<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:17e04613-4469-30c8-a9db-83674008af74" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-03-03T17:34:32Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.0.7?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-mp-client</name>
      <version>4.0.7</version>
      <description>Apache CXF MicroProfile Client</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.0.7?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-mp-client</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>4.0.7</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">807fd716b4dd7e502b9a66699d4a1509</hash>
        <hash alg="SHA-1">5ac857ec8437ee3675ae4e004326d02b7b3a4ce9</hash>
        <hash alg="SHA-256">0521aa219b78c01886889b9d36322ac15c2d2a38d8d6a24423e9566360e8c66f</hash>
        <hash alg="SHA-512">a5fe708eb9466509cb09c7d5f2b833e00c16c766ce3d8b203d7b82de3571805866faa53e2c4deda71b44e511a3a4a3d592f42e0a735c84656a5c5ba238d6c191</hash>
        <hash alg="SHA-384">af8a1e513eddc1c13b7ca7eb2df1207661089ace4963e701d68c4687b50ae6dd9d6afa528b8ebfd755fcf3ef1a7b25d9</hash>
        <hash alg="SHA3-384">345ffbb96bc8b841d63f8c5ea7aa5a8a7d745de2a26a652df6a5962dc6b066ae8457ecd4fb6cb687ae460bfec46cfc52</hash>
        <hash alg="SHA3-256">b3a6c4736b853d93a0ebed163e68d237a3bddaf1a6b0ff6216a3d4320f2f1179</hash>
        <hash alg="SHA3-512">d6648e69ac613adb8215a3d855572ea4f7ef29dff9932bd757ef319dcc93041df5b0d11cda22d3eddb4cd63f654db277ab7e97dfcd7d0a593d7e07d0ffcd96fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-client</name>
      <version>4.0.7</version>
      <description>Apache CXF JAX-RS Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a65a84a5934bf1a2419e22a3de5f15cf</hash>
        <hash alg="SHA-1">af0b659adf9803c9aaf670bf0268397c5e788d13</hash>
        <hash alg="SHA-256">13a689caf0fd0d9f5a66aa2db225cea21f798d9b6cfd6bffdcb7ee9bd1577dc7</hash>
        <hash alg="SHA-512">5c68cb3b3cdb03ae98abb0d0301ef210ea52a02f516a0822d8dc1f7d3979af259f1bc707cec3e63e3621813e6a617590e85e3d13deecda0db98b8eb89fb85b74</hash>
        <hash alg="SHA-384">e5e1dda601129f4a4900c3ce893d6e6e46bffda845c000a1cff25376aa4e590866df9a8874cc7e1b5a09cff7d76f58b3</hash>
        <hash alg="SHA3-384">599613ee4ac2474e1af0728257c368fa8767a5fe1b0bd9c778052a2a8b25fd98fc1b9a1cefb5838d50b8be7f7e94ed93</hash>
        <hash alg="SHA3-256">6944c9235b10b1eb8537da1c3a2e7b93b4e2f2fc46b2c42b3fa9e78d2ce5f28b</hash>
        <hash alg="SHA3-512">ddbd994735dffbd277c87aff7cedafed98478e55959e543b3cef5faf613c1542d318900ccebcb78ad8fef62a93be378f108cfdd71de299248cc1729467790fff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar">
      <group>org.reactivestreams</group>
      <name>reactive-streams</name>
      <version>1.0.4</version>
      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eda7978509c32d99166745cc144c99cd</hash>
        <hash alg="SHA-1">3864a1320d97d7b045f729a326e1e077661f31b7</hash>
        <hash alg="SHA-256">f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28</hash>
        <hash alg="SHA-512">cdab6bd156f39106cd6bbfd47df1f4b0a89dc4aa28c68c31ef12a463193c688897e415f01b8d7f0d487b0e6b5bd2f19044bf8605704b024f26d6aa1f4f9a2471</hash>
        <hash alg="SHA-384">ce787a93e3993dca02d7ccb8a65b2922bc94bfaf5a521ffb5567300a9abc3c222ebbfffed28f5219934ceb3da5b3e9c8</hash>
        <hash alg="SHA3-384">68daf9498232897989ee91c1ad47c28796c028658cfe023c2907152cd64ac303a3bd961e5d33d952be7441bee7ff5f14</hash>
        <hash alg="SHA3-256">0c2165ea39330d7cccf05aa60067dc8562a15db7f23690c8d4fc71cd3e49fdd8</hash>
        <hash alg="SHA3-512">19c2d866a6c4d7c61ceb63d3b98324928eac880c8f23d84202c1145b4779438b1b275f1d20c74b06ecb0fbfe83baaecce3b4366ead0f7cc8b7b6916a8910c944</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT-0</id>
          <url>https://github.com/aws/mit-0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.reactive-streams.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>4.0.7</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">000b1ba42f706c090ef4ce15e313098c</hash>
        <hash alg="SHA-1">8f5f957f055e10609945ddaf1ca4580c9fafbf6a</hash>
        <hash alg="SHA-256">442f6913b9117e156ebaa92ff8f467cdf69ee6b07e33fa0341141dc17f4434c5</hash>
        <hash alg="SHA-512">4ddb3d182dbf73dbd6500042c0ef717a59770989911cc013ec7ad27ee687530d54b82e4678aaa5e3ea0f00bd40e20519105e58721d1264180c946431cfa5faec</hash>
        <hash alg="SHA-384">4b0de2ed48a7918ff926394455661bcfec2a9bf27b5ad187258b4c4f8ddb63aeaad7be1b614ace5418e73ff6904ad028</hash>
        <hash alg="SHA3-384">b1ae85e6f3185b7227412b3ef2ecffe887b8e0c3806236c8102c17fec0f313db2d3ecf5988306103f599e3ab8b793fcd</hash>
        <hash alg="SHA3-256">4699619ec889470deab8bdea90f466fe10081c62c901460abb3767ab39079f84</hash>
        <hash alg="SHA3-512">600d3d562a9a179b1fb5ce477a46f1e9512b8266063feea20862e721c325c6ea083c00c1b9b2266e54acf6a07f1a22c3d6ef4f49871259818115ad62d39d11bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>3.0.2</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9873391a222ff387e3167498d363d97a</hash>
        <hash alg="SHA-1">9897322f5de201bfbfcd1f4f46ffdd4204673b3c</hash>
        <hash alg="SHA-256">7b3a3784b9c6e343a8d38fc108602ba810177f03f2d8d1e7258b1cef7fd9d4c7</hash>
        <hash alg="SHA-512">f6a9722bf8ce9febcda2d2075f4378c61d7f4048f128173436f65efc9d9b0bff3cd288ab507fce950584937efa5a87149b50d8998d570363b59cddd62c29492a</hash>
        <hash alg="SHA-384">7ae2127cd11c154d43f24a51aef6bf509c4cd39ca788ec479b4a9cd94ef6c4164417210c9dac8ace12ff570c6e092351</hash>
        <hash alg="SHA3-384">694f250c6c2e679d7a4f3dd480fe8a9c650a0ef2ad1c45825cd6f996c94844c29277a49f30ed43c0166874eea79d53c9</hash>
        <hash alg="SHA3-256">13658fd194c302e879f975b6e2719681545e2be06a40c7da5afa2ec424ec5c0d</hash>
        <hash alg="SHA3-512">81d6c3d6dce7c2858dde254523c3da14a7ff6edc92f9a5fbb3e9e73c3553508e546f829b07d68cf951b8e3837001078a7020e6e9d6a945c1d93a681f82656bde</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-core@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-core</name>
      <version>3.0.2</version>
      <description>JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d97e45fa20c174781424552e4283e460</hash>
        <hash alg="SHA-1">e83d0b0005525ddd8b8642bd0bb02227fcf871f1</hash>
        <hash alg="SHA-256">f9a360b939597643b2676e35fc497afb561d20e8a513128a5c0070366db11bbd</hash>
        <hash alg="SHA-512">e32ac9ebff3f9870154763f84ae2e2924647d0881226c908af3712694d63f1d85e3f23b75be1b7d37b20b64fa580423710f91753876a67ce83a7351f94effc44</hash>
        <hash alg="SHA-384">750a6f3b988da13d728fc0f2249fffbd126e9ee8c6342d03d15b8c8ca75cb036a5b78e8d6e06e8185c3026f518f73cd2</hash>
        <hash alg="SHA3-384">ec48d579868bf820c02cd3795b294e422ddef5bdfb0f618a1b21649634bac9f1230399eadd5ebfb1c0a0bf4cbd420119</hash>
        <hash alg="SHA3-256">4c9c401be1bab7a5311b0bd5457b340dfa22fa767a0edd46ad4b4983eee99c20</hash>
        <hash alg="SHA3-512">afc5b8a5b73e75ab484a7108748f6c8da4e4824e8595e515b5476a7ee3b6855b0d85b8c6a8763344cc2eaf948d3559d1e00eb4cfd4cd179d2cede9776286b744</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-core@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@3.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>3.0.2</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1e918807b59e37de5c379d0720a1c335</hash>
        <hash alg="SHA-1">8c448a44cdcdbb5dd48ff2eb88cab858ed52cf91</hash>
        <hash alg="SHA-256">b4bcf94fb0a759456e2521724513baec94b78e93127544af162e3cff08d93343</hash>
        <hash alg="SHA-512">865abd04ac8f0c2240537eacc3a522f5f8f6f8d5400d09fb3d0005fdba68e54457fa419dbfe796190857f8d72ba0d1b8d809bab681b1b729172e6d6c097068db</hash>
        <hash alg="SHA-384">e5d6080f3016b7240f8c7610d1babf61049a73c7e79672fe4f0c954ddf796ceaed833771f9080f61d3ac0f1f898a0dc8</hash>
        <hash alg="SHA3-384">f5af29d5973f95f3e1f1356776ec14129e0e62f9e03f425774274219e73559bcadea5e787825865a4e6611f1637c34cb</hash>
        <hash alg="SHA3-256">29863921b7a843db5ee30a0260a5b4644c9153d0b95278091e9460ec16bb9d0e</hash>
        <hash alg="SHA3-512">4001f976b4acd3576dfab39f759d42f6ab2725ecc86546d9df4540b49ca143d931b902d26ea3487127451e732fc9f106616042008bcb0230116d163ce175220d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@3.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>4.0.1</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c1301f11d943a0bec02efc57c101409</hash>
        <hash alg="SHA-1">4e25c41d338aad4a2c92d0020c9ae0335fad5099</hash>
        <hash alg="SHA-256">9f91115f449384886f572bd62c8812ee1004273d4b5c85cac65179ad4c16990f</hash>
        <hash alg="SHA-512">739bce5f69ea088e0ca97d10d8fb2f0d03b54b344cf6d3d885dc72ef2ab7bdee2c5210cd10c780116fbbfcfd11b33c4477665ecfb7847b59d5bb374e53553afd</hash>
        <hash alg="SHA-384">05ee6f8176cb2889e9719d54c76623f0f98a33fce6fcfe9f32cd878436a08fcf9be4904aa5ee42e7a9c790d6ca2dc669</hash>
        <hash alg="SHA3-384">324d0ca7b38997d11c021cfb64421836df579a1a73ce347ee9132b73bfebc0f5f545628205158364aa7e90180299ebbb</hash>
        <hash alg="SHA3-256">de0db59787a695856917a628e2097fa83b5638eaec7b5d6c93b6a442d1070fc9</hash>
        <hash alg="SHA3-512">0d938c72f1b6b1231ef28f69625c32b2420c77686d5ce0ce00962d4dd47515732326763646f508a01b77802046092ad1eaa75ff3704155552efa4a1e62b726bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@4.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.6.2</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f322ee7db6505b01c8bfe5f54c5670df</hash>
        <hash alg="SHA-1">0bfe905f19ce0e60bff5b7adcbded2681a092ac3</hash>
        <hash alg="SHA-256">8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896</hash>
        <hash alg="SHA-512">00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703</hash>
        <hash alg="SHA-384">80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9</hash>
        <hash alg="SHA3-384">9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40</hash>
        <hash alg="SHA3-256">9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b</hash>
        <hash alg="SHA3-512">f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.angus</group>
      <name>angus-activation</name>
      <version>2.0.2</version>
      <description>Angus Activation Registries Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42bba74155dc773eca277ee7a16f74be</hash>
        <hash alg="SHA-1">41f1e0ddd157c856926ed149ab837d110955a9fc</hash>
        <hash alg="SHA-256">6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e</hash>
        <hash alg="SHA-512">1482c759843c23e0343ca554194862d53ac18a04ab4691b3bf05145abb77283617022a895c5ba2e33f62b77c2cfb906b90d0cb690623621b11f35194b54b1180</hash>
        <hash alg="SHA-384">0263b0f42e56f9cbf4a2446c26a29d6397477561c2149f7b7d0e62fb28ab4315d50faf4e96aff088d3ac204b16f90892</hash>
        <hash alg="SHA3-384">e77e5bf8be9f98ed06a652e2317253bb29e8f79b26910075332823987b2e1bd3dfbb2d7aeb5a57a454c8632241abcc0a</hash>
        <hash alg="SHA3-256">41d7d300d1399e4706a0ead464e13702d85023598a0a81899e40ee8eed847826</hash>
        <hash alg="SHA3-512">dbdcb824069f0dcf9f9d362b8db7c2efa77f28d77e07c204a28e56b79ebfc478d9c5f9e5f01c7269d3afc0db0e6126d74237cc5a51b5e9ec6b6664580a06de8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/angus-activation/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.3</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e7b680375ea9f40f3ddbd702efcd25</hash>
        <hash alg="SHA-1">fa165bd70cda600368eee31555222776a46b881f</hash>
        <hash alg="SHA-256">01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627</hash>
        <hash alg="SHA-512">aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad</hash>
        <hash alg="SHA-384">4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e</hash>
        <hash alg="SHA3-384">20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca</hash>
        <hash alg="SHA3-256">8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67</hash>
        <hash alg="SHA3-512">69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>3.0.1</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ce443876615a903fdff9e0d5d13cb8d4</hash>
        <hash alg="SHA-1">5257932df36ff3e4e6de50429dde946490a6a800</hash>
        <hash alg="SHA-256">b8fb4bee3ff5b5c1ef77144d8411316018d7bbd41fcf1ede0646f7978546b867</hash>
        <hash alg="SHA-512">7c74cedf7c0baaa5166311a4c4300a72eb09ae280ec3376553dd8651e6e3d5f100794421ba647b328195dfcf98a6cf7623169a0b87de3f13984dd7436c284807</hash>
        <hash alg="SHA-384">9e3e8b7b86884751280e71e3888d1ff3f4f0c9d6446ed8e32cd61f030532b455b7401d1495dc0da72cd3f6300c68f482</hash>
        <hash alg="SHA3-384">47bfcb7a14b57aaa6c813a54702af321dd488cd1697a52476bb46fb9e6162cd46b62faa876a77752b4a7271241924b38</hash>
        <hash alg="SHA3-256">91d3e457af90b684e246e02808fb8ededfef65f602717e3815417cb63f22c6b6</hash>
        <hash alg="SHA3-512">3c72bb852c244bfb7da0f382fda743c0f8522f56fa77337b203f5027ba8b32d12cd6d0d6ffadfea65552b508be9b40601d876b398a8fca8f4ae9ecd979154a93</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>4.0.7</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7489a1c1c7acd29d3b2b5cb63a642976</hash>
        <hash alg="SHA-1">9c34f80a49389694ec255632405d31bd2573b125</hash>
        <hash alg="SHA-256">c5573320cc79da611eeac09c32663ca0c72e2ae52a3ebb1f7a5bfa3a24ae23a3</hash>
        <hash alg="SHA-512">dd6bfe926ee22e9abc6ca13ac9a8b516aa1097209b3fa0e68dda29295a910f56a3fbb325d2bfb58bf570df22d574a31287b75bc85499fb803cbdbe4bc4dc93ec</hash>
        <hash alg="SHA-384">c7ce788f99897c3577e398793009d3b216bc8f6112ab49150ada350761aad13db2858a3f44a73e8c701b858d41023fe2</hash>
        <hash alg="SHA3-384">4dc72b6ccd4d37ef2ceaf14af0b8cf405be6c84f637595d550a24efbe16586107193cc59f7e302cb7ca7305187a7ff79</hash>
        <hash alg="SHA3-256">da36a560c95da8598b1ba0c70002e83c5077c4a55db9e8d0b4ee8a82c01bde65</hash>
        <hash alg="SHA3-512">75f9997c6261175108aa990ace76fac6d7e39dae234653ae9986ff629d3b2e56eadbc251c8779f8793bb54a3512e7f708fa3ff09540a654ae394b567fbea575a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>3.0.0</version>
      <description>Jakarta RESTful Web Services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd98ad2f0edcec6c0f0875695b8647e9</hash>
        <hash alg="SHA-1">5eea182d6651a7257bc8c3614507e1540c766fc2</hash>
        <hash alg="SHA-256">0bcb2cf4522831ad83cc7e936b8db60e2afb2582d19d672eb17d01da2c777322</hash>
        <hash alg="SHA-512">25a57149d3b5b57d21ad7b97d5c293adb549b363fb9c22f5d894adab174cd3019886cfa2b8425b67644b12769075fd891352c5230b66846c9bbcd26bc98dc3a9</hash>
        <hash alg="SHA-384">5602c64b0612e2b6649b2ca2aeae9eab536bb816d41643aa1caace022010b4767cdc9ae3518e2d303476c09260bd3023</hash>
        <hash alg="SHA3-384">ed2e09bb8083474846fa7edb928527d7f37258351aa45e93f46cf40215e89317b6659a829fef3b4837449e347bfb5ca9</hash>
        <hash alg="SHA3-256">67066e127150ca5eec06bb65caaacf3635d5ed856918518932f4d7766725df1c</hash>
        <hash alg="SHA3-512">439072f3869ad8a6128f2b2592328ba604b41111df2938a20b112b7ff8f16d537d8ffc4f83b8fe762c3f8f716fffd73b692a15e90666a1b3fcf97b4e2e9f4388</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>4.0.7</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fca6a691c602015f3e74faa934a31cb9</hash>
        <hash alg="SHA-1">e096c396e55269e95a8d720d5421c6cceb2d3a04</hash>
        <hash alg="SHA-256">87999c376570b54647cae8bca0a249e5750ce7e43bc471d3ab0deb22228aa30e</hash>
        <hash alg="SHA-512">e1591e0496d411b7c330f6c4bbc95c30823e54321319f63b75b753edb4aafe0da4e59b34d197f32ce9f1618056b640fbafa724d0012ea6314ebdf0048c1f1ca4</hash>
        <hash alg="SHA-384">b37212b9a94e15e299c7ad198c2e03c6c75809775dd6b737335f1e73f414474d1cd7dd9f0a57e300db982d349957af6e</hash>
        <hash alg="SHA3-384">274d483059c7798e0bcd39bfc8761f90039313e17efa8c00ba5803f9fb964cc8091270db1a47f2e06f0547c2b77b0517</hash>
        <hash alg="SHA3-256">2c6c338213bd6541ac53581b38bf98e08eae5c0e4bb1653eae873bf8bfc1f786</hash>
        <hash alg="SHA3-512">3862447579e0282364b862ba1f527f5c166302e411c7547ee753f38b736993bc42c26cc9bca1f83b3a6b22f212e305ec998b97778df45a8d979c47e0f82d32d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.rest.client</group>
      <name>microprofile-rest-client-api</name>
      <version>3.0.1</version>
      <description>Typesafe Rest Client APIs for MicroProfile :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3519069ea0441f9a923c75a025d27781</hash>
        <hash alg="SHA-1">e97ba8b1ff7b654cf6c9f6d90929e8360aff5b3c</hash>
        <hash alg="SHA-256">2b71698b95c892cc659235f4ffe663b5e2f1151ceb4e77268b23ff2b0c6321cb</hash>
        <hash alg="SHA-512">f315f932dd3904bdf481aca0410b0e1796ee84640675c858bc2bed30655054dc827d20761733928bdf8517e2d4fddfab9ac5f8f63507d0005c5073c4736a76e5</hash>
        <hash alg="SHA-384">3f525da7560271669e4d37903183931d14f4a404805f32f71dd4d22063d8390a1a90741ef4ad3955ba148ef8bd1a5d06</hash>
        <hash alg="SHA3-384">f09cb6ce2d6f893111d70f6470a274645681fa9c843139fadce5cfa7599167d19299fdd4c27be64a0a9313a40b8ac46d</hash>
        <hash alg="SHA3-256">95733b852f720f457dac7a3478f2e4e746a6f6a6c51e1bb1867338b0efed24f0</hash>
        <hash alg="SHA3-512">3d859d096104c9895cbf80d0731e53c89ca2ff83daba8feaafc12ed483656585f94a4b7f1c964475682cdb8bc95a4f887f5d397f033f42f326e583fae1aaf3f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://microprofile.io/microprofile-rest-client-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-rest-client/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-rest-client/microprofile-rest-client-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.0.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-providers</name>
      <version>4.0.7</version>
      <description>Apache CXF JAX-RS Extensions: Providers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e3dead51ab08170156f1c229880e8f0c</hash>
        <hash alg="SHA-1">88f3c52a20c5eaea074e222753c868d1f0a45085</hash>
        <hash alg="SHA-256">7f2477222141e8923a163c85a5113877b8c15ffd0ddb499ab4871ce3794adbfb</hash>
        <hash alg="SHA-512">8f816d127c01bffbc6e08df3b60dd12d03bcd1a65d20814f0e7857d73a9d175577d3d648b34c9edf0616c39a085e18caf14c72be9b2dd5957123fd2e7e59b7d1</hash>
        <hash alg="SHA-384">4740c877813339fd4d724a9f0c98caf1fc379ecd5c2f0be26001d5c3b2cee67b68d6f46cc0ce7b49ef1ed847b1253f06</hash>
        <hash alg="SHA3-384">7af2b10c932168820c402f4b4b83457417634d196430f40b35ddfa20682beb3e52446103663d6e7491a91b476701d548</hash>
        <hash alg="SHA3-256">030cfad4b7e15fb13e04753eff02572e6d7774d18d913bc70610f2f90adb57e4</hash>
        <hash alg="SHA3-512">9fbe85cf2dc3c33216d43ad7e9dd32e40d5a47589486feaf85173ce5e3f521016cbe40889368f8c19245c29665cbe8b95324d4b7c60b451754a14804ee3dc705</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.0.7?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-extension-providers</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>2.0.1</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1c60edf0fa7110dcb9ef1fe1a972d7eb</hash>
        <hash alg="SHA-1">f118a476a74a435e89bb8e36578b65a2be6c191e</hash>
        <hash alg="SHA-256">6152cdc29c3e99ad4bfb367d43464c9fe97ac800ddc1952b2452c5e0c21f89fd</hash>
        <hash alg="SHA-512">26847871f606e8df00ae89f646a5a4e10dfccffe0d8f346aff627b9bf929f37da3cd8ba760f8f200f270790120196994761ca671fe2bf8f26907b07c1c9ee4c7</hash>
        <hash alg="SHA-384">cbb78e22e6d6509d7c7350b61f7f8f33353e3d6581310065143636b9e7069b7192f97a23e02f0b8296ffbb1a64a8b19a</hash>
        <hash alg="SHA3-384">1e6445a1efcd95fdad7014a0e2451aa9d7dc879c413c68d867ec86159fea93b596f08b5382815935b53b4fb91da89473</hash>
        <hash alg="SHA3-256">ffdf00f0f79515e43cb673aa3614c73e99bee553bc0f354c64b890d03fa1560e</hash>
        <hash alg="SHA3-512">6a54bcf63655d8c8d891656c1743923fedf0c38a2bc866996a67bb84dbfd133c7dcc77a6e9ea8013f92a1cba3218fb1a66cbfb0035322f8efd00a48f0c4db3ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@2.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>2.0.0</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">95e196ecc9a1d6a2ec70bba86fa3e9f2</hash>
        <hash alg="SHA-1">25c23c19981bb61fbe3d4c5ffae2a8fa0327ed6e</hash>
        <hash alg="SHA-256">a5e606b5888b412b48907ad688b34dfe4e30ae8189c6f27cc0491b8f3c036287</hash>
        <hash alg="SHA-512">4a98e2e750318102a9f5faa60d249c5a1e7b0c28857d06e0f816b64ff5dabea2bcf6760d716c2f2dda92bfac15ed69616faf7632b4e93c86ac29436fa76a1f24</hash>
        <hash alg="SHA-384">543a46c93f23523dca2a3c80f9607885ab9f012de3d48e69535c8d4d0b4c78e3739d6750c0d51fc36a0693746ae9c81e</hash>
        <hash alg="SHA3-384">3e3a1e658f98d701cc13e39893ce4a3bc70e1264734d3812cf7dade9e519119555446140ac299dc95960b46e7d569eb7</hash>
        <hash alg="SHA3-256">0a544827c0bb1b3e2752d80453ab02c747e2e32bf17190477434b69a3dbe2055</hash>
        <hash alg="SHA3-512">e0972dfad996128d6530626945439d15fb79d57e7e28c5e8cbd37b6865500ceaa4c58227623f7842e6bcbcd2786c61d3462b84672c7d3d2272bd32505b1ff8ab</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jsonb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jsonb-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.config</group>
      <name>microprofile-config-api</name>
      <version>3.0.3</version>
      <description>MicroProfile Config :: API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">293c8f7892adf091f099a17072d00c76</hash>
        <hash alg="SHA-1">6eebba974a4fc34678679a061ac6ef25b2590749</hash>
        <hash alg="SHA-256">6c97b8d5c3649a9d03e73d8300ca9ce912a39f2e15e6a360f524e7d99662a23c</hash>
        <hash alg="SHA-512">e192f6e1a5ac52cadc0048b893ccb92e9fffb5ae71517b7ef9bfaf86954d4c619d6186d8330a9ceda46b2f53987b59e8772662c69332f6687c5f526ee00b4b43</hash>
        <hash alg="SHA-384">d27e4e0725795ff507da26811cdbb56bd3c1f1681b8d572f3b5b14e429741d1db3b80a3ca40cdf9de2d0f679945224c8</hash>
        <hash alg="SHA3-384">a1b1bd5db4232160b7949d9879fe93be913f927ac4b1560a78a05df347758059c352b71efc9f1a2552fbf7bfd5860893</hash>
        <hash alg="SHA3-256">d69cea0970b637cb57217020cfb67e6a5a11f3ecd3410259f0ed1d65c95a6254</hash>
        <hash alg="SHA3-512">ca5ca167c3d368b443ea3efd5063de1b40c912b883e614d3efc5a96d5e10e492f0d8714aceeeace3d1e97ac962ce983845481cfc037c70e087e482f6c9f44423</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.0.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-config/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-config/microprofile-config-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@3.0.0?type=jar">
      <publisher>JBoss by Red Hat, Inc.</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.cdi-api</name>
      <version>3.0.0</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1e6691bd6d2c0e4ff2b1ad2ea80417f2</hash>
        <hash alg="SHA-1">12f20e3a55b3c5a468f32bb577a145d8b9ef56a8</hash>
        <hash alg="SHA-256">addd3891bc1bd9fc65637b7edce6b324a4c681b4a85fd03f7c83d4fa1217aece</hash>
        <hash alg="SHA-512">5e12ede2ac5e1223a1c0040f0fcf304816144329402bb3631f7cff35efd991435542da39c8cf5bdb059ed4e9151a436b52af3f3ec9cb750c0ab9464f048b3f12</hash>
        <hash alg="SHA-384">48f948075225024641e08ed45e3163ee7c7ae30848b16c75936219c19215ac40c1fa818f97b4cf754e81474f26cd25dd</hash>
        <hash alg="SHA3-384">4152717f05744521320e942ceb6d6540dbd0d817f6871695ba38456a254021ce8e2cfc3c6a731c758cfcae649f719c9f</hash>
        <hash alg="SHA3-256">a5ffb2712dc2e3b10eef5e294f72ca9c0b8a69cc5ff44e00e5d803f1007bd21b</hash>
        <hash alg="SHA3-512">62aafcabe5ccae28dabb781c6e91b7afefb51f24ab875486f6539c8d08c9294c225d4c225466abf08698897b91963e3b511d60a192630895ae5d11d81f5eb020</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@3.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cdi-spec.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://jira.jboss.org/browse/CDI</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:cdi-spec/cdi.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.el/jakarta.el-api@4.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.el</group>
      <name>jakarta.el-api</name>
      <version>4.0.0</version>
      <description>Jakarta Expression Language defines an expression language for Java applications</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">3b15b7aa8450164455f210e99c672e5a</hash>
        <hash alg="SHA-1">ba9834bd2dba5014072bacbafecffaec1673b0f9</hash>
        <hash alg="SHA-256">bdac40bf13816ce511c83fe00be4ab3447c5cd0e2dfc0c7c03d9ce8fa4b3e9e7</hash>
        <hash alg="SHA-512">96a4eff55121827ed8ef50971402739d55a4b44133fef7920baf938b866533dbbd6faeae26dc419bf1205c5ef14f075947f2705d77240d62a4403a604206cc1a</hash>
        <hash alg="SHA-384">b2e595c8d926d6492130a8e76c691695574be2ddcfe912f96501ab85e1da253ee20d1b7f50c7d7bb28589e59354c0408</hash>
        <hash alg="SHA3-384">228adf4b0612edfe9cb6cb005cbb817f5f7766161e68233d373a67b73ffbe1d4cbd440548628683f5b858b13194d15f7</hash>
        <hash alg="SHA3-256">6c0b4c624d62d9a5e1d58db870361c9625b6d7c4eaddd63f377f18f5ac5fe173</hash>
        <hash alg="SHA3-512">55b948cdc3ffc176deab96af4a6a3602f0baa9556bdf4c2e1964a6bdfc79016980744801260612fe7fdc417d02851b953b0089e1a66237f4f5326f5304d3c7c9</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.el/jakarta.el-api@4.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.el</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/el-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/el-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/el-ri</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.interceptor</group>
      <name>jakarta.interceptor-api</name>
      <version>2.0.0</version>
      <description>Jakarta Interceptors defines a means of interposing on business method invocations
        and specific events—such as lifecycle events and timeout events—that occur on instances
        of Jakarta EE components and other managed classes.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">c9f4051c4bcc8e8182b3346996cc5dfb</hash>
        <hash alg="SHA-1">3872230287b961afb7657fa8bf629ab736cfd6bb</hash>
        <hash alg="SHA-256">30f762f7f22adf857f5a99049d2c6632b51ce5d57d252b52ec90cd74294b8b9e</hash>
        <hash alg="SHA-512">7f4a3c05f90fb06dbb50289858060d8ec5c6581a641b12ace97c05a8a98eb1412515a95bda41b3b574d0d6d894e89ef3a8bf0f6d13ed6c51dc86d8f51487daa9</hash>
        <hash alg="SHA-384">74adbb156ca93bd80d23663335814ffbba1e8c6453961e831dca8f6da374dde48dae2a3d293c98b3157c571bd09ae4f3</hash>
        <hash alg="SHA3-384">823b2a75bd811cdf4377a7548bb233b630f9c95c4ccc944e5fb029f69a2db1787be45ab4a37b51c9ae8da7c118a7fd4b</hash>
        <hash alg="SHA3-256">3db762764fb99c3af5729bc0c57514e907e9133c57b6e84798957f003e714f19</hash>
        <hash alg="SHA3-512">019f3917429fddade21405e6327bc46996235d3c410d8cf1beaee81ba33d6162ff3e4517e95ab0991d923c2f108266292122ccc9c6e5940eacc6b05e47553ba1</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/interceptor-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.0.7?type=bundle">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.0.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@3.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@3.0.2?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@3.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@3.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.0.7?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.0.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.0.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@2.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.0.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@3.0.0?type=jar">
      <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@4.0.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.0.0?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
  </dependencies>
</bom>
