<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a2aeeacb-3c95-3bed-a5f5-9630614638e2" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-05-16T15:31:17Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-integration-tracing-opentracing@4.1.2?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-integration-tracing-opentracing</name>
      <version>4.1.2</version>
      <description>Apache CXF Distributed using OpenTracing</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-integration-tracing-opentracing@4.1.2?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-integration-tracing-opentracing</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.ws</group>
      <name>jakarta.xml.ws-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Web Services API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9a41e8d9a62fb837d2228d47684a57da</hash>
        <hash alg="SHA-1">331ecab874ee75b48db661a331319958cb04edec</hash>
        <hash alg="SHA-256">ae500d776eeb64471cd3e3bdfcd6a9e7de6d8f866be6d7e9b2f9ca606d68c203</hash>
        <hash alg="SHA-512">88337f5b042c92a91913c2e7fa1320bf40641caaaa57cb60343d5df69096df05f03805b409b240436fab161db048f7c46a549c67ec3fcedeef67af60d85e42dd</hash>
        <hash alg="SHA-384">33fdddd7675ae56f0e9dc01f5e6ba2a4059286f4caced49d18c3acad2a95b0efb2e84168176b4768f0cb6810226e02a0</hash>
        <hash alg="SHA3-384">d71ded49b10eab674d1b1b6ddfc4557d95cfad2ffdba4185c3c229ec81826803ab02d42e47c1c547c6477e7999d73428</hash>
        <hash alg="SHA3-256">439ea01b18f242b4062dd72622cb475a81e738caf06766f8aa3cfb5a8e070c2a</hash>
        <hash alg="SHA3-512">2e4789035d8eb71e682cbf5687be4afcd52b44c0c611b2a7722e3670decf0032aa42d10b216c408dd7cbb7e86f8612f96b5a849f0043a23d877f82c38f89d77d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jax-ws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jax-ws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jax-ws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c8f9991081def819435c3ff36e4d93f</hash>
        <hash alg="SHA-1">6cd5a999b834b63238005b7144136379dc36cad2</hash>
        <hash alg="SHA-256">0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406</hash>
        <hash alg="SHA-512">2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0</hash>
        <hash alg="SHA-384">7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0</hash>
        <hash alg="SHA3-384">fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a</hash>
        <hash alg="SHA3-256">a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e</hash>
        <hash alg="SHA3-512">bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.3</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e7b680375ea9f40f3ddbd702efcd25</hash>
        <hash alg="SHA-1">fa165bd70cda600368eee31555222776a46b881f</hash>
        <hash alg="SHA-256">01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627</hash>
        <hash alg="SHA-512">aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad</hash>
        <hash alg="SHA-384">4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e</hash>
        <hash alg="SHA3-384">20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca</hash>
        <hash alg="SHA3-256">8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67</hash>
        <hash alg="SHA3-512">69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.soap</group>
      <name>jakarta.xml.soap-api</name>
      <version>3.0.2</version>
      <description>Provides the API for creating and building SOAP messages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b75eb22ffc46058b28d78874902dd2d3</hash>
        <hash alg="SHA-1">0445830286faf84fe40a3f47ccd7537d69cd58c4</hash>
        <hash alg="SHA-256">62ecd5c3b5c107779e5ffe84922594c381f7a8e397320a05c3ee3957b5b7863f</hash>
        <hash alg="SHA-512">fc9964a7a4334a40d4aff7dac22204d436ea784f548047b43a5607d182efbcf41d111eb8032b59442e93ddc70aad45050269acd691c9292f83baa471161f3d21</hash>
        <hash alg="SHA-384">dcc510788f42ba3a266d8982f7346e70360ac8c9bb0c9219f5f971d94cab44c8db0c8f17315c6d15f2b6314ba99352c3</hash>
        <hash alg="SHA3-384">89428c35360cbfcc9223d1d21d969e53dbf87aa41b7bd900484ba3c8eefb7698a6489bdc24dd0349c64f193fdf6244d7</hash>
        <hash alg="SHA3-256">a656dc445db912bb0cdb2bfa20af9e30f4da632169143c01680907dc63c2c053</hash>
        <hash alg="SHA3-512">fee4544657c9804945a34936d208553899c49290798ce0d05d0c1912829139427b2769e96a5df759cdacfd6c0a1a8145be7ff2ed5440e441b4428004e0455643</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/saaj-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/saaj-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/saaj-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>4.1.2</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a86b706ab4290e5fa7a4f7d7e4e47d0c</hash>
        <hash alg="SHA-1">d43f1d246d62af8bbd7390909862ace1e4214436</hash>
        <hash alg="SHA-256">cc4eb4bcbabd4aac06c28015b05eb7a94e70dd4c60a16358854211440030227b</hash>
        <hash alg="SHA-512">d0bf3dd5350e8608dde0bb547cc9eacfb7fb7c36b096a056656b81d8ad71d698e4f8d25085ebd4bfd54fff155dce142c29d92a6ab4be82539f3822055e7b7d95</hash>
        <hash alg="SHA-384">99df7b5b740e2071f7e6f647a586530a7455bdf2c667669cb9c7e492e2a44af927c2b21a59732066fe1182a2dded4b09</hash>
        <hash alg="SHA3-384">5d1a821893412e4641c3b527fb51fc03500e74cc1259deb92b9a0776e5c8e0b093e824afe909a0856a0dbfcfb1897d1d</hash>
        <hash alg="SHA3-256">4a9baa163714e4a8b2f65ffd21fb0b8d967ad13d777aaac27dcbfc1ad8f61d45</hash>
        <hash alg="SHA3-512">33425da338cf7149371d917de7151425cbbbd7a7ae3f6e5a5696459abe1fbf250d742cfd3bdc405854b576534ffa587ed67f6a40e6187d4b7a924b8590dc179d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>4.0.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7384f1f95b8a8e15291485ff9dbe4f3</hash>
        <hash alg="SHA-1">ca84c2a7169b5293e232b9d00d1e4e36d4c3914a</hash>
        <hash alg="SHA-256">485d8940e76373a7f300815ea5504bf5b726c234425ad30971019d133124cca4</hash>
        <hash alg="SHA-512">bc38b19aeeed6bf4c10e06aa047e3cffab91f94ff5bd86feb78e748814152c8185633f244aec986d98b6688f38c6cd41abbabb8e8a901fc44ad313fe1b710559</hash>
        <hash alg="SHA-384">2e4babe0411d6e894aa1a00521755d3e250f04ccf42f582a7dfad7c7d5f9257b68b31fb2e5b00fd88ec0885efeb15fc0</hash>
        <hash alg="SHA3-384">56de25b667f12502fe6147c3fffbda8941a31aebf5ead598826ecb6f035f7e8a81d7c34da8e6af2c411071a59aaf7a0f</hash>
        <hash alg="SHA3-256">2f03cc3ef3f63e0effd4f2744dd8080fd7d79a5f9f0debe02c9da808fea466d1</hash>
        <hash alg="SHA3-512">137c19afcbe030cdd69bebf5ecd5a2060bd22892e690452ae6c02f187ba499bbbfde8729256fa3b4ae09b21350acdb9e1bbb53db948de873f7b6887dd58a0222</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-core</name>
      <version>4.0.5</version>
      <description>JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab09aef6bebd4438b0a02707881801e4</hash>
        <hash alg="SHA-1">007b4b11ea5542eea4ad55e1080b23be436795b3</hash>
        <hash alg="SHA-256">ad3fd9bf00de3eda9859f70b6cfb011e2fe9904804e16a2665092888ece0fdca</hash>
        <hash alg="SHA-512">8798f8106541c9fa28507c8f77356830cf16d9f2dd22257c782901b17f7f79e73af1912d07dec2efff236f0e0f36723b3e61faaabd34442618b0d7fa970a7a31</hash>
        <hash alg="SHA-384">cf9131a3a3b2f4ad240fdcbe6f631c8cae84df133801697a0ea5b28f76b871c6a07d0ee78b7b3351b052c9694d7a5c6f</hash>
        <hash alg="SHA3-384">f223265e04dc5807ad4d6a8a2ac852c1cbaf5e44e524bbcc22a3119bb13d1c31d47d7d0f47d9911238f5364b1c17427e</hash>
        <hash alg="SHA3-256">720e1373c6dcb1986665cb3a5b20c2623825a29408bef8c28475b3362926146a</hash>
        <hash alg="SHA3-512">beb8b255947aa465ae33d3adc2009745fe4466f123514e26589245b166bc07408022640ebb2284662be7c259a800c9e5bc78fd599441e088c2156a6531dd0217</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>4.0.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f5aa7dbd5e326562cff6ce720a1485a</hash>
        <hash alg="SHA-1">f36a4ef12120a9bb06d766d6a0e54b144fd7ed98</hash>
        <hash alg="SHA-256">917355bc451481f30d043b24d123110517966af34383901773882810dca480e5</hash>
        <hash alg="SHA-512">d130f42d36661b536d96bcc15f58b34a8b7bb7a55260a4c763b99a34576fde946fc18f2d28fdb7a5eabe8162e90a1e71308f9a34341fb7cd850a41aa3b88bd49</hash>
        <hash alg="SHA-384">079acdca257a1462fe0332baa25e3f61078344dab4373a4509792d975bb236d592337a011f4230fac606658edf190112</hash>
        <hash alg="SHA3-384">ef0875a42b7781410d46493f91e48fc51493d8488ede3e6f519fe8f25664022ef1ca9fff4a76834eadc55cad4add7f1b</hash>
        <hash alg="SHA3-256">a4818a127bef0476caed634d9f11636085049b4072a48ab6f69b7c493c75aef6</hash>
        <hash alg="SHA3-512">021fdea3e5e583e8c06d2d07971231c99d82247e89a2209dac0b92ec88667bffae28c413a663a121fd13bc88d28fa35505c51fa7b782b98ad28828742fb484f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>4.1.2</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">535154ef647af2a52478c4debec93659</hash>
        <hash alg="SHA-1">18ec117c85f3ba0ac65409136afa8e42bc74e739</hash>
        <hash alg="SHA-256">7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee</hash>
        <hash alg="SHA-512">c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb</hash>
        <hash alg="SHA-384">9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8</hash>
        <hash alg="SHA3-384">81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc</hash>
        <hash alg="SHA3-256">218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741</hash>
        <hash alg="SHA3-512">74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>7.1.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8b70141712cd2ac67800ba036f0aa13</hash>
        <hash alg="SHA-1">95341048cfb852aa05037e6cc83069b8664728c5</hash>
        <hash alg="SHA-256">81266920a1cdc47306a8a2b4726c99ec89b3fbf31c2470e4f5e477d9d857ca9f</hash>
        <hash alg="SHA-512">257260a61892f52a94979c512cc86d3cfaf83c8c1ef231f15033f27c1af4c2b7928b7df9ac0005ef617746193273fe2df68ac0164d5f51e47be580506464b857</hash>
        <hash alg="SHA-384">698b3d685100988b264f0d025b01c64723b1033aa063e70cdcfef5743d1a83d7a2a1b94fbba99dc638f3dca2a498a980</hash>
        <hash alg="SHA3-384">a835755da983be214c4d2a43633b8ea51103b274a43b45184610615f0f747904a1967f3c99670471b24024ba61cfd1b3</hash>
        <hash alg="SHA3-256">1ab326e9b6f5c668645360b9c372e3abbf29574087b863c90f247d017b5d91c8</hash>
        <hash alg="SHA3-512">cc58b8aa1cf72672c0adba7ecc58463ae7718a033b8f9d95c3038a96bc61f6241d938e0b2950a850e9afbd035e5580687ea20d391fb58ce1596694bc118a0e7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.angus</group>
      <name>angus-activation</name>
      <version>2.0.2</version>
      <description>Angus Activation Registries Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42bba74155dc773eca277ee7a16f74be</hash>
        <hash alg="SHA-1">41f1e0ddd157c856926ed149ab837d110955a9fc</hash>
        <hash alg="SHA-256">6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e</hash>
        <hash alg="SHA-512">1482c759843c23e0343ca554194862d53ac18a04ab4691b3bf05145abb77283617022a895c5ba2e33f62b77c2cfb906b90d0cb690623621b11f35194b54b1180</hash>
        <hash alg="SHA-384">0263b0f42e56f9cbf4a2446c26a29d6397477561c2149f7b7d0e62fb28ab4315d50faf4e96aff088d3ac204b16f90892</hash>
        <hash alg="SHA3-384">e77e5bf8be9f98ed06a652e2317253bb29e8f79b26910075332823987b2e1bd3dfbb2d7aeb5a57a454c8632241abcc0a</hash>
        <hash alg="SHA3-256">41d7d300d1399e4706a0ead464e13702d85023598a0a81899e40ee8eed847826</hash>
        <hash alg="SHA3-512">dbdcb824069f0dcf9f9d362b8db7c2efa77f28d77e07c204a28e56b79ebfc478d9c5f9e5f01c7269d3afc0db0e6126d74237cc5a51b5e9ec6b6664580a06de8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/angus-activation/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ea5810b1789dba9a7499883c7060b454</hash>
        <hash alg="SHA-1">0e36be9573ae13894852797cec0a4b795579f17b</hash>
        <hash alg="SHA-256">43f052c32c5770877e02bf24bb418a84b6b1e1b00f95829f28a4d113e77b26bc</hash>
        <hash alg="SHA-512">47981c6952e81cef25f5038e7a8c2ac6b793178fb72c85f8602496d6c6b7b6b2b02cf3e66e84a44792f5d0447d0352437c9696db94c2567ba760fd3cd7d982f1</hash>
        <hash alg="SHA-384">e1c437644f9ae828338c95ff8145b2ae264e4b2e050a3f8b76ad4a3863f007234812b2a341a8f16af9a8ab7fe5b27ece</hash>
        <hash alg="SHA3-384">097168abdbea6b169d49743dd70ff412d6777f71165022a0b40a496e1a82423234a42a77da3454b8e7bd0267e3f504a8</hash>
        <hash alg="SHA3-256">5ad87eb37fd3c8b296b45b60b56b6b6dc1d213960dcda7d650285ac4c506a5aa</hash>
        <hash alg="SHA3-512">3325604d2de3eed30a22ed9284301a2872aaa2b086c8dcc93d6c84019cecd8281efc2aa23d27fefb9360db383067ccc0e8a179f9fcc249f47e303f6d3c703cd6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>3.1.0</version>
      <description>Jakarta RESTful Web Services</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6ce4c6749e048456b2c452c1091689ca</hash>
        <hash alg="SHA-1">15ce10d249a38865b58fc39521f10f29ab0e3363</hash>
        <hash alg="SHA-256">6b3b3628b8b4aedda0d24c3354335e985497d8ef3c510b8f3028e920d5b8663d</hash>
        <hash alg="SHA-512">55c245378d7529503c934d2132cfc3bcc638f6297eae6687ae419a5b57aa4646f771cf054295fb6cda1f6d89134942c2a2c39f47380be839e26b44884e4bb75c</hash>
        <hash alg="SHA-384">aa6baaa80978a53fdb4af8e07559a955c9828266ec9b41562b7a2583a1d8d760726d66c13d61f0ec0282220d65d4c1b9</hash>
        <hash alg="SHA3-384">76ae6e43291bef5f40196d2063886d4d73b71401918c002cd2e54d260a9171287d12a61a19ab950a512aebfc53a42b31</hash>
        <hash alg="SHA3-256">2594beb0318ed800cf3e6de629ac40d2900b2fe25cdbc4982de00ade189b6100</hash>
        <hash alg="SHA3-512">40e976ea3f3d1b9a568231cf156f388be585d6afcf30ade6abb9841969cb86a2e537db87678a03e3ea04049114879db8f897fe0a6f9f815df31a1cc3d0c9e089</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee9e0d7360a1fb6133f8e49e3d38b4e3</hash>
        <hash alg="SHA-1">8ee6341fdc2bbed5654c951ddf65bad1f83a31cd</hash>
        <hash alg="SHA-256">e4c580cc06d96720a767ce1341c653bb6718f1e85c270454a2475f63c323253c</hash>
        <hash alg="SHA-512">6a38b1eecef7be5cc4f13025d2a48a1892987c6448c10a10684e37e1ca1279c5cbeb69b35c77bde45a591f61d27a8af04d7cf1ae622d50b605194d660df24c6f</hash>
        <hash alg="SHA-384">44ed4975e73ad3a4ae8ded8142746f55768b9ebaaf4bc58e4e58e5bf23d9c207286c2e849d5e8e3bb52592b34f9841cb</hash>
        <hash alg="SHA3-384">c8a40eeb2ff34a5273a81847e2de045c292d23a911f8d4f47ba2eaaa6a640bb6f5fbc9c72c6003a259bdf61db5ba44f0</hash>
        <hash alg="SHA3-256">b57617454603a62a2b0eef213a30b223e221e3b8e06a2412c86599756ee34e51</hash>
        <hash alg="SHA3-512">50ed8139031e5e93537e3129496950929472a7385a4327d250d89c54eb457ef0353343b0c6e68673f451f3a758bbdb45346c34eb10ad9a3e13efc0b96c0c3f7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c5cda654811f51fa42364536c53d6964</hash>
        <hash alg="SHA-1">8d96a67c3213595164b247567b5c8764d0001620</hash>
        <hash alg="SHA-256">301dbdc532294f583fda2c52a5030f3fece0c8e20577b2ab3c6e52fcf77264cd</hash>
        <hash alg="SHA-512">3625633702e5a95f93894e69503c79816bd6dc54658db71b6932068048f909f88dbbab878d7570bb0e6841d16ec4fa0cdd9beeccb18b1aa0fc062845c6cad78a</hash>
        <hash alg="SHA-384">35654a9269d6a4f563c66b863b868b4498a340ec2339c701b405c2c637b73577a4f88ef610018b6d1e129728f4c07b60</hash>
        <hash alg="SHA3-384">a7774b2ed18bf95d0c80b3f19b693c6873355b651f9cf0ee8a7bdae188f05875e08f77f18194d9a23fb9ea21ff94731e</hash>
        <hash alg="SHA3-256">6fb32b9515b03cddc00d0e0d3c125d0f195361fff6a1962f3c5239bbf35f8a4a</hash>
        <hash alg="SHA3-512">ea218b044c7402db87d2ede62c44709b5107d7a44f94d3c65e89da1b3dc9b074fb2381c09d79dbcd1a46756884ecf15d286f8c297f729e8db1995436f570de93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-management</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime Management</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ceed1b27b028b435af2fade942d6377e</hash>
        <hash alg="SHA-1">b33c275176ceb810acfc5398baa33f7830c7f279</hash>
        <hash alg="SHA-256">94d837c68c8a0c815bbff32129b58c7321f36fce74e9ac7a989745cb535984ca</hash>
        <hash alg="SHA-512">1c0e6eeb967adeea0d95720b53434962c164ffaf4fb8de9e6f8a6403b4c5fc416e891ac7dbd6e0345f2ccacb1524c89fa0e44aecd96ef68fb037ad4e7bf87b5c</hash>
        <hash alg="SHA-384">ae8fd3e154b02870ac639a946fb343a0eaf2d2cfe3e6791050e5a86746f312008efed4d0ea6cfe22609f1de8ead39da0</hash>
        <hash alg="SHA3-384">ff2155a48d9485a269344d3dd88d3f6f058b8e966c9cc762a9968c153d8969d2e23d7b2bffcac0fdbc431e3ca9fcc5b1</hash>
        <hash alg="SHA3-256">6c70b238b057ef9369403e23003bde40964489fc0ff667d9967f699cc8539110</hash>
        <hash alg="SHA3-512">2370571cc1c7d43db057b4392ad3d72d4b827b73ea563c31934fed3fa1832ebf255c0ad166febe40c26ae54565b4320678c79536fdd95b0239a2232dfa18aedf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-management@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-management</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-api</name>
      <version>0.33.0</version>
      <description>OpenTracing Java API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfec41592934f8a1f3e782ff2967c985</hash>
        <hash alg="SHA-1">67336cfb9d93779c02e1fda4c87801d352720eda</hash>
        <hash alg="SHA-256">4534541b8e9f41a17bcdf1d09affe45b98c13574db6e529a93a58264b9472c7c</hash>
        <hash alg="SHA-512">931197ca33e509570e389cd163af96e277bb3635f019e34e2fc97d3fa9c34bb9042f25b2ba8aa59f8516cc044ec3e9584462601b8aa5f954bbc6ad88e5fbe5cd</hash>
        <hash alg="SHA-384">40cecdf9b5b85090c64750949de1c3c0e534904f6a82b4e325cfa8d54ed227c258e26e9b90ded0ecdd8ce06a2f4d76c3</hash>
        <hash alg="SHA3-384">a75e7f9376bb70e144c0a727a29017a73c7a1a8689a31f3e669c13748714f3ccd3f68a298b2140e44751c689d7b7d7c3</hash>
        <hash alg="SHA3-256">3d80a53a07617f4afb67ba116cb75f3156ed72e74f9fa0630bed18b09eb966c0</hash>
        <hash alg="SHA3-512">f57aa55916da311660b6c2c601cb51219595a47d0137aeeb09e80b77d32a67a5e190a30cbfe1a18612ef2a7963f859ffda41d3b71e0a8bbe615db44472731ca6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-util</name>
      <version>0.33.0</version>
      <description>OpenTracing utilities</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4256987096519a45c4b781fca070a15c</hash>
        <hash alg="SHA-1">132630f17e198a1748f23ce33597efdf4a807fb9</hash>
        <hash alg="SHA-256">22c5dfbb9b0e2f08f7371bf3d68372c7604c804d3129499b43f37a8877c4379e</hash>
        <hash alg="SHA-512">fbba29ff3d6018561077e9539ad9b72876424600eca3addb6a26981a4a3e52cb3dfd30f27945aff2b6c222c42454ce3ba67597171fd809a74c65b920f3a47c7a</hash>
        <hash alg="SHA-384">78b82902617ad05d422f2fadf9bc8dc5278fb469c4f15b368dfa5df374e9554e7600666819df7583fa5491527240d913</hash>
        <hash alg="SHA3-384">26b0eb1edfd0feda1cda606af7f8d9d91d3db5eb86737a26ecb6547be6d2cda77efd6078bb14c971cb4545b62c8feced</hash>
        <hash alg="SHA3-256">c804d49f71a8bd98965c571241abc99cb50cbe9a0216b0cc8c75c0b4197420b3</hash>
        <hash alg="SHA3-512">ff6edbcd5fe5a751a9f36402c10e7019eb7a0257cafb295632d33213a439397f79d84ea37155a82d8a7f781d2bcf28dc3e57532fe1aa79a5831688708913a09d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-util</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <publisher>OpenTracing</publisher>
      <group>io.opentracing</group>
      <name>opentracing-noop</name>
      <version>0.33.0</version>
      <description>OpenTracing NoOp</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a65509c4cc3907bc0691c5141d3f1d2e</hash>
        <hash alg="SHA-1">074b9950a587f53fbdb48c3f1f84f1ece8c10592</hash>
        <hash alg="SHA-256">8529f91e10047b2b94cb21b50086a3d3913fa4da43594eddbd9ecf5917efe040</hash>
        <hash alg="SHA-512">c727bcf20504fa72bfc07456bdde3b0b50988632d85c7af78df742efd90a431c125f5d644273203fa211a62fc4a282455cf281c7c82b82df4695afbc5488577f</hash>
        <hash alg="SHA-384">06cc99bd895a70373944254c106ae5d98ddd2ecab4e03e3069260ac464ee3222f784bb169d49c2a54e79b15a7f691e36</hash>
        <hash alg="SHA3-384">9338711d5ba69bca9a33c6b7b82703b3cc83e3639cad28faa1581b2ef87b9d25b137aa3f37636f849c8c12c76a497c02</hash>
        <hash alg="SHA3-256">3197c8468fe94b13c7ef39616dd2c237c8951e95f2690027fe8b04d59a79ef79</hash>
        <hash alg="SHA3-512">8f0756b8ce287fb8ff84b4975a1bec4f6e650181eeafaea9b7df9f0d202ebad94b39e3ee13c445ccb491f33b85c8f62af8c615fb6688e28fee6ad32e3166b509</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://api.bintray.com/maven/opentracing/maven/opentracing-java/;publish=1</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/opentracing/opentracing-java/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/opentracing/opentracing-java/opentracing-noop</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-integration-tracing-opentracing@4.1.2?type=bundle">
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@3.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    <dependency ref="pkg:maven/io.opentracing/opentracing-util@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
      <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.opentracing/opentracing-noop@0.33.0?type=jar">
      <dependency ref="pkg:maven/io.opentracing/opentracing-api@0.33.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
