<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:77220a5c-8c33-38f9-add2-9925b9761be5" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2024-03-07T20:00:00Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.11</version>
        <hashes>
          <hash alg="MD5">a70e8b649ab4a2bb7922d360173c8237</hash>
          <hash alg="SHA-1">4c3c0878c15561639076e5be7a48ffcd6111c5ee</hash>
          <hash alg="SHA-256">70997d52dbffd4e797c467b2062c6ba9b8b5a7380ff2884779f2743b6172ebb5</hash>
          <hash alg="SHA-512">bc1ce91190c642f68fd3571939d7668def3b879ec8e5a87a213a9710a106e0290f60f9e0414593d19cca958c4fcb5d4450bd2793bcd609948419c8a2a6a7f5c8</hash>
          <hash alg="SHA-384">3c8421bdafd1754fb424f16dccc83bfe0827648c1cadfffc98bdf1c7da65475dfe48d2f4b16d233bb8819e155ba6a4f3</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-repository@3.5.8?type=pom">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-repository</name>
      <version>3.5.8</version>
      <description>Apache CXF Parent POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-repository@3.5.8?type=pom</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/cxf-repository</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-repository</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.5.8</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">55525ade5f838741e646063c1148da95</hash>
        <hash alg="SHA-1">fb1f1e19c85298d3d773f4b90b2ecd3b49aae50f</hash>
        <hash alg="SHA-256">57f2accf90747c2ed0e5159444845ef21221908e66c78b9f8c568c45eb757253</hash>
        <hash alg="SHA-512">350b212db3340b3436d82e4efed620f07700aae8c44e9e8c99a7786f8143fedfd2b6ad2de84c68d1e2e5293a63f5636e935cf65149252b20b8bfec7f186c4e96</hash>
        <hash alg="SHA-384">31d5dfd34a8d539902b897c9e70e7da6cd51f84822371aaa943fab57a1f84526115cf0de6904948c3ac6f6e497c0b37a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d3790292a30333a14b7fb1143864a9c</hash>
        <hash alg="SHA-1">a169a961a2bb9ac69517ec1005e451becf5cdfab</hash>
        <hash alg="SHA-256">4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4</hash>
        <hash alg="SHA-512">c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff</hash>
        <hash alg="SHA-384">7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67005a4cf5ee9cfd82edec1bdbecb32b</hash>
        <hash alg="SHA-1">ec8930fa62e7b1758b1664d135f50c7abe86a4a3</hash>
        <hash alg="SHA-256">7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f</hash>
        <hash alg="SHA-512">5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9</hash>
        <hash alg="SHA-384">ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse-ee4j.github.io/jaxb-ri/</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url></reference><reference type="mailing-list"><url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.4.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afcba1114fca8199ef26346dd6011e90</hash>
        <hash alg="SHA-1">c47579857bbf12c85499f431d4ecf27d77976b7c</hash>
        <hash alg="SHA-256">d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279</hash>
        <hash alg="SHA-512">7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6</hash>
        <hash alg="SHA-384">6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/XMLSCHEMA</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxb-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaf/issues/</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-coloc</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Colocated Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8a83eb550196ff6134020ac7355d784a</hash>
        <hash alg="SHA-1">f237aa017b2e3cf495fbb1501636571ac17cdce0</hash>
        <hash alg="SHA-256">8ae66ac3827f9e5312d51878cb83e953cd6b5d92015721de643427d73284e696</hash>
        <hash alg="SHA-512">817d5da8cc586880d5ad745265d301174240c3d2bc9c559e95785c5a482dfd601d6f2dcc2ef3f13a51955d42f35fe0b7174fb31567c9a3cd87dd1066d9eda0b1</hash>
        <hash alg="SHA-384">495c768e441426e4732c18d70bea85c90d5acd8a8e5af158bbf2bdd0b87e5126694a32af1c14102763f09d0174438d52</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-coloc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-corba</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime CORBA Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5bc45c2d2ead2116f83e3259cde1b5e6</hash>
        <hash alg="SHA-1">e09fffa4a546f08dac2650ee5cd66533e7f6c2d8</hash>
        <hash alg="SHA-256">726ffb665fa3820884301b8c18b1172dd39937ccff3ce453b013c56bd908eab3</hash>
        <hash alg="SHA-512">17d4bce72fdc9704e8d198b9100764d19fc8e450953b7e45d27b4bf26043e50db148f2024e3e3778171e8d99c2e0ba3a7f1ef9df04294b48e7b8e0d89b9ab96f</hash>
        <hash alg="SHA-384">d6443b2bed2ab7022821a8f092e972ff35b93965b8249780fa761999cbc3aa0898a92dcae2a68fbd0bb58f9026210afb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-corba</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.6</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6f8bccf756f170d4185bb24c8c2d2020</hash>
        <hash alg="SHA-1">aa205cf0a06dbd8e04ece91c0b37c3f5d567546a</hash>
        <hash alg="SHA-256">3c6fac2424db3d4a853b669f4e3d1d9c3c552235e19a319673f887083c2303a1</hash>
        <hash alg="SHA-512">01a5ea6f5b43bf094c52a50e18325a60af7bb02e74d24f9bc2c727d43e514578fd968b30ff22f9d2720caec071458f9ff82d11a21fbb1ebc42d8203e737c4b52</hash>
        <hash alg="SHA-384">80e0a92442db343baea7bab9bb1d0b7037c98d6aa54172820b21ea45e51dfea42b7670aa39e938d0f88ad4466004a19a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-soap</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime SOAP Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2c99e8a3e3b0d7869ef688874c910f36</hash>
        <hash alg="SHA-1">ba708dbec060719b9107093651b713f05a28278a</hash>
        <hash alg="SHA-256">a71a87bbfe2ea35613f37d073e7fa22d3f14666dda79a35a8827856747b7e000</hash>
        <hash alg="SHA-512">a59c23f5395de90101678155fb7879142d272eab172913fabb70d9ae1ce7684b02d2a470873c5d14cda8b5e2295738c7875c30c546ff7fb928cea45513e8f6ef</hash>
        <hash alg="SHA-384">5ed56979f3ecb79dd94c1994b1504f7dba8d07a049da530cac6d4fd0b661a858f6865a405efe27e9b1cb10a4b139a746</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-soap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-bindings-xml</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime XML Binding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">56b15a3805ba7ded731af086d3059600</hash>
        <hash alg="SHA-1">ed41e18670dafaf7b3e0bc875b65dc807aa3a635</hash>
        <hash alg="SHA-256">5c1dbe0e8fbb65597e22603e970348dc54f9b3c37e1c676cf1e7d9c44c91e8f8</hash>
        <hash alg="SHA-512">8c0ee1cba80b4a5c5f9c8987013b080e70dded9f6162e1f2b65bb3e4abc2666d7ef44113c04ccba075c26b198a5df12f14c868f9e2e6a46497bc7539b4905098</hash>
        <hash alg="SHA-384">e362731e45e56f018dc7de2003c53ad373d745a2c73be5d7848fee0971248d2e6da9870bee37da22e3826a0866d606d8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-bindings-xml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-databinding-aegis</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Aegis Databinding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">27ea62c09f430813b4368b7b3f2bb00d</hash>
        <hash alg="SHA-1">075470ae8b7d2d936ce2a2d8ce69969d7445fcbe</hash>
        <hash alg="SHA-256">62f4e8d9fe6dad8a541bfa1feaf0a61eca1114c696532aad117a202a275c547f</hash>
        <hash alg="SHA-512">60d34a44bd8bee394cf6e45960b9823f43996b36b7dbc414bdfd7965dcd0617eb685dc9202fc3bbd4a4dba9a9dafbe38aa212e552281606307801c130634f072</hash>
        <hash alg="SHA-384">64cb38fb0ddc6c320d233f5fbcead2fc53afa2421b8b1feb5345cdb62874434d2f5ddf45b7868f5a0538cac891515af1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-aegis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-databinding-jaxb</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JAXB DataBinding</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e8cf5776bc5324d4314a80e5c4d9d51</hash>
        <hash alg="SHA-1">0f090784c2338af3e4d523010a74a1ebff77af0a</hash>
        <hash alg="SHA-256">017b4b5f423d77a9f11132ec4c41ca45fc802c50533ef505ccc0fe1602a767f9</hash>
        <hash alg="SHA-512">91f9b1c1123776f9334a44eae3e480ec023620de2805c9e3ab8596aed9df08b23bccb1285c8cdd629efcaa40dfbfdd1e70ad6e322627cea7adc4194146984cd3</hash>
        <hash alg="SHA-384">c001500b2c11986abf73c50565adc56f8c33d06d39690d4164c06335b02fc9adb223d8edee4ed58eb65fc0ed1f70d2a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-jaxb</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-features-clustering</name>
      <version>3.5.8</version>
      <description>Failover and loadbalancing support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5841c7d23fb2148cc9da90b7acdb103d</hash>
        <hash alg="SHA-1">eb74868ad0d4d9e3ae694200d454fecc469fdc30</hash>
        <hash alg="SHA-256">65071bdaeb75db96704b1fdf1ed767aa4086cf2f33e2ade84d8c22df4d80b2c9</hash>
        <hash alg="SHA-512">e3a8a2c219ad22a18b99bf8c9abbc19447fb8d24f8e8327bd376749af26c937864eb55526c1fb8d3cb33dd890d228703116ae0c9ea5c4b6fdc001a940b90f81c</hash>
        <hash alg="SHA-384">6dad7a1e719482e4f893a9112b08530f61e88cbd269b50aca44ff13d3b1111f51c11d642ae9e8557d3e1f58b0082b74d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-clustering</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-features-logging@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-features-logging</name>
      <version>3.5.8</version>
      <description>Apache CXF Advanced Logging Feature</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3701c8156891104eac0a18c05c946927</hash>
        <hash alg="SHA-1">f18fd57cfa41fe5949025d998d2b4ae5d6b7e05a</hash>
        <hash alg="SHA-256">9f96bcacf29a8b8c3e5d4a8ef4c6e7308f4ce3450a1bd35b37b592f6cd9dc295</hash>
        <hash alg="SHA-512">d8c3c79a0433c1d69f5165d339f9bb504eb326379417d903cd668b52fadebf2cc3320f63052edfd97cf113ce2e9356bd1b4a55c86d393cb7c1aa5360d6861afe</hash>
        <hash alg="SHA-384">0b8d668a9ea5e3d096e400cd87b62aa7d6bcf9fdfac8e476a664d84fc3807bc525d52de404ad7886ec0da0bc3f91e3bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-features-logging@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/cxf-rt-features-logging</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-logging</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-features-metrics@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-features-metrics</name>
      <version>3.5.8</version>
      <description>Apache CXF Metrics Feature</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">17e56d1ee4e80bd398816106b4dbbe18</hash>
        <hash alg="SHA-1">d9c2061da6d5c81a50c0ddf753a22e3339085e38</hash>
        <hash alg="SHA-256">ea5237a427662b913b5fb7a718f886d05eea11f3d3012299912db1eef4ddec0c</hash>
        <hash alg="SHA-512">dcdfe6de75d9ee876e086c2d31f9b0069fa5f1c063381504ad5d1972ff5fcfeeca531469c852ed59d55e6506e44c39462deb385961b444c62264732baf543369</hash>
        <hash alg="SHA-384">3e0ea3c2d15e63172d2886f014d3383428e6bc17cf47d31567ade790bdd14463d4b82be37d1ed04eec8cac4ca310c626</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-features-metrics@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/cxf-rt-features-metrics</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-metrics</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-features-throttling@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-features-throttling</name>
      <version>3.5.8</version>
      <description>Apache CXF Throttling Feature</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">08de85ded27e908826a634f65c855346</hash>
        <hash alg="SHA-1">38301c5ba2024ada80f3732820053db42e1a37a1</hash>
        <hash alg="SHA-256">4b96d62a86908ada3de67dbc2d2714030fc1334abe3e7b87d8a9f98cf14aa1cd</hash>
        <hash alg="SHA-512">c86ea844a87381f56a23d8d5a400fd87a74f7fe0a57877870ac89005c69aaa0471a61beddd339f7d97bc983ef0b0b019754f1c2740187ddb8af90a208dc5e6e9</hash>
        <hash alg="SHA-384">f2ef6aaf36e1ee11df63be3f9b1ecf7a72fa9de33e279c7f3e500d64c90b9ddc05037d9ef441b31c81c8057cdb68a47d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-features-throttling@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/cxf-rt-features-throttling</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-features-throttling</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3b43cbf4d60c05de9e109da89fc6d87</hash>
        <hash alg="SHA-1">8bd0e0144dd3a8d96bee3246ac4db2aae9788b85</hash>
        <hash alg="SHA-256">f827e1e1d736733c11bd19ba7dba42b318c915dae847f2ed7613648d235f9799</hash>
        <hash alg="SHA-512">3610a3aded67d7684be8daec176777598882013a4e5c13bfe7bc4b570040043fe1e4cb101419fe78aef8d0b88ebd19b4c01b2e38dd8203e5bfc70ae0c09a1d23</hash>
        <hash alg="SHA-384">11f26750e5e78073f5054e75e8c502f157bce22308f62092b1cbc23792118279be560eef332ab56efd93e3a7c5e1a631</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url></reference><reference type="mailing-list"><url>jaxrs-dev@eclipse.org</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jaxrs-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.ca</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/common-annotations-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxws</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JAX-WS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2247ef84ed5daa72041cc27cdb3bedd6</hash>
        <hash alg="SHA-1">b35681936a1a5e625e5d486262c158d0143c1de1</hash>
        <hash alg="SHA-256">71a5d177f02c30160436839ee2f32b1e40ea572fbd6cd1b8fb445f7fec4a8cf2</hash>
        <hash alg="SHA-512">9a0bcad9b59fffce1ba0955974336e312790972ac6fbdecfa489443200ac72439a07d85069486705d5d1e77bd7e0614a15d6cbb665bfbced0ed3c8e6d7d9e911</hash>
        <hash alg="SHA-384">a01a24373434ee8bbdbcdbd2de990b091dbdfe080ed2475179f93a3a796b21269059775929c3b9ab378a3e799f9cbbd3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxws</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>xml-resolver</group>
      <name>xml-resolver</name>
      <version>1.2</version>
      <description>xml-commons provides an Apache-hosted set of DOM, SAX, and 
    JAXP interfaces for use in other xml-based projects. Our hope is that we 
    can standardize on both a common version and packaging scheme for these 
    critical XML standards interfaces to make the lives of both our developers 
    and users easier.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">706c533146c1f4ee46b66659ea14583a</hash>
        <hash alg="SHA-1">3d0f97750b3a03e0971831566067754ba4bfd68c</hash>
        <hash alg="SHA-256">47dcde8986019314ef78ae7280a94973a21d2ed95075a40a000b42da956429e1</hash>
        <hash alg="SHA-512">eca19b8a6b04c279b7982b16f1763ca1d49b0081a8d4ca2b7419f057d22a0ec60795eb4d901c5eb25dd4a733248876aa2f522c17a6144a26c8ede9fb2f84531a</hash>
        <hash alg="SHA-384">3eceda91a1ce0a35c490eb4c0bd94b552f96b8e5064b257435d89d65fcc2b04c706d996415efe3cf8a7413db479c3710</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/xml-resolver/xml-resolver@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://xml.apache.org/commons/components/resolver/</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/xml-commons-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/xml/commons/tags/xml-commons-resolver-1_2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-js</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JavaScript Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5254349666e45c1635eb0a5f2d7638dd</hash>
        <hash alg="SHA-1">6db2b3ee788b3c8f726fd101741b7a127b1f7c19</hash>
        <hash alg="SHA-256">eb79f4299d91c29f6765441a1a80c9d535112828003ca2e648888389e4f957c8</hash>
        <hash alg="SHA-512">33183877b4a76dfd7c9003a9ed5408e82996a4f1c054de6d94dbad18e87a4f53e0cd78ba0471e6ae4aff9ab69059575dd15e9fe83a6ab9c9bba11d8e39f9e6a6</hash>
        <hash alg="SHA-384">372661eeb202688cd4a85b62adbf59b3283432b1b5191a08285bd0671d0963d6f6991e12cfd930e7f098d8cacc0f5808</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-js</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar">
      <publisher>The Mozilla Foundation</publisher>
      <group>org.mozilla</group>
      <name>rhino</name>
      <version>1.7.14</version>
      <description>Rhino is an open-source implementation of JavaScript written entirely in Java.
    It is typically embedded into Java applications to provide scripting to end users.
    Full jar including tools, excluding the JSR-223 Script Engine wrapper.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">447e2bfd28fc15ecc185944db37dc9d8</hash>
        <hash alg="SHA-1">24d091b80d513846293c00350f46d85f71797aff</hash>
        <hash alg="SHA-256">c9290b0d801bf0dbbbc44338e0f769b7650a0c5d04e6bb1aeb85775c0211b003</hash>
        <hash alg="SHA-512">eed999e2b4e8dead5715818a11c8e9e978e1b073412688c8a7b0715b66e4a2c1ddd892d31ee253ca22b0b372e56dc9035c4a41ac7aa2ee4771cc10dfcf9bc356</hash>
        <hash alg="SHA-384">b136589e2815971618e8ecb605ec2b23c585f8762e732db0ff186074ebf86312ddd0416ae9c431f83992fd394cb2e17e</hash>
      </hashes>
      <licenses>
        <license>
          <name>Mozilla Public License, Version 2.0</name>
          <url>http://www.mozilla.org/MPL/2.0/index.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.mozilla/rhino@1.7.14?type=jar</purl>
      <externalReferences><reference type="website"><url>https://mozilla.github.io/rhino/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-simple</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Simple Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">53eb7b2d7bd71f98ee35f7477fdb5878</hash>
        <hash alg="SHA-1">118fe9be0d5562999f995f1e9fa526ac6e7fbaea</hash>
        <hash alg="SHA-256">046e5375e3739425eff086334112ec45bde40e940adf361d178ae850313a0da7</hash>
        <hash alg="SHA-512">2d72a8680c6f6ecd7df322cd7f6f5fe35fa49f999b687f7ca141e1a9e38429a09ec597f817e025b9f13cdef3d2556285a9e1141a60d9cff00f41924e0d8fe596</hash>
        <hash alg="SHA-384">7bb346903727a1ba0804f02a0e6b4cf33efd80d4f4c2dcf3a34759bae2cbae42867efe62b6f7b1cbcdb602069c334a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-simple</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-javascript</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JavaScript Client Generator</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e1bf4912624e3680a16aac1ce80926cc</hash>
        <hash alg="SHA-1">6ff405291723a7df5ddc17a4b4fd6acc8e1eb52f</hash>
        <hash alg="SHA-256">7679a830a950d4a12a209d3f4de222536842de9aeda68a932f2120a8bff7bf89</hash>
        <hash alg="SHA-512">6d1b5dcc01ac7eb15c71c61fbc1af282ddbcd97c87679275918a308ea7f0cae5e825d923c301d142573a78c38feee6c034d9d5c925d6671e3dd98666ef2a3a6d</hash>
        <hash alg="SHA-384">5cdbc8982ff6db5bdd4103d24525b42570ba991b71c1b042f9ba8f6f2c5711744966be439463b39b6f9c516c58fbe817</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-runtime-javascript/cxf-rt-javascript</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-management</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Management</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8496b30797dabff4c7eb3b792a7c10f3</hash>
        <hash alg="SHA-1">1c928cfb6ea64584568bdd32563e028ae2e53cef</hash>
        <hash alg="SHA-256">11035e1a39245ae0b18830d3099c683295a185ce9661c287440e73428f3f35d3</hash>
        <hash alg="SHA-512">48259115031967c162e69040a73a069c739171688ee84197ef9071bfcaa8a502ad4bc375572573f8f05133b3985e95565e611afbad9e2c1bf3c842be0e448c8b</hash>
        <hash alg="SHA-384">c3e8cc7fc7696e299abf56d33b9496dbc4ebd2416f705f07e87e917b3991716fea485f089968188f84c8da6586130a5d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-management</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-client</name>
      <version>3.5.8</version>
      <description>Apache CXF JAX-RS Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d6e520999e2c6584078e639c12f8b7dd</hash>
        <hash alg="SHA-1">c59ca9312f33cb447e0e12a88c4da88dcd220b30</hash>
        <hash alg="SHA-256">f0294214a2d0654981883d1b7fc6b20cbeb0788a58bccb7a20317a7197126099</hash>
        <hash alg="SHA-512">02e0811c7f697bf0e6d5b08c39be474c23b857761fbdcfa7c76ff6af755390177e003f64fb2f79db7c88074d1ebdb82ab0cb1b9ce16a4ca3f072a991c452c179</hash>
        <hash alg="SHA-384">c01114ed7d3d7aa1bb92e361966f920d1021065f61b2573314d3e53fd0dc1dbec9f5ad781ec3c9fb3678770a53a72615</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-providers</name>
      <version>3.5.8</version>
      <description>Apache CXF JAX-RS Extensions: Providers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9dd3e601f77d58851173499f932bbf0</hash>
        <hash alg="SHA-1">3207ec7d2e98c8aa8bdeb4982da144fc3413f61f</hash>
        <hash alg="SHA-256">1323b08dc5da91a04640081e731299c4c84c41d6247cf07d76a58abb2a0560f6</hash>
        <hash alg="SHA-512">5ea64e6049465e011711ba6f2e14eed47c3d46d50e82df7939ff081e9ae0e4f423b4b2350d664220b753a1c0575a0f93b1e803cb09ea464e2b704e184a6383d7</hash>
        <hash alg="SHA-384">ea8439948b58e37a6f4dc448d0c437158f30ed2faee62010f16df2cc71046b777478aa8e7a82eea4c31b662b9de2f39e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-providers</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-search</name>
      <version>3.5.8</version>
      <description>Apache CXF JAX-RS Extensions: Search</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c8c13aaab62f17b96fe75d8b29b7225e</hash>
        <hash alg="SHA-1">24151d85c8116ca32a35da65e93c576356b2b590</hash>
        <hash alg="SHA-256">3e9974a3369dba2f22228f2ebb2ac6b720a08b260c8ce6ed6996e32eca6c826c</hash>
        <hash alg="SHA-512">789b9b61c54c39b901cf6ff1af5b7c98f54cbcb70e42644086a60bf08b77fbfc5127f22e67eda0f8319e8d776eeef79448063ebc977aa39bc891afea9941e529</hash>
        <hash alg="SHA-384">87cb47d092caba04d939d6af93c8914d627037742f2594b6508b94f3e9867fd85a4d91c1d2cc31c81928292c51a287ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-search</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description</name>
      <version>3.5.8</version>
      <description>Apache CXF JAX-RS Service Description</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">282d41ef51511d52df85b9789500219c</hash>
        <hash alg="SHA-1">7ec376ffe0b716310ebea141c815ae50b591fb05</hash>
        <hash alg="SHA-256">7ef7630fd88a4654fe81a243f793a642f0fd072d60c5681174718be3a2b742d8</hash>
        <hash alg="SHA-512">9ef96947524ccb9ed2972dd22db75626f98eed61078bd17f251400fb64b64a41a059878f960b40fd6e9e06aabff24956506ea15561c4c5674713e7345dcbea95</hash>
        <hash alg="SHA-384">957b4ffd4736288fa7aa5423fb2479157991eeb289b8905276d29c1ba8734bbc48ce8696196894169f36309e6f84b862</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5fc3877d2ae732de3c2356147bb05ffa</hash>
        <hash alg="SHA-1">d82f02527d9b2e0a21ad8c7303edc1ff77533472</hash>
        <hash alg="SHA-256">8d29b7319ccd007bd0338d703a6fe4ed02efdf782c6bc2ba35e3d940f6166991</hash>
        <hash alg="SHA-512">88ae20388979a5dca622835fb06b293bf4d4edbdd35cc1ce566c216fa42ef55eb8166ba38f165574da3859b15b1a172fa8492369efd576aa3e16203fab6afe74</hash>
        <hash alg="SHA-384">68654d02adbf0c77caa029924f83a700ab45736748b5d5290d1a0493ec45f67fd1201671099743cb4e1681b9a719dab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security-saml</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime SAML Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cfd49933042b04c125448e2a7ec5f9e</hash>
        <hash alg="SHA-1">890e6415110902d36ad21479da73d9b7b3184cff</hash>
        <hash alg="SHA-256">9a7f368f222a2f20a98b4df9889df5357d2d2457bde17077d48f22d75f6b6961</hash>
        <hash alg="SHA-512">cad22527a0ed24655d1e27daa0460a2bb857c6cc06f8a862d1f42fe05ddac2c564ecdfb2cabac571cdf34d02a4c75dcd39b2b63231bc178f451598c70052a17f</hash>
        <hash alg="SHA-384">db8fc09f672d189f78d5eea504e653e4cc8b284aa552ff1e57565d848ea16230ac94bfdc432057caa515528a5fa12227</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security-saml</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-dom</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a5a48691fe57e21ab2be1fe76545040</hash>
        <hash alg="SHA-1">9b6f4cba742acfbf02d9f8c2c190d261d1c8ff1d</hash>
        <hash alg="SHA-256">48a3b75f71cf06c37c960861fb94944c7d21ef295bdee5dd5e4b668a79c2819d</hash>
        <hash alg="SHA-512">30eeb576fc07821b0678b7084c6664c2e0f405f779cf45257b3e49b01a3f5eb97e43e6fd7797f8562346a49ced979e12215d6cbc6385c9404ef39e2516446b77</hash>
        <hash alg="SHA-384">b694f8b5b872260d8248abede928cb599e2ab52f4fe31a1ff414ca54937e43674fd23d4229462b3582975bf2209925da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-dom/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-dom</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-common</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">22143a6aaa5af2e49cbb6668f84929f5</hash>
        <hash alg="SHA-1">8911e3b2befce0eab9014c4ab8104e81ac5d4b01</hash>
        <hash alg="SHA-256">c28d3f467d8988cd4f2b928eac42d652c88dbd9915d82078f73ef880c5f29e5d</hash>
        <hash alg="SHA-512">9f4eca4daf215684af2818a9f5dc1cbaec7487a85fe2973c89a657610e739e426f7067ea6222ee45c6ffb14111fe522931a6bb83ec505d72ead896993f11f9f2</hash>
        <hash alg="SHA-384">5ade6d25e7b0497b9077cdc6f8c8d7264c7a70d429fd84562ef3f0920ce6f0a1856fdc1cc139db5b82570e206ac6b01d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-common/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.santuario</group>
      <name>xmlsec</name>
      <version>2.3.4</version>
      <description>Apache XML Security for Java supports XML-Signature Syntax and Processing,
        W3C Recommendation 12 February 2002, and XML Encryption Syntax and
        Processing, W3C Recommendation 10 December 2002. As of version 1.4,
        the library supports the standard Java API JSR-105: XML Digital Signature APIs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bad235ebfca40a0514fba17fd742df51</hash>
        <hash alg="SHA-1">7f2baecd896ae8e8b02b6090220537bd950eccbc</hash>
        <hash alg="SHA-256">5513e7417edc1eb7188adc4de0312e93156bd7ca6d6c1e6072d3e0006defff23</hash>
        <hash alg="SHA-512">a948e1988f5bbacf7df1734d4779e3dd6022ded212eda83c784b295371ad2b89b5e7e476cc1673e592abe7a3f0fc153255251467ae7b023ff98ac22f476b1e2e</hash>
        <hash alg="SHA-384">d2f2631261d48530edf19d9a04ecec293d15ffa75e56912e705ccf7b08ae63a560e5bc49a1b24ad912be920316e4e216</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://santuario.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/SANTUARIO</url></reference><reference type="mailing-list"><url>http://news.gmane.org/gmane.text.xml.security.devel</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=santuario-xml-security-java.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.16.0</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6e26920fa7228891980890cce06b718c</hash>
        <hash alg="SHA-1">4e3eb3d79888d76b54e28b350915b5dc3919c9de</hash>
        <hash alg="SHA-256">56595fb20b0b85bc91d0d503dad50bb7f1b9afc0eed5dffa6cbb25929000484d</hash>
        <hash alg="SHA-512">eee671e66d808b56b81e15574675cf132d7628c010736d580915bbf8c04849f04df1d95ddeea13c4e119f8f0a564c7003beeb8ab437564e080ee27063c1e52b9</hash>
        <hash alg="SHA-384">65eb89c19815ea11585ff6c91e2ea4acd6a41ee35502891ba29fb5ec390d567190cf2f4120bfbf50ec470274df22a25f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.16.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16822d1228404b5fc14a607f94c04b69</hash>
        <hash alg="SHA-1">c51f094b49d8875a9d1e51aefc01331dff461729</hash>
        <hash alg="SHA-256">c9b818689fbcda211fcf4a4c970bfc143c5955645129df53b9bdca8f7f83c1b4</hash>
        <hash alg="SHA-512">75d45e4b39f8efb9db9329e27ecde27ce90de1545a64d053e3c64c6a81b5aa0e3ab962dd834bc312ee508e5e540830fdaea2e4f1be68d53acc7d44bbedf4dd1b</hash>
        <hash alg="SHA-384">ee422d744f0f0789d722c633271ba3fdf60cf903820d38832295f68619fcf4f8b0dec20c959e5603537ac4a25cc98deb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-saml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-profile-api</name>
      <version>3.4.6</version>
      <description>Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0cb5bed685408a677fff00c5cbcf4e8d</hash>
        <hash alg="SHA-1">cf3d855a2eb9a7c44b2d10919746bea5b4f0e6fe</hash>
        <hash alg="SHA-256">d4aa4269af0d25b7ed5740c46a9894123fc0501546891188678aa74df0f141ba</hash>
        <hash alg="SHA-512">eff813644bd82a9c0d75943c313106215d8d2a87c2504ba56d3217d231dd9f6439a7c5ef86c4475cf95bfdd0aab479dad3277556415e1ffe7c92e6b54a6aae18</hash>
        <hash alg="SHA-384">b2344e285a98b5b494d23a55d7ec1e6d9f5f1493b9becc3304fe251f9c2d78ab0d898cdb5b94780d3426e64aee4ff161</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-profile-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-profile-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-core</name>
      <version>3.4.6</version>
      <description>Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">078679e8cb6a0c3361eac985019e8e5b</hash>
        <hash alg="SHA-1">75b749a9ce605414d071ffabbf7e61cd11b9204d</hash>
        <hash alg="SHA-256">d9b867c9c2b6a44d75a95504a467d94b5183def09fa1f3f0f1a95a79621ec1e1</hash>
        <hash alg="SHA-512">d030c0d599a95d899750f91e276a3abd12fa33d162c46599bba79d33f3319e1d1a2226b1dba3357eb1721331ddce5efab96d918c285b54efcc02c27dc9cc9681</hash>
        <hash alg="SHA-384">28f4bbbaff064465545bde6d4feb9cbfca89fd75fce1f7294c0953ec2118251bf084c2099f89f6d023658fe475808ccf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-core/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>4.2.25</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f9476a4f1a8287f7a4a2af759c33e44a</hash>
        <hash alg="SHA-1">76162cb1f7a6f902da4f80e5bcf472078e8cd7e1</hash>
        <hash alg="SHA-256">8bc7de609a2816b78a7a5009bddf11be560ba527d44db74a0a31a6f44fdb5b5f</hash>
        <hash alg="SHA-512">7373e8d22599d3cadff126308ac4279141fbcd04c27935b016b3bfb42caf5840db60fc05eba136dd1d19f72b5223ed30f0823e562b0267a3e2d8673a65ca3d9c</hash>
        <hash alg="SHA-384">b2ce6508895976d6f3a5846dbac246db0c1c6946dd4e7a17d3ebd55f6d094286f735f293997e6b140df8d6f629cabe47</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar</purl>
      <externalReferences><reference type="website"><url>https://metrics.dropwizard.io/metrics-core</url></reference><reference type="distribution"><url>https://s01.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/dropwizard/metrics/issues/</url></reference><reference type="vcs"><url>https://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d55c4ec6f542c201b6d5aad5c7115138</hash>
        <hash alg="SHA-1">571c2b041583625850afefdb3283fcf17940f9cd</hash>
        <hash alg="SHA-256">a48e58ca9a98753aaa3f58b47ac6f941892b8980ff52381491b244ce02093fce</hash>
        <hash alg="SHA-512">eb317580c9b42aa50ee4a68cce788cf277f5cc40c263ddca1037f88b83a019ac51ec84c2022f2d6ab1e41a41386880243adf89226ed454a108073524873d0d1c</hash>
        <hash alg="SHA-384">6e857e58b3cdcaa2bb589616711c2fa0b709235450ae4c1320b864a074179802712ceb73c268d11f903b3bb422a2d6b0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-saml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-saml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-api</name>
      <version>3.4.6</version>
      <description>XML Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">83483c37e5b6cd7c234866d9b5e1ac47</hash>
        <hash alg="SHA-1">3f84e8ce2dc40c247247be036a3a5c6adfae4a70</hash>
        <hash alg="SHA-256">fb6234bab21f5582f021467a772bb9c4cfb32af8bc1900504811795992bb23fd</hash>
        <hash alg="SHA-512">941e83b78d38ff69343bc70ab8eee8393cd2a69a03a216ba85f067975fc9968ea876539800623cacec7dcb4736c5a33595c6953880ae1b023493e3d4f321c51c</hash>
        <hash alg="SHA-384">224c0cabad0442a7d891db138679fc551d660c2bf04ad61833becac3a6279a7ab3c9e07eca09379ae12b054dd8362412</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xmlsec-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-soap-api</name>
      <version>3.4.6</version>
      <description>SOAP Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">65e52ff6f3a55badf553ba021f08696f</hash>
        <hash alg="SHA-1">6e4dacb4caac0d5ed000719b3a772d384ceff916</hash>
        <hash alg="SHA-256">76cc47c3610e97df80921611aef80cbbc0f273dcd7323e6e08c70996d121254a</hash>
        <hash alg="SHA-512">ab644f8342c93d7e0e373c1fb8c493671dff379eebb152dab13835d566c551cd6dcbd5d9c60f9d190f065838491072bf8f455a8e134a4abb7a28225f5b0f5474</hash>
        <hash alg="SHA-384">4b46f64885fc099a5a7058d7f73382fe025bb7a9af8e933c8895cff4e7eb42c94b16a06b102ebe1cc264dc49941181f4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-soap-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-soap-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-impl</name>
      <version>3.4.6</version>
      <description>Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6059e2364579e717f39aaa65f3e395b</hash>
        <hash alg="SHA-1">0dd4e7128d4de8c304827ecc972ee57ae46230fa</hash>
        <hash alg="SHA-256">78fa84dc93d47756a37bf7a3e5f443630981607f29a0a97ce5e78e8c4272655a</hash>
        <hash alg="SHA-512">d2024ec50f96454e888a9f021295fc6991f7e80fed26a5f5309a7a0639ed8bceff456bfad67780015a65a37b632b73d32867b90e8effe76a12015c6c4ab5dab8</hash>
        <hash alg="SHA-384">3595f9433ca34cfa092f9100098714741bb2241d9938fff194a39d98e64b7d5515042a7ea3ffa31890181bcbb577d209</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-security-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-security-api</name>
      <version>3.4.6</version>
      <description>Security API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b128a68409ed07d1094b40281576c3b</hash>
        <hash alg="SHA-1">d5cfb49df6b78b0dea66015040fe9940ace2fe71</hash>
        <hash alg="SHA-256">a84c4e51d8a90c30e70cfa37da22e4d18e54af747e2771fc4e39c6d8c76ae41a</hash>
        <hash alg="SHA-512">a770f23c8a4f2e46bffd9ffd749790932239a63ba4a420c14e7bec93c6853c3b9708de31ab4e6728d7b3663295329a8422719e271b1f0883280f2f866c344766</hash>
        <hash alg="SHA-384">ac3bd4800ba02c52f34af4230b44bfedec44da104ff23a7ef083e2ea7cbaeed5e1b4fd3588c0374f434e3d8277a2c533</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-security-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-security-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xmlsec-impl</name>
      <version>3.4.6</version>
      <description>XML Security Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29d0993ae0e882f5ab843fdca178ad53</hash>
        <hash alg="SHA-1">f07084d063f046dc762b86f90ff1350c923aa6ac</hash>
        <hash alg="SHA-256">8151f782375205f6698941fba656dec077f35e4a05e8a3a94e31b84cc7c912a7</hash>
        <hash alg="SHA-512">0d6f487cec90ec931fcf015e42758d90acbc056dab20bccb889737325fc7443ee5ef3be51d028140ef424313562d37eed0abe795fafbbb5a16ae33e943f10496</hash>
        <hash alg="SHA-384">63e4ad907a85236121bd787d0c5a3c97e4afb383cc682a488aae52cbb045a9e11caa1a8a1400d29d080f37e4769f46b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xmlsec-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xmlsec-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>net.shibboleth.utilities</group>
      <name>java-support</name>
      <version>7.5.2</version>
      <description>A POM containing properties, profiles, plugin configurations, etc. that are common across all Shibboleth V3 projects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8841e4abf4e88a32737d0f2870f2f4af</hash>
        <hash alg="SHA-1">1b0a80b8c0713e3d6233c643c7421ece305b544f</hash>
        <hash alg="SHA-256">bc6a861d2447d3a67c81fdf61f0595d38c94ebbe4364bec6d59cb1b87cb2e8b2</hash>
        <hash alg="SHA-512">e1abbadca603c6b203352c412d4ae45004f3f833e1b236664116122020466dcd868f6ab9653adbe1907947957ccd1edf686a95d2a617e9484faf5fa7a9ff644b</hash>
        <hash alg="SHA-384">4e1c9110e37fb0366090b53934d4f0e82ca7ff6bc3be4dc1d239f0e4f6a1d2a060ce55b3306c737a414256850ceebcbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/java-support/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/?p=java-support.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <group>org.cryptacular</group>
      <name>cryptacular</name>
      <version>1.2.6</version>
      <description>The spectacular complement to the Bouncy Castle crypto API for Java.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b4cf54fbc0b44a3233b0daa8b4c0cb83</hash>
        <hash alg="SHA-1">c97954b8bc9fbf63393d6a3b9113a6ce70772b45</hash>
        <hash alg="SHA-256">7a901585834f4533f127c643660435aec9a969af720613dc9126e555be7b1a01</hash>
        <hash alg="SHA-512">f1537257428dcda2c02dcee022f44539210510c66f752964556da62f6bf0f8924c6f443dca418482cf4d9d66ccc840d883c162a24d1b6639628ffbdaf6820bec</hash>
        <hash alg="SHA-384">5cbe09098237398b55a517b4769146b5f3a893a062092e82e4aaea0630c940970e835aaffac8b6ea22f7d6cbeaaba191</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License</name>
          <url>http://www.gnu.org/licenses/lgpl-3.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.cryptacular.org</url></reference><reference type="issue-tracker"><url>https://github.com/vt-middleware/cryptacular/issues</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/cryptacular</url></reference><reference type="vcs"><url>scm:git:git@github.com:vt-middleware/cryptacular.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar">
      <group>org.bouncycastle</group>
      <name>bcprov-jdk18on</name>
      <version>1.77</version>
      <description>The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ca01387064e08db12e1345b474521ff1</hash>
        <hash alg="SHA-1">2cc971b6c20949c1ff98d1a4bc741ee848a09523</hash>
        <hash alg="SHA-256">dabb98c24d72c9b9f585633d1df9c5cd58d9ad373d0cd681367e6a603a495d58</hash>
        <hash alg="SHA-512">56c359f1370131f91eaeae3ec1d44884358f4296defd8d7516c7b81b9b66158454a667eb1c859d8ad919faee074ae3ecb4ceba2a39a3dd799bef9ada2d8c3da3</hash>
        <hash alg="SHA-384">2951d9bb941e960287cc4a8947a0239ccfb9bd5058002bd5b9fe045b0bb22e4b23f31357f65211c191384cedf3ef3555</hash>
      </hashes>
      <licenses>
        <license>
          <name>Bouncy Castle Licence</name>
          <url>https://www.bouncycastle.org/licence.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.bouncycastle.org/java.html</url></reference><reference type="issue-tracker"><url>https://github.com/bcgit/bc-java/issues</url></reference><reference type="vcs"><url>https://github.com/bcgit/bc-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.10.10</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c2a46de8a73ec7b60011429561ae72e3</hash>
        <hash alg="SHA-1">29e8126e31f41e5c12b9fe3a7eb02e704c47d70b</hash>
        <hash alg="SHA-256">dd8e7c92185a678d1b7b933f31209b6203c8ffa91e9880475a1be0346b9617e3</hash>
        <hash alg="SHA-512">e6b873724800c0d8c4a3dabacd53c6b320e87fccd26109f22508ab17d95f21283cd705c68392c04ff76beab38593a02dff924aaee2c07ebb7af4ec6a5ddaa65f</hash>
        <hash alg="SHA-384">7782be142400320d1313254c68f45c5f3cd3d7e310a83dd7a2d15ae924fac714539e607bdafb16af4fd277d0abec3d87</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.10.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>30.1-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, Google's collections, I/O classes, and
    much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f8966f27f06101a08083bfa9f9277e7</hash>
        <hash alg="SHA-1">00d0c3ce2311c9e36e73228da25a6e99b2ab826f</hash>
        <hash alg="SHA-256">e6dd072f9d3fe02a4600688380bd422bdac184caf6fe2418cfdd0934f09432aa</hash>
        <hash alg="SHA-512">e7a8098c0af7746c8a97a8cc8245166c14ee9213f67943d9d1962c94699f58d789c1e103de9cd407c4f20cd4be4e89814643560e5dae0b3f629312f2b1a2a8e2</hash>
        <hash alg="SHA-384">12f54fff188f49a7d7284836768f198a6b002a1773ab80311c69449cec0544744938b8818b70cd1811cad830efb6a76d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@30.1-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/guava</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0.1</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">091883993ef5bfa91da01dcc8fc52236</hash>
        <hash alg="SHA-1">1dcf1de382a0bf95a3d8b0849546c88bac1292c9</hash>
        <hash alg="SHA-256">a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26</hash>
        <hash alg="SHA-512">f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae</hash>
        <hash alg="SHA-384">67659dbd9647ec303d7f15128dc9dba19b98fd8d74758ee3b602451e32c855e236ccaafe08edf4bbfa245f981268440f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-impl</name>
      <version>3.4.6</version>
      <description>XACML Provider Implementations</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9d8cb6a9cf8d68af9bc2bab3053d9a30</hash>
        <hash alg="SHA-1">542a94404fe6b51858cc291e18b1890772de555c</hash>
        <hash alg="SHA-256">2e0b08bd9aabb0f49ee4f98e6fe3d489db94281627f386c80ddc79b4fe903146</hash>
        <hash alg="SHA-512">29f93611a8476895087c2193b10239b4f0f17cda6125a9c26f91540924a56ab4351c1598c110772d59e5cfbec332db0f82f58dbc8d2981907206ecbefef94d4b</hash>
        <hash alg="SHA-384">b255ed8785ed879fa48ac4d2a6a0a44bdab45b5dc8a2da728227bbdfdc5afef7b868c8fda32dde218775f3acd1b7b55c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-api</name>
      <version>3.4.6</version>
      <description>XACML Provider API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfb758241b65c48297e510c5c1b129fa</hash>
        <hash alg="SHA-1">2fc136cf70605b6e490daf01a28161cb87b0ffc4</hash>
        <hash alg="SHA-256">9af782e9674b1e5b34f1c1406e919eea3d91aa09003465d43f6446db5f67e3e6</hash>
        <hash alg="SHA-512">7fb6ba8adda2aa3f07f913c224ddccb55cefcea390b0f7ac0de00f89f97a093bdb1b2cd88db2a84798c9fa8ee5fec45f8866edbf4b7a23a2857417f616293ae3</hash>
        <hash alg="SHA-384">43d608db3242c1ab195036fcf332785f2eb05388b012a8ee8523f66c716b68fd83a5b917606eab94782f944f0652a097</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-impl</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0eaa70b47d18c2a7ae72ec0ce1e47038</hash>
        <hash alg="SHA-1">2a8dfe1251c1d3ef0c0f1b876b2a7dd7d3bf0cb8</hash>
        <hash alg="SHA-256">536349704d93a73bcd9475fee89606e6841f2d6f53c58a46fc0c2f659cdc8620</hash>
        <hash alg="SHA-512">bf93aa3c141e367596482fe9db85c3be2e3f815cd740bdcb4237933ceaee55928edefd717fa45e4c6ee988acdbf623abffd31b4e04fe03adf547abd3bda9fafb</hash>
        <hash alg="SHA-384">87ea576d71cdb29566d2311cdac48fe15140affb00c4c1121e61028dbe974e8c648a133bc672e81172634f1e7a11bde1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-saml-impl/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-saml-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <publisher>Shibboleth Consortium</publisher>
      <group>org.opensaml</group>
      <name>opensaml-xacml-saml-api</name>
      <version>3.4.6</version>
      <description>SAML XACML Profile API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">75f667b52f160481e65e7c317ab1c20f</hash>
        <hash alg="SHA-1">d4d573d93257738309cd079a290a1da7ecdc762e</hash>
        <hash alg="SHA-256">c25795b730cf4892c3cfb01dd7ec3237dafdc952d78fb6abbabb81d678ae916b</hash>
        <hash alg="SHA-512">612b5f1d5aab055ca919a351bd69d65635e2e5781773797585e764fc036b8e838b436f13a4ba968d66077226c7005bf3fb063c64931c95f87edffe0d4e91092e</hash>
        <hash alg="SHA-384">ec510c0233233d2eae13c717e20f6e914bc05d30ae4c43e3b615ead8d1879c5d05e6744550c903da48d1077c398e7aa6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://shibboleth.net/opensaml-xacml-saml-api/</url></reference><reference type="distribution"><url>https://build.shibboleth.net/nexus/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.shibboleth.net/</url></reference><reference type="mailing-list"><url>http://marc.info/?l=shibboleth-announce</url></reference><reference type="vcs"><url>https://git.shibboleth.net/view/opensaml-xacml-saml-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar">
      <publisher>The JASYPT team</publisher>
      <group>org.jasypt</group>
      <name>jasypt</name>
      <version>1.9.3</version>
      <description>Java library which enables encryption in java apps with minimum effort.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">39327c7e38782102ecdb3c9dc4e8dcd3</hash>
        <hash alg="SHA-1">0d99ef9540f51c617f2a293b460f025d2ee563dd</hash>
        <hash alg="SHA-256">f481fbb8dd8ce754bfde7552af4fcbe8c5e303d53663bb3d8ce9d4338e0e55aa</hash>
        <hash alg="SHA-512">99369da44e4c26f64e600f99b135eb05167ae1ebb5bb9f22233f14023f5416318bb4ca5893dbb0e7d444395ea6fa53713559a6990120b4fc962a1e9284ba5821</hash>
        <hash alg="SHA-384">12baa02ea8f8bdfdf04070d216dff4339b7b1c128f895007e900a18ee38a899e1a82fded92595a9a6f9127ae8c42877c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jasypt/jasypt@1.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jasypt.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="vcs"><url>scm:git:git@github.com:jasypt/jasypt.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.javamail</group>
      <name>geronimo-javamail_1.4_mail</name>
      <version>1.8.4</version>
      <description>Geronimmo JavaMail Bundle.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f0f877ca397f77198f4c941bee52f0a4</hash>
        <hash alg="SHA-1">0c111549605e4fb904984e4f40299a3a653871ea</hash>
        <hash alg="SHA-256">e3e58acb4962ee0615cc398c8903e46cf866fb666a58b3bb80f8d59712c1e69a</hash>
        <hash alg="SHA-512">a53a0aed6922d6d1f37e78cbde16f2a98dbd43f7198293a960c761e2c6f0ac456770a9e21ca64dd460a6612d0bae9d34d90ef21a4a9ae8095ed4677a0b5209eb</hash>
        <hash alg="SHA-384">f2adafd0c3d2bb24490542b0394bae83014b1404b350799ef844f51331f8a71db1f3a8d5aebd462f9e24400502171f0e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/javamail/geronimo-javamail_1.4_mail/1.8.4/geronimo-javamail_1.4_mail</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/geronimo/javamail/tags/geronimo-javamail_1.4-1.8.4/geronimo-javamail_1.4_mail</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">29634f1e7547265d691cca67aa94a815</hash>
        <hash alg="SHA-1">6061f49df2a27df083136a0e5288a61877965bfe</hash>
        <hash alg="SHA-256">2361b09223a252035677550e34db29aae401b585ea5cd919b3c0c544969c35fd</hash>
        <hash alg="SHA-512">54c9413198be4d7c5bba0553256ff999aae8d0393626aa9ec0ca66819c88bbcf45147ecbf4ddf6681463edcc72c3c9f0be2643f9949412e2a2f23e48bdef0148</hash>
        <hash alg="SHA-384">b0a9fdb5413c2a3dd5d29b3d0c00d832ba3fbf2f4882ac452361059bca2ab8a1479c6639c2b923b363066bc8dc9002ce</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http-jetty</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime HTTP Jetty Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b6248d9dab68f670c3f371c3d80ebfa</hash>
        <hash alg="SHA-1">676b40d3f8da8f450f74c8cdf3d4817df168e6bc</hash>
        <hash alg="SHA-256">b9fe7f4d45b5423bc84fa84742234b0710be026faaf84b7523d3d33d5f667f4c</hash>
        <hash alg="SHA-512">5b5535ed113ffe38253d11c73fa72c2b7dfdee62b28e5e849e9700251bd8ea8bb061478fe8b3db0b17485d7e9308e719bfcd97b68b692ed62c4fb6791dbb3ebd</hash>
        <hash alg="SHA-384">76f5e1622d7065a215dadac8144b4666730b570895a178bde55127d20d01a6881b1376937f444a8fe9c6d9ef9cc30d5e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http-jetty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-server</name>
      <version>9.4.54.v20240208</version>
      <description>The core jetty server artifact.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2fd6b022866f111c2e295ac97047f88</hash>
        <hash alg="SHA-1">13d439d8a5d8b1ec936f9d6f90dbdd46fcb01820</hash>
        <hash alg="SHA-256">96a3e929207cab7612aef2ed9e80a2d1514bd5cfba118f6d040677ae483398f3</hash>
        <hash alg="SHA-512">780ee47a8722bdfb4b159f440acbfb69afdb73cc329906392b10eba8d30c564aa6377fab129e61b85a56945f01c4403913c80b6ce3158d108d88a3ad64527f06</hash>
        <hash alg="SHA-384">80d9950edd40b4f2430fc4e0106af3fd95006fc02b8a7de3dd8ffcee4b9e72942ed4f5808afa7d3beb9fe808db375830</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-server</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.servlet</group>
      <name>javax.servlet-api</name>
      <version>3.1.0</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">79de69e9f5ed8c7fcb8342585732bbf7</hash>
        <hash alg="SHA-1">3cd63d075497751784b2fa84be59432f4905bf7c</hash>
        <hash alg="SHA-256">af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482</hash>
        <hash alg="SHA-512">32f7e3565c6cdf3d9a562f8fd597fe5059af0cf6b05b772a144a74bbc95927ac275eb38374538ec1c72adcce4c8e1e2c9f774a7b545db56b8085af0065e4a1e5</hash>
        <hash alg="SHA-384">8bf960fd053ef6ad1c3535824311f676b9ad537678b85f855dd5d6d726e391f8a7be9c9c76a8ae3ce8bfe671c1e2c942</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://servlet-spec.java.net</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/SERVLET_SPEC</url></reference><reference type="mailing-list"><url>users@servlet-spec.java.net</url></reference><reference type="vcs"><url>http://java.net/projects/glassfish/sources/svn/show/tags/javax.servlet-api-3.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-util</name>
      <version>9.4.54.v20240208</version>
      <description>Utility classes for Jetty</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">54404a63c29167408bd6a394b2cd1363</hash>
        <hash alg="SHA-1">8da375769a8fe4a32ec52cc2c9ac68f1eb843588</hash>
        <hash alg="SHA-256">0025f8470828d60dc93e6b5c33c015630b6b05a23afa8173ee7e60b928a4521e</hash>
        <hash alg="SHA-512">fbe9cf7efeba9f29297f75de3f1c2d98f0e02816a1dc9e6eaddcabb84c3a699a9332218c532017a3707ec57f4f99066bc671708bde4ec84dd873b8403422d7e9</hash>
        <hash alg="SHA-384">8ff35a1bea1eb199c0abdbdd1d14ffc075f9de1aac160fe2e7b8f0b7b297513c09484575fcd4b5ef6f33f9bc93f280c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-util</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-io</name>
      <version>9.4.54.v20240208</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee9f6ea6ab697a0079d7baef03097d6e</hash>
        <hash alg="SHA-1">389cb96fc6963b0aa13954164ed0b1c54bf87462</hash>
        <hash alg="SHA-256">fd2b9b44fc4da25b6b15017f686d4c50e2cb4d68beca9602194ad9cefb97f777</hash>
        <hash alg="SHA-512">72af20a535ea6cc8d55d651a661a10548036ac800d902ffbdfe8c57afbc166043c0e467a9a5b59c31c9b6d8a10f65d1ee17bf6b5c37e9b3c46b896df9ca52614</hash>
        <hash alg="SHA-384">0dd05a26368af2ce5c93ceb07c73e78b79c01e27a319ea97e18591e9e6951c7fa7e017ea917b726f2265cf5fecc10f72</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-io</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-security</name>
      <version>9.4.54.v20240208</version>
      <description>Jetty security infrastructure</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fb9cb76cbacca32156f2269ad0b4d840</hash>
        <hash alg="SHA-1">7bf0247b413feefce4a18f50c68d7b9e41beaf30</hash>
        <hash alg="SHA-256">7d17ec768603c33746f9f6f98849d7c9f8bc439a53d9e247702e19cea6c75ec8</hash>
        <hash alg="SHA-512">6f580991c6478dce1a0cc99279b990bb6d71e815046b06fcb4b0863b8e5b5ba251ecd934dee7d400de64ca71b9ef0e31b17897173ab6538296f33adb59b8317b</hash>
        <hash alg="SHA-384">1790ac683c0de9888caf24af9cc8e5dd7785f0a9c260211e55d257e362b3a320fa8f5752c85d2207136fe2c8d5273ec0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-security</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-continuation</name>
      <version>9.4.54.v20240208</version>
      <description>Asynchronous API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c12a905f97bd9a4f61d99ffa08d06bd7</hash>
        <hash alg="SHA-1">825633efcd0952221bf54b036c069218e9a3b20f</hash>
        <hash alg="SHA-256">4a1a19c08fbd64cd10813af4a16e9be5aad75d68fa4e3747e798343bbaf7af6b</hash>
        <hash alg="SHA-512">295e791e0e1797bac1ea5bef6924ccc0c271153f9833ebc1b162fbc49d6e7faf80438037fe8131c9e014c55ef942ce46a0771bd15651008bf8e339e3395d3c15</hash>
        <hash alg="SHA-384">b0d2613fed1e26b9eeb3a8930d96a914adf0c8dfe2e66c09a23b9d259e137d37427c6f677971479e0d66ce9a88f0efc0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-continuation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-continuation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar">
      <publisher>Webtide</publisher>
      <group>org.eclipse.jetty</group>
      <name>jetty-http</name>
      <version>9.4.54.v20240208</version>
      <description>The Eclipse Jetty Project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">057ddc7abad3b9ce93ee1542cd78cfbc</hash>
        <hash alg="SHA-1">a641b8a694eeefdde64404011471710e51352276</hash>
        <hash alg="SHA-256">90e44ea0dba911fe23b7cc4554ea8761e92dfd803401e3888fe6eb10a07944e7</hash>
        <hash alg="SHA-512">6e1d6fdffcb2acf8daa9ce5b3ad973526a30b3556dc8e950254c68c64cd70e101b28a8acac41b3bd74de6b9c8eac10676afdc3c58ccb1f61a74323721592e0b5</hash>
        <hash alg="SHA-384">198cab7ff218d1cb3d4a0fb4863e46860e48ccc4e34a1ca0ec1ff1c1e54bb7a3b71c924081727d125728bbb1e528071f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar</purl>
      <externalReferences><reference type="website"><url>https://eclipse.org/jetty/jetty-http</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse/jetty.project/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>https://github.com/eclipse/jetty.project/jetty-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-jms</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime JMS Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f41d2b627fbc658fb11399cce8cf7b06</hash>
        <hash alg="SHA-1">e246dc294a6e3f2129637546eadeaabd48fdd16a</hash>
        <hash alg="SHA-256">2dc74e8a0d1982d1c66fe38c61252a9dba9f2ca30343292c5e577688c6c38fb7</hash>
        <hash alg="SHA-512">47cbcc59caa54ec4d38961657b1a704e0e0e7df6f9b36cbed7eb438c18dc44d053a58cf1f64799b9f7ca7c2e4d4e264c8051ceacf297a7f818e8c6f3bb95185d</hash>
        <hash alg="SHA-384">94b97a18c16657626971eb20eebdaa454d24f79e7136ffec1f4da76412b6ca7feb22da483f917c0dafe46e115902ab58</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-jms</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jms_1.1_spec</name>
      <version>1.1.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d80ce71285696d36c1add1989b94f084</hash>
        <hash alg="SHA-1">c872b46c601d8dc03633288b81269f9e42762cea</hash>
        <hash alg="SHA-256">18d9ff7b9066aa99cf89843f5055d2fe58b1abe4346ee9df0daf4ac18ca232d7</hash>
        <hash alg="SHA-512">94cb8660775596b298db93e11fdbb28d2a582b161f7a6d667d41946f59e8b114aa80e15c28c4186f05b43f432b1ac555d845ad870309609202382c3f6061e319</hash>
        <hash alg="SHA-384">9394c1de83480f01ec0893657990179ef67ea95b43bb4518219381968fd58d8f5f509d4cd3d4af5ae4b3df07f67a1ec6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/specs/geronimo-jms_1.1_spec</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jms_1.1_spec-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jta_1.1_spec</name>
      <version>1.1.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4aa8d50456bcec0bf6f032ceb182ad64</hash>
        <hash alg="SHA-1">aabab3165b8ea936b9360abbf448459c0d04a5a4</hash>
        <hash alg="SHA-256">3a0c3c1bbc2efe8383969574922791959670ef547d6c897496915617025c3023</hash>
        <hash alg="SHA-512">ee10f942eda7199a522aa0838ad69c9b58117580bd60185b4c01bfc43913fd485154b1b3d437b0a361d1bed8a18974c84f5bdf1cb27ed9bc18fe33fba4d8f1f8</hash>
        <hash alg="SHA-384">56f9ad1bcf3f0c3d9ed9c6c372274a47e046ad88335c842f2959c95646eebc14d0ca68562d86a53b8ed6fd56613297bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/specs/geronimo-jta_1.1_spec</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jta_1.1_spec-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-local</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Local Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">edda52371acbfcb125b689183910c989</hash>
        <hash alg="SHA-1">16f1e5037838b665eefeb897da03255b6b2ba090</hash>
        <hash alg="SHA-256">57781e869edca20e151d581b3303c7556d1d51f3c731774af00dc6e34ec15f91</hash>
        <hash alg="SHA-512">52cce49d778034a4a9363a072aeaa999343875653d7a53287dc9380ee9ad986ded3a403692c48b36ae433fa8fe0869d73ec274dc02404cc1cde4074d321d7974</hash>
        <hash alg="SHA-384">46ad803997c81c2065004f823204f1fea02784659e2d51ca336561553766d6fc8d3d2e047ca8a922ce1b8f86b17d7865</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-local</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-udp</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime UDP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9168d705a536b77322e4f019bfbe0628</hash>
        <hash alg="SHA-1">c6afb1eacbb52b3fd4d3293133e7f801d9c1579b</hash>
        <hash alg="SHA-256">c971239ea598307a0ca6fdf3a25332a62c5e67f1c44d2722c1a8781c58403047</hash>
        <hash alg="SHA-512">a254fed5afcf4883ac0dafb5799948fdc34657b8cc83667fddc025614d5e7ccfc66265af1e709d7e71879254b0f8199999a87167e106018262ff79370f819dbb</hash>
        <hash alg="SHA-384">b98362c5ca4cfabdd882c9aaeb40b138ef71d1c80d9e847f5c145eb8594aac4703e83b48dafd441fe67a83a2f0989d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-udp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar">
      <publisher>Apache MINA Project</publisher>
      <group>org.apache.mina</group>
      <name>mina-core</name>
      <version>2.1.5</version>
      <description>Apache MINA is a network application framework which helps users develop high performance and highly scalable network applications easily.  It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">736e29bde17121395bcad67794487e16</hash>
        <hash alg="SHA-1">0e9a0b59d93f3095f0ae35909d7f413bf49ce1a6</hash>
        <hash alg="SHA-256">4cbe14958b044df2d3a22d9f954ed8a3cea12c2c6527d438aac81b4e9ea81041</hash>
        <hash alg="SHA-512">45e7d75cec824ef9237197d272886c6108126213674520ee2a6748336eb9aaff1f5c80d4b78d9240788ee9903ef61049aa2ff7545e4d7963e67fdf01408b7693</hash>
        <hash alg="SHA-384">f34457e93784a27671347ad522c3ee5b632182cd33bbe7c91733f533c23466ae72d52fd0002c5935f2b3d831f3f0939b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://mina.apache.org/mina-core/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/DIRMINA</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/mina/tree/2.1.5/mina-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-addr</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime WS Addressing</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e88c82b4b9971e3bef70bce9d7b89e9c</hash>
        <hash alg="SHA-1">78e7ac46aa271e012fa5af283e8a1ad9502f7f48</hash>
        <hash alg="SHA-256">34e2d3953ed291a33175635568befff9a54d36724636ccce48cf34e6261c5060</hash>
        <hash alg="SHA-512">56007b24536715e6ce241107ba28d9924a91e7293c6fbd42c1c2fb1bb0e840847c18ecfecbe3c09d2edd72a02e6ed0d095cb81ffb0370785c13141c21f98a638</hash>
        <hash alg="SHA-384">45c583a3ab039e771e6e9ac0a42f2cce78a8681fb704ec83d318b96b50df9734caae8fb87c268a18260c2c5249731176</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-addr</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-mex</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime WS MetadataExchange</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a1c50d73a5aba36c717f1c8611c29ae3</hash>
        <hash alg="SHA-1">3c94368e514ddfb453be7f0d40f96928f98506e1</hash>
        <hash alg="SHA-256">1b9dc4a2beaf2783f9b927c8350ee1b4615a37a1bc93decbe7a026b4547429fd</hash>
        <hash alg="SHA-512">6d4832e5820f6e8ac8f235deeee6e86b6f02605cdd9add1bd51d481bf74f822b2373caa1e9669dd6649fc51ea010f78c6a7b1d798752315305a1900d17af33aa</hash>
        <hash alg="SHA-384">d5f9d93082088a21b0eef16f5a2dc5a27fe687d9014aa7dbf0a2d8eda227d5f922af9149715940de6fcb3a003677b73d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-mex</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-policy</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime WS Policy</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b6957c29c23f571b833510f0ad90637</hash>
        <hash alg="SHA-1">30596c5a3aa6376a66f39d170e8fb470db80c7e2</hash>
        <hash alg="SHA-256">ca581b9f976aef8e52257eee4d1b0aaa011e096b534a4ff26ee28e8547e79f01</hash>
        <hash alg="SHA-512">56464902021e71fd9cc0ae3df237f770f872c6ffe5cb59fc2d96330f7b393305ccbe9626d954a7a61ce5d1a32a1014c134635d3f3e598d0c8ee974a6e5aed907</hash>
        <hash alg="SHA-384">ae99d32e0b7d0468ede0bb02fc79b1c9671edac7db42316b73dc5ec5deaeb863a4605c5d212d81ae6ab52f7daecfa565</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-policy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar">
      <group>wsdl4j</group>
      <name>wsdl4j</name>
      <version>1.6.3</version>
      <description>Java stub generator for WSDL</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfc28d89625c5e88589aec7a9aee0208</hash>
        <hash alg="SHA-1">6d106a6845a3d3477a1560008479312888e94f2f</hash>
        <hash alg="SHA-256">740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725</hash>
        <hash alg="SHA-512">3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52</hash>
        <hash alg="SHA-384">19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996</hash>
      </hashes>
      <licenses>
        <license>
          <name>CPL</name>
          <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sf.net/projects/wsdl4j</url></reference><reference type="vcs"><url>http://wsdl4j.cvs.sourceforge.net/wsdl4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.neethi</group>
      <name>neethi</name>
      <version>3.2.0</version>
      <description>Apache Neethi provides general framework for the programmers to use WS Policy. It is compliant with latest WS Policy specification which was published in March 2006. This framework is specifically written to enable the Apache Web services stack to use WS Policy as a way of expressing it's requirements and capabilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e6040db3584bfdbadd0515dbdba6b25a</hash>
        <hash alg="SHA-1">4e409cf251f420f65130d458256f7be1ad68f055</hash>
        <hash alg="SHA-256">6ed3c2cd20444972936c1f9b623862d1415592290ce1eb79e1cf1008f999aa3b</hash>
        <hash alg="SHA-512">eef049866bfec3f543b8cbd5b673516fdb868fa45d2884a3cae3d65293ce179f32135c06d15ecbc039f6738fb9919c5aa2039df75df729e6081988f3570ad032</hash>
        <hash alg="SHA-384">2eba46d946e12b0898d4578248a606ab767a75d213d61951ab340e66e4c424650eb34356e4bd16e3f89c030a4edc06ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/neethi/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/NEETHI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-neethi.git;a=summary</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-rm</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime WS Reliable Messaging</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8252e830cdfbb5bfe638bd47e750ed1f</hash>
        <hash alg="SHA-1">690183278e07815d90159c92e9bd053489da0649</hash>
        <hash alg="SHA-256">70b22f13dd9ca861d8884bbcf3a3e611049cc0b24c5097d289504dbec53649e7</hash>
        <hash alg="SHA-512">1bb111fe2ff5ae6976b71dd4e81afd89ed96b60dc7790fa3bcff2f0bf3397ecc1532eedd64c492e2311378ddf0aa36cfa696ac3f454946f3c1c6171d5e3292e0</hash>
        <hash alg="SHA-384">217fb23c35b1c49068b001b6ebfe5424fa37393d71e6f96f54130778be4939a72004413568980138a7d4c47bf7386361</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-rm</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-ws-security</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime WS Security</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8f2480deea509e2ace319bfb0252db10</hash>
        <hash alg="SHA-1">73517448c074524c074f2a151f736fb5687afb65</hash>
        <hash alg="SHA-256">c08d3a88a025db160ef711f453787800a731df0ffaf0ef8cadfc538af178006f</hash>
        <hash alg="SHA-512">5d5c317b04c14b639756d9b401d56dc54c1105d7ea47b249a08dda1b08116f6c48250c82ad08d67c2059f92b6afdd2cd972b1f8a0ee0761c28762cfb540cc656</hash>
        <hash alg="SHA-384">180053d933db37d440c1fad01fe4b4b193efff501d61a487cec19112b4de78e29b7951799cf8bb593645a17f12cb9834</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-ws-security</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ehcache/ehcache@3.9.3?type=jar">
      <publisher>Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc.</publisher>
      <group>org.ehcache</group>
      <name>ehcache</name>
      <version>3.9.3</version>
      <description>End-user ehcache3 jar artifact</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e0ac3ca32b4256d7e7159f9796e8c769</hash>
        <hash alg="SHA-1">67a2758b89b942dfa622d764353fcf08fba2e7bb</hash>
        <hash alg="SHA-256">30f709462667c7f3c754c45be54034922523ea6cb9564be6ceaf73e9d959a634</hash>
        <hash alg="SHA-512">0d3e595482f20f36d4b6fea53c3cca743b279ddd45a080a51ddd958a11dbde18b51c5dc9453ec1246b37e44f4b068e03364bc5e3de89c48ca827fab63de6fa48</hash>
        <hash alg="SHA-384">c94b6fd79f5813fcb2c1941a64106ca0a8d95a897132bd076d3bba29949f45aeae090213f5471b9d352118d994c895e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ehcache/ehcache@3.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ehcache.org</url></reference><reference type="issue-tracker"><url>https://github.com/ehcache/ehcache3/issues</url></reference><reference type="vcs"><url>https://github.com/ehcache/ehcache3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-policy</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">267dc758c1af2ed453b64b3739120f53</hash>
        <hash alg="SHA-1">da9d12731b1a92f82ee4557c4b7f1e27b2acdf5d</hash>
        <hash alg="SHA-256">881e08717fc3126c218071e43c6ba73f97c1f0a6594ec4a7994ceea57b20e9a0</hash>
        <hash alg="SHA-512">a3b7962b0f6d342863a6d6a8dc324b4699f7f466c6877b8ed5dfc71d64577e28589674bd3914a2e03f4ef0a8b8192111e19a7e08678aaec90276444b7d3cf08c</hash>
        <hash alg="SHA-384">9792fa52d80beee44fad625758962043442df0d4502e003d61c2c12c385ae7302221548d5351a66abcb217896c44d062</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-policy/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-policy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19906deacbe98b6b397ae1dedbfc4676</hash>
        <hash alg="SHA-1">6566d7fe40028f3fe9313cee01fb2bcf2dacc8dc</hash>
        <hash alg="SHA-256">ca865a6aa9ab9d7c258952d72204c9549d791018bd692c7f5cd578f75a3bd0f0</hash>
        <hash alg="SHA-512">973f0d762ceb0688dc297e0366aa9d63f964b27d82298dd95d5f698bdba9a02920ed5f8c5c174d13ec9c898a71fa868aca7d201523443d9de6f877b8a35ac5a2</hash>
        <hash alg="SHA-384">0b199ff8bfd395cfc880bdcd1228dbd4f606a41bbd6cccb299e927515ac3647f87e0c0dc86d7a6d9da0dad6d62e89376</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-stax/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-stax</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-bindings</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">425078dc9882b2d35d6df5e74cb9368e</hash>
        <hash alg="SHA-1">24bdfca05e2f2b617e86b422331914e0f780bd49</hash>
        <hash alg="SHA-256">7f4e934497f11938c62f5654000d5dde7d6a3ab62d77bbeaa698194e1d8beb3b</hash>
        <hash alg="SHA-512">caa5a43ce4b3c473da2202ee8c116a09089fa85f0739d25a882655e98b8aaac392eff4c3ecd70e128f3c2e07f9f2718e8ebf877c0a74469840d5911f1766c3a7</hash>
        <hash alg="SHA-384">5a9b06de616f0c67a149e9fa0be8186c6f9c3d9f26c35cac02f303cb3cb1611f1547b6dc74c948f677d3145e3f5f9e28</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-bindings/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-bindings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.wss4j</group>
      <name>wss4j-ws-security-policy-stax</name>
      <version>2.4.3</version>
      <description>Apache WSS4J parent pom</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e7f1c2c0ed770eed1fafbcee7c92abaf</hash>
        <hash alg="SHA-1">f85b2e0719c1fba921299c43ba1406375eaf517b</hash>
        <hash alg="SHA-256">61b5aee22a0a6d11538de698a14f605f25a0a134d731564d3b1b51ff28de29c0</hash>
        <hash alg="SHA-512">ff866e76cee8f741f57d54cd23888d237d202ad5611ab99e50ae3cce84e2b20ca7984214a3694bed60ea8cd479258a94b46b10fc58926d5a7be0c247b72c3cfc</hash>
        <hash alg="SHA-384">888e100bf069efe000cae9b40214a64c33f99b99c42de0874895756bd718c824e0f11139611cb3ffd886aee8add560e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://ws.apache.org/wss4j/wss4j-ws-security-policy-stax/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/WSS</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@ws.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=ws-wss4j.git;a=summary/wss4j-parent/wss4j-ws-security-policy-stax</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-wsdl</name>
      <version>3.5.8</version>
      <description>Apache CXF Runtime Core for WSDL Based Technologies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ec58616212eaea8b8330d1fde9a8ef9a</hash>
        <hash alg="SHA-1">5573b1cad8be02b25e7dd17db64d1b438ceac3fb</hash>
        <hash alg="SHA-256">1c6c089e7fec140daec6e7f6c727fa5c1150c28bffa4c5bd2c14e887b34da9d2</hash>
        <hash alg="SHA-512">9225d9efd6618f92019e8994f3f9ac44239039438b82e309fd23a527d5b8c2656f08f0f2d613dd55321734b97e48bd381db2a318753fc63d1d72fc9ff370e45b</hash>
        <hash alg="SHA-384">8c00bb572356b420a925cd20e250559e981afd7a638ae099846d1abb63a26e1c8b63cab7f8ef9aed34a2f948372d8a55</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="build-system"><url>https://builds.apache.org/view/A-D/view/CXF/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXF</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf.xjc-utils</group>
      <name>cxf-xjc-runtime</name>
      <version>3.3.2</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b31510332a73b670fe2d99c7a4702e14</hash>
        <hash alg="SHA-1">b55a2f2325eb2dace3373d37f0c564911ec2a050</hash>
        <hash alg="SHA-256">7632dc53d56534eb0072c1bfb28e28a95e4a922510014853a1549ed3c6e9423d</hash>
        <hash alg="SHA-512">80f352000e21b0d9f55b5f21a0723cc000241d75aeacb429090da024a18c792232ee72b47e035d566a8a229181815e9d4ea3aea8390ef0f02237ea4430350a0c</hash>
        <hash alg="SHA-384">d6ac18f95c02650436efbef5411e3f62b04a54bfecb30e53ac86518c5434872f585bfd6697bd88558a8296dfcc95aed0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://cxf.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CXFXJC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/cxf-users</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/xjc-utils-3.3.2/xjc-utils/cxf-xjc-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.5.4</version>
      <description>A StAX implementation for JSON.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f6c3eeb572f5830303059fec2812821f</hash>
        <hash alg="SHA-1">174ca56c411b05aec323d8f53e66709c0d28b337</hash>
        <hash alg="SHA-256">fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda</hash>
        <hash alg="SHA-512">afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a</hash>
        <hash alg="SHA-384">1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jettison-json/jettison</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/jettison-json/jettison</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-repository@3.5.8?type=pom">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-logging@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-metrics@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-throttling@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.2?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-coloc@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-corba@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar">
      <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xml-resolver/xml-resolver@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.6?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-jaxb@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-xml@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar">
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-simple@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-clustering@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-logging@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-metrics@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-features-throttling@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-js@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.mozilla/rhino@1.7.14?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-search@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@4.2.25?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-profile-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-soap-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-xmlsec-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-security-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.cryptacular/cryptacular@1.2.6?type=jar">
      <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.bouncycastle/bcprov-jdk18on@1.77?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.10.10?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@30.1-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-core@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-impl@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-impl@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-saml-api@3.4.6?type=jar">
      <dependency ref="pkg:maven/org.opensaml/opensaml-xacml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/org.opensaml/opensaml-saml-api@3.4.6?type=jar"/>
      <dependency ref="pkg:maven/net.shibboleth.utilities/java-support@7.5.2?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.16.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jasypt/jasypt@1.9.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.javamail/geronimo-javamail_1.4_mail@1.8.4?type=jar"/>
    <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http-jetty@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar">
      <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/javax.servlet-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-http@9.4.54.v20240208?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-io@9.4.54.v20240208?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-util@9.4.54.v20240208?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-security@9.4.54.v20240208?type=jar">
      <dependency ref="pkg:maven/org.eclipse.jetty/jetty-server@9.4.54.v20240208?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty/jetty-continuation@9.4.54.v20240208?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-jms@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jms_1.1_spec@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-local@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-udp@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.mina/mina-core@2.1.5?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-mex@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxws@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-rm@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-addr@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-policy@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-management@3.5.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-ws-security@3.5.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-bindings-soap@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security-saml@3.5.8?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-dom@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.neethi/neethi@3.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-common@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.ehcache/ehcache@3.9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-bindings@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.santuario/xmlsec@2.3.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-policy-stax@2.4.3?type=jar">
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-ws-security-stax@2.4.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.wss4j/wss4j-policy@2.4.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf.xjc-utils/cxf-xjc-runtime@3.3.2?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
  </dependencies>
</bom>
