<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:2ddff334-e522-3801-9c06-197383cc663a" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-07-30T16:27:09Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-integration-tracing-brave@4.1.3?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-integration-tracing-brave</name>
      <version>4.1.3</version>
      <description>Apache CXF Distributed using OpenZipkin Brave</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-integration-tracing-brave@4.1.3?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-integration-tracing-brave</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.ws</group>
      <name>jakarta.xml.ws-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Web Services API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9a41e8d9a62fb837d2228d47684a57da</hash>
        <hash alg="SHA-1">331ecab874ee75b48db661a331319958cb04edec</hash>
        <hash alg="SHA-256">ae500d776eeb64471cd3e3bdfcd6a9e7de6d8f866be6d7e9b2f9ca606d68c203</hash>
        <hash alg="SHA-512">88337f5b042c92a91913c2e7fa1320bf40641caaaa57cb60343d5df69096df05f03805b409b240436fab161db048f7c46a549c67ec3fcedeef67af60d85e42dd</hash>
        <hash alg="SHA-384">33fdddd7675ae56f0e9dc01f5e6ba2a4059286f4caced49d18c3acad2a95b0efb2e84168176b4768f0cb6810226e02a0</hash>
        <hash alg="SHA3-384">d71ded49b10eab674d1b1b6ddfc4557d95cfad2ffdba4185c3c229ec81826803ab02d42e47c1c547c6477e7999d73428</hash>
        <hash alg="SHA3-256">439ea01b18f242b4062dd72622cb475a81e738caf06766f8aa3cfb5a8e070c2a</hash>
        <hash alg="SHA3-512">2e4789035d8eb71e682cbf5687be4afcd52b44c0c611b2a7722e3670decf0032aa42d10b216c408dd7cbb7e86f8612f96b5a849f0043a23d877f82c38f89d77d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jax-ws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jax-ws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jax-ws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c8f9991081def819435c3ff36e4d93f</hash>
        <hash alg="SHA-1">6cd5a999b834b63238005b7144136379dc36cad2</hash>
        <hash alg="SHA-256">0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406</hash>
        <hash alg="SHA-512">2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0</hash>
        <hash alg="SHA-384">7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0</hash>
        <hash alg="SHA3-384">fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a</hash>
        <hash alg="SHA3-256">a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e</hash>
        <hash alg="SHA3-512">bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.3</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e7b680375ea9f40f3ddbd702efcd25</hash>
        <hash alg="SHA-1">fa165bd70cda600368eee31555222776a46b881f</hash>
        <hash alg="SHA-256">01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627</hash>
        <hash alg="SHA-512">aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad</hash>
        <hash alg="SHA-384">4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e</hash>
        <hash alg="SHA3-384">20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca</hash>
        <hash alg="SHA3-256">8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67</hash>
        <hash alg="SHA3-512">69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.soap</group>
      <name>jakarta.xml.soap-api</name>
      <version>3.0.2</version>
      <description>Provides the API for creating and building SOAP messages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b75eb22ffc46058b28d78874902dd2d3</hash>
        <hash alg="SHA-1">0445830286faf84fe40a3f47ccd7537d69cd58c4</hash>
        <hash alg="SHA-256">62ecd5c3b5c107779e5ffe84922594c381f7a8e397320a05c3ee3957b5b7863f</hash>
        <hash alg="SHA-512">fc9964a7a4334a40d4aff7dac22204d436ea784f548047b43a5607d182efbcf41d111eb8032b59442e93ddc70aad45050269acd691c9292f83baa471161f3d21</hash>
        <hash alg="SHA-384">dcc510788f42ba3a266d8982f7346e70360ac8c9bb0c9219f5f971d94cab44c8db0c8f17315c6d15f2b6314ba99352c3</hash>
        <hash alg="SHA3-384">89428c35360cbfcc9223d1d21d969e53dbf87aa41b7bd900484ba3c8eefb7698a6489bdc24dd0349c64f193fdf6244d7</hash>
        <hash alg="SHA3-256">a656dc445db912bb0cdb2bfa20af9e30f4da632169143c01680907dc63c2c053</hash>
        <hash alg="SHA3-512">fee4544657c9804945a34936d208553899c49290798ce0d05d0c1912829139427b2769e96a5df759cdacfd6c0a1a8145be7ff2ed5440e441b4428004e0455643</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/saaj-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/saaj-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/saaj-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>4.1.3</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5538cfb8358d6043d7b8c69badfc7939</hash>
        <hash alg="SHA-1">09a499cf61c9a6e1bc533bdfef26b202e91187ef</hash>
        <hash alg="SHA-256">aa4699bd27b916285a8c07e444ab6cb462e094aa53cf8646acadef79fcdb7165</hash>
        <hash alg="SHA-512">8f095bf611aad2ec84eea59596c239fe8025443eb5366a32b020f13f3197a731a8ad4ac7f93837d6be215c4465420188cfc5ab1614c8c83e7f569e91bbcdbf56</hash>
        <hash alg="SHA-384">6b93b28ddb6a15c8511c3629007c45f2032df7c3b41ccb8224b8487543325ef8a40c1e29dff5000989c48bd68541f1e8</hash>
        <hash alg="SHA3-384">cfbf0036c3d7f134d5c97bb1aa668654de62376a006750be5ec1bea5c7c4940f9194cc1eae6f9d3b37f5a2919dc0b3bc</hash>
        <hash alg="SHA3-256">5e9ccfc5184d458b7adc4b7ae6795f3843a800c6508677740242fab52a5f914f</hash>
        <hash alg="SHA3-512">f41a82a726e295574c25a561ad906ec75973af409ed9066fb63e8d1c10d0414225886cc4417e0a6871fcd9ad15f0c6a7568a9376bcad405fd3fb1f41fc8a82ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>4.0.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7384f1f95b8a8e15291485ff9dbe4f3</hash>
        <hash alg="SHA-1">ca84c2a7169b5293e232b9d00d1e4e36d4c3914a</hash>
        <hash alg="SHA-256">485d8940e76373a7f300815ea5504bf5b726c234425ad30971019d133124cca4</hash>
        <hash alg="SHA-512">bc38b19aeeed6bf4c10e06aa047e3cffab91f94ff5bd86feb78e748814152c8185633f244aec986d98b6688f38c6cd41abbabb8e8a901fc44ad313fe1b710559</hash>
        <hash alg="SHA-384">2e4babe0411d6e894aa1a00521755d3e250f04ccf42f582a7dfad7c7d5f9257b68b31fb2e5b00fd88ec0885efeb15fc0</hash>
        <hash alg="SHA3-384">56de25b667f12502fe6147c3fffbda8941a31aebf5ead598826ecb6f035f7e8a81d7c34da8e6af2c411071a59aaf7a0f</hash>
        <hash alg="SHA3-256">2f03cc3ef3f63e0effd4f2744dd8080fd7d79a5f9f0debe02c9da808fea466d1</hash>
        <hash alg="SHA3-512">137c19afcbe030cdd69bebf5ecd5a2060bd22892e690452ae6c02f187ba499bbbfde8729256fa3b4ae09b21350acdb9e1bbb53db948de873f7b6887dd58a0222</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-core</name>
      <version>4.0.5</version>
      <description>JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab09aef6bebd4438b0a02707881801e4</hash>
        <hash alg="SHA-1">007b4b11ea5542eea4ad55e1080b23be436795b3</hash>
        <hash alg="SHA-256">ad3fd9bf00de3eda9859f70b6cfb011e2fe9904804e16a2665092888ece0fdca</hash>
        <hash alg="SHA-512">8798f8106541c9fa28507c8f77356830cf16d9f2dd22257c782901b17f7f79e73af1912d07dec2efff236f0e0f36723b3e61faaabd34442618b0d7fa970a7a31</hash>
        <hash alg="SHA-384">cf9131a3a3b2f4ad240fdcbe6f631c8cae84df133801697a0ea5b28f76b871c6a07d0ee78b7b3351b052c9694d7a5c6f</hash>
        <hash alg="SHA3-384">f223265e04dc5807ad4d6a8a2ac852c1cbaf5e44e524bbcc22a3119bb13d1c31d47d7d0f47d9911238f5364b1c17427e</hash>
        <hash alg="SHA3-256">720e1373c6dcb1986665cb3a5b20c2623825a29408bef8c28475b3362926146a</hash>
        <hash alg="SHA3-512">beb8b255947aa465ae33d3adc2009745fe4466f123514e26589245b166bc07408022640ebb2284662be7c259a800c9e5bc78fd599441e088c2156a6531dd0217</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>4.0.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f5aa7dbd5e326562cff6ce720a1485a</hash>
        <hash alg="SHA-1">f36a4ef12120a9bb06d766d6a0e54b144fd7ed98</hash>
        <hash alg="SHA-256">917355bc451481f30d043b24d123110517966af34383901773882810dca480e5</hash>
        <hash alg="SHA-512">d130f42d36661b536d96bcc15f58b34a8b7bb7a55260a4c763b99a34576fde946fc18f2d28fdb7a5eabe8162e90a1e71308f9a34341fb7cd850a41aa3b88bd49</hash>
        <hash alg="SHA-384">079acdca257a1462fe0332baa25e3f61078344dab4373a4509792d975bb236d592337a011f4230fac606658edf190112</hash>
        <hash alg="SHA3-384">ef0875a42b7781410d46493f91e48fc51493d8488ede3e6f519fe8f25664022ef1ca9fff4a76834eadc55cad4add7f1b</hash>
        <hash alg="SHA3-256">a4818a127bef0476caed634d9f11636085049b4072a48ab6f69b7c493c75aef6</hash>
        <hash alg="SHA3-512">021fdea3e5e583e8c06d2d07971231c99d82247e89a2209dac0b92ec88667bffae28c413a663a121fd13bc88d28fa35505c51fa7b782b98ad28828742fb484f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>4.1.2</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">535154ef647af2a52478c4debec93659</hash>
        <hash alg="SHA-1">18ec117c85f3ba0ac65409136afa8e42bc74e739</hash>
        <hash alg="SHA-256">7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee</hash>
        <hash alg="SHA-512">c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb</hash>
        <hash alg="SHA-384">9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8</hash>
        <hash alg="SHA3-384">81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc</hash>
        <hash alg="SHA3-256">218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741</hash>
        <hash alg="SHA3-512">74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>7.1.1</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">971ff236679f7b35a7c13c0d02c0170e</hash>
        <hash alg="SHA-1">76baad1b94513ea896e0a17388890a4c81edd0e0</hash>
        <hash alg="SHA-256">02b9d022e9d47704ff8a7a859a0dbfd3b2882a8311eb7ff1e180f760ccda2712</hash>
        <hash alg="SHA-512">28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a</hash>
        <hash alg="SHA-384">ca02f505f335a975e71c4a549bc3707c35b3592d2ac2fc2cf8887dfde44ae76b753ad2174e4971bb33bb1ab6c8c6b3c7</hash>
        <hash alg="SHA3-384">1efac262497c761e493337361dbc388ac01634dbda5322a8ee7742b0b25a26cc039c3e3653bf2302fbc31883c8030703</hash>
        <hash alg="SHA3-256">10a216995fc4e318dcb0be7b9ae00c07536fbc81e6119f0bf1e36716146f674d</hash>
        <hash alg="SHA3-512">924b1cb6ba79666c4fc13f1b057b376de471cfe60e68daca71ed51355abbd0de6799441ddd81df786317dd2c533cc1d3a9671f759e3a480d99c2d772eaa5ddda</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://central.sonatype.com/api/v1/publisher</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.angus</group>
      <name>angus-activation</name>
      <version>2.0.2</version>
      <description>Angus Activation Registries Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42bba74155dc773eca277ee7a16f74be</hash>
        <hash alg="SHA-1">41f1e0ddd157c856926ed149ab837d110955a9fc</hash>
        <hash alg="SHA-256">6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e</hash>
        <hash alg="SHA-512">1482c759843c23e0343ca554194862d53ac18a04ab4691b3bf05145abb77283617022a895c5ba2e33f62b77c2cfb906b90d0cb690623621b11f35194b54b1180</hash>
        <hash alg="SHA-384">0263b0f42e56f9cbf4a2446c26a29d6397477561c2149f7b7d0e62fb28ab4315d50faf4e96aff088d3ac204b16f90892</hash>
        <hash alg="SHA3-384">e77e5bf8be9f98ed06a652e2317253bb29e8f79b26910075332823987b2e1bd3dfbb2d7aeb5a57a454c8632241abcc0a</hash>
        <hash alg="SHA3-256">41d7d300d1399e4706a0ead464e13702d85023598a0a81899e40ee8eed847826</hash>
        <hash alg="SHA3-512">dbdcb824069f0dcf9f9d362b8db7c2efa77f28d77e07c204a28e56b79ebfc478d9c5f9e5f01c7269d3afc0db0e6126d74237cc5a51b5e9ec6b6664580a06de8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/angus-activation/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>4.1.3</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">e0a41fe98c31428df98f13442a315140</hash>
        <hash alg="SHA-1">889baca6714d0e9fa257a4a712bf3861a18f277c</hash>
        <hash alg="SHA-256">32c40f7efd104393f233522343690e6f432dfc59b83d706ad3ee83dfefd10224</hash>
        <hash alg="SHA-512">74e9d1748fb9a8e7345d797564579a2e689bf5eeeec6e96fa26cfae87d5a5ca303166cd81ba23c5cebdca1a2c9a67117ac34a39eb34b03a2dfc0ad30b9ef654f</hash>
        <hash alg="SHA-384">3fbb0e32d9cb0e03d767d2edfcadce9aaed164fe26c8cd24c845d094853d1b528fdf74b8667ad2f0bc8811e413a953cb</hash>
        <hash alg="SHA3-384">2af0b65d5c2ea1360a444358e2fbeb5d2c27f6dff2798e104520802a8afba2b6fa5717d9615aeb74c550ab9dcc41de32</hash>
        <hash alg="SHA3-256">9aac5754bbfdbc75bba30ce95d0a5202b96deb6a0da268b95d221752a1587e6a</hash>
        <hash alg="SHA3-512">ea1326d2114e2b283e0826fe844ec94f95fc360eb34dbd2446810c59179ac1b6a7a925c7981a45cf29cb20ecc593371aea1574d8d00c2e3319993c7f531abb2e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>3.1.0</version>
      <description>Jakarta RESTful Web Services</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6ce4c6749e048456b2c452c1091689ca</hash>
        <hash alg="SHA-1">15ce10d249a38865b58fc39521f10f29ab0e3363</hash>
        <hash alg="SHA-256">6b3b3628b8b4aedda0d24c3354335e985497d8ef3c510b8f3028e920d5b8663d</hash>
        <hash alg="SHA-512">55c245378d7529503c934d2132cfc3bcc638f6297eae6687ae419a5b57aa4646f771cf054295fb6cda1f6d89134942c2a2c39f47380be839e26b44884e4bb75c</hash>
        <hash alg="SHA-384">aa6baaa80978a53fdb4af8e07559a955c9828266ec9b41562b7a2583a1d8d760726d66c13d61f0ec0282220d65d4c1b9</hash>
        <hash alg="SHA3-384">76ae6e43291bef5f40196d2063886d4d73b71401918c002cd2e54d260a9171287d12a61a19ab950a512aebfc53a42b31</hash>
        <hash alg="SHA3-256">2594beb0318ed800cf3e6de629ac40d2900b2fe25cdbc4982de00ade189b6100</hash>
        <hash alg="SHA3-512">40e976ea3f3d1b9a568231cf156f388be585d6afcf30ade6abb9841969cb86a2e537db87678a03e3ea04049114879db8f897fe0a6f9f815df31a1cc3d0c9e089</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>4.1.3</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5a6661f7e727001c58303b72c1d3d213</hash>
        <hash alg="SHA-1">47f921952b12c608a50f04e6c73d3ef0781fc866</hash>
        <hash alg="SHA-256">05cd069ffb19e33580378b53a4f03215d3a7fbd9630ab92d5564ae2220cf756c</hash>
        <hash alg="SHA-512">acc48afc6449fc6460cffe6c2008a31ad426c9b41c2380f9eb08771b763094a698f3e3081a8acc53b6200986ebfa2d6fa9695657877bb24878dfa93b2c3ef231</hash>
        <hash alg="SHA-384">1b350c771c0cf81959dbc6ff5af750e75756dbe88deee46c0f96ec739dd9a5019f119d170052687dc3022541cc7d4e72</hash>
        <hash alg="SHA3-384">65af153a0a9f60f180f522edd30c099f3273abd5d0a9e258990913456e20fc3bda983eb8aae2b34d2fdc388e0ba29fed</hash>
        <hash alg="SHA3-256">1c0bc1f93e1aa2f2b888f030c16baec72f0160162fe4ebf7446331b472177501</hash>
        <hash alg="SHA3-512">f7fc9a5ef46c64df572566bc641b3326acdf7fb23f8162418770721b811729a7259c0eb11c1301177e37590ae6793c0f75975c8df4ace58ba685a4e1d87eda9b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>4.1.3</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">be086b7699952f09379a2c0ec9fdd7c1</hash>
        <hash alg="SHA-1">877eae8797230986b3ea84472ac2690dfc9e85f6</hash>
        <hash alg="SHA-256">818b5f33c82828c12bba0bf63bcb2abcb7c75d67f9528a86c3d0ac7bb72ebfed</hash>
        <hash alg="SHA-512">a1851f92f5e9626c02852bb1b4498687a4018bc65471ac625f5c93b05690def99c3585bd3d9bc054eed4e11e7d73cfc1eb884d0f6a5cdbd2ba5a9a50ce4ec55d</hash>
        <hash alg="SHA-384">d6ba4e2593981ededc1fbd40f06bd4c36f106267d9fb3d753a27e2347c666fb91f7cb3412678cd46f075901b13cc689d</hash>
        <hash alg="SHA3-384">20481797dd8c821597572d4f4922a26fe988ce0bc9b67c8f49434af15eef1e08990d2539f578dae1bf87ed4c485f1893</hash>
        <hash alg="SHA3-256">7e0e7e8a145895ad8e801144060aefdee02d3204a551c744b8a553109cd4a3a6</hash>
        <hash alg="SHA3-512">2c8b4515746469993fc14c2d54fb10d78fdee3948570da9c2a53a3c972cb38c30922155f4b49e18e5e416a1cd0d2463f02850590e3ac1eb55773e6646e947987</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@4.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-management</name>
      <version>4.1.3</version>
      <description>Apache CXF Runtime Management</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a7b5e07aacfd68dc89c702763d772c4c</hash>
        <hash alg="SHA-1">1b456b8af7690b6d0a0690b2fb3aa2911bb733ba</hash>
        <hash alg="SHA-256">15d59beda78be873f6a05bcd8aac94b62b192ca0fbcfbb4652319e93889f3420</hash>
        <hash alg="SHA-512">45622a0a58f4b24351522ca8cc96af020ddc7ea78a2973f46a7d3b238b714e210847181740d33dfd40576aaba4247aa20be77edf95158c786803bdcc647b8e3a</hash>
        <hash alg="SHA-384">69259b07af1e49a9d39226fe2b2a0da927cac2cbf26cf4e11bb1ea36d398f392cf4278856b7d32b08a39dd8ab572f212</hash>
        <hash alg="SHA3-384">7660002c8a4be3b0c61100dad02f2f7439eedb9306791a599d2e37eab5d29192f3b10c9052f17d4896179898d887f7d8</hash>
        <hash alg="SHA3-256">54ee4a3ca736889ba7d920b8919c0baef8293a1d01f0d8257542c4e47bf422da</hash>
        <hash alg="SHA3-512">7e6fb575cd2cd71251cf53751bff3f96eeda9477cae662e5e53690debb300e9e5ebd3f57e95c003076ec408e93dd93de0e2cfdfa87c6be08f6d5f8b4dd015f65</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-management@4.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-management</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.brave/brave@6.3.0?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.brave</group>
      <name>brave</name>
      <version>6.3.0</version>
      <description>Brave: Core Libary</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bb1c80f39e0cd12daf587b722be8ef3</hash>
        <hash alg="SHA-1">68d2087db37a8038943a73fef2871c1bca8f6eee</hash>
        <hash alg="SHA-256">1f71903bbd2b61cfebedb49cdd8092425625a07c9274a71b83e0786926a209b9</hash>
        <hash alg="SHA-512">c633e32ab36ce60072ef79f1fd8f4e3304d32d5c3b8cb5dc0986bc70c413887b0790010e8c258f625e402d638e242c83be7868f6185b6b38d6cc3d42df3aec82</hash>
        <hash alg="SHA-384">9ff7abd85ced6ae847bbc98eb21b9b65b6fe1b1d2ecc8873a3ccf58c55db22754c46154660ec8a200df282d17386595f</hash>
        <hash alg="SHA3-384">07a3a087aade77fb939a06d30ee4be8e8ccf450a8bac7c51da7fbf87ef690f7d4a3f10aaa76a43f07cfc8f1be79a476a</hash>
        <hash alg="SHA3-256">a6eee528f72fc272d7b450632adec2d161790b7f254d072d07220eac6cc92c3e</hash>
        <hash alg="SHA3-512">dba4deb6ca506cb8ef8e06dd0eeb50d1b87ca7cf8abd8c6b265fa4aaadecf60e217039a5e7552348a514d5707c6ad78812b46d4886d282396ddf932699284901</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.brave/brave@6.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/brave/brave</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/brave/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/brave/brave</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@6.3.0?type=jar">
      <publisher>OpenZipkin</publisher>
      <group>io.zipkin.brave</group>
      <name>brave-instrumentation-http</name>
      <version>6.3.0</version>
      <description>Java distributed tracing implementation compatible with Zipkin backend services.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a61fbe09c22a8d532a9a8a54e6c15459</hash>
        <hash alg="SHA-1">02c6ce0a1f15792a68666430f6c29ac2ce8b06bd</hash>
        <hash alg="SHA-256">18e25cedcb4a9c989f5b062c5e120694df94b98c5048d7c0082d48cd8b9ea267</hash>
        <hash alg="SHA-512">bb66755f049b4b29a7e7e197672f9caded869679b019ad08036129db1d6d3f3c0ee0ac353054b683cf2070c828eef33c7bb53ab36b4ce42a52bb51bd7628890b</hash>
        <hash alg="SHA-384">5ea02a35614d0d8c8ea0cd0839054ee0c15e35bbc72db88d3012967bc6bae996c0e4bac15992c78acdea672def384ab6</hash>
        <hash alg="SHA3-384">e4cb5275eefab6cc784e70c3e2b049e06d3877bb406143e246d5d3f2a39919808d4dc876d283b34fc1810a7ede47404d</hash>
        <hash alg="SHA3-256">89eae528fd1feb18b64b1ca520455330efbe080326e2d22f9f518af425edbd96</hash>
        <hash alg="SHA3-512">fe41c3ca81608eeadaf55e2ef33b07f44fd0c071caae21104a30af939ef2c21ef6a4f89e6b6267994acb93d5cea3415c72326a1ca8f3ccc53678824eb2d16547</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.zipkin.brave/brave-instrumentation-http@6.3.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/openzipkin/brave/brave-instrumentation-parent/brave-instrumentation-http</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/openzipkin/brave/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/openzipkin/brave/brave-instrumentation-parent/brave-instrumentation-http</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-integration-tracing-brave@4.1.3?type=bundle">
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/io.zipkin.brave/brave@6.3.0?type=jar"/>
      <dependency ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@6.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.zipkin.brave/brave@6.3.0?type=jar"/>
    <dependency ref="pkg:maven/io.zipkin.brave/brave-instrumentation-http@6.3.0?type=jar">
      <dependency ref="pkg:maven/io.zipkin.brave/brave@6.3.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
