<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:bcb49375-c52c-345c-b612-8e802fdbdd2a" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-05-16T15:30:03Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.1.2?type=bundle">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-mp-client</name>
      <version>4.1.2</version>
      <description>Apache CXF MicroProfile Client</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.1.2?type=bundle</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-mp-client</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee9e0d7360a1fb6133f8e49e3d38b4e3</hash>
        <hash alg="SHA-1">8ee6341fdc2bbed5654c951ddf65bad1f83a31cd</hash>
        <hash alg="SHA-256">e4c580cc06d96720a767ce1341c653bb6718f1e85c270454a2475f63c323253c</hash>
        <hash alg="SHA-512">6a38b1eecef7be5cc4f13025d2a48a1892987c6448c10a10684e37e1ca1279c5cbeb69b35c77bde45a591f61d27a8af04d7cf1ae622d50b605194d660df24c6f</hash>
        <hash alg="SHA-384">44ed4975e73ad3a4ae8ded8142746f55768b9ebaaf4bc58e4e58e5bf23d9c207286c2e849d5e8e3bb52592b34f9841cb</hash>
        <hash alg="SHA3-384">c8a40eeb2ff34a5273a81847e2de045c292d23a911f8d4f47ba2eaaa6a640bb6f5fbc9c72c6003a259bdf61db5ba44f0</hash>
        <hash alg="SHA3-256">b57617454603a62a2b0eef213a30b223e221e3b8e06a2412c86599756ee34e51</hash>
        <hash alg="SHA3-512">50ed8139031e5e93537e3129496950929472a7385a4327d250d89c54eb457ef0353343b0c6e68673f451f3a758bbdb45346c34eb10ad9a3e13efc0b96c0c3f7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-client</name>
      <version>4.1.2</version>
      <description>Apache CXF JAX-RS Client</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fa97b43490753eca32cdb957b50aa82f</hash>
        <hash alg="SHA-1">ebccb3eb96e468266424abbb7838ee844f208f13</hash>
        <hash alg="SHA-256">7c84599445996bdc50306a6b48446da4154af8924bef5d8904d158e46894329b</hash>
        <hash alg="SHA-512">f20df366017b79e54ea59c6337aa753ae966e26b52146af21c3c20b4cce754eb89e8b56551f5bfa4416ff4b810dc9d7aa6bfcc1a1d8dc162988b10df335a17ca</hash>
        <hash alg="SHA-384">021c6a7b6823e5e565de9cf1e674040caefb971753bd69b516178cedbbe4ff479c7b1f42dd9a176a16193cb9fdc7e095</hash>
        <hash alg="SHA3-384">e2207956472a09ef17913cc25b204a0375a92c5beb852e5c289f49782f1ce4746dfd0c5de13b2de1533f09e9a7c55d3a</hash>
        <hash alg="SHA3-256">b52d8d20d87af21c6726eec82c9a0741800f22a4a8b1dbc8ab3edf0a64ca280d</hash>
        <hash alg="SHA3-512">2cad15f1788ec8af72106f7b5f982969548f35c5c30aeb6d8bbb911ab21e45f727cf60da98e87dc166b8ac0d7d9b7258916e02004611f5070f3490c6e50b57e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-client</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar">
      <group>org.reactivestreams</group>
      <name>reactive-streams</name>
      <version>1.0.4</version>
      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eda7978509c32d99166745cc144c99cd</hash>
        <hash alg="SHA-1">3864a1320d97d7b045f729a326e1e077661f31b7</hash>
        <hash alg="SHA-256">f75ca597789b3dac58f61857b9ac2e1034a68fa672db35055a8fb4509e325f28</hash>
        <hash alg="SHA-512">cdab6bd156f39106cd6bbfd47df1f4b0a89dc4aa28c68c31ef12a463193c688897e415f01b8d7f0d487b0e6b5bd2f19044bf8605704b024f26d6aa1f4f9a2471</hash>
        <hash alg="SHA-384">ce787a93e3993dca02d7ccb8a65b2922bc94bfaf5a521ffb5567300a9abc3c222ebbfffed28f5219934ceb3da5b3e9c8</hash>
        <hash alg="SHA3-384">68daf9498232897989ee91c1ad47c28796c028658cfe023c2907152cd64ac303a3bd961e5d33d952be7441bee7ff5f14</hash>
        <hash alg="SHA3-256">0c2165ea39330d7cccf05aa60067dc8562a15db7f23690c8d4fc71cd3e49fdd8</hash>
        <hash alg="SHA3-512">19c2d866a6c4d7c61ceb63d3b98324928eac880c8f23d84202c1145b4779438b1b275f1d20c74b06ecb0fbfe83baaecce3b4366ead0f7cc8b7b6916a8910c944</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT-0</id>
          <url>https://github.com/aws/mit-0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.reactive-streams.org/</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>4.1.2</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a86b706ab4290e5fa7a4f7d7e4e47d0c</hash>
        <hash alg="SHA-1">d43f1d246d62af8bbd7390909862ace1e4214436</hash>
        <hash alg="SHA-256">cc4eb4bcbabd4aac06c28015b05eb7a94e70dd4c60a16358854211440030227b</hash>
        <hash alg="SHA-512">d0bf3dd5350e8608dde0bb547cc9eacfb7fb7c36b096a056656b81d8ad71d698e4f8d25085ebd4bfd54fff155dce142c29d92a6ab4be82539f3822055e7b7d95</hash>
        <hash alg="SHA-384">99df7b5b740e2071f7e6f647a586530a7455bdf2c667669cb9c7e492e2a44af927c2b21a59732066fe1182a2dded4b09</hash>
        <hash alg="SHA3-384">5d1a821893412e4641c3b527fb51fc03500e74cc1259deb92b9a0776e5c8e0b093e824afe909a0856a0dbfcfb1897d1d</hash>
        <hash alg="SHA3-256">4a9baa163714e4a8b2f65ffd21fb0b8d967ad13d777aaac27dcbfc1ad8f61d45</hash>
        <hash alg="SHA3-512">33425da338cf7149371d917de7151425cbbbd7a7ae3f6e5a5696459abe1fbf250d742cfd3bdc405854b576534ffa587ed67f6a40e6187d4b7a924b8590dc179d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>4.0.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c7384f1f95b8a8e15291485ff9dbe4f3</hash>
        <hash alg="SHA-1">ca84c2a7169b5293e232b9d00d1e4e36d4c3914a</hash>
        <hash alg="SHA-256">485d8940e76373a7f300815ea5504bf5b726c234425ad30971019d133124cca4</hash>
        <hash alg="SHA-512">bc38b19aeeed6bf4c10e06aa047e3cffab91f94ff5bd86feb78e748814152c8185633f244aec986d98b6688f38c6cd41abbabb8e8a901fc44ad313fe1b710559</hash>
        <hash alg="SHA-384">2e4babe0411d6e894aa1a00521755d3e250f04ccf42f582a7dfad7c7d5f9257b68b31fb2e5b00fd88ec0885efeb15fc0</hash>
        <hash alg="SHA3-384">56de25b667f12502fe6147c3fffbda8941a31aebf5ead598826ecb6f035f7e8a81d7c34da8e6af2c411071a59aaf7a0f</hash>
        <hash alg="SHA3-256">2f03cc3ef3f63e0effd4f2744dd8080fd7d79a5f9f0debe02c9da808fea466d1</hash>
        <hash alg="SHA3-512">137c19afcbe030cdd69bebf5ecd5a2060bd22892e690452ae6c02f187ba499bbbfde8729256fa3b4ae09b21350acdb9e1bbb53db948de873f7b6887dd58a0222</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-core</name>
      <version>4.0.5</version>
      <description>JAXB Core module. Contains sources required by XJC, JXC and Runtime modules.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ab09aef6bebd4438b0a02707881801e4</hash>
        <hash alg="SHA-1">007b4b11ea5542eea4ad55e1080b23be436795b3</hash>
        <hash alg="SHA-256">ad3fd9bf00de3eda9859f70b6cfb011e2fe9904804e16a2665092888ece0fdca</hash>
        <hash alg="SHA-512">8798f8106541c9fa28507c8f77356830cf16d9f2dd22257c782901b17f7f79e73af1912d07dec2efff236f0e0f36723b3e61faaabd34442618b0d7fa970a7a31</hash>
        <hash alg="SHA-384">cf9131a3a3b2f4ad240fdcbe6f631c8cae84df133801697a0ea5b28f76b871c6a07d0ee78b7b3351b052c9694d7a5c6f</hash>
        <hash alg="SHA3-384">f223265e04dc5807ad4d6a8a2ac852c1cbaf5e44e524bbcc22a3119bb13d1c31d47d7d0f47d9911238f5364b1c17427e</hash>
        <hash alg="SHA3-256">720e1373c6dcb1986665cb3a5b20c2623825a29408bef8c28475b3362926146a</hash>
        <hash alg="SHA3-512">beb8b255947aa465ae33d3adc2009745fe4466f123514e26589245b166bc07408022640ebb2284662be7c259a800c9e5bc78fd599441e088c2156a6531dd0217</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>4.0.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2f5aa7dbd5e326562cff6ce720a1485a</hash>
        <hash alg="SHA-1">f36a4ef12120a9bb06d766d6a0e54b144fd7ed98</hash>
        <hash alg="SHA-256">917355bc451481f30d043b24d123110517966af34383901773882810dca480e5</hash>
        <hash alg="SHA-512">d130f42d36661b536d96bcc15f58b34a8b7bb7a55260a4c763b99a34576fde946fc18f2d28fdb7a5eabe8162e90a1e71308f9a34341fb7cd850a41aa3b88bd49</hash>
        <hash alg="SHA-384">079acdca257a1462fe0332baa25e3f61078344dab4373a4509792d975bb236d592337a011f4230fac606658edf190112</hash>
        <hash alg="SHA3-384">ef0875a42b7781410d46493f91e48fc51493d8488ede3e6f519fe8f25664022ef1ca9fff4a76834eadc55cad4add7f1b</hash>
        <hash alg="SHA3-256">a4818a127bef0476caed634d9f11636085049b4072a48ab6f69b7c493c75aef6</hash>
        <hash alg="SHA3-512">021fdea3e5e583e8c06d2d07971231c99d82247e89a2209dac0b92ec88667bffae28c413a663a121fd13bc88d28fa35505c51fa7b782b98ad28828742fb484f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>4.1.2</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">535154ef647af2a52478c4debec93659</hash>
        <hash alg="SHA-1">18ec117c85f3ba0ac65409136afa8e42bc74e739</hash>
        <hash alg="SHA-256">7fd6792361f4dd00f8c56af4a20cecc0066deea4a8f3dec38348af23fc2296ee</hash>
        <hash alg="SHA-512">c3b191409b9ace8cccca6be103b684a25f10675977d38f608036ffb687651a74fd4581a66e1c38e588e77165d32614e4b547bff412379f7a84b926ccb93515bb</hash>
        <hash alg="SHA-384">9b8e20b08b109c485c654359ede00fcef74d85ac18f9c7978acd47bf630838d21ea193f79d144e66cf0f6992efd82ff8</hash>
        <hash alg="SHA3-384">81c4cf19a5d0f078263cc8f9320d4208da28e25b93c1f45885e237148a3a7c7266ba7586a1eb5cd3efc86be6f90082bc</hash>
        <hash alg="SHA3-256">218aa7dd7bca7cfdbee752bb1c2737a7066b47058a42b4ee466a14350bcd2741</hash>
        <hash alg="SHA3-512">74770476681a130a3057fdfa2df3977b8aa9bbf1a520d9481694d0e9e0635c2e88d74ff73bbb870de34d93d0a4b6eae7f030e4ba12fbcc51debde58897fdcb6c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>7.1.0</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f8b70141712cd2ac67800ba036f0aa13</hash>
        <hash alg="SHA-1">95341048cfb852aa05037e6cc83069b8664728c5</hash>
        <hash alg="SHA-256">81266920a1cdc47306a8a2b4726c99ec89b3fbf31c2470e4f5e477d9d857ca9f</hash>
        <hash alg="SHA-512">257260a61892f52a94979c512cc86d3cfaf83c8c1ef231f15033f27c1af4c2b7928b7df9ac0005ef617746193273fe2df68ac0164d5f51e47be580506464b857</hash>
        <hash alg="SHA-384">698b3d685100988b264f0d025b01c64723b1033aa063e70cdcfef5743d1a83d7a2a1b94fbba99dc638f3dca2a498a980</hash>
        <hash alg="SHA3-384">a835755da983be214c4d2a43633b8ea51103b274a43b45184610615f0f747904a1967f3c99670471b24024ba61cfd1b3</hash>
        <hash alg="SHA3-256">1ab326e9b6f5c668645360b9c372e3abbf29574087b863c90f247d017b5d91c8</hash>
        <hash alg="SHA3-512">cc58b8aa1cf72672c0adba7ecc58463ae7718a033b8f9d95c3038a96bc61f6241d938e0b2950a850e9afbd035e5580687ea20d391fb58ce1596694bc118a0e7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.angus</group>
      <name>angus-activation</name>
      <version>2.0.2</version>
      <description>Angus Activation Registries Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">42bba74155dc773eca277ee7a16f74be</hash>
        <hash alg="SHA-1">41f1e0ddd157c856926ed149ab837d110955a9fc</hash>
        <hash alg="SHA-256">6dd3bcffc22bce83b07376a0e2e094e4964a3195d4118fb43e380ef35436cc1e</hash>
        <hash alg="SHA-512">1482c759843c23e0343ca554194862d53ac18a04ab4691b3bf05145abb77283617022a895c5ba2e33f62b77c2cfb906b90d0cb690623621b11f35194b54b1180</hash>
        <hash alg="SHA-384">0263b0f42e56f9cbf4a2446c26a29d6397477561c2149f7b7d0e62fb28ab4315d50faf4e96aff088d3ac204b16f90892</hash>
        <hash alg="SHA3-384">e77e5bf8be9f98ed06a652e2317253bb29e8f79b26910075332823987b2e1bd3dfbb2d7aeb5a57a454c8632241abcc0a</hash>
        <hash alg="SHA3-256">41d7d300d1399e4706a0ead464e13702d85023598a0a81899e40ee8eed847826</hash>
        <hash alg="SHA3-512">dbdcb824069f0dcf9f9d362b8db7c2efa77f28d77e07c204a28e56b79ebfc478d9c5f9e5f01c7269d3afc0db0e6126d74237cc5a51b5e9ec6b6664580a06de8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/angus-activation/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/angus-activation/angus-activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>2.1.3</version>
      <description>Jakarta Activation API 2.1 Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e7b680375ea9f40f3ddbd702efcd25</hash>
        <hash alg="SHA-1">fa165bd70cda600368eee31555222776a46b881f</hash>
        <hash alg="SHA-256">01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627</hash>
        <hash alg="SHA-512">aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad</hash>
        <hash alg="SHA-384">4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e</hash>
        <hash alg="SHA3-384">20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca</hash>
        <hash alg="SHA3-256">8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67</hash>
        <hash alg="SHA3-512">69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaf-api/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaf-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>4.0.2</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0c8f9991081def819435c3ff36e4d93f</hash>
        <hash alg="SHA-1">6cd5a999b834b63238005b7144136379dc36cad2</hash>
        <hash alg="SHA-256">0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406</hash>
        <hash alg="SHA-512">2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0</hash>
        <hash alg="SHA-384">7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0</hash>
        <hash alg="SHA3-384">fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a</hash>
        <hash alg="SHA3-256">a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e</hash>
        <hash alg="SHA3-512">bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ea5810b1789dba9a7499883c7060b454</hash>
        <hash alg="SHA-1">0e36be9573ae13894852797cec0a4b795579f17b</hash>
        <hash alg="SHA-256">43f052c32c5770877e02bf24bb418a84b6b1e1b00f95829f28a4d113e77b26bc</hash>
        <hash alg="SHA-512">47981c6952e81cef25f5038e7a8c2ac6b793178fb72c85f8602496d6c6b7b6b2b02cf3e66e84a44792f5d0447d0352437c9696db94c2567ba760fd3cd7d982f1</hash>
        <hash alg="SHA-384">e1c437644f9ae828338c95ff8145b2ae264e4b2e050a3f8b76ad4a3863f007234812b2a341a8f16af9a8ab7fe5b27ece</hash>
        <hash alg="SHA3-384">097168abdbea6b169d49743dd70ff412d6777f71165022a0b40a496e1a82423234a42a77da3454b8e7bd0267e3f504a8</hash>
        <hash alg="SHA3-256">5ad87eb37fd3c8b296b45b60b56b6b6dc1d213960dcda7d650285ac4c506a5aa</hash>
        <hash alg="SHA3-512">3325604d2de3eed30a22ed9284301a2872aaa2b086c8dcc93d6c84019cecd8281efc2aa23d27fefb9360db383067ccc0e8a179f9fcc249f47e303f6d3c703cd6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>3.1.0</version>
      <description>Jakarta RESTful Web Services</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6ce4c6749e048456b2c452c1091689ca</hash>
        <hash alg="SHA-1">15ce10d249a38865b58fc39521f10f29ab0e3363</hash>
        <hash alg="SHA-256">6b3b3628b8b4aedda0d24c3354335e985497d8ef3c510b8f3028e920d5b8663d</hash>
        <hash alg="SHA-512">55c245378d7529503c934d2132cfc3bcc638f6297eae6687ae419a5b57aa4646f771cf054295fb6cda1f6d89134942c2a2c39f47380be839e26b44884e4bb75c</hash>
        <hash alg="SHA-384">aa6baaa80978a53fdb4af8e07559a955c9828266ec9b41562b7a2583a1d8d760726d66c13d61f0ec0282220d65d4c1b9</hash>
        <hash alg="SHA3-384">76ae6e43291bef5f40196d2063886d4d73b71401918c002cd2e54d260a9171287d12a61a19ab950a512aebfc53a42b31</hash>
        <hash alg="SHA3-256">2594beb0318ed800cf3e6de629ac40d2900b2fe25cdbc4982de00ade189b6100</hash>
        <hash alg="SHA3-512">40e976ea3f3d1b9a568231cf156f388be585d6afcf30ade6abb9841969cb86a2e537db87678a03e3ea04049114879db8f897fe0a6f9f815df31a1cc3d0c9e089</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>4.1.2</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c5cda654811f51fa42364536c53d6964</hash>
        <hash alg="SHA-1">8d96a67c3213595164b247567b5c8764d0001620</hash>
        <hash alg="SHA-256">301dbdc532294f583fda2c52a5030f3fece0c8e20577b2ab3c6e52fcf77264cd</hash>
        <hash alg="SHA-512">3625633702e5a95f93894e69503c79816bd6dc54658db71b6932068048f909f88dbbab878d7570bb0e6841d16ec4fa0cdd9beeccb18b1aa0fc062845c6cad78a</hash>
        <hash alg="SHA-384">35654a9269d6a4f563c66b863b868b4498a340ec2339c701b405c2c637b73577a4f88ef610018b6d1e129728f4c07b60</hash>
        <hash alg="SHA3-384">a7774b2ed18bf95d0c80b3f19b693c6873355b651f9cf0ee8a7bdae188f05875e08f77f18194d9a23fb9ea21ff94731e</hash>
        <hash alg="SHA3-256">6fb32b9515b03cddc00d0e0d3c125d0f195361fff6a1962f3c5239bbf35f8a4a</hash>
        <hash alg="SHA3-512">ea218b044c7402db87d2ede62c44709b5107d7a44f94d3c65e89da1b3dc9b074fb2381c09d79dbcd1a46756884ecf15d286f8c297f729e8db1995436f570de93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.rest.client</group>
      <name>microprofile-rest-client-api</name>
      <version>3.0.1</version>
      <description>Typesafe Rest Client APIs for MicroProfile :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3519069ea0441f9a923c75a025d27781</hash>
        <hash alg="SHA-1">e97ba8b1ff7b654cf6c9f6d90929e8360aff5b3c</hash>
        <hash alg="SHA-256">2b71698b95c892cc659235f4ffe663b5e2f1151ceb4e77268b23ff2b0c6321cb</hash>
        <hash alg="SHA-512">f315f932dd3904bdf481aca0410b0e1796ee84640675c858bc2bed30655054dc827d20761733928bdf8517e2d4fddfab9ac5f8f63507d0005c5073c4736a76e5</hash>
        <hash alg="SHA-384">3f525da7560271669e4d37903183931d14f4a404805f32f71dd4d22063d8390a1a90741ef4ad3955ba148ef8bd1a5d06</hash>
        <hash alg="SHA3-384">f09cb6ce2d6f893111d70f6470a274645681fa9c843139fadce5cfa7599167d19299fdd4c27be64a0a9313a40b8ac46d</hash>
        <hash alg="SHA3-256">95733b852f720f457dac7a3478f2e4e746a6f6a6c51e1bb1867338b0efed24f0</hash>
        <hash alg="SHA3-512">3d859d096104c9895cbf80d0731e53c89ca2ff83daba8feaafc12ed483656585f94a4b7f1c964475682cdb8bc95a4f887f5d397f033f42f326e583fae1aaf3f8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://microprofile.io/microprofile-rest-client-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-rest-client/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-rest-client/microprofile-rest-client-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.1.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-extension-providers</name>
      <version>4.1.2</version>
      <description>Apache CXF JAX-RS Extensions: Providers</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b1606ba369c0ed9fe2aae857a5fdba5</hash>
        <hash alg="SHA-1">5ff7b8a7c1cff8e7650f05f92906644958fb92a7</hash>
        <hash alg="SHA-256">37e5c628984708b4a25bb6b8fd431e6d363ab6592b48298409399a9fce0ded68</hash>
        <hash alg="SHA-512">f97ac13b80088e354963e1b86f5e898ab27f5c85c3e9de4d96211bf77ab6b9e1b63af5718e2c252ab7cafe99de52c3afc3b6d2e2b2ea5e8a4f5fcde159b1fcb1</hash>
        <hash alg="SHA-384">e37d635f223f5894800c5df86f5329da1b690cf7919d23952bb0bda0e5ef4cd7c6c5a7e2612530d48c649188c8c4bc74</hash>
        <hash alg="SHA3-384">070feb65a28b5a2e17f5154028a652dcc48d7ff516aee046b7d38f0dc9ead3e3edf48f5786f1257a4992139c50f13484</hash>
        <hash alg="SHA3-256">7741b1bc40a998dc630bde7ea83544ef7ba4e3c6fc661eac99132eaf7f34675d</hash>
        <hash alg="SHA3-512">f856b08dc3e1911a3f9357869aedd1ed0d741cafc928e0b2151e5e1fb577e72998279bc93bf9de2018baf1997cbc27492e40233deaa166ac21255a3ebb7a9d40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.1.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git/cxf-parent/cxf-rt-rs-extension-providers</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>2.0.1</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">72003bf6efcc8455d414bbd7da86c11c</hash>
        <hash alg="SHA-1">4c28afe1991a941d7702fe1362c365f0a8641d1e</hash>
        <hash alg="SHA-256">f7dc98062fccf14126abb751b64fab12c312566e8cbdc8483598bffcea93af7c</hash>
        <hash alg="SHA-512">f186b2ada470abba1cc3b4f8c4373d940fb7c71a051b2c26f7c204ad4dfb69235fbf3f9c33da36d744cb90f52d921c51d76c0ff263bacb35eafb66cab83dc47d</hash>
        <hash alg="SHA-384">405bd297a73901f013d48a0da028d04d400f3e61f4997c0e7297eb08120670a0e242e0002db8f130c33ab16cb02feb2d</hash>
        <hash alg="SHA3-384">4db7e54434d0a208c876868f5595b808f2728c0455feaa752ab7b569a2186fc37cb891c9aa0076de3d08f6da6ff06eba</hash>
        <hash alg="SHA3-256">3a5aba9f1ff1a130b76af886123eb375fa578498490df3dc60bb7ce7d59e9404</hash>
        <hash alg="SHA3-512">00bba8efc2d6e7f0a509b321868d75f1aaf0681a750d089d913bde8424ab7bb88aadf49de6e291e352523e4f8c117b1b48033ff31d4d665dcc43c4c6ea000ba9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/injection-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.interceptor</group>
      <name>jakarta.interceptor-api</name>
      <version>2.1.0</version>
      <description>Jakarta Interceptors defines a means of interposing on business method invocations
        and specific events—such as lifecycle events and timeout events—that occur on instances
        of Jakarta EE components and other managed classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c68f893a96a6ddbcd08c09d508ae0040</hash>
        <hash alg="SHA-1">1d06a662708601400af4556577ee514c4ad01549</hash>
        <hash alg="SHA-256">ef787d3f713fc6ff4f02cd4b0dbed08f93d8af3400c90cbb43fb4b5c0583710b</hash>
        <hash alg="SHA-512">d4d297f7239852f764bd211413898784bfdb18f76c2715ceb6e7be24237aee05affba392b70aa612212292106516de71a0b8967aaa75296873fa175ff5ef53df</hash>
        <hash alg="SHA-384">2a6eadc9b5031c42e80712df5c3c3cd74b813f5818494ccdd972b99134d1a3950607f793a134f255bb3f186f915cbc48</hash>
        <hash alg="SHA3-384">f2c86958aa33597f31062ba549f29f6ee0b4b5af468c5bdae1c50db90bf41ffcf0441eee319023ff6a6f8a185fb9c610</hash>
        <hash alg="SHA3-256">dcb7b537ebaa9bdc1499fcd810494a4ea2d5d175f8318fbb47aa32dddf198434</hash>
        <hash alg="SHA3-512">f2b850e87a2315afa022997c79494e0f81e7e30c562f4f9998896d2e88d00ac5fe097bb492f44f475ac3b4fb0f5d2649fa2124a817409df3db2a67c7ab541b01</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/interceptor-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/interceptor-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>2.1.3</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">596997520702889d4afef9cffbd4b71a</hash>
        <hash alg="SHA-1">4febd83e1d9d1561d078af460ecd19532383735c</hash>
        <hash alg="SHA-256">bc934142805ea1d794f1440563965a3861a2a9fb7414ecd3fe44f26500734414</hash>
        <hash alg="SHA-512">5a6566f0ceaa8b0ca40ae643942c0d46acd118a3b4d85af5f3a977e738465e8c8d4bc977f0c3e4b51f4471e408c28f66dbc0b19adf61237f6f6f7fa1d0dacc31</hash>
        <hash alg="SHA-384">1a17b8a416692ba0e485d7290782b2b5c4de8cb65c2043f221381deee668953655c221dc3efa29d3c65c8b2c1fab173f</hash>
        <hash alg="SHA3-384">4c009f9fec6b1e14b2c675ee7addb49ebd047d71d7aaf31601ccea3ffe4af1d82838a3452b0e5d7c2814e27861cd3ffd</hash>
        <hash alg="SHA3-256">5b839f4645dbac0d1bc76a91e168a52574c2bb6de0b7e92cd14aafd0ad6a28b0</hash>
        <hash alg="SHA3-512">fedcd8618f44ab0b771bef7d2fcb61d49021eb2e592d8d3058d3f57e7fe0ed1a9239cac859fe534dd0629aaf577fb8f77841412dbb3ae58b8d8cd0754da2ec48</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>3.0.1</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">579e56e9b32fedf2d67bdb2310b54b7c</hash>
        <hash alg="SHA-1">af7f10b8aa6475b6f6cc9d47ad85748629d05b79</hash>
        <hash alg="SHA-256">d937f01c12d416f0a615a87cd8251c2bdd45f750244ebe288c4ba6d469db0377</hash>
        <hash alg="SHA-512">a8954aab87e21cc8b03f02254e27efc2feec3cb23cb4d0c55e3a4b537deb32ae2711bb0c3c83e4fa6c9ff2651f9f9d0f9f1b7bc85ce21fd4bf7a2c9f092562ee</hash>
        <hash alg="SHA-384">08beba91eb79896ff1388705c63d8887c955a5cc2a3ebe0293dd12617c9a6a0d86643fb7587a5d94200fb770d9d057a8</hash>
        <hash alg="SHA3-384">d03a53281b8a09372cadb3639b54b1c11fd0b667bbdbeb7141bc9491db5e3c7a637ba8d6920ff419e15b6d2de3d121ae</hash>
        <hash alg="SHA3-256">b28c7f95571b1012931cd110ee383fe27da2c756652ea9407a2ccf2cd8e11f3b</hash>
        <hash alg="SHA3-512">c25025163b413da2ce47ae8fcea4f2b9a6816522d5e471a10aad80a8dd4e431de44911c828ed70a2360519657880ecf427773a6ba40aa000ab08608cdc4a6ef6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://jakartaee.github.io/jsonb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/jakartaee/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jsonb-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/jakartaee/jsonb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.config</group>
      <name>microprofile-config-api</name>
      <version>3.1</version>
      <description>MicroProfile Config :: API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">eafb265a1776be25ab19d4f7834c6ec8</hash>
        <hash alg="SHA-1">cef8b70598a93582a4084fe67f4686eb399e70fd</hash>
        <hash alg="SHA-256">dee277f81e1edfeafd5e43589441ecdf434500fe4a31d035e74b8e6d8e7bfd91</hash>
        <hash alg="SHA-512">76c956d2faf8bcb6de0af0882997a285e204dec0924748f4fb9df102eb974008edcae681f91294608c43c91de3431d9bd1519a4481dac9261ecdb8e56150ee0a</hash>
        <hash alg="SHA-384">be594326923f6ed6912ebaf0102f44663a525327b4029962af226faa1ba8807317bbb68aecbc967081c7494f46c1b1bc</hash>
        <hash alg="SHA3-384">5808a449ef46e0e5dd40a3c8bf2e74e034d3b6f2ba20047065d7b50b80863ac66d8015eec6cdb0f3e5ea2c7fd7600e07</hash>
        <hash alg="SHA3-256">f3cd7c23ed7edf0cbc9e4eb4d613f611ba7cbcc1c5f0e36f6b1d268c292b972a</hash>
        <hash alg="SHA3-512">22d794728703a0c3f9867242bb0978b2ed7dd8418fd0ac63ff3ebc5111c34da32907315e8528faabc59daac11453826bb0fa226cfad05573609d22273f963382</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://microprofile.io/project/eclipse/microprofile-config/microprofile-config-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-config/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-config/microprofile-config-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>2.1.1</version>
      <description>Jakarta Annotations API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5dac2f68e8288d0add4dc92cb161711d</hash>
        <hash alg="SHA-1">48b9bda22b091b1f48b13af03fe36db3be6e1ae3</hash>
        <hash alg="SHA-256">5f65fdaf424eee2b55e1d882ba9bb376be93fb09b37b808be6e22e8851c909fe</hash>
        <hash alg="SHA-512">eabe8b855b735663684052ec4cc357cc737936fa57cebf144eb09f70b3b6c600db7fa6f1c93a4f36c5994b1b37dad2dfcec87a41448872e69552accfd7f52af6</hash>
        <hash alg="SHA-384">798597a6b80b423844d70609c54b00d725a357031888da7e5c3efd3914d1770be69aa7135de13ddb89a4420a5550e35b</hash>
        <hash alg="SHA3-384">9629b8ca82f61674f5573723bbb3c137060e1442062eb52fa9c90fc8f57ea7d836eb2fb765d160ec8bf300bcb6b820be</hash>
        <hash alg="SHA3-256">f71ffc2a2c2bd1a00dfc00c4be67dbe5f374078bd50d5b24c0b29fbcc6634ecb</hash>
        <hash alg="SHA3-512">aa4e29025a55878db6edb0d984bd3a0633f3af03fa69e1d26c97c87c6d29339714003c96e29ff0a977132ce9c2729d0e27e36e9e245a7488266138239bdba15e</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1?type=jar">
      <publisher>JBoss by Red Hat, Inc.</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.cdi-api</name>
      <version>4.0.1</version>
      <description>APIs for CDI (Contexts and Dependency Injection for Java)</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4ddecd5a6280ef5f222e693ce9d29898</hash>
        <hash alg="SHA-1">2012f388c6de83e29101cbf82c3ed2bd37931c64</hash>
        <hash alg="SHA-256">beaf74c4f2618189309e3f4a09c43effab633dd96aa1f6dc58a6ba7ee0042717</hash>
        <hash alg="SHA-512">f8e7a532dd0a842b931371810437866fb04c2d3cc121c6ce471b5a082d654e651b0ec8f98e31bf76a5071b2317f18d97de35c4d15a6405818ccc90d80ec9e7af</hash>
        <hash alg="SHA-384">ae83b0403f27477ac4900b7e0f455e33cdc6cc1e645575f879c269aeb1aa804ec1a8ff2df9ec91980d7fbf66738d76c3</hash>
        <hash alg="SHA3-384">a8d626f42dbd2f0b7fbcb6f0eec2d9c7ed6f3b9a754d46463328a33fb3fa43607c1b2e2b7a70bea596666bb5fb9915d8</hash>
        <hash alg="SHA3-256">cfefcd757cc70a8a6f727020830e0680f84f4baaba17af02b82198bbbdc7e16d</hash>
        <hash alg="SHA3-512">b4cb84e2b7e664648d9590bc188abe43a3e3b74452d0a9183437ac7ff57e7e8c0603750998161bb96268b66d48ad2fe3977eefa7061cc3d9294bece629b40b23</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cdi-spec.org</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/cdi/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>scm:git:git@github.com:cdi-spec/cdi.git</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.enterprise</group>
      <name>jakarta.enterprise.lang-model</name>
      <version>4.0.1</version>
      <description>Build Compatible (Reflection-Free) Java Language Model for CDI</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">fe02deb673794ba67c5e423bcca3d229</hash>
        <hash alg="SHA-1">2b195781faad31c1724d8122136909c34c3ae79e</hash>
        <hash alg="SHA-256">53acafe65b6ef0195fa1b8a0ef2650e5aa024c32cb4059c4df372d6b32089cd3</hash>
        <hash alg="SHA-512">bc8a5fa72b9db31e0f34bcfa18e3b094ecebe074dabf6e2534665a8efd691b1c725dd5481897adf1795228ec9f5f3cacf0b1ce25636972c9c62e1fb2d74da6cc</hash>
        <hash alg="SHA-384">de22bbfb3e9e196783c5697f00ea0e6ba700264332402ad1f1b5ca1e7190f13b02685ccfb441c6d8d02e52835ff91042</hash>
        <hash alg="SHA3-384">c09f1ccca901b719fcff02b743b033270335e8dabeb1130626350b8ccbf8799ba5677af9d6ec5ad0989ae6fdfbdce1b9</hash>
        <hash alg="SHA3-256">ae301007d79d3cf7a1f5d44d3246ef63ee23b8c81c6f159d3eeb1ea1cc839805</hash>
        <hash alg="SHA3-512">82be8799015bbfa9178a31f253b65893c0b39a5fca9bb153958d1427fec11fbe439f8544bd137b6979fff6aa09fb0154d08518d53dd33500f2c1497a869d1287</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/jakarta.enterprise.cdi-parent/jakarta.enterprise.lang-model</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/cdi/jakarta.enterprise.lang-model</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.el/jakarta.el-api@5.0.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.el</group>
      <name>jakarta.el-api</name>
      <version>5.0.0</version>
      <description>Jakarta Expression Language defines an expression language for Java applications</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">191b53c8c1c12c969f0678f9c6e073b0</hash>
        <hash alg="SHA-1">2a22b304920f43d6427cdefb5ce5f6726e2a63a3</hash>
        <hash alg="SHA-256">57b822380207900f5145c2a687384c50fd41495d388a235791d96ae3b9bfd36d</hash>
        <hash alg="SHA-512">ff3d4aca7be6d215af9f48902fd91a828d5dc1e99f1ad2eed5b5283c499f61be852c8670959cd8d1faba88fbaaeaeda833958471bcd123aae2135fa870dcc028</hash>
        <hash alg="SHA-384">9c6c67fb6967f2a54279f6e26f61bd7a55739333ddb96fdaf93eb0fc06562b80266f2062c969e3267bb6a2b8a54deb9b</hash>
        <hash alg="SHA3-384">0f2cbab96cc6a65e8b7963bcaf6a05a3c6c0c98fecad5508a8d98900a2c7c3a32d86bbd73af3760f873930a4c26e50bb</hash>
        <hash alg="SHA3-256">a6c4525f56aa3362042833d1cdb53e3e915adec59fe5824b1323e0fabcb8c0ee</hash>
        <hash alg="SHA3-512">a0ece8e274523084f4faa01e613713fcaed02f401a04509d97724588c55fc00a2012d137abdef2b6dd5b0294316d19f393d546cf3bab1f7435c6169093a3283d</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://www.gnu.org/software/classpath/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.el/jakarta.el-api@5.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.el</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/el-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/el-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/el-ri</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-mp-client@4.1.2?type=bundle">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@4.0.5?type=jar">
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-core@4.0.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@4.0.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@4.1.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@7.1.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-client@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.angus/angus-activation@2.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.rest.client/microprofile-rest-client-api@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-extension-providers@4.1.2?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@4.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@4.1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@2.1.3?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@3.0.1?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.microprofile.config/microprofile-config-api@3.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.cdi-api@4.0.1?type=jar">
      <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@2.1.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@5.0.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.interceptor/jakarta.interceptor-api@2.1.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@2.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.enterprise/jakarta.enterprise.lang-model@4.0.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.el/jakarta.el-api@5.0.0?type=jar"/>
  </dependencies>
</bom>
