b0491fc0ab167ff0405a8d053729c985a9c02c9d47b1d0d0da436fcd6ff754d20adcf8077f84065"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://activemq.apache.org/activemq-openwire-legacy"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AMQ"
        },
        {
          "type" : "mailing-list",
          "url" : "users-subscribe@activemq.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/activemq/activemq-openwire-legacy"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.19.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "856506e1d49091e89599a3ef34990597"
        },
        {
          "alg" : "SHA-1",
          "content" : "46509399d28f57ca32c6bb4b0d4e10e8f062051e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0a1bd4e9b0d670e632d40ee8c625ad376233502f03c2f5889baea95d025b47a7"
        },
        {
          "alg" : "SHA-512",
          "content" : "0533fea9a35a2e7b9267a62a39252d3ac5cf8ab0ff30057242831a1e17c23225b935f7c2ed64de7585ea83e56c32e26bb6078d9834654e047f1ca7b0ee00dd72"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb935b486674bb2cd87c46fc869c56b45f2d209cf9edb1c099e273ccb13b5a5c7b1196fcb8c58405f63c7b7ea774dfa3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b65d1ec1736fff677c6a9553a1e6da3f3900311cacaddf8d5dd4040ff5a7dfcbae76fc825e52ba1454f8bdcaae190b4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d6e6fe3e09b90acc0c0166198f2bb37a5f7c2e208394946a6eb1d5b079cafc93"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ab3a3d23667f546d7e6bf513a7356682e94c5b46ba709dabb3584f8626cd23fad701cbae7ae97610e9d00f6636e4dfd00e3fffbf5acda9bd0d32e3e040d4dd30"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.19.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "99b71c4cebb9dae38ae925ac7ab0574f"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c5381f11988ae3d424b197a26087d86067b6d7d"
        },
        {
          "alg" : "SHA-256",
          "content" : "e516743a316dcf83c572ffc9cb6e8c5e8c134880c8c5155b02f7b34e9c5dc3cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "809d23970fe4af6157cfdfd7a3f9b9ca3f80e790faadb3313db06155ca4fb61e34763a96194ce90d5aa25264dda1126428ac07837c99575eedf4273c27e449f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "9849343c36dabac9826a517a8cb2e65fb79f729fb120c2009028829f61590f5e72673571e17b97dbd17c8f5109a90416"
        },
        {
          "alg" : "SHA3-384",
          "content" : "56b3f3bb53cb00f3b91fecf5c8bf6d4c8080044eb3c9f76adddcda52eda2eef8e9517d63ae415b588e5fee2c155139fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7239184a057e72b224589108d37ca982dc1288649c5fdaa965a02e7b7da8fb82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "71ce9f8551dd7a0e7351a9f734997b9b8762681cdcc6bc82d33868b62c0c178260d6f6f3dde7755cafb8d937346853c320f476bff5c1749d4b8e5acdeb0ffa4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2?type=jar",
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.19.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3843578b0753a9a685eea819dea3ab7"
        },
        {
          "alg" : "SHA-1",
          "content" : "50f3b4bd59b9ff51a0ed493e7b5abaf5c39709bf"
        },
        {
          "alg" : "SHA-256",
          "content" : "aa77eaf29293a868c47372194f7c5287d77d9370b04ea25d3fffc1e4904b5880"
        },
        {
          "alg" : "SHA-512",
          "content" : "d6d64ec09819bb901d59f34bf9c422e632fc8d094ff97fc53d695acbb0b81768f13e444061176e9e79ac1934e443ce9d1d5dce5104a662b64effa95ae5743032"
        },
        {
          "alg" : "SHA-384",
          "content" : "4e3f8ee6a6fe76f47a611e8ba9fb213e9c55033af6832a6739eab1657f16c5c82fc75277cb710da84bfce87698c53e12"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f8be8a5ba3f5528112fc6c30e4459f263adb206c38467d709d6de8285d6454a31c7aed71c290faa2eab0ff5e84feb0a1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5a02889d38d860ab42bf927a4f5737df185ea3d9c4998b600210a48926de5188"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6a0fb569a209f1980a49f27acb4bcbe286b7c37e67530914ba8e64fdf38acb8b0513a5bd06e8fa925ea6a48631c036b8d58b371bd16de4662d65d841da9cd6ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://central.sonatype.com/api/v1/publisher"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.services.ws-discovery",
      "name" : "cxf-services-ws-discovery-api",
      "version" : "3.6.8",
      "description" : "Apache CXF WS-Discovery API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a2fa52c501c52fc54b5bc371c27b23a5"
        },
        {
          "alg" : "SHA-1",
          "content" : "2459491c4bee1a1845f3635d0509b1e20700d6dc"
        },
        {
          "alg" : "SHA-256",
          "content" : "c242094a27f30f7318a2919148d4a17ac5c039173da429ace6cad9de766cc4c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "8a8e2037fea8cdef433d4f8290329daa7c6079060b609ca029c61777a33ac92831520aa8dbb7b8db4b76c11365b12136d11b6787ca6e153770eae6dc962df5f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd5fad039979ef4b59117329849a2275fff47e23cc9299b5594478996cd05868b0220c83741247f54fc73ebe154a0569"
        },
        {
          "alg" : "SHA3-384",
          "content" : "497b2327ebf221fc8812c75b8551191445bc199486256d0cf7345ec4e0ecaf45c7273df2bd30f69f421804607e6316b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "517fe2c3bd9f6b92f047d44281cc9b3145861fe64a69dc0240a0b3cdc59a8777"
        },
        {
          "alg" : "SHA3-512",
          "content" : "37b6a19dd9a9aeeb26bebecf6cbd2826eaca0fd4496a52a06135cf5c0a376fc4ef6d20c261fb518b276e1661e7c612e09545c19a96c8d3683d9366439ef7de55"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-services-ws-discovery-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.6.8?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.cxf.services.ws-discovery",
      "name" : "cxf-services-ws-discovery-service",
      "version" : "3.6.8",
      "description" : "Apache CXF WS-Discovery Service",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f30f589d90f23ada0c7bdf416786393e"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5d20ec91423294e95bcfd3b336a82f8a49313ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "aca5b9fd133408885a6e5e619666f41b9f2b864a1f1d9fdf4057d00f9be8fe5e"
        },
        {
          "alg" : "SHA-512",
          "content" : "3880be6adcc94ff5e5d24bacb6e60a49f74b072075b475290fc06cbb9a62b9852978b44ba66e73ba1a6871c9306230f1705eef9e352704678bf386871e7d034d"
        },
        {
          "alg" : "SHA-384",
          "content" : "629fb8fe18ff77f3ca1887213491f58e7704308ce33d2c3d50a8922f1635a54080d99086f357885ae3204a8a43bea439"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cffe1959d7a8afed0013976c74d6c4d18aaf07732d096af2e1d348c554d3bff75c3b7067ab28d0666e2cc6ff763289ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "884e1dae9f913549814fc3ee13e46de209789803b08b74505d99a21d390d3003"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3b7a42cfc8574fef351631217f7e8c3a15c3f5eaba8f60e4d15e3a6e62e6e478f9e144c6be0d9c6ec5cdf60dc8d5a143e0b05a784eb537a6e2ae1506310f1b9c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.6.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://cxf.apache.org"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/A-D/view/CXF/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CXF"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/cxf-users"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-services-ws-discovery-service"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.5.4",
      "description" : "A StAX implementation for JSON.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6c3eeb572f5830303059fec2812821f"
        },
        {
          "alg" : "SHA-1",
          "content" : "174ca56c411b05aec323d8f53e66709c0d28b337"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda"
        },
        {
          "alg" : "SHA-512",
          "content" : "afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdf8be1abecf10eaae7af476a60914d28c7b0a2bdd3b7321f1810dd95f3b9d4b32dd298f74a7a7c8de3780cc7eef8e28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a3de2fb5cb628021a96faad03cb9e66e74ba37ffc8bf6876df554b74b145086"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de76fa3f7d6465479d2266a2e489e773276cbdbedd2a4903f219a9fc4e6d29f0c03f773b281793e2ed039669befe784727f2ca79f2db5ec7efa9fed614d45e5e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jettison-json/jettison"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jettison-json/jettison"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "publisher" : "OW2",
      "group" : "org.ow2.asm",
      "name" : "asm",
      "version" : "9.8",
      "description" : "ASM, a very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5adf3bfc54fb3d2cd8e3a1f275084bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc19ecb3f7889b7860697215cae99c0f9b6f6b4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "876eab6a83daecad5ca67eb9fcabb063c97b5aeb8cf1fca7a989ecde17522051"
        },
        {
          "alg" : "SHA-512",
          "content" : "cbd250b9c698a48a835e655f5f5262952cc6dd1a434ec0bc3429a9de41f2ce08fcd3c4f569daa7d50321ca6ad1d32e131e4199aa4fe54bce9e9691b37e45060e"
        },
        {
          "alg" : "SHA-384",
          "content" : "b4ad6e6c1afe432ce8a60367c743107cfc9d1d2f1f1c6b7be4b6ba625cca862cc7ffff404566086bce4b6650556df953"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f51a3b7cee5543672cc2a4d71dda7aa992fb900cb68b79908efbd1efcc3e731f4ab8e2c1099e7b905f4aea6350489e08"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3c66be179e6b4881b1901a6a8c6fc980d773d1faa6edb54ed878e5985615a831"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ccbf812616e5997ba7cf59704cf78e360650d773ac53581243da6c47fe884560db5ec48f8f4b71ccd4b8c2b332619c19aea053458d14abe443fcdd4fa313d5dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.ow2.io/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.ow2.org/nexus/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://gitlab.ow2.org/asm/asm/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail.ow2.org/wws/arc/asm/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitlab.ow2.org/asm/asm/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "com.sun.xml.fastinfoset",
      "name" : "FastInfoset",
      "version" : "2.1.1",
      "description" : "Open Source implementation of the Fast Infoset Standard for Binary XML (http://www.itu.int/ITU-T/asn1/).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "60067f13107f9ecf95abcdf73859e47b"
        },
        {
          "alg" : "SHA-1",
          "content" : "650c84348bbcf4461bd24d38e67f7a7ce687de24"
        },
        {
          "alg" : "SHA-256",
          "content" : "75d6635e09101ef1545d9a59bb4d9524ec6bf15246540af5435750f271612765"
        },
        {
          "alg" : "SHA-512",
          "content" : "964ef5eba0f6a7be5e4a9105e6748684618d5a4aad07818f681b7f1e9e74836113177e02194f042f5ccd32b45b1add8e048a4c761bacbab4923de52b9a0fd825"
        },
        {
          "alg" : "SHA-384",
          "content" : "aa369b0cd5d1cdbeb5ba173226f04ca062e623ddadc9798d5d1f3bad3b65ffcb8362281ddff7c856f2a9cd6b9822acc3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "96848b3e4af52124abfd59a7a2c665572db88aa81e9f23f19d03039ff0d2f606df71df5b72567af7ced2f4a9f4394b6d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54e1da17f7d18ea00b2e89c76bc1ecb461638fc663bdb434fd1c38a633472e00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1464f7a1eae780772e5233feb436d87fa8d97e15fd00f00ce6242d737eb03c491e747e7730e7485f96fadfeaeedb0d877e5bc821b976339a28cfc02435641da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.jaxb-impl/FastInfoset"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-fi/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-fi/FastInfoset"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.ws",
      "name" : "jakarta.xml.ws-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Web Services API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ce470c38b9dbdcb8e505d41d767be748"
        },
        {
          "alg" : "SHA-1",
          "content" : "529fe0136be92861e5a255fbc99146f1943c4332"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8e0ba03c47cd5e996fd5d83540caaeab69cd8d531f128318d88e15467d112c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "c160616cb796cb9441eb703e2e5b80976a6669c728711b539100eebee85cae2f74dba55cff044fc7032096f19d0be23a32aefececb0c63d58e1fe5add2f46898"
        },
        {
          "alg" : "SHA-384",
          "content" : "973a1bf8f42756846695feed46a95b51193aa02cc133e3a783ab5f3fa47b65bb7d8a490f8576ef38010dfba755c40e24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "22e6df9c16bc66f0f84df11565e9ae7def462e44b8011d2a20b474740721cbb70c6a36a5259199b36ee274af8f7a905f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab5acd41ae0bf6d4f6315121ebd807eef3f89604e6d5a57f9c2a955d5af32300"
        },
        {
          "alg" : "SHA3-512",
          "content" : "96010696c59baadc383f61839bf1989d3d7ff35e3e60d50a4dd508c39c0f3bd3100d5d0311feaa9d41525fb7378c86ba7b08c9527b4e8e6e8113b6b12b8b999f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jax-ws-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jax-ws-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jax-ws-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "2.3.3",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "61286918ca0192e9f87d1358aef718dd"
        },
        {
          "alg" : "SHA-1",
          "content" : "48e3b9cfc10752fba3521d6511f4165bea951801"
        },
        {
          "alg" : "SHA-256",
          "content" : "c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5"
        },
        {
          "alg" : "SHA-512",
          "content" : "adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442"
        },
        {
          "alg" : "SHA-384",
          "content" : "bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.jws",
      "name" : "jakarta.jws-api",
      "version" : "2.1.0",
      "description" : "Jakarta Web Services Metadata API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9e3bc505722b1e84535d7edb3d582ca1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7d283ef13e49c1422701e30639371edca788c609"
        },
        {
          "alg" : "SHA-256",
          "content" : "d4c321f47a72001977fa11d2df408db23bf5f46e954aeb2c6f1ecda4dfef8fd8"
        },
        {
          "alg" : "SHA-512",
          "content" : "27b4886f73e1da64772488f94be8c222e0bbea3126aa7baaf6a7d23cd4ffd2e91140aa1fa8c552a48c3013945668fbfe9f65fc48e37920a97af5dcec0cb01e02"
        },
        {
          "alg" : "SHA-384",
          "content" : "80c7d4de0f110beada45c37ed5b65d28a5c18b9a86d35b249e377657056878377a078a7791c527f70b72f02e51fedf14"
        },
        {
          "alg" : "SHA3-384",
          "content" : "42ebd5af1e9a9d41a1c830d0f6aa837754f5ce9f847094f6d6ed4f67b0724dec9ad822bb14c1f0ecb59819eaa2d91205"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ae39a77ee08c01f591910acaaffd277ac3a78ac8eb94e70878dc853723cb1c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d4b21cccaa62ecc3885100400160e2908d281dfb1dfcdaf59b16885afe7ff7ec524ff22345d3871d46751583fb5e3c075899ac4a1ae800db3ff34971f4731efe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jws-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/jws-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxws-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jws-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.soap",
      "name" : "jakarta.xml.soap-api",
      "version" : "1.4.2",
      "description" : "Provides the API for creating and building SOAP messages.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d19eb8a4a5401296985db733868425e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "4f71fa8ca30be4d04ba658339df3c927fa21209a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b2e9db574869c09b18e7fe87482be2e4e14b3f3cc8207646595806eede77706"
        },
        {
          "alg" : "SHA-512",
          "content" : "640b1ad955bf9283d5c557de7a566bc4d100c8f6580e97ed4bcf24abe104225db6246fff18fa13932b3c45c877c6d560f7778eb115e6bd339768766f089901ce"
        },
        {
          "alg" : "SHA-384",
          "content" : "568580a4936eca8c4afa1e823c72579b010f77d7d7af613b92483dbb00f0d380f508057281e3020c68455f82d5c8997e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6c26b47985d5e8623c0b9cd38bbd1828c84004fe82237528e779069ecddb2fed23a8b93a009c641f6fb640e1d45a1b51"
        },
        {
          "alg" : "SHA3-256",
          "content" : "81ca7380850de707ccc791655de78e46b73fac45c6277fc283925c99f894de57"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08e78282a1aa093c3673d3417d593b6fd962db3ea10457ee4f19d2f242ea5876b68dbe30b471d4b2e20f3d90c77ef71430975e52ae879f1f91040aa87b5478c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/saaj-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/saaj-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxws-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/saaj-api"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-distribution-manifest@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-corba@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-javascript@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wadlto-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug671@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-javadoc@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.4?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-management@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-server@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-client@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-jdk14@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-cors@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-api@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.6.8?type=jar",
        "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
        "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.velocity/velocity-engine-core@2.4.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar",
        "pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar",
        "pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
        "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/xsom@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish.jaxb/codemodel@2.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind.external/rngom@2.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.sun.xml.bind.external/relaxng-datatype@2.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.dtd-parser/dtd-parser@1.4.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.istack/istack-commons-tools@3.0.12?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
        "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
        "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-misctools@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.13.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.13.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-corba@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-validator@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.6.8?type=jar",
        "pkg:maven/antlr/antlr@2.7.7?type=jar",
        "pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar",
        "pkg:maven/org.ow2.asm/asm@9.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/antlr/antlr@2.7.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jacorb/jacorb-omgapi@3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-javascript@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-wadlto-jaxrs@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.8?type=jar",
        "pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-tools-common@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-databinding-jaxb@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-tools-wsdlto-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.6.8?type=jar",
        "pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-dv@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-ts@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-bug671@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-boolean@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjcplugins/cxf-xjc-javadoc@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.glassfish.jaxb/jaxb-xjc@2.3.5?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-management@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-http@10.0.25?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@10.0.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@10.0.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@10.0.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@10.0.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.toolchain/jetty-servlet-api@4.0.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@10.0.25?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@10.0.25?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-hc@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpasyncclient@4.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore-nio@4.4.16?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.14?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.16?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-server@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-http-netty-client@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http2@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec-http2@4.1.123.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.123.Final?type=jar",
        "pkg:maven/io.netty/netty-codec-http@4.1.123.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.mina/mina-core@2.1.10?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.mina/mina-core@2.1.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-jdk14@1.7.36?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
        "pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-cors@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose-jaxrs@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-rs-security-xml@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
        "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
        "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
        "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
        "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.dropwizard.metrics/metrics-core@4.2.33?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar",
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.78.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/joda-time/joda-time@2.10.10?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@30.1-jre?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar",
        "pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar",
        "pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jasypt/jasypt@1.9.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.cache/cache-api@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-management@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.6.8?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.neethi/neethi@3.2.1?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar",
        "pkg:maven/org.ehcache/ehcache@3.10.8?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar",
        "pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar",
        "pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jvnet.staxex/stax-ex@1.8.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar",
        "pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar",
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mozilla/rhino@1.7.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.services.sts/cxf-services-sts-core@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-rs-security-jose@3.6.8?type=jar",
        "pkg:maven/org.springframework/spring-context@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-context@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-aop@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-expression@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-aop@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-beans@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-core@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-jcl@5.3.39?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.springframework/spring-expression@5.3.39?type=jar",
      "dependsOn" : [
        "pkg:maven/org.springframework/spring-core@5.3.39?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-api@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-core@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar",
        "pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar",
        "pkg:maven/org.apache.activemq/activemq-broker@5.17.7?type=jar",
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.wsn/cxf-services-wsn-api@3.6.8?type=jar",
        "pkg:maven/com.sun.xml.messaging.saaj/saaj-impl@1.5.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.activemq/activemq-broker@5.17.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.activemq/activemq-client@5.17.7?type=jar",
        "pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.7?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.activemq/activemq-client@5.17.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar",
        "pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar",
        "pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.fusesource.hawtbuf/hawtbuf@1.11?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.geronimo.specs/geronimo-j2ee-management_1.1_spec@1.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.activemq/activemq-openwire-legacy@5.17.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.activemq/activemq-client@5.17.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.19.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.19.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.19.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.6.8?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.6.8?type=jar",
        "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-api@3.6.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.fastinfoset/FastInfoset@2.1.1?type=jar",
      "dependsOn" : [ ]
    }
  ]
}