<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:41ec9460-6f7c-3e06-aaa6-42fb341f6e18" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2024-12-03T20:56:37Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.10?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-providers</name>
      <version>3.5.10</version>
      <description>Apache CXF JAX-RS Extensions: Providers</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.10?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-extension-providers</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.5.10</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c1c7c515c8e7a6c6c132e833116e8ee7</hash>
        <hash alg="SHA-1">4aaa17b67cc60e34f16856b280038badd93d1243</hash>
        <hash alg="SHA-256">57af44a446b2a3b88ccecde10f08420d75c461e6d8143eefbfc188acf741bcf5</hash>
        <hash alg="SHA-512">cbd61218a1e2548d9dae8a11538e82ef95e02532f6702091fd4f925e4961c26634c2b98aa5d5fc359e50b2a7c3eb2ad74b1fe481cf9710d517cfa46cb111b5e6</hash>
        <hash alg="SHA-384">9793c58460b1fd58a961a11ce0cf324360901340452aee4d34d1e9fdfc238e51cc2161490eaa9f3dd68b79534c40c6c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d3790292a30333a14b7fb1143864a9c</hash>
        <hash alg="SHA-1">a169a961a2bb9ac69517ec1005e451becf5cdfab</hash>
        <hash alg="SHA-256">4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4</hash>
        <hash alg="SHA-512">c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff</hash>
        <hash alg="SHA-384">7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67005a4cf5ee9cfd82edec1bdbecb32b</hash>
        <hash alg="SHA-1">ec8930fa62e7b1758b1664d135f50c7abe86a4a3</hash>
        <hash alg="SHA-256">7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f</hash>
        <hash alg="SHA-512">5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9</hash>
        <hash alg="SHA-384">ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.4.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">afcba1114fca8199ef26346dd6011e90</hash>
        <hash alg="SHA-1">c47579857bbf12c85499f431d4ecf27d77976b7c</hash>
        <hash alg="SHA-256">d6eb9f2f40049a7a808baf11ffba0737648e62ff52fde9271d808e5d57a27279</hash>
        <hash alg="SHA-512">7da4cd51f7082e59b3cb78988cda78bf162e2b02457caf17242cb9cea9b8002ada15d4dfe774ca0355acdea95c88b67c4d06a27a61653cb84c9a46d27b2726c6</hash>
        <hash alg="SHA-384">6e25d32eb4c127f7129ccd912ff882625d3fa43e8eba9bc55013a27a61806d1b865ec809bd21d58d3dbfa3d9e2a3d516</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>4.0.4</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f5d1d7a29978e4ae0be5a456ee1c65c3</hash>
        <hash alg="SHA-1">b8a1142e04838fe54194049c6e7a18dae8f9b960</hash>
        <hash alg="SHA-256">586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127</hash>
        <hash alg="SHA-512">1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1</hash>
        <hash alg="SHA-384">ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.5.10</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1e19ce786bf5373af81a88b48d790971</hash>
        <hash alg="SHA-1">c9d563334bb0d4395fc1f19de831061d3ae8136b</hash>
        <hash alg="SHA-256">10fa4388464a8172dc6d7defc1a8b89b0ff63f1c2c83f555e5e122dd75dd90fd</hash>
        <hash alg="SHA-512">e9adb5aefa9d3c82ec397c2f1959793708eb92e5caa76b63d4bf1964d2251277d9068c806a1906326afd87e5fb5d0aa7030db7b7eabfca00e06d420f5f7e7bea</hash>
        <hash alg="SHA-384">ad04122ad2d5cfa1e9c3ad60a6436bf9145c5cbb191668ec6b831b424b3e39eabcedbd2f6e8f6647433cc40d1c90a39d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.5.10</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b55378fc6a42b4fe1fa5a7c8b86de5b6</hash>
        <hash alg="SHA-1">8c75120ff525dbcce6e03a8e58830d445ad9b218</hash>
        <hash alg="SHA-256">2f3ca36f2a36d972455e8f7a735b77a207f33c014a7a9e25d5d40486808aa617</hash>
        <hash alg="SHA-512">2ac447bf5a920fefce90f0608ef05d622be20ae02ba17c18a204aa7a3c8777b0d3aebbcb1ca1920fe5786b7cbe757aded928bdd9010af2aab4378ab3aa546158</hash>
        <hash alg="SHA-384">272fcc8a1c1d3045aa62793d19d8d1147db2c8d047d4cb690113f134f332a959d66f3520e49ccc3684d58d8a8e311943</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.5.10</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a50f7847969b5a3afc10aa75d7b3a81</hash>
        <hash alg="SHA-1">aba405eae48c4fe8cfcc355364222ef4b3670568</hash>
        <hash alg="SHA-256">d72de1059a12b4c718cc8d3f40a1dda9a18b849834d6677e9c3d723109fa5e81</hash>
        <hash alg="SHA-512">507d8e6fb8d9b3b6885ca5808966b3477b420c2dbb6216fad31cfaf20b9bf59ad53146caf3169430557bcfb462ac9222ecb4e8049f7037365975f5717809663b</hash>
        <hash alg="SHA-384">2b62f10209d01ca6b58d7c6b4dbea1f4d5ba24e496afb61f2a4ace4e72b325b0b315459bb809acbef9b2f64c27f7d907</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-databinding-aegis</name>
      <version>3.5.10</version>
      <description>Apache CXF Runtime Aegis Databinding</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">39408eb07c934fe2c2bf327b41127bbe</hash>
        <hash alg="SHA-1">8b3f03764003eca4255430bf28a9b862d14a3e0d</hash>
        <hash alg="SHA-256">196269118f314c33c38011490a1e66547314ca035f233310e8922c4244f0138e</hash>
        <hash alg="SHA-512">09fdad1e890535f55ae803421a0e262623f05d436086d998871931216e5414c0e6c071d91347dc477d31b36d79c1a334755589b30a1c7dec6a9ef827c634cbaa</hash>
        <hash alg="SHA-384">c8770b0ce0fa8edc81f7103cdc754c2efa8c40b9695fe4a8964f8ec0866d7aae01ce856b210c3193040f7098a3e8ff53</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org/</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-databinding-aegis</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-wsdl</name>
      <version>3.5.10</version>
      <description>Apache CXF Runtime Core for WSDL Based Technologies</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b245fc10546a3bf4526196d47d05ea1c</hash>
        <hash alg="SHA-1">72b1a4069f6201993030c115a06bd95946053b7a</hash>
        <hash alg="SHA-256">8af1163cd464ac83aaaab103dd94d6a7657a0ee1262edf76ca76400d4edf43b7</hash>
        <hash alg="SHA-512">a1f7c4ee6a58bfac9f733a350edb6e741c27fd4f7b98ef2ebe3c56543f4c9218f197849e3308a92716b52599e443c7c2e4ef88240170136fd400d18161be7dfa</hash>
        <hash alg="SHA-384">a10101c0286dde118c75d4c0fcf8ed6873ff89c02e26ecb7d9320ab99349bd77782c72a3d19064b0dbe7174f0036a5c1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-wsdl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar">
      <group>wsdl4j</group>
      <name>wsdl4j</name>
      <version>1.6.3</version>
      <description>Java stub generator for WSDL</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cfc28d89625c5e88589aec7a9aee0208</hash>
        <hash alg="SHA-1">6d106a6845a3d3477a1560008479312888e94f2f</hash>
        <hash alg="SHA-256">740f448e6b3bc110e02f4a1e56fb57672e732d2ecaf29ae15835051ae8af4725</hash>
        <hash alg="SHA-512">3779363efe4b7cf23bfc68388f3c6b5105dedb9192080f144534fcacc8a77014f9f3eb3ae1927344a267364c24deedebf25e306f80dfc293851973685cc58c52</hash>
        <hash alg="SHA-384">19b91e5508f5e33b8d7c4ad41d3d679d34c0f7b43651f19c7962f534322e6cb768595430a115df82eaf66905a4a71996</hash>
      </hashes>
      <licenses>
        <license>
          <name>CPL</name>
          <url>http://www.opensource.org/licenses/cpl1.0.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://sf.net/projects/wsdl4j</url>
        </reference>
        <reference type="vcs">
          <url>http://wsdl4j.cvs.sourceforge.net/wsdl4j</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.10?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-json-basic</name>
      <version>3.5.10</version>
      <description>Apache CXF JAX-RS Extensions: JSON Basic</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1667145e5bf8bdbb9baddc719dfe17f8</hash>
        <hash alg="SHA-1">4141e9e8fc5bb015af69d6058541873b3179a51d</hash>
        <hash alg="SHA-256">5b26c0f07b4721ecf032c8623d440b26b1aafbeb75c181e644399428b0c2318b</hash>
        <hash alg="SHA-512">0bd1407fa34785227cf1cdbbff4c1232ad47cc555b4e275c3dfb48b5eed583e6655205a65301e9fcc96466216eb5cfe4506f47262ae6cf1f15e600338efdf26a</hash>
        <hash alg="SHA-384">29cdc2571e0b4343c630a6706e188b033e29c551bd2efea83d4cf407900ed5c3e8514d488fe2021f8c89bac6013582cd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.10?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-json-basic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.5.4</version>
      <description>A StAX implementation for JSON.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f6c3eeb572f5830303059fec2812821f</hash>
        <hash alg="SHA-1">174ca56c411b05aec323d8f53e66709c0d28b337</hash>
        <hash alg="SHA-256">fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda</hash>
        <hash alg="SHA-512">afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a</hash>
        <hash alg="SHA-384">1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jettison-json/jettison</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar">
      <group>org.dom4j</group>
      <name>dom4j</name>
      <version>2.1.4</version>
      <description>flexible XML framework for Java</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8246840e53db2781ca941e4d3f9ad715</hash>
        <hash alg="SHA-1">35c16721b88cf17b8279fcb134c0abb161cc0e9b</hash>
        <hash alg="SHA-256">235a9167a8a199be04b5326d92927ca0adeb90d11f69fe2e821b34ce8433b591</hash>
        <hash alg="SHA-512">b647a1c9cbd8e8e0a855160b8522fff8e1d4df95e54e116a1cfe66d17083ff8b8ca6fe706d6aeea6e7d3e0116212af9a5f6c7fade642869a33fc7a971d116af9</hash>
        <hash alg="SHA-384">b85b6c9a7a89af8f44a3373a92e3b231932fb7ee6860b387ad2e383ad266cc6b613cc8128eeb324487ab44cbc99a5d22</hash>
      </hashes>
      <licenses>
        <license>
          <id>Plexus</id>
          <url>https://fedoraproject.org/wiki/Licensing/Plexus_Classworlds_License</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.dom4j/dom4j@2.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://dom4j.github.io/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.abdera</group>
      <name>abdera-core</name>
      <version>1.1.3</version>
      <description>Atom Specification Implementation Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">feddfe86769a7bdc1dd0cbc333cfd8c4</hash>
        <hash alg="SHA-1">1e2ef091082534fb97ec1bd83dae422977b23c4f</hash>
        <hash alg="SHA-256">72ba965a99ffb7f23f35b64406535e0f36d8be5d9b91243f6d5816c7593df39e</hash>
        <hash alg="SHA-512">82aaa97eee41b349e77972eecc7754c73dec95acab473f72e8983b58d3f240cc1eb772eb92628612f43dac963db3f7ecf843b9c26470c7f9436eca1d7d964bf0</hash>
        <hash alg="SHA-384">1f1a7c408b933156cb9ed973ebea4c6759551d86cd4f0f34a630995412ca585aab140dfeffbc7e4c32e88f24db0f52b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://abdera.apache.org/abdera-core</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ABDERA</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/abdera-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/abdera/java/tags/abdera-1.0/abdera-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.abdera/abdera-i18n@1.1.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.abdera</group>
      <name>abdera-i18n</name>
      <version>1.1.3</version>
      <description>RFC 3987 (Internationlaized Resource Identifier) libraries.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fcf4098c96589aa293a1dc649ddd4cd1</hash>
        <hash alg="SHA-1">5937b1488b1288fa100b969b5a77d79a6d691e41</hash>
        <hash alg="SHA-256">4bff98380435153f4eac8f4c213aa1f8e231949ef5c30bcbc1bc37dcbf446e4d</hash>
        <hash alg="SHA-512">d07d4f7daa1381dbadd4c582a06ea32557587e39dd8af4fd60124c4e47f7d7c11ae0f74b75c4a226ff4bcca1d0b608f496a5c005709a3085a5e5882243ba87ce</hash>
        <hash alg="SHA-384">d07b1bbf16df8bafea384f3506d32e2e4403ec8b399da9a5ca14e9bf89b2d3b1125b14ea6bb0a187d86f69d8e5e1f8af</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.abdera/abdera-i18n@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://abdera.apache.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ABDERA</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/abdera-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/abdera/java/tags/abdera-1.0/abdera-i18n</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-activation_1.1_spec@1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-activation_1.1_spec</name>
      <version>1.1</version>
      <description>Java Activation Spec API 1.1</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6f2756f073402855a1567c1523f66b9b</hash>
        <hash alg="SHA-1">f15af1b53fba7f23ce5e9de4fb57a88585aa9eee</hash>
        <hash alg="SHA-256">3910d9f8b331b2ae573e16591ac246058e088cac97f3ec064f46b10a8801fcb9</hash>
        <hash alg="SHA-512">8f79ad310d38f159c3bad5ab16a3b4a1d8aaf57c62e30ac2e4a379e6bd4db5c3eeab0ebba663e483723722cc579edd33d99d2cdfb5146fd4ff7bd8f7a55bee25</hash>
        <hash alg="SHA-384">207220cd078940e8c2e4454ef10b71bcb4ec18e61ddde34dbbcb5ed8e051cdaf22833b4d35bd372db7e0d41143d36e17</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-activation_1.1_spec@1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/maven/specs/geronimo-activation_1.1_spec/1.1</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-activation_1.1_spec-1.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.17.1</version>
      <description>The Apache Commons Codec component contains encoders and decoders for
     various formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">7b3438ab4c6d91e0066d410947e43f3e</hash>
        <hash alg="SHA-1">973638b7149d333563584137ebf13a691bb60579</hash>
        <hash alg="SHA-256">f9f6cb103f2ddc3c99a9d80ada2ae7bf0685111fd6bffccb72033d1da4e6ff23</hash>
        <hash alg="SHA-512">a7db98db470e6ad338266ff442fbdfbc277ba1d07a591336f7d15dc49fdac884da7dac04d806628b12437f993d8b5e6a4b800a66590ff11936dbf8bedcd8e860</hash>
        <hash alg="SHA-384">ef0b8e0fbea5ee057b2c39114ff862a057d207d4dd6b4fd2f5ca96bfc039e76274f1dd02ddf985f1fa965736a522f5c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.17.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://commons.apache.org/proper/commons-codec/</url>
        </reference>
        <reference type="build-system">
          <url>https://github.com/apache/commons-parent/actions</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CODEC</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/apache/commons-codec</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.2</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">040b4b4d8eac886f6b4a2a3bd2f31b00</hash>
        <hash alg="SHA-1">4bfc12adfe4842bf07b657f0369c4cb522955686</hash>
        <hash alg="SHA-256">daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636</hash>
        <hash alg="SHA-512">ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557</hash>
        <hash alg="SHA-384">ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://commons.apache.org/proper/commons-logging/</url>
        </reference>
        <reference type="build-system">
          <url>https://continuum-ci.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/LOGGING</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/commons-user/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.abdera/abdera-parser@1.1.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.abdera</group>
      <name>abdera-parser</name>
      <version>1.1.3</version>
      <description>Atom Specification Implementation Parser</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6aab685c6553cc72b4535d0077782b73</hash>
        <hash alg="SHA-1">c3ef6d831498dc2e05d7a0902c36a565ce09ca9a</hash>
        <hash alg="SHA-256">92d368ccaced0aa111c353fca71c8ec8499933f2716cb70f4586095c521ef16c</hash>
        <hash alg="SHA-512">50b928e3b6fd0907ac2ae661c656ff99ccbe03a1015f16f5c296392014efd13d77bfc37bbb9ef2ef2c7c1dc359c987f537dd60351094a1ae822c4adf9c5f5195</hash>
        <hash alg="SHA-384">0bdeaa5c7b4fb5ea745660727635ef60a13d6a421f2ce3e558ae14782b2a41a4543ee3a6fc11a7a60eee2a0e94d5976d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.abdera/abdera-parser@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://abdera.apache.org/abdera-parser</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ABDERA</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/abdera-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/abdera/java/tags/abdera-1.0/abdera-parser</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.commons.axiom/axiom-api@1.2.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.commons.axiom</group>
      <name>axiom-api</name>
      <version>1.2.14</version>
      <description>The Axiom API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3582fecf1cde5f8473e1205aef3e43f1</hash>
        <hash alg="SHA-1">5b11407fb3c02556e7c86a0922f8f8105afb3e4d</hash>
        <hash alg="SHA-256">c17b35199ff938240ac18f70e0750888269432375029e15d8e5d49ce294a654d</hash>
        <hash alg="SHA-512">a3eabec20d66f225d98a332858bec8a16ca65b1a56d6a4e54c0793b374dd013b688c350421d08f9cd786c3307c9bda66b124de2dac3bf0a0dc2bf9b6709d4f6f</hash>
        <hash alg="SHA-384">fe7a935c06ce1e9953fd0c48bc52dccbe38005f6d31b8404b2dbc6aa85e9302de0f4e56fd5977236bf8b5bf691502caa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.commons.axiom/axiom-api@1.2.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ws.apache.org/axiom/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/AXIOM</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/ws-users/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/webservices/commons/tags/axiom/1.2.14/modules/axiom-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-javamail_1.4_spec@1.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-javamail_1.4_spec</name>
      <version>1.7.1</version>
      <description>Javamail 1.4 Specification</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f3b9d8c9a79eefdc0ebe07c34612646d</hash>
        <hash alg="SHA-1">43ad4090b1a07a11c82ac40c01fc4e2fbad20013</hash>
        <hash alg="SHA-256">6f1e85d9c66135f5a9dbc9f78cbf8132e52f8a85884d618ccf0dbe9344c5a330</hash>
        <hash alg="SHA-512">37e0f09789516a35387306d592fd305b2e12c4ff5cc42cdd6ea6d9d29427aa993ead13df3152b680dd6646089afb1d3a214118481ca30513b3e19250c79a5b0f</hash>
        <hash alg="SHA-384">db002d44fee23572814e801b67525511e758efb1f4c2dc7fd64a69fcdd56c86032e9610fdd354866575b06ccc00f1796</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-javamail_1.4_spec@1.7.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://geronimo.apache.org/maven/specs/geronimo-javamail_1.4_spec/1.7.1</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url>
        </reference>
        <reference type="vcs">
          <url>https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-javamail_1.4_spec-1.7.1</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.james/apache-mime4j-core@0.7.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.james</group>
      <name>apache-mime4j-core</name>
      <version>0.7.2</version>
      <description>Java stream based MIME message parser</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">88f799546eca803c53eee01a4ce5edcd</hash>
        <hash alg="SHA-1">a81264fe0265ebe8fd1d8128aad06dc320de6eef</hash>
        <hash alg="SHA-256">4d7434c68f94b81a253c12f28e6bbb4d6239c361d6086a46e22e594bb43ac660</hash>
        <hash alg="SHA-512">102de90c7b4462fe9906de7f49edbcefef495305950b6748546cbd513a6c2368f81773a8b6e00064c22d942eb6739f20d6aeb7e5211597234cc24749c1c225ee</hash>
        <hash alg="SHA-384">fa64a1e38d0589853cd639b0ae051ce1448387719f52de5358518c7588b51256f11f9d6d9fd14e6ec97bdde45ebd1eac</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.james/apache-mime4j-core@0.7.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://james.apache.org/mime4j/apache-mime4j-core</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/MIME4J</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/james-server-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/james/mime4j/tags/apache-mime4j-project-0.7.2/apache-mime4j-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.commons.axiom/axiom-impl@1.2.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.commons.axiom</group>
      <name>axiom-impl</name>
      <version>1.2.14</version>
      <description>The Axiom default implementation.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">18065f2d3e1d95b532a83bb003092388</hash>
        <hash alg="SHA-1">c4769c96ceee2893a1a95164e6a9b4d669917c8c</hash>
        <hash alg="SHA-256">cfafc9dab48292b86932b29b1e3c08b4dd2fa1f1e2a7bc9cd0f0f88868edf222</hash>
        <hash alg="SHA-512">723a9925013a417d315b4a10a4de2f1019b82c38a99ffe1ca51bc63111c72d57d511d9ed91e61a2ad8754d0209a55b12384c5374dea6bebe406b8ddea0f2cfd0</hash>
        <hash alg="SHA-384">bacaf6d7dd1de11e2a84ba0eb939ec7fec52a26ee864546951e0b5aa284739d67c6807e8ede0b5ee560682170b20287f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.commons.axiom/axiom-impl@1.2.14?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://ws.apache.org/axiom/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://issues.apache.org/jira/browse/AXIOM</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/ws-users/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/viewvc/webservices/commons/tags/axiom/1.2.14/modules/axiom-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jaxen/jaxen@1.1.4?type=jar">
      <publisher>Codehaus</publisher>
      <group>jaxen</group>
      <name>jaxen</name>
      <version>1.1.4</version>
      <description>Jaxen is a universal Java XPath engine.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">22ac9320ae8f9b03c4c98e8ab621a10c</hash>
        <hash alg="SHA-1">8c06a96cf9150ded75c28b7087ed821a93270c41</hash>
        <hash alg="SHA-256">5da6c3bfc2aaf0fd7d43dc76829164a815fb9a9567eca9b7ccf67998fa70e3b5</hash>
        <hash alg="SHA-512">7eb04780649505cc2f8cbbf55c5a61b29873f882731bd61208fdb94e739b9b2292f502d9cb3f2a2fea8ed6d06cf930c0b6345beb536fbb79e8b166df37ef187a</hash>
        <hash alg="SHA-384">6977b5dce2ff10c24707e22feff8043c2883e228e1505dd91a04293af05ed9a609042daa08ab08b63ab5970c540052fb</hash>
      </hashes>
      <purl>pkg:maven/jaxen/jaxen@1.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://jaxen.codehaus.org/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>http://jira.codehaus.org/BrowseProject.jspa?id=10022</url>
        </reference>
        <reference type="mailing-list">
          <url>http://archive.jaxen.codehaus.org/user/</url>
        </reference>
        <reference type="vcs">
          <url>http://fisheye.codehaus.org/browse/jaxen/tags/jaxen-1.1.4</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.abdera/abdera-extensions-json@1.1.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.abdera</group>
      <name>abdera-extensions-json</name>
      <version>1.1.3</version>
      <description>Atom Specification Extensions - JSON</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3a56b1225a10a2ac061a2441543a0b1d</hash>
        <hash alg="SHA-1">8497e5f99a34f9a031e56e99ef0663f8f6741a86</hash>
        <hash alg="SHA-256">38dcf587b4f6a3ff49bd72dfa1d6b10b5f96d8c8f60ee8ca49c2264ec8a0cbad</hash>
        <hash alg="SHA-512">77bbb739216ac6227afc496c330cc7c7a93c01c4609cc4fe548388c98f11aa397c9161b93cb4ab12ff0dc2b157e795dec0ceb458b3326a4fda2091b51c619891</hash>
        <hash alg="SHA-384">b1f94f880938b4c238dda7c1dd2f9d6d452056dddae212193cf068fe4bd6bceea87a6b62fdd0ce5854490ffa1fdd292f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.abdera/abdera-extensions-json@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://abdera.apache.org/abdera-extensions-json</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ABDERA</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/abdera-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/abdera/java/tags/abdera-1.0/abdera-extensions-json</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.abdera/abdera-extensions-main@1.1.3?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.abdera</group>
      <name>abdera-extensions-main</name>
      <version>1.1.3</version>
      <description>Atom Specification Extensions - Main</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">a536e4a600562132d0c5ad8a530f5bbc</hash>
        <hash alg="SHA-1">101af911e6a4d566e6a2a64ad8da3521ae956c09</hash>
        <hash alg="SHA-256">a58f5d70b4a1b500aa7acf4d6b8bded92aacbf6f2c3d025dbbcbb19a4f642343</hash>
        <hash alg="SHA-512">4bcaebd0a132e177b0afc336a1049e319eca6cb97408cd405088a8b3a77473c9a58f6b9b9049cf7e986bfa86935355d99b10038b86c6d5d79a4a406ca72b7f61</hash>
        <hash alg="SHA-384">2df99656deafe72cb06c5d8951b390b2d8971caf5a8f45a437b03d159b829f98266ffb8cfc6a9f66ffa605eb3fef3d4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.abdera/abdera-extensions-main@1.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://abdera.apache.org/abdera-extensions-main</url>
        </reference>
        <reference type="distribution-intake">
          <url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/ABDERA</url>
        </reference>
        <reference type="mailing-list">
          <url>http://mail-archives.apache.org/mod_mbox/abdera-dev/</url>
        </reference>
        <reference type="vcs">
          <url>http://svn.apache.org/repos/asf/abdera/java/tags/abdera-1.0/abdera-extensions-main</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>1.1.6</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9e0420bfd741a45d4f295e047cc09d5f</hash>
        <hash alg="SHA-1">3b1f26306abd9d2b1847cf62ee491d0d1b942c7f</hash>
        <hash alg="SHA-256">bc58a73d5ecb828f1cfaa8089f471f1d8e26280dc30fe5df242a191100769782</hash>
        <hash alg="SHA-512">10c5e88a7b33a57d63707bac2ecc59fe7d3535b2615b725ac7966b45c1582b45b1f50be951e0d0cf4dd23f1aa7c2420fc27630b62f33551d7ac0e81ee161962d</hash>
        <hash alg="SHA-384">6b01ff5cde9c0e0ff79beffda23c275f9600ace4b13335e0819f4f702999d4451fbee0be36d81e30b7ad7acd9e87e672</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp/jakarta.json-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar">
      <publisher>Oracle</publisher>
      <group>org.glassfish</group>
      <name>javax.json</name>
      <version>1.1.4</version>
      <description>Default provider for JSR 374:Java API for Processing JSON</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ac67218fb9716fec512be8d0d877bde2</hash>
        <hash alg="SHA-1">943f240a509d3c70b448a55c6735591ecbd37c88</hash>
        <hash alg="SHA-256">17fdeb7e22375a7fb40bb0551306f6dcf2b5743078668adcdf6c642c9a9ec955</hash>
        <hash alg="SHA-512">63f45ca81a86cce050a3096ed6d7eb7e6db7a9251095abfc7badc956e5d0d8f59ffb880b6ade8f461e655cbeac324c7a3c5a01af6e30639a9f0cb8c807552f9d</hash>
        <hash alg="SHA-384">afdfb09bce2bf863e68774ed5a66ca36927cb2e8da04c9f1946999528c9e253af3ee2d32c887660fd7a1076b906cd23e</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.1 OR GPL-2.0-only)</expression>
      </licenses>
      <purl>pkg:maven/org.glassfish/javax.json@1.1.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://javaee.github.io/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://maven.java.net/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/javaee/jsonp/javax.json</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>1.0.2</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ddca13acc50cfa663599525a8d10bb04</hash>
        <hash alg="SHA-1">a0f7cf034442d1fd195ca78cf3d6633140d5928f</hash>
        <hash alg="SHA-256">29226a8ee37ffb7bfb56d5336c3bb93eeed8cebc5498152bbaae1d49ade2b8fe</hash>
        <hash alg="SHA-512">a791e99d5d0019c59ff7cf87a3a517c39412d1eac978e59ff0c73bcaf7e2844dabade4ad810f66bd4313d3833d93beff55a82ed130922ae3fea5b50d98489a30</hash>
        <hash alg="SHA-384">dee6917e5d5c8b845c66514ed00d1aad74e957d14c849389830bd6119999299b1d57f0e33b50795ce64e34bc00dfbb67</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jsonb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jsonb-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.7.1</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e2cdd32d198ad31427d298eee9d39d8d</hash>
        <hash alg="SHA-1">f0ed132a49244b042cd0e15702ab9f2ce3cc8436</hash>
        <hash alg="SHA-256">8cadd43ac5eb6d09de05faecca38b917a040bb9139c7edeb4cc81c740b713281</hash>
        <hash alg="SHA-512">4767b01603dad5c79cc1e2b5f3722f72b1059d928f184f446ba11badeb1b381b3a3a9a801cc43d25d396df950b09d19597c73173c411b1da890de808b94f1f50</hash>
        <hash alg="SHA-384">166e2be10a19ca6a6d7cadb542eb1c948562483f02557b467a50a3d19d01318e12e5c3b495c482f3f5369be1b7f20eed</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.7.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://asm.ow2.io/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://gitlab.ow2.org/asm/asm/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail.ow2.org/wws/arc/asm/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitlab.ow2.org/asm/asm/</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@3.5.10?type=bundle">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
      <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.abdera/abdera-parser@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.abdera/abdera-extensions-json@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.4.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-databinding-aegis@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-wsdl@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
      <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/wsdl4j/wsdl4j@1.6.3?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.7.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.5.10?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.5.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"/>
    <dependency ref="pkg:maven/org.dom4j/dom4j@2.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.abdera/abdera-i18n@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-activation_1.1_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.abdera/abdera-i18n@1.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-activation_1.1_spec@1.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-activation_1.1_spec@1.1?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.17.1?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.abdera/abdera-parser@1.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.commons.axiom/axiom-api@1.2.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.commons.axiom/axiom-impl@1.2.14?type=jar"/>
      <dependency ref="pkg:maven/jaxen/jaxen@1.1.4?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ws.commons.axiom/axiom-api@1.2.14?type=jar">
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-javamail_1.4_spec@1.7.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
      <dependency ref="pkg:maven/jaxen/jaxen@1.1.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.james/apache-mime4j-core@0.7.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-javamail_1.4_spec@1.7.1?type=jar"/>
    <dependency ref="pkg:maven/jaxen/jaxen@1.1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.james/apache-mime4j-core@0.7.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.commons.axiom/axiom-impl@1.2.14?type=jar">
      <dependency ref="pkg:maven/org.apache.ws.commons.axiom/axiom-api@1.2.14?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-javamail_1.4_spec@1.7.1?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.abdera/abdera-extensions-json@1.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.abdera/abdera-extensions-main@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.abdera/abdera-extensions-main@1.1.3?type=jar">
      <dependency ref="pkg:maven/org.apache.abdera/abdera-core@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish/javax.json@1.1.4?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
  </dependencies>
</bom>
