<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b9664883-bf46-34a2-8101-e7bae4c8fe52" version="1" xmlns="http://cyclonedx.org/schema/bom/1.6">
  <metadata>
    <timestamp>2025-07-30T21:51:47Z</timestamp>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.9.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">9c7a565cf28cce58557d0c621c5ea4b1</hash>
            <hash alg="SHA-1">be882d5a22050bfa9d19090b1420c188617d0e1c</hash>
            <hash alg="SHA-256">698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249</hash>
            <hash alg="SHA-512">c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0</hash>
            <hash alg="SHA-384">d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb</hash>
            <hash alg="SHA3-384">80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f</hash>
            <hash alg="SHA3-256">142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699</hash>
            <hash alg="SHA3-512">af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-microprofile-openapi</name>
      <version>3.6.8</version>
      <description>Apache CXF JAX-RS Service Description Microprofile OpenAPI</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-microprofile-openapi</url>
        </reference>
      </externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.ws</group>
      <name>jakarta.xml.ws-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Web Services API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ce470c38b9dbdcb8e505d41d767be748</hash>
        <hash alg="SHA-1">529fe0136be92861e5a255fbc99146f1943c4332</hash>
        <hash alg="SHA-256">c8e0ba03c47cd5e996fd5d83540caaeab69cd8d531f128318d88e15467d112c1</hash>
        <hash alg="SHA-512">c160616cb796cb9441eb703e2e5b80976a6669c728711b539100eebee85cae2f74dba55cff044fc7032096f19d0be23a32aefececb0c63d58e1fe5add2f46898</hash>
        <hash alg="SHA-384">973a1bf8f42756846695feed46a95b51193aa02cc133e3a783ab5f3fa47b65bb7d8a490f8576ef38010dfba755c40e24</hash>
        <hash alg="SHA3-384">22e6df9c16bc66f0f84df11565e9ae7def462e44b8011d2a20b474740721cbb70c6a36a5259199b36ee274af8f7a905f</hash>
        <hash alg="SHA3-256">ab5acd41ae0bf6d4f6315121ebd807eef3f89604e6d5a57f9c2a955d5af32300</hash>
        <hash alg="SHA3-512">96010696c59baadc383f61839bf1989d3d7ff35e3e60d50a4dd508c39c0f3bd3100d5d0311feaa9d41525fb7378c86ba7b08c9527b4e8e6e8113b6b12b8b999f</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jax-ws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jax-ws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jax-ws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.bind</group>
      <name>jakarta.xml.bind-api</name>
      <version>2.3.3</version>
      <description>Jakarta XML Binding API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">61286918ca0192e9f87d1358aef718dd</hash>
        <hash alg="SHA-1">48e3b9cfc10752fba3521d6511f4165bea951801</hash>
        <hash alg="SHA-256">c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5</hash>
        <hash alg="SHA-512">adf6436a7a9dc6f64b97127861d7a89b78e82bea67f72bda800ef285163adcd84dbf006f679108a2a8c2eed013e0b771da2354087e0845479ff2b6318b881442</hash>
        <hash alg="SHA-384">bad8b9f52bf7a7e1d3974cb305a69c093fb32d2131539c18d34e471e3ec32bdd9dd136bb4b38bb14d84e99c562f208c7</hash>
        <hash alg="SHA3-384">8131aaf65f996cfa2c3f7d406caab3acf3e6650bcbbcd5595f8a457a211810ff110c1923876e068831a07388ddc26f33</hash>
        <hash alg="SHA3-256">a9e4179a6bfa8b363b9fd4f32f8892c4a7954ed1695d3f33ccef73ceffcaa1d4</hash>
        <hash alg="SHA3-512">9ecbc0f4aa9cff28d519cbf74c8234b5180ae6ff0d6de4efe2de126b3251d466a5ddb878e70b9968095a843c82721c93a4dec53bfe09e3700f4cfe2e38bcac0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-api.git/jakarta.xml.bind-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.activation</group>
      <name>jakarta.activation-api</name>
      <version>1.2.2</version>
      <description>Jakarta Activation API jar</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1cbb480310fa1987f9db7a3ed7118af7</hash>
        <hash alg="SHA-1">99f53adba383cb1bf7c3862844488574b559621f</hash>
        <hash alg="SHA-256">a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d</hash>
        <hash alg="SHA-512">e3d846ff5f62ad9fef514f0726846c63d4aa74b2bb8f60c76258dba37701f83ae75872401071bf40da40697d43a8a6e36d08fa4ef39fe70797fb6f2b1712599f</hash>
        <hash alg="SHA-384">3e25702596eca7dd48f904b3985d64b4b394d162d3884a907d8b2ee647542808713a42a02f0eeff2c07518a206cc91cf</hash>
        <hash alg="SHA3-384">07196bf6c1ba4fe3e14e7690b521d3a156ee136a0b34d93f7a20d485c528c25ed5eeaec013172b08bdc63800fa94fe5d</hash>
        <hash alg="SHA3-256">5010f77dbc8c2a28269c7b5b662732ec4a01806f3af9af0b5a12882670303b6e</hash>
        <hash alg="SHA3-512">6e63931ef5638e4919b210ef3fffc731d3b91a34bd88cf4b4410e583e28d9e8652377b74dbdb63ba4b7b11b68ded509200737527412984c9d5bc6e5b4b938993</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.xml.soap</group>
      <name>jakarta.xml.soap-api</name>
      <version>1.4.2</version>
      <description>Provides the API for creating and building SOAP messages.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">d19eb8a4a5401296985db733868425e0</hash>
        <hash alg="SHA-1">4f71fa8ca30be4d04ba658339df3c927fa21209a</hash>
        <hash alg="SHA-256">0b2e9db574869c09b18e7fe87482be2e4e14b3f3cc8207646595806eede77706</hash>
        <hash alg="SHA-512">640b1ad955bf9283d5c557de7a566bc4d100c8f6580e97ed4bcf24abe104225db6246fff18fa13932b3c45c877c6d560f7778eb115e6bd339768766f089901ce</hash>
        <hash alg="SHA-384">568580a4936eca8c4afa1e823c72579b010f77d7d7af613b92483dbb00f0d380f508057281e3020c68455f82d5c8997e</hash>
        <hash alg="SHA3-384">6c26b47985d5e8623c0b9cd38bbd1828c84004fe82237528e779069ecddb2fed23a8b93a009c641f6fb640e1d45a1b51</hash>
        <hash alg="SHA3-256">81ca7380850de707ccc791655de78e46b73fac45c6277fc283925c99f894de57</hash>
        <hash alg="SHA3-512">08e78282a1aa093c3673d3417d593b6fd962db3ea10457ee4f19d2f242ea5876b68dbe30b471d4b2e20f3d90c77ef71430975e52ae879f1f91040aa87b5478c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/saaj-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/saaj-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/saaj-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.jws</group>
      <name>jakarta.jws-api</name>
      <version>2.1.0</version>
      <description>Jakarta Web Services Metadata API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">9e3bc505722b1e84535d7edb3d582ca1</hash>
        <hash alg="SHA-1">7d283ef13e49c1422701e30639371edca788c609</hash>
        <hash alg="SHA-256">d4c321f47a72001977fa11d2df408db23bf5f46e954aeb2c6f1ecda4dfef8fd8</hash>
        <hash alg="SHA-512">27b4886f73e1da64772488f94be8c222e0bbea3126aa7baaf6a7d23cd4ffd2e91140aa1fa8c552a48c3013945668fbfe9f65fc48e37920a97af5dcec0cb01e02</hash>
        <hash alg="SHA-384">80c7d4de0f110beada45c37ed5b65d28a5c18b9a86d35b249e377657056878377a078a7791c527f70b72f02e51fedf14</hash>
        <hash alg="SHA3-384">42ebd5af1e9a9d41a1c830d0f6aa837754f5ce9f847094f6d6ed4f67b0724dec9ad822bb14c1f0ecb59819eaa2d91205</hash>
        <hash alg="SHA3-256">4ae39a77ee08c01f591910acaaffd277ac3a78ac8eb94e70878dc853723cb1c2</hash>
        <hash alg="SHA3-512">d4b21cccaa62ecc3885100400160e2908d281dfb1dfcdaf59b16885afe7ff7ec524ff22345d3871d46751583fb5e3c075899ac4a1ae800db3ff34971f4731efe</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jws-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jws-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jws-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>4.0.4</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">f5d1d7a29978e4ae0be5a456ee1c65c3</hash>
        <hash alg="SHA-1">b8a1142e04838fe54194049c6e7a18dae8f9b960</hash>
        <hash alg="SHA-256">586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127</hash>
        <hash alg="SHA-512">1ce4a059fda9a1c7ab751afb13ec05446d756ac418dd95f8ced369b04f6928a76cf50003f89b1b86d96bcb1df8b8f7ff31c516b5287155eea93f683f73d54ab1</hash>
        <hash alg="SHA-384">ca7e8d9c88f5ae9f193baa15da96d0c8ab48f34758503ded8058f343547c29f215f2d0db1967090ea984b643dcf0fbb6</hash>
        <hash alg="SHA3-384">3ffc3a80406027cf4baca38fca291a10d26ee50592c2a17316015e96751c6cd002991c337085b578cf897c0812ab6557</hash>
        <hash alg="SHA3-256">f475e55d86dddd85836c52580ed14efd4f6a82587b8288fce7f9599c490a41e5</hash>
        <hash alg="SHA3-512">188e5cfd93ab11a3da65ee0eb91fd0400466588dd8a9950b1a99151d60cdad564a23b35c9a723c69be889c96cf3f901d2fc91099c3daf88becda055687a183cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.servlet</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/servlet-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/servlet-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-frontend-jaxrs</name>
      <version>3.6.8</version>
      <description>Apache CXF Runtime JAX-RS Frontend</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dfe0f0864566467cd3529df0bf224d14</hash>
        <hash alg="SHA-1">c9ec25aeb1d309a69d7047fb91b8978787e37671</hash>
        <hash alg="SHA-256">6500d11a10ff8b8ed7463de3aa59b32649a8e52c45dbf04dc7e84295310e6942</hash>
        <hash alg="SHA-512">a73c12f20b82e363d8b62f836e146dc3d5f2f2d8714c26c1f339379a324ddf71576ac6a6cc9fa04768c20b21a28fae62da006ffdb03e223b0ae4b7f735819f46</hash>
        <hash alg="SHA-384">198aa2f180bb6b4d29702ff976ca214f2078b9e320440d0e3ae13ca8c9f0671a9ffae5b3fcd78ffcca16cd885d57d711</hash>
        <hash alg="SHA3-384">01ef2d72652d0b3b16eb1ca3d3891cb71b198059496c4d6326a28622c95c10d4f8f5a2d56b9d6bcae196777e37940a72</hash>
        <hash alg="SHA3-256">72c16d9b4ab85e4461d25271fc4be51147bf91c053ca21a65a327fb40e50d85d</hash>
        <hash alg="SHA3-512">1835718a91033eeafdbaf0316cac1610fca9b43fdce0aa6d129824c17fd9dced0ac150015397f6e9d3a7f379bda7a8e279e569f9381c5d9eb56b0ebbf2a4ca8b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-frontend-jaxrs</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-core</name>
      <version>3.6.8</version>
      <description>Apache CXF Core</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8cf0a2847f4a2c4073eeb306af463ae0</hash>
        <hash alg="SHA-1">f57c697ffebf4524dba2b880d7828e618b9ab274</hash>
        <hash alg="SHA-256">6999606d6834e6c8a1eb7edcd83bce0c800378023b78fae377728d99e6956aee</hash>
        <hash alg="SHA-512">79d595a113e8c2671035d20933d922db71e9b73024171bc11f56ab9455b9e238a5df4f28d8c02d2ada13567d81d8a09e376a5ff219d18680158aac6c2124af94</hash>
        <hash alg="SHA-384">dd3f9bdf6ef83759cf9cbc12682a465ffd1c47995e85211c2e217794b0c74c1712ede1faa8aae43dc3bf9211a717e891</hash>
        <hash alg="SHA3-384">c1846ebbba6ba27728ecfd397d7bf412a841808a6250bedf5aa2f57885956c67c4ef418bf1663dbfd4f64f1f3197c9ff</hash>
        <hash alg="SHA3-256">75fc0d8c84a5403bc743591ea6d3cac52a40526c7f7d202fb9126f31a70e235e</hash>
        <hash alg="SHA3-512">97669b68ea2d7fecd257a017e621a4bcc92785ddf8293f13835409e567d6dcdf68fa38c3b5c5162301413f238e134c8f31a4195f387fe854251c9b6142745b77</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>jaxb-runtime</name>
      <version>2.3.5</version>
      <description>JAXB (JSR 222) Reference Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d3790292a30333a14b7fb1143864a9c</hash>
        <hash alg="SHA-1">a169a961a2bb9ac69517ec1005e451becf5cdfab</hash>
        <hash alg="SHA-256">4a25453756d08be89c6537cc26fea237677ab99eea857ce1bcb84346715cfae4</hash>
        <hash alg="SHA-512">c55c0754e4d79d548c029504b04b15d5ef28821f0c3ee9e14346fabfc3d6e5ef0bd38b4d076917eeac6a0c79bbbe1f78dd4f36f425c175efed23ea8cb771d9ff</hash>
        <hash alg="SHA-384">7918c98d770221a2c4bd913870b9ae6e91271fb37eb60f9d2e2a6bca49f7af1980be80e9aad77ca875e79ed3a6391d06</hash>
        <hash alg="SHA3-384">ecb0a57c239dc254549520f73816a347f1204c47bb7ae6e5d4b6cd1f409af9ce583411faea2aec0894e5ff625c1b5f8b</hash>
        <hash alg="SHA3-256">7d69b19934e5f2cc435ccf681a796335b3e19a0e1b6522c615ee328f5bb9c341</hash>
        <hash alg="SHA3-512">498b8588dbd9f2f5215f380634553036e38856adabb582bb41980898d0bb9f9f80e48d244a3a798db389efd2131a1dbadf96d778668cda58f8aa1163875d3c3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-runtime-parent/jaxb-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish.jaxb</group>
      <name>txw2</name>
      <version>2.3.5</version>
      <description>TXW is a library that allows you to write XML documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">67005a4cf5ee9cfd82edec1bdbecb32b</hash>
        <hash alg="SHA-1">ec8930fa62e7b1758b1664d135f50c7abe86a4a3</hash>
        <hash alg="SHA-256">7d75ea1151367fb66287011d9941715f645922932554acba0c5ac3aec67fb01f</hash>
        <hash alg="SHA-512">5bdcd56ff4644554e001862d69ddf275441bfd72d641a200e17f0f1093a49fe2c5f2e0d5a65797419b0355843c916b81a6fd4bde67baa6d4a70b6784e4f9def9</hash>
        <hash alg="SHA-384">ffcb4be280ad100c23249cf17de737bb6093440aa26e533aeb7c57eb5959b964b62c664250c9d39088d22916321a66a7</hash>
        <hash alg="SHA3-384">e2089f8ce9b4e3c56017e6724e8ab9565f2015156ea10a844d9720d258709963b7c1b8254d288a94efdc32d6ebdd88ff</hash>
        <hash alg="SHA3-256">dd0147f1d51c44c201ae8986ec9dde0e8dfbe827ae8a8f16422c4706adbba018</hash>
        <hash alg="SHA3-512">31e9eec45c24a52bdd21ae8ce4494525495d91f8fd3d0947520d56a3c5280bac621487a78008fea4b39b86207397f5a16ad603b5048410a0e81e0927ad08270b</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jaxb-ri/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-ri/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://accounts.eclipse.org/mailing-list/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-ri.git/jaxb-txw-parent/txw2</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.istack</group>
      <name>istack-commons-runtime</name>
      <version>3.0.12</version>
      <description>istack common utility code</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1952bd76321f8580cfaa57e332a68287</hash>
        <hash alg="SHA-1">cbbe1a62b0cc6c85972e99d52aaee350153dc530</hash>
        <hash alg="SHA-256">27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd</hash>
        <hash alg="SHA-512">af36b11cc0d82b7f62c64941f4e7d441d25cb9f3c4b3e08753d038c388e5a09364b5dac9127f29a9b8df6d96034133caadab6d74371077478d2f301605913460</hash>
        <hash alg="SHA-384">ad8ba1f6538e087915b1e7fbf4a7a60b006ebecc4ab52986c10dfe88ae11ae7eb6e1f302bee06f70b16ec316f001375b</hash>
        <hash alg="SHA3-384">2207c7e1570860d6300ef3157905498efaf26ba85566b053495f583b20c755cc07d6855b2d79136ab4d6544635e39f4d</hash>
        <hash alg="SHA3-256">50a425e524a6ee81110ecd86190d039a84d46aa3c45855310fe4f95abba3c21e</hash>
        <hash alg="SHA3-512">286997280ee0885c456686cf91c601e600106138f39eb81fc27381868f7ede0d1521cdf22c420331b1a961ed2f1ba1887a9ae05073f4364e3ffc297f40f0de53</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j/istack-commons/istack-commons-runtime</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jaxb-impl-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxb-istack-commons/istack-commons-runtime</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>com.sun.activation</group>
      <name>jakarta.activation</name>
      <version>1.2.2</version>
      <description>Jakarta Activation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b8bee3bf29b9a015f8b992035581a7c</hash>
        <hash alg="SHA-1">74548703f9851017ce2f556066659438019e7eb5</hash>
        <hash alg="SHA-256">02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a</hash>
        <hash alg="SHA-512">8bd94a4370b827e3904f31253b022e5c1851896d3b616ca7daebfef259238cedc56d4ced32c74f24a13c3e2295b0ea012af5d04656b7f713cc53a2f18d5e2cf7</hash>
        <hash alg="SHA-384">1cb0aff8b73ba52a9931b2cf13c75a1ce6665fb826bf97ede66db75c532136aa189fb53a1925e62b6eef572309ef3b9a</hash>
        <hash alg="SHA3-384">83801332576d931f4091ba65ea240d49c23e3b93dae939ce2eed63de943f80f251a4347638b99900de5b831796b12590</hash>
        <hash alg="SHA3-256">5363211b59dfaff6e1973e93548e5e4062189c6d0f43d7802627ebeb7b7ff37d</hash>
        <hash alg="SHA3-512">0c7b62a3432b19ffad02eafffc7e598391cd32b1313d075f94cda09913402770b4ba2314716625571f266431067229c93cec36e17c3ea598623542988634ca0a</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaf/issues/</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaf/jakarta.activation</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>6.6.2</version>
      <description>Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f322ee7db6505b01c8bfe5f54c5670df</hash>
        <hash alg="SHA-1">0bfe905f19ce0e60bff5b7adcbded2681a092ac3</hash>
        <hash alg="SHA-256">8d097391bb3f3009fb37a565222b7ad3ffd49c49565a478ac0b2445448f55896</hash>
        <hash alg="SHA-512">00a18366306de76827a0d3ff83236054ed7ecbf4be2092fd8ac29fb63bcca9d86a6ffb5f41027029a869a4d47f978acf44118397e0fc21482cea3182eb1e4703</hash>
        <hash alg="SHA-384">80c2d8aefd00a9dcc4d9ca0ef4d259b3047f5c4bbca8be36a3689237b352ee1d8157a8cd2f5e60c5f3586b5219d9a6f9</hash>
        <hash alg="SHA3-384">9c88ff480e97e57e55f7f6542d9d75cd8f75cd8e840cde47ce7b3040fc9167786c54c163a23b6c5564f8f1e08d261a40</hash>
        <hash alg="SHA3-256">9cb25d5c1fa642757a01b7c6bcaaf7fd4722469c309f90d0d735d79b15360e9b</hash>
        <hash alg="SHA3-512">f9ff7ae6b1e9e3cf30fbf236222db5ac715b85334a321bfae352360f235d3b656d3bdacc855c41f8ae4380526bec1d10fcbe679447849bf7dc513815444035cf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/woodstox/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/FasterXML/woodstox</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.2</version>
      <description>Stax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6949cace015c0f408f0b846e3735d301</hash>
        <hash alg="SHA-1">b0d746cadea928e5264f2ea294ea9a1bf815bbde</hash>
        <hash alg="SHA-256">a61c48d553efad78bc01fffc4ac528bebbae64cbaec170b2a5e39cf61eb51abe</hash>
        <hash alg="SHA-512">1c0587ecb4c5a659ce2ae1fe36ffc12636a8ecba549a29f2cf91cb4d1d36a335c05f35776f480488d40d894230389f76aeeb363887026c6ef5c565995c17b7c6</hash>
        <hash alg="SHA-384">3b617db8307a081df858a4110f5b8fec51c06355762506cbc4be5557fb06959f0499f7e672103d46f71c66bae472a7bd</hash>
        <hash alg="SHA3-384">22a3150713f7072962e26c286a1ef97d849b10d7f1251c56ae34252f247127b56dd189daa758c64776b4196ee0060517</hash>
        <hash alg="SHA3-256">174868c81672068b42ccde35310d4dad60f457b795101e99588c28b0eebdefc2</hash>
        <hash alg="SHA3-512">c88de5a2137e3b63b632ef24799a677c998b76e736407f1e8c6af85d1b6a94c76bc20d26e6cac847d8383ab6760f1b5c2ae7574fba21e1e6a96de7cdd38f0e39</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/FasterXML/stax2-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>http://github.com/FasterXML/stax2-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ws.xmlschema</group>
      <name>xmlschema-core</name>
      <version>2.3.1</version>
      <description>Commons XMLSchema is a light weight schema object model that can be used to manipulate or
        generate XML schema.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">76e1deab5e6e1caa5fed31b3482cd266</hash>
        <hash alg="SHA-1">5a83fc4e79d128f38c9e32138537060678151759</hash>
        <hash alg="SHA-256">648f7f7e5228d89069cbc54c32404209f242581bc1c1e2e74229114f081071aa</hash>
        <hash alg="SHA-512">e08630e6f6fbe2b960a7c161ddff46e135566bcb1dd2aaf3707ac01a843fb462ac1c7eeb830aca7fc88cbe3ffadc235adac07ec019e166050860ed73d249c21f</hash>
        <hash alg="SHA-384">456b8a1dab0dfbccc13d9b78b195aef80d6989ccbd3a421e3e60305a4d2d48704d2f6b157c593ac2371661a505098c13</hash>
        <hash alg="SHA3-384">5bb23dd4714285adb3e64b85d33df68f4368b818a4c94e74e036b416c34ff3dbdffc70651cf7f531323aba0141800dcd</hash>
        <hash alg="SHA3-256">c01a671e540963e96245c65b633f0d17da112307c95e75c869884e92cdf7b523</hash>
        <hash alg="SHA3-512">be1141504bbc979f485f8fcdb00de037489ab5fb2f7b1401b95d1157b21684c105eb5ce985b6798fe0fc287dd0126843d1c78597fbdb3bf66f0b82c6516df9c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://ws.apache.org/commons/xmlschema20/xmlschema-core/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/XMLSCHEMA</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/ws-dev/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=ws-xmlschema.git;a=summary/xmlschema-core</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.ws.rs</group>
      <name>jakarta.ws.rs-api</name>
      <version>2.1.6</version>
      <description>Jakarta RESTful Web Services API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c3892382aeb5c54085b22b1890511d29</hash>
        <hash alg="SHA-1">1dcb770bce80a490dff49729b99c7a60e9ecb122</hash>
        <hash alg="SHA-256">4cea299c846c8a6e6470cbfc2f7c391bc29b9caa2f9264ac1064ba91691f4adf</hash>
        <hash alg="SHA-512">c1e2655269b9a32f9c0aec9edf12bf6d8b397d8cbcf60e28dd21ab13ecc2738800ebe5c2d49ed3c50d4dac6617671f0fae873daf8ec116a16ef7f7f0a3bef7fa</hash>
        <hash alg="SHA-384">3fd05e2b167d927216d3b2fc9d1c5a70aa3911d075c2159f958ce755c6a41d93bd76f0ce79ccd22e5a60182aa91fdb07</hash>
        <hash alg="SHA3-384">3a110ff82d6a0dba4adf024a6425e68689416dd8f0e841f2bade574dfaebcbcfede410116530714b68ef9d32a318c286</hash>
        <hash alg="SHA3-256">794fe21a9e2634744c65b299a232756391316c0b71e440973575bcde78907c17</hash>
        <hash alg="SHA3-512">fe482041b54c5f7a40d670af73c0c0c0a562bf74f4bfd684f8aef56decfbc5230901768814f7d0b0ec600828fea39bb8621cd121f616778278a03f67fd497310</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jaxrs-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jaxrs-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jaxrs-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.annotation</group>
      <name>jakarta.annotation-api</name>
      <version>1.3.5</version>
      <description>Jakarta Annotations API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8b165cf58df5f8c2a222f637c0a07c97</hash>
        <hash alg="SHA-1">59eb84ee0d616332ff44aba065f3888cf002cd2d</hash>
        <hash alg="SHA-256">85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a</hash>
        <hash alg="SHA-512">d1acff146c0f9ea923a9325ad4c22ba2052ec474341ab8392abab7e8abd3ca010db2400ff9b5849fc4f1fa5c0a18830eb104da07a13bd26b4f0a43d167935878</hash>
        <hash alg="SHA-384">004a4bde333c0575f72df1cb9cf95ee0c6c7f738a6f0f723a5ec545aaa1664abeb82f01627708a1377e3136754fb7859</hash>
        <hash alg="SHA3-384">abcc5b1fbad59b3e9b6d2d6195ec11d6254f689116c534a964724b61f815cca60ba3a2c1489933403f3f78dc54fd20a6</hash>
        <hash alg="SHA3-256">3d3ef16365e7a0357d82f874fa26b2b0a146cf7bf98a351c65ef1586444fa009</hash>
        <hash alg="SHA3-512">88625a8811be514851209291344df32478b527bc7838ddee58752269bf2457ae8f4e6b6a0d0b5c18522e287ba6df1def0cb19dee2b85e01ee21f0b48ac2630d3</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://projects.eclipse.org/projects/ee4j.ca</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/common-annotations-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/ca-dev</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/common-annotations-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-transports-http</name>
      <version>3.6.8</version>
      <description>Apache CXF Runtime HTTP Transport</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">542773f45d4c57a2e4f29a2a4db79206</hash>
        <hash alg="SHA-1">c1a264691f9f3d0d38c89babbe81c8dc15b7d4bc</hash>
        <hash alg="SHA-256">5a951898dfd3f5c2e8cfdf7cb9bd5a24801831fd1e96d30028867596c89645bb</hash>
        <hash alg="SHA-512">dfa35bb7ca0915640658a33155886abb54315510ac0e9933061dbd05e70802e7e31ebdfddff01cbe4bbf5a1f56603c8cf7d278485e62b47c675b93b5fbe7756b</hash>
        <hash alg="SHA-384">437f7d3beadb2d800876f675da7001083fcd4db6e855c494bde2267f602616d546f09106bfcf6285a75694750bb09006</hash>
        <hash alg="SHA3-384">1fe086dc733eb7020fe0bec8ceacf2791dad9d4a32cd6d148cea5eddb457561955e3adbe7f6f258a2a036788827d1f1a</hash>
        <hash alg="SHA3-256">19cd110db37084f54697df99db3f19ccf171d03658b20c97ef35fc0fccb1f01a</hash>
        <hash alg="SHA3-512">483e05a555804da57c0a11e7a42f6a9c5eb7b1b64127192e607e28535c5c31b1d6d6f7e24585474a8af0ffc47238666ff02e15df9484d260b73e29266252f8b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-transports-http</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-security</name>
      <version>3.6.8</version>
      <description>Apache CXF Runtime Security functionality</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">fdf63bd55f62c9929f5fa1ab451ad8e0</hash>
        <hash alg="SHA-1">fd0bbcd43e0c0399651ce5e1bfc89e038ef0a0c6</hash>
        <hash alg="SHA-256">56f1ed369d3be5312afb7ffe064afc40f7d683f8665583fc4aab2ac2e254b5c7</hash>
        <hash alg="SHA-512">290cb389b82b9b2b73e1d3de260039238dbdb236c11ff63bb8b5fec33c2adfde3c3c076795ba2a4bc21ef28fa346d4ccd506254ece2fe497650c45ba5125331d</hash>
        <hash alg="SHA-384">a048c8a98cefcd95c13f79fc320f7552f646075cf71e4cbde4c2ffe340094bdc292ea664fafd281dc505731348e27088</hash>
        <hash alg="SHA3-384">2c3bb12476bfff75a0091c6ee8303de49b05ee711ccb0a3c67aa92f4ef40216cf6c4d28b5ce8f2803dcb86fa0bef25b6</hash>
        <hash alg="SHA3-256">65ca283f46fe7838193b59a8df2c38e4333ee0f8dd7af3368b219ed0030d80d6</hash>
        <hash alg="SHA3-512">161293f53dd3889e188611caf69d1f67afacb6a5ea4d3e8d262e151cc66047e482b4e6cda240e9f02c5dca66e761bccc1ae564e888b18341d506b29d6bd781ad</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-security</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-common-openapi</name>
      <version>3.6.8</version>
      <description>Apache CXF JAX-RS Service Description OpenAPI/Swagger Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">682717a04e47b456e0f723e8c191f3ef</hash>
        <hash alg="SHA-1">4a2fbc4fa9951bd7377fa0efc6d5022e33136f2f</hash>
        <hash alg="SHA-256">97943e2fb520b16333097186bd8120e8af3d9191f7b55a20232563cc540a60ac</hash>
        <hash alg="SHA-512">e84bb111790f20ce1c172b012b0ef1e9dbe6e8dd4a2eb53fc7cbda13307bac5e64a39e9e0df2ebbb2af190f6bcf7d0311b74a9afad6f4e610f08920eb3cb8fd8</hash>
        <hash alg="SHA-384">a3757b6ad152da9a0b6cd2c4a04ff31b138a733c8c75d5fea75538d10427f6fa0859eb85beb412ee9d86173a43f2122e</hash>
        <hash alg="SHA3-384">5849f0f6fc0dbbfa6db34f6212febf67f63ab691ba758803654119d1a59e12ded8393796235883a4f03493db016bbca8</hash>
        <hash alg="SHA3-256">04d8d76b201b7eacd412ca1e573fcb73b3f2a8913af6339c792c497d9f9f7a4f</hash>
        <hash alg="SHA3-512">4bb1e28fce3126ba150f81fb8c9ab838a7fc137917e845cbe637731406b97f67fd5f3e3e1fe6a62b292ed92be52bd0d7ff0f1a2f07128157a9db711d570a9bea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-common-openapi</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-service-description-swagger-ui</name>
      <version>3.6.8</version>
      <description>Apache CXF JAX-RS Service Description Swagger UI integration</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c29c710f9714ad61c042dfe50d7ba9b3</hash>
        <hash alg="SHA-1">4120b73af38bd9b37a86bdcb2b4915d3beb7bc1a</hash>
        <hash alg="SHA-256">cbbef9dd85ab41640fd826bc11f3448260f2a2a6df8634c88f8e7df2ce486e09</hash>
        <hash alg="SHA-512">9e6cf654e612afda25208311899c3ca6eadcc4d58537c3357b5f812a6fd43a78ced0dca0bed7ff556b900ed94e5215385538b3478a09bdf7d88cfd24077d209b</hash>
        <hash alg="SHA-384">849ac1f6b2f3b9bbb5d9d86153d936782dd1af0deaf0f1518823612475c1f7c44b440582ddfd6bdd6ba55f5a4f63acc2</hash>
        <hash alg="SHA3-384">60fec55e75ef07fc465de7f65ef215fc06d1558e1c41e53605f4a5262e431ab8708aa1cfa0a655b643b2c7ae2220069f</hash>
        <hash alg="SHA3-256">789b4867071d9ce898927ab0ed3c2104f2bdf572a3aa67c7db95d3514eca5da7</hash>
        <hash alg="SHA3-512">7b05b15b10949161838f4f674bd7b7ceca89dbd7dff797198759b4987f759ff345c0b2f62647449af619e8f54f1420af1fd62b9f5523857f20e6c3e00ce2311f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-service-description-swagger-ui</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.cxf</group>
      <name>cxf-rt-rs-json-basic</name>
      <version>3.6.8</version>
      <description>Apache CXF JAX-RS Extensions: JSON Basic</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1dfa8f483cff415ea91d9989ef82177e</hash>
        <hash alg="SHA-1">6b51f0ab2d461750d8951036fe1a81f0ac0e3bbc</hash>
        <hash alg="SHA-256">d22d9e8ae044b0c3f83755aed0915b3cda51fe76aa4791234e555c3f9ca904cd</hash>
        <hash alg="SHA-512">9dee1fb0e5e45183086b04a02d0612c1fa16c4fcfb16873cd1f16a834223ee4063affa9d4797253354d92b8a4d78fb84aee71a5ca126bb7098cfd2f588771900</hash>
        <hash alg="SHA-384">69aeb2c1577c03f0b040d616d95e7148ed4db946a840371a08c14e690809a0f78bf14ec86f4dd8a93dabb193cc952b4e</hash>
        <hash alg="SHA3-384">f10faabeff25ef917770a8bbdf979da559af6addec8f421e26a090514a47c96be94cb6a35cba70d2f394d9e32563fe59</hash>
        <hash alg="SHA3-256">fcbb836b955cd430cd8664ff10ede0870a60803f412479a33ebce97af00767ac</hash>
        <hash alg="SHA3-512">eddb48b10f56d8e88e5b488e4d35be7f5cb046b047aa5a7be741b79f94fe7fce6119bbef8d2c87170e25d7d69ff4086a5effa0b5c9bdfec8210d7da6ca217e8c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://cxf.apache.org</url>
        </reference>
        <reference type="build-system">
          <url>https://builds.apache.org/view/A-D/view/CXF/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/CXF</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/cxf-users</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf?p=cxf.git;a=summary/cxf-parent/cxf-rt-rs-json-basic</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.eclipse.microprofile.openapi</group>
      <name>microprofile-openapi-api</name>
      <version>2.0</version>
      <description>MicroProfile OpenAPI API :: API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b5c1458cc590b9b540762526b8001212</hash>
        <hash alg="SHA-1">0ae8b3b956853744c628a1c49139557b308a60f3</hash>
        <hash alg="SHA-256">dd3c638bb1807ac52a049082e005b328e7448a1a983c5e2cdbb4f6b679e5b54d</hash>
        <hash alg="SHA-512">f940d77d272d4526b16b5b5b86afe9cd92b09b883ebcdd99ebe2ff4f31e12bb9f4acf02740bb87b5b6e4906d1451b7aa538f79fa81ffc1543929c313d4dc49ca</hash>
        <hash alg="SHA-384">2993d8ecd601ed15077657b7535f236bf9e52bcd732a9fbca7dc225b8978f7ea684740423a8841a7ae6882e5771a7bb0</hash>
        <hash alg="SHA3-384">d2acdcfa97e16b7801c31856f741e1eb23e4807527fd29d61b7839c04f01969843f1fa06c23121e012e66d638321c2fc</hash>
        <hash alg="SHA3-256">bdebdc52e874ef8b7b237c89910c96e14826296efc51878cfcdf8217bb5086e9</hash>
        <hash alg="SHA3-512">fff9f58501a760e9b0a88a08b1a5c105d36f14cb6bd0c8e08f099520c53bec2f0e26eec656fa597ed98bc2431c1e7888078ff099fc7fa622d7a33e8e1386d42a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://microprofile.io/microprofile-openapi-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse/microprofile-open-api/issues</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse/microprofile-open-api/microprofile-openapi-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo</group>
      <name>geronimo-openapi-impl</name>
      <version>1.0.15</version>
      <description>Apache Geronimo implementation of the Microprofile OpenAPI Specification</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bca122a304f9a5446d1df33dd9541d5a</hash>
        <hash alg="SHA-1">997547c48cf6bf1c121966e7daa94cdbcae0da5e</hash>
        <hash alg="SHA-256">38a5ac2badc8e4ca83650a3ebed911350f7055c8bb945cda5d26a259b1c7f00d</hash>
        <hash alg="SHA-512">54eb3ad59a0997da35972b1aad9eaa30257163e34384b9697e6248847705a8680df8c3c416f4c7bf5686cfeee006f80445b3f62d30e5ed6e87e4e4e0fb9ff0df</hash>
        <hash alg="SHA-384">8aa31163ee9530c4a4ec9bbc85e90ab1c4bf66c2ef875f62c93504552021cd492e326a3af0aa4ac7ab0589f2cf55828a</hash>
        <hash alg="SHA3-384">acd095e39e4ab9f113504969b5874368b1c92eac10674da667899991e7affad1b70f650486dec3207bca88689815c69b</hash>
        <hash alg="SHA3-256">dcbe26d254108a0649c73fd4cb4cd6c4f1085c68650cf347920306fdab00cccc</hash>
        <hash alg="SHA3-512">5f020677e5c6974d60fba87bd2eb31bee50174859d5e892329cef7abd643c8475d354294ba8f4e27d47aa43453fb377eec227f94d9ced17646090821ca9a809c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://www.apache.org/geronimo-openapi/geronimo-openapi-impl/</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://repository.apache.org/service/local/staging/deploy/maven2</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://issues.apache.org/jira/browse/GERONIMO</url>
        </reference>
        <reference type="mailing-list">
          <url>https://mail-archives.apache.org/mod_mbox/www-announce/</url>
        </reference>
        <reference type="vcs">
          <url>https://gitbox.apache.org/repos/asf/geronimo-openapi.git/geronimo-openapi-impl</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json</group>
      <name>jakarta.json-api</name>
      <version>1.1.6</version>
      <description>Jakarta JSON Processing defines a Java(R) based framework for parsing, generating, transforming, and querying JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9e0420bfd741a45d4f295e047cc09d5f</hash>
        <hash alg="SHA-1">3b1f26306abd9d2b1847cf62ee491d0d1b942c7f</hash>
        <hash alg="SHA-256">bc58a73d5ecb828f1cfaa8089f471f1d8e26280dc30fe5df242a191100769782</hash>
        <hash alg="SHA-512">10c5e88a7b33a57d63707bac2ecc59fe7d3535b2615b725ac7966b45c1582b45b1f50be951e0d0cf4dd23f1aa7c2420fc27630b62f33551d7ac0e81ee161962d</hash>
        <hash alg="SHA-384">6b01ff5cde9c0e0ff79beffda23c275f9600ace4b13335e0819f4f702999d4451fbee0be36d81e30b7ad7acd9e87e672</hash>
        <hash alg="SHA3-384">b209e9cbfebb7bc58a1bb91efe791cc4bb05cdfa3a5bd33df529f9f1a829790914b5954e370f44e86a4a9c30ae3b328f</hash>
        <hash alg="SHA3-256">c27f99717c6b740f3aad0e2d2494f15bed1a2dec70bc49684179b81a5022d6e1</hash>
        <hash alg="SHA3-512">2f220152a96b8f283079519e63fedcc0c9c35a948980f44597172a1d49a72cb0592c5ec1d24a79e6bcfd90d43a3b7988ec195b625d1f272714bad6619aae9ffd</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://github.com/eclipse-ee4j/jsonp</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/ee4j/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonp/jakarta.json-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.json.bind</group>
      <name>jakarta.json.bind-api</name>
      <version>1.0.2</version>
      <description>Jakarta JSON Binding is a standard binding layer for converting Java objects to/from JSON documents.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ddca13acc50cfa663599525a8d10bb04</hash>
        <hash alg="SHA-1">a0f7cf034442d1fd195ca78cf3d6633140d5928f</hash>
        <hash alg="SHA-256">29226a8ee37ffb7bfb56d5336c3bb93eeed8cebc5498152bbaae1d49ade2b8fe</hash>
        <hash alg="SHA-512">a791e99d5d0019c59ff7cf87a3a517c39412d1eac978e59ff0c73bcaf7e2844dabade4ad810f66bd4313d3833d93beff55a82ed130922ae3fea5b50d98489a30</hash>
        <hash alg="SHA-384">dee6917e5d5c8b845c66514ed00d1aad74e957d14c849389830bd6119999299b1d57f0e33b50795ce64e34bc00dfbb67</hash>
        <hash alg="SHA3-384">c9704fbfbf83190a655c2b0cddcc8f16abdf64cc623690abc9c86878ed87e6baa9cbeb06d60513d036d309034b0f984d</hash>
        <hash alg="SHA3-256">e0fd02a819ca7acbf0814b166582acdb058c0431840c44c6ad6a2cf53046ce05</hash>
        <hash alg="SHA3-512">6f13e4ae5cabc1c0c7fc7327aa5152521c0c3dfdc8def693748f3a61d42f726e471d269b1b6c48487053be90a0298ebd0937af310c6d373165b2c5e4fe6f182b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
          <url>https://www.eclipse.org/legal/epl-2.0</url>
        </license>
        <license>
          <name>GNU General Public License, version 2 with the GNU Classpath Exception</name>
          <url>https://projects.eclipse.org/license/secondary-gpl-2.0-cp</url>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>https://eclipse-ee4j.github.io/jsonb-api</url>
        </reference>
        <reference type="distribution-intake">
          <url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url>
        </reference>
        <reference type="issue-tracker">
          <url>https://github.com/eclipse-ee4j/jsonb-api/issues</url>
        </reference>
        <reference type="mailing-list">
          <url>jsonb-dev@eclipse.org</url>
        </reference>
        <reference type="vcs">
          <url>https://github.com/eclipse-ee4j/jsonb-api</url>
        </reference>
      </externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar">
      <publisher>OSGi Alliance</publisher>
      <group>org.osgi</group>
      <name>org.osgi.core</name>
      <version>6.0.0</version>
      <description>OSGi Core Release 6, Interfaces and Classes for use in compiling bundles.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">cae291c61fe8b7a4476d713550c7ff49</hash>
        <hash alg="SHA-1">0c49acdc9ac62cf69ee49cb6f1905b4fdb79ea5c</hash>
        <hash alg="SHA-256">1c1bb435eb34cbf1f743653da38f604d45d53fbc95979053768cd3fc293cb931</hash>
        <hash alg="SHA-512">a6d5388804982ab2cb0ba82b4291e73f006577c54e5dcb0675a2c4922594ddb0265810a4e7c748c88eba76ee350340376b7a9bd25d2de3afb954cf89117cd470</hash>
        <hash alg="SHA-384">8daff91fc229b2874c1ff7a214fdee65b1824fbac76eb7feec609c5b70ab2fd24fc5cf017b339788a5c7aec041ec1a1c</hash>
        <hash alg="SHA3-384">b921d8bea5dab6e7d827ce49a43e6edb4a15c1402e1d70498faf867bd7e9ea61f47b9cbdbf008ed517b71499c02b9e4c</hash>
        <hash alg="SHA3-256">5836efac64dd3757498bc6648cf02e46f136c6b0b39d5f1641218459d6b68ca0</hash>
        <hash alg="SHA3-512">9056edfc04943cdc81041db1851cade670415457221617babeb3d3c5136c3dcc303862e55b545f40584477e0654d11d84db6ede072015b08744241202d79ee63</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar</purl>
      <externalReferences>
        <reference type="website">
          <url>http://www.osgi.org</url>
        </reference>
        <reference type="vcs">
          <url>private</url>
        </reference>
      </externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-microprofile-openapi@3.6.8?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.ws/jakarta.xml.ws-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar"/>
      <dependency ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/jakarta.xml.soap/jakarta.xml.soap-api@1.4.2?type=jar">
      <dependency ref="pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.jws/jakarta.jws-api@2.1.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar">
      <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.5?type=jar">
      <dependency ref="pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
      <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.glassfish.jaxb/txw2@2.3.5?type=jar"/>
    <dependency ref="pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12?type=jar"/>
    <dependency ref="pkg:maven/com.sun.activation/jakarta.activation@1.2.2?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@6.6.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.ws.xmlschema/xmlschema-core@2.3.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.ws.rs/jakarta.ws.rs-api@2.1.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-transports-http@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-security@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-common-openapi@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-service-description-swagger-ui@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-frontend-jaxrs@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.cxf/cxf-rt-rs-json-basic@3.6.8?type=jar">
      <dependency ref="pkg:maven/org.apache.cxf/cxf-core@3.6.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.microprofile.openapi/microprofile-openapi-api@2.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo/geronimo-openapi-impl@1.0.15?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json/jakarta.json-api@1.1.6?type=jar"/>
    <dependency ref="pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.osgi/org.osgi.core@6.0.0?type=jar"/>
  </dependencies>
</bom>
