<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:4d69b5bd-cd14-4a09-8ce1-45e1ba716ba7" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-08-05T11:21:53Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom</name>
        <version>2.7.5</version>
        <hashes>
          <hash alg="MD5">11cd12fd5f8b60a961c385ef2be00f52</hash>
          <hash alg="SHA-1">3576a6392958d12709ba803922ca8ee0c7a233ed</hash>
          <hash alg="SHA-256">802bf55759d1a44b12e01879614bae19c096302d881d1b52bf36e6051b9dc1ef</hash>
          <hash alg="SHA-512">779fc38723c9b02448a7cd16c432cb6504771ea5969eedb5ce72bcb96b58d0f52c3ee534f38f88e26967e2a18c93b307bbc98a65ad346df0859af89f7d963c2c</hash>
          <hash alg="SHA-384">4caddd8effbaa3379638798216c03a881e1eef799c0f179fde19dbfb038a2a12c261bfd28b18594052787f5460429584</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.druid/druid-processing@27.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.druid</group>
      <name>druid-processing</name>
      <version>27.0.0</version>
      <description>A module that is everything required to understands Druid Segments</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.druid/druid-processing@27.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://druid.apache.org/druid-processing/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/druid-dev</url></reference><reference type="vcs"><url>https://github.com/apache/druid.git/druid-processing</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.10.5</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2d98c7a68e9e99d98ea99dd9dc3639a4</hash>
        <hash alg="SHA-1">33298de8da86f92f8ccd61ced214d3b16f8c531e</hash>
        <hash alg="SHA-256">5ad94fbb2642df695892c4d6e2ab4c319821e5f9bfb7b920f1378de4f611417c</hash>
        <hash alg="SHA-512">d1f7ed8ee5a8861b0db30b409f2f5e35461897bb5fe98b2639e93727852d184643ccea6c0d2c048fd085c75c2c859b605f1f548fc25addd81cee0c10840a8615</hash>
        <hash alg="SHA-384">b049c17861012ce4473cc100dc9f083ddd7ac31e837eb0cfbb7820643d54cc647f69843b021efd724649ef82e99de0b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.10.5</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">467e771df80da5f50fadb399f78f4ce1</hash>
        <hash alg="SHA-1">db2ba27938de7f2d478a97d6abcdaa17cbbd3cea</hash>
        <hash alg="SHA-256">2656010d1e921ac69b76fc7e0c0f5a6b14aca62fa9603e78831e6148eb7c77ba</hash>
        <hash alg="SHA-512">3dfea18100258da373a7097a37b8d88c757f9999cf85791a94354358b9bb09c3d4d6dfbc6207c25fc97f7ad75ff25020326ae807b73140b78401ebf6f1fcee81</hash>
        <hash alg="SHA-384">cda1aed57404d8efc8654d8389d2e8eac9c68a7a5a947e62ddb0fcc5b02eafc995ff9824ca0f55b88b868dc4eeeb7152</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.10.5.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3aec7825a3153ea9d62582e1f6efea0b</hash>
        <hash alg="SHA-1">7ff756c3af1fe95cb3cddba9158fc3289ca06387</hash>
        <hash alg="SHA-256">f93db83891a53e8d268e2cc8fcd88ead2981edc2163e35c2a52c88d9ab57b4a0</hash>
        <hash alg="SHA-512">ce50f13ab306b020072b4214c3373a2e13f56d77e7a2f2fa1be595d844c93497405b6e63c23c1bd8aa58255729af9d5fa7cb09616fd2b59c829069d9f908f0c5</hash>
        <hash alg="SHA-384">1eafa8056242605c431521496f352055bde36c47a0d965343d0659f356697b6744f19840aaad0d0940beeebbf2e24e18</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-guava</name>
      <version>2.10.5</version>
      <description>Add-on datatype-support module for Jackson (https://github.com/FasterXML/jackson) that handles
Guava (http://code.google.com/p/guava-libraries/) types (currently mostly just collection ones)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d9451b1397aa6e288892c425d999bd55</hash>
        <hash alg="SHA-1">a8b0a978c18ab51006a0ef03ba2b2c156b92b1d8</hash>
        <hash alg="SHA-256">a42d52513f39a77a6481ab1e03b0f42874502c7b7c9dc5116819b1d78175d3fe</hash>
        <hash alg="SHA-512">4bbf30a30f5f4318f548bb7ef67df7f2a5d2c24e0217f088e6fbc09ebc05f0d295ebaa151ff84498ea3cc41f93eb08fa2a54f86792d0fb549e3700f2a913032d</hash>
        <hash alg="SHA-384">fed8414ab7ace6f844ee557c4994910e2bd9e6cbd339f3c8001eaef2109c17a7a9d27c14a62d1ed414d524af145e4706</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-datatypes-collections</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-datatype-guava/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-datatypes-collections/jackson-datatype-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.datatype</group>
      <name>jackson-datatype-joda</name>
      <version>2.10.5</version>
      <description>Add-on module for Jackson (http://jackson.codehaus.org) to support
Joda (http://joda-time.sourceforge.net/) data types.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">87c36914caee49ec19b6deb12535bb1d</hash>
        <hash alg="SHA-1">b6ad58040fe4987b8abbdb7a22114382c8df5dda</hash>
        <hash alg="SHA-256">da4ee5119e4dd63c35bc3e27a712999d15d465144dc127f97278435491aff775</hash>
        <hash alg="SHA-512">06a6fad9f3ed489784cd276eebb9f5b1982b46aebfd54d066258772605fcac4ebf17eda6f4b5b26946e503b6cd80742fbd82c9680afe14a218118196ff34f14f</hash>
        <hash alg="SHA-384">44c19618a39729fc0f9b9cc5305c328b8a94311657a0655a72ce65b6199053eb460ed82280e181f5c40cecb1f551ef19</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://wiki.fasterxml.com/JacksonModuleJoda</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-datatype-joda/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-datatype-joda</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.dataformat</group>
      <name>jackson-dataformat-smile</name>
      <version>2.10.5</version>
      <description>Support for reading and writing Smile ("binary JSON")
encoded data using Jackson abstractions (streaming API, data binding,
tree model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">de397ec3feefabc50f4533a26cbea7a9</hash>
        <hash alg="SHA-1">1b56a4febe8a3d2a2c20f4074ba9385a28d49fb6</hash>
        <hash alg="SHA-256">358e4fe110b52001b0ebd9886a3dc7cb6a5201ff465d0d7cc1604f3a35e2a834</hash>
        <hash alg="SHA-512">8e90ba926c16ffcb18aa3ff95c514efc0d29b93efce8d30b6dbf39eeb6b387b859a035c47bf84a204c5682dec122ff9fd9980c487c9b2fb62b4033f2c1f5c0c9</hash>
        <hash alg="SHA-384">ae1e98d8db94ec22a71501b8bb4914b2cbfedecff7a19e4c9bd19192f9035e78b6b205a5ab7fb0745dcd0f334016ded1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson-dataformats-binary</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-dataformats-binary/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-dataformats-binary/jackson-dataformat-smile</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.skife.config/config-magic@0.9?type=jar">
      <group>org.skife.config</group>
      <name>config-magic</name>
      <version>0.9</version>
      <description>A configuration object convenience library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e570fdbb39215a1981d19f7dfae3594d</hash>
        <hash alg="SHA-1">c22383d089321fd0c58a15c1c6ef5d24b5b5ee0c</hash>
        <hash alg="SHA-256">3ae1d34ea3da2e656782bf3fd1e28a74316b9ff003298bc35d528e4be337aa90</hash>
        <hash alg="SHA-512">0c787280f0c7231f280f10fa0c0349d106db4703cafcb774777a90b006651734e21c9ca5a0212f7981828bb8db59160315745a8ed118e41fea499a5cc6c2a077</hash>
        <hash alg="SHA-384">8b3523e6eb83769c1562efb2f9f8c87ead836286c498a95c41df5aa4d166e29aa89224ea2316300eea1e8fe16175698e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.skife.config/config-magic@0.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/brianm/config-magic</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/brianm/config-magic/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>16.0.1</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    Guava has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a68693df58191585d9af914cfbe6067a</hash>
        <hash alg="SHA-1">5fa98cd1a63c99a44dd8d3b77e4762b066a5d0c5</hash>
        <hash alg="SHA-256">a896857d07845d38c7dc5bbc0457b6d9b0f62ecffda010e5e9ec12d561f676d3</hash>
        <hash alg="SHA-512">a9df202229a7955b70f35f33c9662bb0e7fec9e972c1fbac95fcf77ebacf18fea7e834dd60dcec1c8b6894393c75c480e08067e661cc234dea4829b952b7a2c4</hash>
        <hash alg="SHA-384">acc4ff89db23b3e6711f2be79f7c0d430f59327a3f1c9b3dd542e5618c6fec0d74357cf18c4c98c5915c587d4bcd9cbf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@16.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@4.1.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>4.1.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">41f66d1d4d250efebde3bbf8b2d55dfa</hash>
        <hash alg="SHA-1">eeb69005da379a10071aa4948c48d89250febb07</hash>
        <hash alg="SHA-256">9b9df27a5b8c7864112b4137fd92b36c3f1395bfe57be42fedf2f520ead1a93e</hash>
        <hash alg="SHA-512">109a1595668293b32376e885ad59e0e4c0e088ea00f58119f0f7d0d2055f03eb93a9f92d974b6dbd56ef721792ac03c889d9add3a2850aa7ccd732c2682d17ef</hash>
        <hash alg="SHA-384">936813dd6dd66251a7f7eb90963ba7247fdfed432d4e47fc2219fde83c4c5309503d8e2b65a4604c8663dd6965475cab</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/guice</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject.extensions/guice-multibindings@4.1.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject.extensions</group>
      <name>guice-multibindings</name>
      <version>4.1.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 6 and above</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f50c4b54df401bd39dcc8d9679e54a8c</hash>
        <hash alg="SHA-1">3b27257997ac51b0f8d19676f1ea170427e86d51</hash>
        <hash alg="SHA-256">592773a4c745cc87ba37fa0647fed8126c7e474349c603c9f229aa25d3ef5448</hash>
        <hash alg="SHA-512">55ce5cbf03ec3e24fa9a9d08be19ce7601e85aae7bebc44fb659ccc35320e43e2ca3af7a27b1dce765aca3710b675746fc948fd87527654235e4016d2395ca27</hash>
        <hash alg="SHA-384">222246ad3b176dffae184a190a0d4dd85138a3d4a1662f1b852ae1b1ba47bc9cef37e43b4e100098341c0af6cfb0ca04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject.extensions/guice-multibindings@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guice/extensions-parent/guice-multibindings</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guice</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>https://github.com/google/guice/extensions-parent/guice-multibindings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.1?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>2.0.1</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">144c0767e2aaf0c21a935908d0e52c68</hash>
        <hash alg="SHA-1">516c03b21d50a644d538de0f0369c620989cd8f0</hash>
        <hash alg="SHA-256">1e7f53fa5b8b5c807e986ba335665da03f18d660802d8bf061823089d1bee468</hash>
        <hash alg="SHA-512">b3b832489ef9249b22d8a0b9d6eee1895c9d93ef53d5968724a65184cb3f04e17cc74938128b98916da7829c6566be0bc6d60fa8801248cc24620730a060eac6</hash>
        <hash alg="SHA-384">595523bb57ac2b6471658dfab62d6ba47d92ffdbaf219febf9565a42fa3127400586f2e0c2b0cd8e0c6f20e51884525c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@2.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.20.0?type=jar">
      <publisher>Google LLC</publisher>
      <group>com.google.errorprone</group>
      <name>error_prone_annotations</name>
      <version>2.20.0</version>
      <description>Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a46ce2ce5b87751728ae23322e0fbd73</hash>
        <hash alg="SHA-1">bd4d8f4a02886a26b60c76048547a453691fcec3</hash>
        <hash alg="SHA-256">a136d3dce67168d88751115fa223bec80eae6cc062aa2f8173e8344a98235ec4</hash>
        <hash alg="SHA-512">80f5a3f2c6317d3d3cd4c7e273c81358a6291b60836e76aae5d5d9cd572457e82c8c12b5e4a4422397dc8baabb558963c826348cd0c32b57cc9f259896d5fe35</hash>
        <hash alg="SHA-384">552ddf91922692285a46bc5dab5f54e6407d616c0031fe60d4bcde1a4fa83e46de981e11def1b2837f2d2d44c6f5989d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.errorprone/error_prone_annotations@2.20.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://errorprone.info/error_prone_annotations</url></reference><reference type="vcs"><url>https://github.com/google/error-prone/error_prone_annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.inject</group>
      <name>jakarta.inject-api</name>
      <version>1.0.3</version>
      <description>Jakarta Dependency Injection</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e008ed2a6509b7021595d6f70347dae7</hash>
        <hash alg="SHA-1">288f60226c596849c3c57926e8421c83b5abbe87</hash>
        <hash alg="SHA-256">abedc08deffccffe4fbc226f927f02575d8161a759948650179abb95144b9352</hash>
        <hash alg="SHA-512">47da1f09ef9c3c6085a40265e1d56610c5f6587b781e196e7feaddc47b926c967adf56e6dc6ee001f2b2b30b7574ea483e30169a1731d9ffd2063147a8d7fbfe</hash>
        <hash alg="SHA-384">131c7bc4fea9b91f24fcad7bf3a742640f50778de91d1f0ddb0ea745a54e926e646169edfe5408ba3732bd51f8f42b99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eclipse-ee4j/injection-api</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/ee4j/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/injection-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar">
      <group>javax.validation</group>
      <name>validation-api</name>
      <version>1.1.0.Final</version>
      <description>Bean Validation API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4c257f52462860b62ab3cdab45f53082</hash>
        <hash alg="SHA-1">8613ae82954779d518631e05daa73a6a954817d5</hash>
        <hash alg="SHA-256">f39d7ba7253e35f5ac48081ec1bc28c5df9b32ac4b7db20853e5a8e76bf7b0ed</hash>
        <hash alg="SHA-512">bc137c5f7fa6b7092f9fc233d8be7d21d6767f8aa51c2e934b73692c82d28dbb410f55674d7b5a0e1523b514654339277b535b7f5bb01d457a11aba2eca3bbed</hash>
        <hash alg="SHA-384">c5c2853c8d811def0417e2c2f2e91468979008637d5e87441980af17c86e17ac1b59ea0587a70f376d40ca7a99d047f9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://beanvalidation.org</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://opensource.atlassian.com/projects/hibernate/browse/BVAL</url></reference><reference type="vcs"><url>https://github.com/beanvalidation/beanvalidation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>9.3</version>
      <description>ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e1c3b96035117ab516ffe0de9bd696e0</hash>
        <hash alg="SHA-1">8e6300ef51c1d801a7ed62d07cd221aca3a90640</hash>
        <hash alg="SHA-256">1263369b59e29c943918de11d6d6152e2ec6085ce63e5710516f8c67d368e4bc</hash>
        <hash alg="SHA-512">04362f50a2b66934c2635196bf8e6bd2adbe4435f312d1d97f4733c911e070f5693941a70f586928437043d01d58994325e63744e71886ae53a62c824927a4d4</hash>
        <hash alg="SHA-384">304aa6673d587a68a06dd8601c6db0dc4d387f89a058b7600459522d94780e9e8d87a2778604fc41b81c43a57bf49ad6</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-commons@9.3?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-commons</name>
      <version>9.3</version>
      <description>Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16e6ac17d33ad97baa415c42e9d93d38</hash>
        <hash alg="SHA-1">1f2a432d1212f5c352ae607d7b61dcae20c20af5</hash>
        <hash alg="SHA-256">a347c24732db2aead106b6e5996a015b06a3ef86e790a4f75b61761f0d2f7f39</hash>
        <hash alg="SHA-512">0bd9c61553808b8a12822f009ea5622918033a9fa8cb6e3ef319bbff08dda00cf439b5653f25d8f3362f02166530a0eabe2664f1169bcd63e2ed93a603c13874</hash>
        <hash alg="SHA-384">3efa92bf8e3fd41bb72728979e5e1fba057bd45da2b860c4566a2295d0885a2645413d0e0a35e832ea767aba040935fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-commons@9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-tree@9.3?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-tree</name>
      <version>9.3</version>
      <description>Tree API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">f087bfb911ff93957e44860de3e73c46</hash>
        <hash alg="SHA-1">78d2ecd61318b5a58cd04fb237636c0e86b77d97</hash>
        <hash alg="SHA-256">ae629c2609f39681ef8d140a42a23800464a94f2d23e36d8f25cd10d5e4caff4</hash>
        <hash alg="SHA-512">666318e09f4ae02652a64ce2ddd4dd51275a1917108061155aa8d1d9956e9d54bc259d0586ed7cd745c6ac00ab54fbfdd577f6ce915a158fc2eef373d65d445c</hash>
        <hash alg="SHA-384">8cb10354310a0a47ecf49388ea4fa1410988e5ec6bacba661496791c947cfc97d6b5765c64703c05f54b1cb79281d5fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-tree@9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-analysis@9.3?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-analysis</name>
      <version>9.3</version>
      <description>Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">11e43c0220b3f6b4791b8abf7b4cc7ef</hash>
        <hash alg="SHA-1">4b071f211b37c38e0e9f5998550197c8593f6ad8</hash>
        <hash alg="SHA-256">37fd5392bb2cf4c15f202ffefd46d0e92bb34ff848c549f30d426a60d6b29495</hash>
        <hash alg="SHA-512">0bb033b176c8893bfceba098381f5fef429096d5fe9c6b3eb6fdaac63d88dd059d44f3f296851573fe461888288ca2fa61dadae30530fa08fb3d6214c27915fe</hash>
        <hash alg="SHA-384">dc2de1e9a75eac66c2ea9b02e7b80f3ec34d20c59bb8ab963a32bc759103f9f67395e0e258fda8f8ad4d5477d8a1c4c5</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-analysis@9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.io/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@2.5.7?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>2.5.7</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">a84bacfb2c0436f49de77f54a4f19169</hash>
        <hash alg="SHA-1">2bd4f1921c78c2adffbe2eb01117c7936d0a0789</hash>
        <hash alg="SHA-256">d8576102b0193f888a3d9f89df7412859e9c8cc1a7cfe673e5d8b75eba0b4aed</hash>
        <hash alg="SHA-512">76b6ea3b90bf45818de6162c21eafa5d5c0c37e67a12305217528ab4c3811dd636c9dc880f3e329f25803b9895fc29e8b87ecbe25c44153c833ee3ace8148efc</hash>
        <hash alg="SHA-384">9a2f5198f6876fe56fda4c0273e4fb12084fcae28cccdd9a0afea1063d11a51030c49dfaea820665d502305ce16d34a3</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@2.5.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.6.0</version>
      <description>Maven is a software build management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">89e95013b11f347e48c0525965600404</hash>
        <hash alg="SHA-1">d4c0da647de59c9ccc304a112fe1f1474d49e8eb</hash>
        <hash alg="SHA-256">3d5a0e77cde76d386b18c7400db1eb16aacef02e031ecd0d954477aeccc92155</hash>
        <hash alg="SHA-512">eceb2622ce208eeb2bd5b163e5b97eb1b7bac2deffd06859b384e6f0527d802ab59d1537c6d6fbd73f8f16de919696b1ed4cbcc22a8f592749953148d3172747</hash>
        <hash alg="SHA-384">fd3b73e4f962d8989fcb41c6080b5d579ebfc1d62115bd55b573bb9e59c871f6730031e694ccffbf13139fa39c017cb3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/ref/3.6.0/maven-artifact/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven/</url></reference><reference type="distribution"><url>https://maven.apache.org/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MNG</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven/tree/maven-3.6.0/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.0.24</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <hashes>
        <hash alg="MD5">fbefd8983c6bb4928c27c680463ff355</hash>
        <hash alg="SHA-1">b4ac9780b37cb1b736eae9fbcef27609b7c911ef</hash>
        <hash alg="SHA-256">83ee748b12d06afb0ad4050a591132b3e8025fbb1990f1ed002e8b73293e69b4</hash>
        <hash alg="SHA-512">c26bd83ba45eb5d9bb04e8325005bc734531e1c5aed61c12d00e7deca66614657b42e36380a2f7f8583d8a037040c7e421603c1015d1f55b74879d687d578e3e</hash>
        <hash alg="SHA-384">877655375226f6cf7925abd2c3112e10b52cad99a10f088657ea7c7ee632a80ef5d262d84c5bf63f2214fadba13a66d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?type=jar</purl>
      <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.el/javax.el-api@3.0.0?type=jar">
      <publisher>GlassFish Community</publisher>
      <group>javax.el</group>
      <name>javax.el-api</name>
      <version>3.0.0</version>
      <description>Java.net - The Source for Java Technology Collaboration</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">018bd5e6158d75bf328b2cafd53cfc6a</hash>
        <hash alg="SHA-1">60a59edc89f93d57541da31ee1c83428ab1cdcb3</hash>
        <hash alg="SHA-256">8d21ac8c3a38027be27ff4c4fe24806ae2fc188559123253ddc7425066d78fa1</hash>
        <hash alg="SHA-512">29338108d06b1b31c27a1a32ff832834e60c4a8aafd960292a592d02e3900b70c03d521feec4d89acb3df204aef5640c74ad92494303b0c55e18f7d38026bd5e</hash>
        <hash alg="SHA-384">0cff9b0d23115d97f06a178c3caa243981f2a075f33b4b59fd864c24e2a361b46f76489cd76c7140ee26b65f35f77e5c</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.el/javax.el-api@3.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://uel-spec.java.net</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/EL_SPEC</url></reference><reference type="mailing-list"><url>jsr341-experts@el-spec.java.net</url></reference><reference type="vcs"><url>http://java.net/projects/el-spec/sources/source-code/show/tags/javax.el-api-3.0.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>org.glassfish</group>
      <name>jakarta.el</name>
      <version>3.0.4</version>
      <description>Jakarta Expression Language provides a specification document, API, reference implementation and TCK 
        that describes an expression language for Java applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">a4ff0d711c405e054f8166c2ea893e0e</hash>
        <hash alg="SHA-1">f48473482c0e3e714f87186d9305bcae30b7f5cb</hash>
        <hash alg="SHA-256">3b8d4311b47fb47d168ad4338b6649a7cc21d5066b9765bd28ebca93148064be</hash>
        <hash alg="SHA-512">45b9142c3ba82abd44decd350257be6f951bfb23e3baa96e6e8a26b269881f96c4e50615fef06c3b27434d7cb346e87da913f90284e11614118699a8a3e883be</hash>
        <hash alg="SHA-384">14e457f2bbbabd02bbd6ddf8c9dd0c27ab7c50c4c7908c81a17660bc45de3a800119c00da8e799335fae4241adc2745a</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.el</url></reference><reference type="distribution"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/el-ri/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/el-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/el-ri</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.3.1</version>
      <description>JAXB (JSR 222) API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">bcf270d320f645ad19f5edb60091e87f</hash>
        <hash alg="SHA-1">8531ad5ac454cc2deb9d4d32c40c4d7451939b5d</hash>
        <hash alg="SHA-256">88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06</hash>
        <hash alg="SHA-512">93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790</hash>
        <hash alg="SHA-384">1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/javaee/jaxb-spec/jaxb-api</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git/jaxb-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>javax.activation</group>
      <name>javax.activation-api</name>
      <version>1.2.0</version>
      <description>JavaBeans Activation Framework API jar</description>
      <hashes>
        <hash alg="MD5">5e50e56bcf4a3ef3bc758f69f7643c3b</hash>
        <hash alg="SHA-1">85262acf3ca9816f9537ca47d5adeabaead7cb16</hash>
        <hash alg="SHA-256">43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393</hash>
        <hash alg="SHA-512">8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9</hash>
        <hash alg="SHA-384">d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.net/all/javax.activation-api/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation/javax.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdbi/jdbi@2.63.1?type=jar">
      <group>org.jdbi</group>
      <name>jdbi</name>
      <version>2.63.1</version>
      <description>jDBI is designed to provide convenient tabular data access in
        Java(tm). It uses the Java collections framework for query
        results, provides a convenient means of externalizing sql
        statements, and provides named parameter support for any database
        being used.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b23804764e837ee3e83bf33cca1d68d2</hash>
        <hash alg="SHA-1">e9cb36b5954d1af1593bbc4fecadfa5cb170bd44</hash>
        <hash alg="SHA-256">d334833621d01e0b660a601699a9a10b7c1749f6ffffd51b5434ce94313e6e73</hash>
        <hash alg="SHA-512">8c2c7c4bc7fd9fa5c085ae99ca51d4378de3d420aad6292b50cc94783f077334d2273f13e0e995dca0e30eb63eb91708edf1658b811212f819f203c5612f5950</hash>
        <hash alg="SHA-384">3c060caac0d133affc6ff728896695863eb4c8a904b6b7169109b40071e8aeff9c16d96d59cde7e0b9cce995b7f63f4d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdbi/jdbi@2.63.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jdbi.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/jdbi/jdbi/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.18.0</version>
      <description>The Apache Log4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">38d29af13312d716f8d1d8fd79736f05</hash>
        <hash alg="SHA-1">c72ad9b1d8d42e4ea7befd8248bf05877af4c63d</hash>
        <hash alg="SHA-256">b977057233153b242ac58cc5b7d3121136b9c34c86c1e191c042ba4a828144c5</hash>
        <hash alg="SHA-512">2d96625cb1ad07d7f30edc488506481a199fab30bdfcdb253af28661ce4a442164af3ddd421ac85c154707d5c91009d3ec91ee31d9c46467865370042ccb2455</hash>
        <hash alg="SHA-384">434791c20db5028fae6310a51d0c3c9950f4ec5eb18049bf9bfeb95a051d753b42fa07ffff53eac7205b3778af4ac3c0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.18.0</version>
      <description>The Apache Log4j Implementation</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8869945da3b66916542b9fdd2e2605f2</hash>
        <hash alg="SHA-1">07c1882ede137548925eadb750615edab2f6e13c</hash>
        <hash alg="SHA-256">ec7a23bfaf4d8ddf3394671561dd4a0f35b69d6fa6918734e3e8bc4066f741c4</hash>
        <hash alg="SHA-512">3f323284793d663bd82811b8a1fb45b6617ac70047fea3410c5403a0b1935e0cf53aa6936cf9986d38936e93c10235eb5a61e1c6ff87fda08c33bb8469a70e0f</hash>
        <hash alg="SHA-384">1d8f02496df1e6c0bc0e169337b3e45812297b15e099d3f244bf59ca7b00e0d0f8f94692ab4fc4531dd889b1e13a0ff9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.18.0</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">77009f08840ab4d5401918d8c7642fe0</hash>
        <hash alg="SHA-1">e0ea6ef49f1349bb30e8c6e8a7052d0f3ee7a719</hash>
        <hash alg="SHA-256">ee5515b51c81ed3f01cf357016cf33b710f5bc33fde354b8c93dda6099250dec</hash>
        <hash alg="SHA-512">2d4026d0559cd98fe9f77356f9b42048671d565103b9df2902fbbde4170d23ef4cf8885dabc7052ec1db524065abcf31304f9f583f5b776e634c6ecc3c1c5fa9</hash>
        <hash alg="SHA-384">c2cdfdea739d3ce78a174aa57599c980e275db24b7c32d7c6b12efbc576a677cc03d921bac83a3062b090fad2c476495</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-jul</name>
      <version>2.18.0</version>
      <description>The Apache Log4j implementation of java.util.logging</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5e844ef9fa59b5856e1b8a0c6447cfc2</hash>
        <hash alg="SHA-1">8921d9510b9215695dec14bda5f146811632b4c7</hash>
        <hash alg="SHA-256">6eed3a965ff96824d8a35996164666d14ae231d4807d87f3f7d079b14f280117</hash>
        <hash alg="SHA-512">de414d87c647a3a6eadea7a8d21ffa8bae095c30c53a86cab6c684a63764218295e47c49987f8b46e4923e9fa692d167f7556c8cc9b1cb2d2357587084af4660</hash>
        <hash alg="SHA-384">0c2da0e8c935f13154bcefba208498312a9ed725330ffb8c2f7a77855d4cb3a875efc01c88f37dc8df39575d30e3edb4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-jul/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-jul</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.18.0</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4c9e4f6cdcd994c0ab315b0ba25aa77e</hash>
        <hash alg="SHA-1">09b1039c025e0d9a792daf1af0eac564e7181210</hash>
        <hash alg="SHA-256">7234c10ed107643b060f04b4cec16411beaf99ff85f2fbd107c567abaf0c07f3</hash>
        <hash alg="SHA-512">2f75942969ccdd3302cfd38c55227a834bd6284a592f21f28ffef6955af8d0df630b130d8e99f11a77cd478a4a418980ef01b2ce3aeb24b90bb53fe1b0a10f78</hash>
        <hash alg="SHA-384">b61af323407242ce17dd5c9d6a96d0e1baec3d198f170d44244eabf2939c13231e44d77cfcfee3c9642e1e8f1b83eeff</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-1.2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>jcl-over-slf4j</name>
      <version>1.7.36</version>
      <description>JCL 1.2 implemented over SLF4J</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8065610cde33ed9fd5d34367912c1938</hash>
        <hash alg="SHA-1">d877e195a05aca4a2f1ad2ff14bfec1393af4b5e</hash>
        <hash alg="SHA-256">ab57ca8fd223772c17365d121f59e94ecbf0ae59d08c03a3cb5b81071c019195</hash>
        <hash alg="SHA-512">ac231ab44521bb5478742af13624db5c14aea809c3a2c13b989fba30186ba6db840f2d1b4aea54f9c1f779547b975fd042dd353f54025592774d40192bd71148</hash>
        <hash alg="SHA-384">618704032ab3f8f87091ac797e2c9319a4b7f36a53e060695d56173b67ce9bc9e16c74cba228e758ac90e279df75428a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/jcl-over-slf4j</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.rvesse/airline@2.8.4?type=jar">
      <group>com.github.rvesse</group>
      <name>airline</name>
      <version>2.8.4</version>
      <description>Java library provided an annotation-based framework for parsing Git like command line structures</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">eeae35c0c3632e37d71feabdc792f6b5</hash>
        <hash alg="SHA-1">f6148c941e4ec2f314b285e6e4e995f61374aa2f</hash>
        <hash alg="SHA-256">e0c83bd8744f101a794e5329225bd9b73ad3547b7407739c829d998dbb5616ae</hash>
        <hash alg="SHA-512">89748ef26a560511ad77622404a08b93473afe84c79cc22afd533c0549cc2d9090a6b0e31aa126bfbb91e793d694593e63e1bcf50136c03932b23241fe1daf35</hash>
        <hash alg="SHA-384">c93b2725505acda64956083dcbc69f6bd2d01a437a03f7991e02ac75f43264ece3360c7cb7b9d75a4a0f11977b1b3c7c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.rvesse/airline@2.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rvesse/airline/airline</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>git:git@github.com:rvesse/airline.git/airline</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.rvesse/airline-io@2.8.4?type=jar">
      <group>com.github.rvesse</group>
      <name>airline-io</name>
      <version>2.8.4</version>
      <description>Provides additional IO support for CLIs such as colorization and text formatting</description>
      <hashes>
        <hash alg="MD5">09491adadc497d44486ab5b5add1c851</hash>
        <hash alg="SHA-1">502008366a98296ce95c62397b1cb7e06521a195</hash>
        <hash alg="SHA-256">356ecc5f2c04b9e7af31289b6199d3bded69641fc6e004778351f5fb8ef31d83</hash>
        <hash alg="SHA-512">863e7d3bf3a1c64e23cd6605285f7aa086cda7effa7d62aa0281aa9fc6285329cff64b4c59997bea5c6a84745c438f586876c39d309e49c075562c32316a05a5</hash>
        <hash alg="SHA-384">7262e5d2388051c8e364738708a4af7f214c75888f56dd4ddc2ff031b7a3153e5c95928d0dd958f8ee473c9200d11027</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.rvesse/airline-io@2.8.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/rvesse/airline/airline-io</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>git:git@github.com:rvesse/airline.git/airline-io</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-collections4</name>
      <version>4.2</version>
      <description>The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">b290524be8a0dbb6521df95f4ce80c8d</hash>
        <hash alg="SHA-1">54ebea0a5b653d3c680131e73fe807bb8f78c4ed</hash>
        <hash alg="SHA-256">6a594721d51444fd97b3eaefc998a77f606dedb03def494f74755aead3c9df3e</hash>
        <hash alg="SHA-512">e1ba369ffe4e0d8fb1c432ffb2171aaf4435ae2a88f6c91ebf8e7aea28791dc3035685f34a93a5b1370745374ea4bf3b9ca7a99bf73a0017811d29c13afa9a1e</hash>
        <hash alg="SHA-384">5f7cf10ef89925ae0c4ad076ff93079157ce11f69608d8c37e9d6a9cc3a0fa5e65f1b5cd1b2dc7c45cb3886511354710</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-collections/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-collections.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hibernate/hibernate-validator@5.3.6.Final?type=jar">
      <group>org.hibernate</group>
      <name>hibernate-validator</name>
      <version>5.3.6.Final</version>
      <description>Hibernate's Bean Validation (JSR-303) reference implementation.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">417eed33c6739627f9a987a77a2b5802</hash>
        <hash alg="SHA-1">04c730be8bf55a8e9a61e79a2f2c079abf48b718</hash>
        <hash alg="SHA-256">bc73804bd1dca71d7b2c2696d239720a654b34d46ff172516ecdac1f26adccb4</hash>
        <hash alg="SHA-512">2ce205f04d96523da24a34ff79f1d398c4afb1ac3fbdc444f2e7065783e10038b956307be3568155879f89cc7b31cd2fd6c8b2a21c47f23e43e39e2e18c28713</hash>
        <hash alg="SHA-384">d63e96c743f6ba05358e31909cb01aa82271249bb7edf811e4b19b3c5b15448c53f86fe4525bf897701b41d8ae2bafd7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.hibernate/hibernate-validator@5.3.6.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hibernate.org/validator/hibernate-validator</url></reference><reference type="build-system"><url>http://ci.hibernate.org/view/Validator/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://hibernate.atlassian.net/projects/HV/summary</url></reference><reference type="vcs"><url>http://github.com/hibernate/hibernate-validator/hibernate-validator</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jboss.logging/jboss-logging@3.3.0.Final?type=jar">
      <publisher>JBoss by Red Hat</publisher>
      <group>org.jboss.logging</group>
      <name>jboss-logging</name>
      <version>3.3.0.Final</version>
      <description>The JBoss Logging Framework</description>
      <hashes>
        <hash alg="MD5">bc11af4b8ce7138cdc79b7ba8561638c</hash>
        <hash alg="SHA-1">3616bb87707910296e2c195dc016287080bba5af</hash>
        <hash alg="SHA-256">e0e0595e7f70c464609095aef9e47a8484e05f2f621c0aa5081c18e3db2d498c</hash>
        <hash alg="SHA-512">6cd839a07c55a75befa9a95c7cb2e4a87445432d475bc747410fce625ad4496ee5cc6631a445420940ef1cb408d74873980504e4d785d8ec851223301a76807b</hash>
        <hash alg="SHA-384">90434309db295c401fd2c62bbaec1a9c724d24128a2db1f940a453572fb99b8ff02c38ba122d8ab06e3f7a3a802e3d12</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.jboss.logging/jboss-logging@3.3.0.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jboss.org</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://issues.jboss.org/</url></reference><reference type="mailing-list"><url>http://lists.jboss.org/pipermail/jboss-user/</url></reference><reference type="vcs"><url>https://github.com/jboss-logging/jboss-logging</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml/classmate@1.3.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>com.fasterxml</group>
      <name>classmate</name>
      <version>1.3.1</version>
      <description>Library for introspecting types with full generic information
        including resolving of field and method types.</description>
      <hashes>
        <hash alg="MD5">ec2f1109b7020232c6350fd9ded3e40b</hash>
        <hash alg="SHA-1">02ad2fd09dcf5607ca96f8ef432096a96986c40a</hash>
        <hash alg="SHA-256">c2585bca1fd36a1e6bc7c94c4459ec65e3aa393cbfcee204fd134ed018bfd22f</hash>
        <hash alg="SHA-512">82b53871f346c6aa3b177f1e195bd15b88ea8d371cee15ce972f60da0e8ceaf63faeb09947660cf5be88b3af74f7a972e2377a7cb9ec98235c56ff82ac59d825</hash>
        <hash alg="SHA-384">ff3c50f27e6f0e1f29fcf6d69ae08b9f0f92f382167a89f78369e97c542c8340ac13db563852c380565cc8b750928d91</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml/classmate@1.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/cowtowncoder/java-classmate</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/classmate/issues</url></reference><reference type="vcs"><url>http://github.com/cowtowncoder/java-classmate</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty</name>
      <version>3.10.6.Final</version>
      <description>The Netty project is an effort to provide an asynchronous event-driven
    network application framework and tools for rapid development of
    maintainable high performance and high scalability protocol servers and
    clients.  In other words, Netty is a NIO client server framework which
    enables quick and easy development of network applications such as protocol
    servers and clients. It greatly simplifies and streamlines network
    programming such as TCP and UDP socket server.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e9cdf01138257f48d796fb2cf67af53e</hash>
        <hash alg="SHA-1">18ed04a0e502896552854926e908509db2987a00</hash>
        <hash alg="SHA-256">8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49</hash>
        <hash alg="SHA-512">37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5</hash>
        <hash alg="SHA-384">7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty@3.10.6.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://netty.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-common</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d526d21e0aff6c31fbc49bc08b0a9648</hash>
        <hash alg="SHA-1">ad4ecf779ebc794cd351f57792f56ea01387b868</hash>
        <hash alg="SHA-256">cb8d84a3e63aea90d0d7a333a02e50ac751d2b05db55745d981b5eff893f647b</hash>
        <hash alg="SHA-512">14b1cd643eb538df5d70731a43a683b6346519e5b9c2d26109225c710917315fa2d9ea54166f7276c1d08fec0f9c08569703b1afe1c8f62f1cf1b97552c7c29e</hash>
        <hash alg="SHA-384">03f31a8e56fcfb2b6693775066fe970507bc1d2c584247b149a3f8e9692cf1fb915a2e53d36dfa2ed83110da6e077a5f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-buffer</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6cec7855a7c9138bf69c3be6c1da7bc1</hash>
        <hash alg="SHA-1">eec248b26f16e888688e5bb37b7eeda76b78d2f7</hash>
        <hash alg="SHA-256">8066ee7c49f9f29da96ee62f7cb13bee022cb4b68e51437b33da3b6d01398f13</hash>
        <hash alg="SHA-512">2cc792a097a074d9c484fc93c17551531c09d2b0dfa17a66ef79300d7d5a396ec4effcd1a1a12151017601d77152857766accaa583005f6e19beacdf48b8ab82</hash>
        <hash alg="SHA-384">a8a55c0050890f22401de91c13d6fb1d5902720e60dfc997e276b42de5e11f0950e4ce9f45809ac7ee8dc700d2ed0013</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-buffer/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-buffer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-http</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">8e489e379e468a542b9fd3b547461093</hash>
        <hash alg="SHA-1">9e5404764092c1f6305ad5719078f46ab228d587</hash>
        <hash alg="SHA-256">1ada4580f68cd17a534fb3c0337087073223a76cb77304dbe5a1b19df3d53c2f</hash>
        <hash alg="SHA-512">9029621a3db3a3ca89c45ebc4addb55f5bd3f5d4e51ff3f8924473b0521072a530bec27a16bb1d608d01e60bf55003393516bbde4d46d8de120c64b364acda13</hash>
        <hash alg="SHA-384">cff5079076072b110162432bc70cb91ba9ed9b16f359a9f88adfcb35c28a048ac782435c19581a27a256edd22cf8d284</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-http/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-http</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">f900b6a0a8b1ee7636c0939bdc0b14f3</hash>
        <hash alg="SHA-1">ec783a737f96991a87b1d5794e2f9eb2024d708a</hash>
        <hash alg="SHA-256">a75afa84ca35a50225991b39e6b6278186e612f7a2a0c0e981de523aaac516a4</hash>
        <hash alg="SHA-512">77850536225464700e76bb76a40cf34971fbdc7d587c07dc6906e39d945b6cff4d35258a560fa63856b3ab4267b03a64697b4d6dc663c3e21cef257e54228a71</hash>
        <hash alg="SHA-384">0dc4327ebbdfea71502a666a9e7f3b24475c65151e58d34f4b7fbdef3e5e8ee8c48e377c970fd1dcc5e1ab6fedf576fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">54c962d5f603415a4db185525699b52b</hash>
        <hash alg="SHA-1">e96f649e8e9dcb29a1f8e95328b99c9eb6cf76c2</hash>
        <hash alg="SHA-256">bd26e9bc5e94e2d3974a93fdf921658eff4f033bfd4c5208607760ab54298617</hash>
        <hash alg="SHA-512">f690539898e4244e409c1898b525a07e4d1f909d08762ccb7e2d1e1734e5688c355e364c61e02186230dccc9ce5b7ec5dfee6ff8afcd40a87ca129f567238377</hash>
        <hash alg="SHA-384">e16a50b2ec6ec2624ba1b44b5b13e9267c825d8cb5a69f270293b48b05a0d87d716239c971ffb84371218689a6f8016a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-resolver/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-resolver</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">af82f1a2a359af02df205f3e4d69ae37</hash>
        <hash alg="SHA-1">c70ef20ca338558147887df60f46341bc47f6900</hash>
        <hash alg="SHA-256">91243776ad68b4d8e39eafb9ec115e1b8fa9aecd147b12ef15bb691639498328</hash>
        <hash alg="SHA-512">a6b29cd1079e94e334fe689148e8c6c39168fee5fa41044bac8fc554a77997f89453a22348fb82bbc4311d2a5c88cf8cc990a322a18fe2fda1d2e17bc1413204</hash>
        <hash alg="SHA-384">b26223f37a89d5a0658032ae724ccdc862287a7ff1dbe71fae9599b9c4277e5de95cd14ae4900d24b569f5d6206043c8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">a14971bf68e4a755bc3abd954973c7ad</hash>
        <hash alg="SHA-1">cd9121ce24d6d3f2898946d04b0ef3ec548b00b4</hash>
        <hash alg="SHA-256">8e50719a9ab89e33ef85c5f36d780e0d7056b3f768b07d261d87baed7094eb3c</hash>
        <hash alg="SHA-512">3accbdc6793b2cc4f2c402846f8c0a96b325eb2bb26a6e7c0e9b85bbbf4ea4f34b9bfeec915bcb2c93eb5598b5f7550c705780ec9b46bc5886ab8c790c97efb5</hash>
        <hash alg="SHA-384">df838b82ea7a0e6160dbd612770160565d529c9ea94942b00ed1bd36c43c4e2388100761187ea1b93969b2dc9c42c850</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-unix-common</name>
      <version>4.1.94.Final</version>
      <description>Static library which contains common unix utilities.</description>
      <hashes>
        <hash alg="MD5">eff21db54e8454137f29330063ca4b49</hash>
        <hash alg="SHA-1">3fa5f9d04b6b782d869d6e0657d896eeadca5866</hash>
        <hash alg="SHA-256">27d0dff1cd743190279becacfb372fe4d45b266edafad9f1c6c01b04d00280eb</hash>
        <hash alg="SHA-512">371c04261df001319e9f020108ec55717102aa362fb08737591f6fdf7c88ea692e2c4bafb7491a930394a87add4e912d9795fd3dd579c42c91d9eb08328a58ca</hash>
        <hash alg="SHA-384">5a6bd8f0e6900695070e8f8541df691c7d329bdf79501e2f05c5f4192014c42869632fdaa0abc48fd92899817ecb1bd6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-unix-common/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-unix-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.12.4?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.12.4</version>
      <description>Date and time library to replace JDK date handling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40bc7039a3bec98a3b06434712a8b50c</hash>
        <hash alg="SHA-1">41cd821f32bd91b228da19eba162ae75d6404219</hash>
        <hash alg="SHA-256">4d9c2adf2f2d63d4d80f010b30728595e1d71ec996c2234137133f7d6d36e9ad</hash>
        <hash alg="SHA-512">3151e22f25acd87dc2ab07b4d8bfe22cd35160b8a1e62344e1b0aaf1c5936367461763cd73ccfc0e149ce9f95ee50914baf462593cf80096c5dc803e5a24c151</hash>
        <hash alg="SHA-384">66163345aa179cb54d6430e9f9dd6fe6c5d6061015ec4c3272997396a1d01d6f7e355ef34d0128a5aac28b6258d33e03</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.12.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.0?type=jar">
      <group>org.roaringbitmap</group>
      <name>RoaringBitmap</name>
      <version>0.9.0</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3a2f793dea78050c9f4c119c0608c6de</hash>
        <hash alg="SHA-1">4cfebd5d429c2c7067b3e1f58ac99b5578244c7b</hash>
        <hash alg="SHA-256">136654f903175a612e30c67f36fa975552ed47556c61b309916bd2bbc77dea94</hash>
        <hash alg="SHA-512">dfb40582dd9103678517ed67456e84bfcfe9bb95f1085cd98465fc0fbb786f97c4e73fb7a608ab0cffbf545fdaf257192a9dac15a9b8da3598f8c58ed3a47e3a</hash>
        <hash alg="SHA-384">d9c49e54301d654185c21ddb4d9e4cbcdd4c5a084f5ec7c90a7b06a2072ca39ea921911338b716778a3c7ce8a2e3cf40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference><reference type="issue-tracker"><url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url></reference><reference type="vcs"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.roaringbitmap/shims@0.9.0?type=jar">
      <group>org.roaringbitmap</group>
      <name>shims</name>
      <version>0.9.0</version>
      <description>Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.</description>
      <hashes>
        <hash alg="MD5">07711e342a2ed34e089fd3bafa71a083</hash>
        <hash alg="SHA-1">9e20f3ceaea96781b72eac8be9153e9829dc3da7</hash>
        <hash alg="SHA-256">740f56a146b5820a2b3fd26ba646064bb99705fa986368e625fe1d4c51e800b0</hash>
        <hash alg="SHA-512">8921a5871c63446217ec3547c56ad5a4617c0d97f6620cc81d0f3c1e1cb96dc3643e31321fb13215a2a6123b0f8c937a1ead337f4982f23c5f0c20c8dcaeac8c</hash>
        <hash alg="SHA-384">242eb845bad34ef9ea699a92bf36a4264e76e83cdc80d6c08704f3617ae08614de7c506d3c9a3ab6bf65ecde38758c39</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.roaringbitmap/shims@0.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference><reference type="issue-tracker"><url>https://github.com/RoaringBitmap/RoaringBitmap/issues</url></reference><reference type="vcs"><url>https://github.com/RoaringBitmap/RoaringBitmap</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/it.unimi.dsi/fastutil@8.5.4?type=jar">
      <group>it.unimi.dsi</group>
      <name>fastutil</name>
      <version>8.5.4</version>
      <description>fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, sorting algorithms, and fast, practical I/O classes for binary and text files. This module adds all remaining data structures, in particular those based on booleans, shorts, and floats.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">44c80ae2b2326e650ba561f1ba4db8a1</hash>
        <hash alg="SHA-1">799748e42a644db85394db066af658809f89c523</hash>
        <hash alg="SHA-256">3bd6cd607243aa3ac724cd275f3884d5e21438dfd8dca9a351e22062e17e6819</hash>
        <hash alg="SHA-512">b89998bb07ea7b1da70ab2cf63b86539abc065d1dc92e64e8a15ec2ac6dc765f2d65529e10f482c8619a2ba4d6c983be5ef8fec171294bb1ea633dd9db18bbb7</hash>
        <hash alg="SHA-384">5beefca34cf9629407e3718910efec7141485e3c0756b7b0f94b159a81fd71ad4ae4efe841419043d7f1c3c71c95e7d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/it.unimi.dsi/fastutil@8.5.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://fastutil.di.unimi.it/</url></reference><reference type="vcs"><url>https://github.com/vigna/fastutil</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/it.unimi.dsi/fastutil-core@8.5.4?type=jar">
      <group>it.unimi.dsi</group>
      <name>fastutil-core</name>
      <version>8.5.4</version>
      <description>fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, sorting algorithms, and fast, practical I/O classes for binary and text files. This module contains data structures based on integers, longs, doubles, and objects.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c240052d9ef6d90c756c774456b43e5d</hash>
        <hash alg="SHA-1">c693557ee87e311340eb0f8a811b8bca027af421</hash>
        <hash alg="SHA-256">8185e0fe3c5475c55481f9486fc030501679eccd36bb12919369571a27c13fca</hash>
        <hash alg="SHA-512">58136539ec459f0da99caa436dba48937a8df41d5a0112b24ba53506d873553860b4847dccf82efd45900e229df82e5815f1eb80af630571d8956b529771f6c5</hash>
        <hash alg="SHA-384">3ace81405072b5c93e2158db43c6e7fb3135deec4bd847444a0e73544f8c4a64dbb5f70faf4975768246c91f98219c0b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/it.unimi.dsi/fastutil-core@8.5.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://fastutil.di.unimi.it/</url></reference><reference type="vcs"><url>https://github.com/vigna/fastutil</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/it.unimi.dsi/fastutil-extra@8.5.4?type=jar">
      <group>it.unimi.dsi</group>
      <name>fastutil-extra</name>
      <version>8.5.4</version>
      <description>fastutil extends the Java Collections Framework by providing type-specific maps, sets, lists and priority queues with a small memory footprint and fast access and insertion; provides also big (64-bit) arrays, sets and lists, sorting algorithms, and fast, practical I/O classes for binary and text files. This module adds data structures based on references, bytes, and characters.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1618ef8cd12cb28dd782c7808e8f84c7</hash>
        <hash alg="SHA-1">912b86862ad070dd3d21f51e05e361eba1f515da</hash>
        <hash alg="SHA-256">6ca650d507e92f550754f4565383397d58b3a9282e47419f7fedabbfbf23e022</hash>
        <hash alg="SHA-512">c4c27053fdbcd1db54fcefb1b54a482a27cd8d125bc082d58987e49e7a4654a150d1aae8187751432c16c18bcaa19946db3dcfb90aea630d211219086be2208f</hash>
        <hash alg="SHA-384">5defa2c3c401eda935fdc9717eb1a89e406d32230c39bdb859f97695e1a50be60e61a9bba813314e2bd3fe24b261a597</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/it.unimi.dsi/fastutil-extra@8.5.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://fastutil.di.unimi.it/</url></reference><reference type="vcs"><url>https://github.com/vigna/fastutil</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr4-runtime@4.5.1?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr4-runtime</name>
      <version>4.5.1</version>
      <description>The ANTLR 4 Runtime</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">20f5f1ae441ec2080bf9ed0ad5d16ec0</hash>
        <hash alg="SHA-1">07d7288bbe0599b32b844971f270ed001a661357</hash>
        <hash alg="SHA-256">d7f01c6174b36bc1812dee8f2777998fef83d13d1d5a7891fa7217c011caf585</hash>
        <hash alg="SHA-512">d0ef4ab77fd4602e7e71acb86e0f0078f31c42cfe31151c565a6b8148add848d075aea22ae3c1326d491a689856fe74c530bdc4aae55b645664a7305c0c4f076</hash>
        <hash alg="SHA-384">7cacbc3cb03159f534509eafe728dfdbefa1d5486f7dab86a1f3e315653eab04a2ce2a46631be1ba898966ba2945e192</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr4-runtime@4.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.antlr.org/antlr4-runtime</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr4/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr4/tree/master/antlr4-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@55.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>55.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d2154c148fbd871c7ca1cf07d5d02f6f</hash>
        <hash alg="SHA-1">670e165010677d0ae8ffaba6f3135895042b63b9</hash>
        <hash alg="SHA-256">85c049f0b096d74d5b1b33aa4dcfde24b74a9a57ff69711b856198950989376f</hash>
        <hash alg="SHA-512">4025fabc0a72216f2df958f6dc159af4ed71a18355d75ce5d9c76aa39d877a36a6bf5fab9cb95e493da6ab62f8beaf88cff49d9d3b986c542aa6e94c1a1af0f5</hash>
        <hash alg="SHA-384">9901609ae301610fc36f3954bf9feec51b862cc497b909df8cb34a842f6e841c6549e137be88a01e85f21463ce1d9f50</hash>
      </hashes>
      <licenses>
        <license>
          <id>ICU</id>
          <url>http://source.icu-project.org/repos/icu/icu/trunk/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@55.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://bugs.icu-project.org/trac/</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>http://source.icu-project.org/repos/icu/icu4j/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mozilla/rhino@1.7.11?type=jar">
      <publisher>The Mozilla Foundation</publisher>
      <group>org.mozilla</group>
      <name>rhino</name>
      <version>1.7.11</version>
      <description>Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically
      embedded into Java applications to provide scripting to end users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3e1272b9236331067f591bd75c597fa0</hash>
        <hash alg="SHA-1">cf04bfb7dcf7bacbf93ab7727d842f3ab5a66f0d</hash>
        <hash alg="SHA-256">1514cf6fbcda690bfea81e51f0ddc36110bfebfeedfa42c4e5aa97cc0772d130</hash>
        <hash alg="SHA-512">9ca114d0ff7a0b3d437ac4518876308e1404512c6738860b110d4aa919318255f06aa117114a946e4e29499129c0532ab23dd43f03b8863aed831ed14a37f395</hash>
        <hash alg="SHA-384">0028c651f22715fc5e170cc2a32fe6e49b00dd43e861abcaf01f8067ff1304b669d4c92a2c2ae5d91e67f29f7cdaec10</hash>
      </hashes>
      <licenses>
        <license>
          <name>Mozilla Public License, Version 2.0</name>
          <url>http://www.mozilla.org/MPL/2.0/index.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.mozilla/rhino@1.7.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developer.mozilla.org/en/Rhino</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ning/compress-lzf@1.0.4?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.ning</group>
      <name>compress-lzf</name>
      <version>1.0.4</version>
      <description>Compression codec for LZF encoding for particularly encoding/decoding, with reasonable compression.
Compressor is basic Lempel-Ziv codec, without Huffman (deflate/gzip) or statistical post-encoding.
See "http://oldhome.schmorp.de/marc/liblzf.html" for more on original LZF package.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6d5b45baef8ca4f1ec97653702a23ae</hash>
        <hash alg="SHA-1">3833ca68f9f42fd11d4e0a036e9a3faae5d5f1a8</hash>
        <hash alg="SHA-256">2d64b22b33b717b70001d2c4647158392d7922e980961b79126f340eed670e0e</hash>
        <hash alg="SHA-512">b4e01d9d54386ad7ab941f88ebb013506fa8c4d297d20dc7bbe5d35ad4415549373930bdf333046bb282516351179e95219992f5d0b3efc1ebc7862b3f9084e9</hash>
        <hash alg="SHA-384">8e92dc7b233692c4b17e55ad17d0f3f6d921a85f679852d62e2092e6cc63302baec4d439ca280a3078b0005d6c5f6814</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ning/compress-lzf@1.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/ning/compress</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/ning/compress/issues</url></reference><reference type="vcs"><url>http://github.com/ning/compress</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-3?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.2-3</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e5b599a438f1b38142bf7c6568285b88</hash>
        <hash alg="SHA-1">f52de0603f31798455e48bd90e10a8f888dd6d93</hash>
        <hash alg="SHA-256">925dc4ffa72ac8764dfdfebe07733e44f1a7e18fd5c77c343236745760aae717</hash>
        <hash alg="SHA-512">672f1b920d4127741d3b129227a6483776f879da65063d209f7636b3a28308c16c5d8d61072bb80df2f55aca0fcce69808a101546d96eca8ea7550dc922598fb</hash>
        <hash alg="SHA-384">0b58ced9b6b3799daa55ccecfc274e6d33d6388c2f38993199913006b471ab4c0ee3389bfdc78b332319d3dec471e7be</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.2-3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.8?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.8</version>
      <description>XZ data compression</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">5f982127e0de85b785c4b2abad21aa2e</hash>
        <hash alg="SHA-1">c4f7d054303948eb6a4066194253886c8af07128</hash>
        <hash alg="SHA-256">8c7964b36fe3f0cbe644b04fcbff84e491ce81917db2f5bfa0cba8e9548aff5d</hash>
        <hash alg="SHA-512">8cf42ae7d57c2115b9d86dc22eb782f0e0b3348a3927d013ef6a04cf444074592a4614f5e43328f6a55560b90945381a697fa01c47faf54be5b0ef202472ad0d</hash>
        <hash alg="SHA-384">999d842552a2a07f2e8cf84931ed8c3314d995b8f076abb61169ff5e13a732049ff192e56d2d456962832abc2ff10259</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>https://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-java@4.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.datasketches</group>
      <name>datasketches-java</name>
      <version>4.1.0</version>
      <description>Core sketch algorithms used alone and by other Java repositories in the DataSketches library.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">2fb00870d526cc1733d4b9ed7059e0c7</hash>
        <hash alg="SHA-1">6a202e869fff980a2917c89b55ab230a996954a8</hash>
        <hash alg="SHA-256">6ea3587c834a11ee3f52ebedff01fae51977080e2b5314ba95a9c0d0ab6c9861</hash>
        <hash alg="SHA-512">29b14618643803f34c97b8472c04433cfab70248339bf7103f722786a787c5332ac85a6377183f0d95c54285d71203e31819cc56448c45a32a25ba0b9c41f385</hash>
        <hash alg="SHA-384">b18fb7e88f7e134fe9ce153ea8abff1e5c949d0f4e03897270f45854e672ecfbef7c12853d6b72aa5d07bace0a268f86</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.datasketches/datasketches-java@4.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-java/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.2.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.datasketches</group>
      <name>datasketches-memory</name>
      <version>2.2.0</version>
      <description>High-performance native memory access.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">08d9aadd5a45b6db645013235f1347c3</hash>
        <hash alg="SHA-1">f0f717ed3495ed2e58d96e0084f73db0c7b3ba3d</hash>
        <hash alg="SHA-256">0935461726f972866f9df68dc7344daff558e745d9db2207a3af89715c27961d</hash>
        <hash alg="SHA-512">034a4ec75f2198c2130c9b4b637d01d53cc1929974f98a7e4c2282bbe82ccb4c8377683f4276b2c3db442c154162e2551b42ea619fb8a382c00251fcc7c56f1d</hash>
        <hash alg="SHA-384">23f27850b5e724d2b65447754add4098359723c9c35fdeef6116badd5e5d0b9b541abd271901b39fd274a52b43bdf55b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.datasketches/datasketches-memory@2.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://datasketches.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/datasketches-memory/issues</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/datasketches-dev</url></reference><reference type="vcs"><url>https://github.com/apache/datasketches-memory</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.seancfoley/ipaddress@5.3.4?type=jar">
      <group>com.github.seancfoley</group>
      <name>ipaddress</name>
      <version>5.3.4</version>
      <description>Library for handling IP addresses, both IPv4 and IPv6</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bc7e229d76161803d9cbcf6e5f6802e4</hash>
        <hash alg="SHA-1">67613a3a83092588b85b163b9aeb3e87ec46b4ea</hash>
        <hash alg="SHA-256">9ed5359a482be1d3de8fdf5ec5014bf6428ad28b8f917d4c77be17428abace5a</hash>
        <hash alg="SHA-512">24ee9aeb0e8c8eb28b52b2af7de77e209ed2137b041fb69f5b7e1559ff8a786bc284d8a731772436d09bdb166411f853bde55078927afcd70b299ecb5871ec11</hash>
        <hash alg="SHA-384">be12c7471f4bef663a56fe93a30434364e35ff7d2b1b86261ad711934adb0a2bb76529fba0538d113dda05fb3da59ee2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.seancfoley/ipaddress@5.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://seancfoley.github.io/IPAddress/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/seancfoley/IPAddress/issues</url></reference><reference type="vcs"><url>https://github.com/seancfoley/IPAddress/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.opencsv/opencsv@4.6?type=jar">
      <group>com.opencsv</group>
      <name>opencsv</name>
      <version>4.6</version>
      <description>A simple library for reading and writing CSV in Java</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3df3bb981a0e889c03a28135eb899d95</hash>
        <hash alg="SHA-1">b7ce164e9e75be4b5eb42fd89c9c53ebecea6729</hash>
        <hash alg="SHA-256">b0143e4cec683994a3914991b968821a48ccb960c2f2e22c0150e2ac914f7ebd</hash>
        <hash alg="SHA-512">91286fe2d2411c3ae41c112fad3745e33ebf33cd3398c5df3872617d6c5427507d07abafbccd79880014a00ac15028b593047010a7be4e23d240239e2f5e8db8</hash>
        <hash alg="SHA-384">237b95181c8bfb5c1f8c4d68fd706dda9134bf3a82b0fd8254bbab0fc974a86ea641790d0417fd7aa305e64237c9bb3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.opencsv/opencsv@4.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://opencsv.sf.net</url></reference><reference type="issue-tracker"><url>https://sourceforge.net/p/opencsv/_list/tickets</url></reference><reference type="vcs"><url>https://sourceforge.net/p/opencsv/source/ci/master/tree/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-beanutils/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.1</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">ed448347fc0104034aa14c8189bf37de</hash>
        <hash alg="SHA-1">5043bfebc3db072ed80fbd362e7caf00e885d8ae</hash>
        <hash alg="SHA-256">ce6f913cad1f0db3aad70186d65c5bc7ffcc9a99e3fe8e0b137312819f7c362f</hash>
        <hash alg="SHA-512">470323a2ee38be1b7ff8c84f1f5a5f8c4ec2ceb6b0649faa7b961f111865877dbe125409f72b1c52c7f18aa89e3469635c49ff4b83f86cc2f2eb2cc5562f9bff</hash>
        <hash alg="SHA-384">264a511a601a07558911ccc5f49ef579aa1b1760bb4091bcbe1a0017c7be64d86f1d0b28ef560819614b252907cdd44a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/logging</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url></url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-commits/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/tags/commons-logging-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.thisptr/jackson-jq@0.0.10?type=jar">
      <group>net.thisptr</group>
      <name>jackson-jq</name>
      <version>0.0.10</version>
      <description>jq for Jackson JSON Processor</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">95626fa89c533478bd7224db93a2dd6e</hash>
        <hash alg="SHA-1">46cb8029e744ac128d4ce58c944ab21ab7ef3e25</hash>
        <hash alg="SHA-256">977a797df1f9bb589e0c04a09b83a2ceac53d63f202553379f44156986c121dd</hash>
        <hash alg="SHA-512">b4b56b704feb4da16471e98ecdb104691ee2f795ca20a3f1f819095b0a4942b63ee4b65191842ee95766525a5ec6afdf351ec4a9f7498647ef6fc09e2f33655d</hash>
        <hash alg="SHA-384">db3adbce0a25686bb61d58de41ea57d6a83664b4d4542dc664e59be4e80aeb5207d02c245821a3108a079120788a6982</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.thisptr/jackson-jq@0.0.10?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/eiiches/jackson-jq/jackson-jq</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jruby.joni/joni@2.1.27?type=jar">
      <group>org.jruby.joni</group>
      <name>joni</name>
      <version>2.1.27</version>
      <description>Java port of Oniguruma: http://www.geocities.jp/kosako3/oniguruma
    that uses byte arrays directly instead of java Strings and chars</description>
      <hashes>
        <hash alg="MD5">a7e51b8539cfe9c4ef2644adddf672f8</hash>
        <hash alg="SHA-1">a698fd936b13588c6747b182bcfdc13885a8ca43</hash>
        <hash alg="SHA-256">2a355720f40bb20ab92804e14500d72bf6761272e8a8c4e2a1c24dcf54a5916d</hash>
        <hash alg="SHA-512">da27df4332b61d29bb413e673c8b9795ea2d6520c58719a08e95d2900910d0a251795d4a885da0fc1989e9e643ae45fb67d2dcb056e12ce238fab79c29db5fc3</hash>
        <hash alg="SHA-384">ce5bf042bccd8523d816e1532698f1010e5c69f70b3d1f23954c30833a848e88ebe407af263133e1dc217e61ed24bf3d</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jruby.joni/joni@2.1.27?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/joni</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JRUBY</url></reference><reference type="vcs"><url>https://github.com/jruby/joni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jruby.jcodings/jcodings@1.0.43?type=jar">
      <group>org.jruby.jcodings</group>
      <name>jcodings</name>
      <version>1.0.43</version>
      <description>Byte based encoding support library for java</description>
      <hashes>
        <hash alg="MD5">e8f255657985113829e289547f330b8b</hash>
        <hash alg="SHA-1">d60d3f8ccefd848d551d25bcb7f3e9251333648b</hash>
        <hash alg="SHA-256">2cd257f4458a95a1b1b314083a71ccaa46836eeb660b611ee99bbd8e0a23a39e</hash>
        <hash alg="SHA-512">16ab9bc369ce0ec600c73f2c41efa59185375decac1151c0fb059580660ebe3b5daac62236acc55be8590e5e7502752c2acf3cb73f532b7e570ca8a569fa29b4</hash>
        <hash alg="SHA-384">fcd611fb9256a9d1a22cfd11c11d23905a33f3e087d982fe060120a871fa820c27cc842ec936b543da3b2357ffea3bff</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jruby.jcodings/jcodings@1.0.43?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/jcodings</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jruby/jcodings/issues</url></reference><reference type="vcs"><url>https://github.com/jruby/jcodings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jayway.jsonpath/json-path@2.3.0?type=jar">
      <group>com.jayway.jsonpath</group>
      <name>json-path</name>
      <version>2.3.0</version>
      <description>Java port of Stefan Goessner JsonPath.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">766211133fcf3afe61f4ec05829cd149</hash>
        <hash alg="SHA-1">032602ed60bc48f2a7dbe8aceacf5882556eab54</hash>
        <hash alg="SHA-256">ae639197fc8d05d48286f19c0cdbaac756d8f324638d2908069da4fee84224a7</hash>
        <hash alg="SHA-512">aaf8e876dfe3b980963f556cfa0183fce9e17955a3ead8edbd10ea240eee328599d7c4ba3c1afecb34c9901f379af85b0a46f4ab95dfe701acb064168fb2cc5a</hash>
        <hash alg="SHA-384">1fcea27915fd52e2d414a5a1c15bcacb4a2c366c80bfb0f1845ef7369549cc330ddec66afdd257b8cdb1d428831eee31</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jayway.jsonpath/json-path@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jayway/JsonPath</url></reference><reference type="vcs"><url>scm:git:git://github.com/jayway/JsonPath.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@2.4.11?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>2.4.11</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.</description>
      <hashes>
        <hash alg="MD5">323dbbcafd96353661c283118e74bd99</hash>
        <hash alg="SHA-1">cc5888f14a5768f254b97bafe8b9fd29b31e872e</hash>
        <hash alg="SHA-256">f2ffb40160d85a246b4a4337edcaf812db2811af075f2de9e285f0be998a2ee0</hash>
        <hash alg="SHA-512">ddef4c839f95811e565cdcb18ae977ce7b0aefe5694d1ebad018bc744083a61fcb7dd7f5e792296b6e25c6f1159aaf81a792f7f3d08c9feeeff162d1a9cb9852</hash>
        <hash alg="SHA-384">d7e774e9b22195efa1dc292e3de36d3559a22557e7dcfc1d08c9487f837d6ddd2c32f58db14abec9769fe20be6cde9b0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@2.4.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>accessors-smart</name>
      <version>2.4.11</version>
      <description>Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.</description>
      <hashes>
        <hash alg="MD5">80590f80d4ddf575548ff83c7235297c</hash>
        <hash alg="SHA-1">245ceca7bdf3190fbb977045c852d5f3c8efece1</hash>
        <hash alg="SHA-256">2ea7ac03b1b7796d9ec59fcfa271b66ff50cd8019b8c1c997f5883bc30f5a492</hash>
        <hash alg="SHA-512">d821c4fdac3e9f5c2e2d18fd1669e49a2b8542a2402b42dfc48087706cd4d1229d6db90b9ab4531fe830ecc9c45e7c370b5c2a72afe311e529366d2b4c881eb8</hash>
        <hash alg="SHA-384">8024675c96fd17612091b5e09f343e8e29dc2567fe905dc935d123b1822806693ac8f0018e42449b49d3243213ae10c6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar</purl>
      <externalReferences><reference type="website"><url>https://urielch.github.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.timeandspace/cron-scheduler@0.1?type=jar">
      <group>io.timeandspace</group>
      <name>cron-scheduler</name>
      <version>0.1</version>
      <description>Alternative to ScheduledThreadPoolExecutor proof against the clock drift problem</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b70efad940d40c3c28c31d7ea658a44f</hash>
        <hash alg="SHA-1">d25497d443d0843dbf2973e802c06722f2cb4578</hash>
        <hash alg="SHA-256">16d5e028c3508dbd91d76971b92e2692435f751a76b277f0a0415330bcad2f82</hash>
        <hash alg="SHA-512">72abb5c22cbd40bd7213225789ca99e2e1565f278551b864f725dba1ddaf10f4079633e957c403be5ed2616ca1dbbeeef05a0d7b7a2192877327c091c3662227</hash>
        <hash alg="SHA-384">444acf2aaeaa3dd63ce97be1aad2f5f3b77bebb75cbf70d99791c87d9c7b761d87253cf8f2fad7135938808485b9fdc5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.timeandspace/cron-scheduler@0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/TimeAndSpaceIO/CronScheduler</url></reference><reference type="issue-tracker"><url>https://github.com/TimeAndSpaceIO/CronScheduler/issues</url></reference><reference type="vcs"><url>https://github.com/TimeAndSpaceIO/CronScheduler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.lmax/disruptor@3.3.6?type=jar">
      <group>com.lmax</group>
      <name>disruptor</name>
      <version>3.3.6</version>
      <description>Disruptor - Concurrent Programming Framework</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">ed59630d15765aeaede66d67669086c5</hash>
        <hash alg="SHA-1">09bfca4ee4f691f3737b3f4f006d0c4770f178eb</hash>
        <hash alg="SHA-256">8c5df12a17f614464ccacc9b7c4935e5f16e694b7788e714cde4b7587d5dd266</hash>
        <hash alg="SHA-512">d7667483f314840eae6d5a8bc15d02396c5fc3430941d2e42317704c647776c781bedf0a6abc7fa20940c61f88a04033f9913791e8000376d260153d6a005eca</hash>
        <hash alg="SHA-384">2a6abd9a21e9c5e466650b956c9242d5f7c18c9efd7d2bde474c474ed0ebd75809facf732c0112c80a57d8fe650dbdcf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.lmax/disruptor@3.3.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://lmax-exchange.github.com/disruptor</url></reference><reference type="vcs"><url>scm:git@github.com:LMAX-Exchange/disruptor.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna</name>
      <version>5.13.0</version>
      <description>Java Native Access</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bd2e5bc6b4b020c2d9a6e17a8e9bcef1</hash>
        <hash alg="SHA-1">1200e7ebeedbe0d10062093f32925a912020e747</hash>
        <hash alg="SHA-256">66d4f819a062a51a1d5627bffc23fac55d1677f0e0a1feba144aabdd670a64bb</hash>
        <hash alg="SHA-512">954b2fbf88e30597276beeceba7d0d0915248f666ea4f7df0bc6283bdb03ab92967421336e2b029a87335dcb07ec5e6af1eb5ea776a6d391727df56c16fc97e7</hash>
        <hash alg="SHA-384">e9054151e084c41cf6c51a05ba2ec457cf8f566b79f36d069c1d30cc1c039dbc844645c7bc4122070e0bc55fad7b3041</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-or-later</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/java-native-access/jna</url></reference><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.asynchttpclient/async-http-client@2.5.3?type=jar">
      <group>org.asynchttpclient</group>
      <name>async-http-client</name>
      <version>2.5.3</version>
      <description>The Async Http Client (AHC) classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dbe0ae9af0434e536fe3439c59051c1e</hash>
        <hash alg="SHA-1">507505543772f54342d6ee855fa8f459d4bc6a11</hash>
        <hash alg="SHA-256">096d79633d74960a036cc4acb00d8cfc3212d045e415848e0a5a89b1fded936c</hash>
        <hash alg="SHA-512">22fc40464fafd592e49afa9f521a6b57a0079c712e9d0b82157bad9e1056790396e1ec2a23f82438f7662acdf2815bf8a6b057d3758635fad8f1ba8ced012ebd</hash>
        <hash alg="SHA-384">d6af17e0defdf3e63509825a595aed212221209ab53ef0d27b00e5dc8da000f6e4211aa71c8273493c45474b89dcc069</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.asynchttpclient/async-http-client@2.5.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/AsyncHttpClient/async-http-client/async-http-client</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AHC</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/asynchttpclient/topics</url></reference><reference type="vcs"><url>https://github.com/AsyncHttpClient/async-http-client/async-http-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?type=jar">
      <group>org.asynchttpclient</group>
      <name>async-http-client-netty-utils</name>
      <version>2.5.3</version>
      <description>The Async Http Client (AHC) library's purpose is to allow Java
    applications to easily execute HTTP requests and
    asynchronously process the response.</description>
      <hashes>
        <hash alg="MD5">02025b2ad12d787f873c532af51302b3</hash>
        <hash alg="SHA-1">71abe1781fa182d92e97bf60450026cc72984ac2</hash>
        <hash alg="SHA-256">9d4aaf49b8b08512c5a220c712918bea6907a61b3cee78c525fb5c88b3d31a39</hash>
        <hash alg="SHA-512">079016eb8b2f73c7b8fa7b943770cbc4c9bfb4f67dc8d1c52a60a897f2b87bd60e12708da3bfc410299060c7b734aa819f65809f10f860214b42234c3476a627</hash>
        <hash alg="SHA-384">bb916a9ce3852c5805f0f44c2fb2920ed6ef4ffc322fda6ce1254772b1b26755ea7bd296f87a16dbf3fb1b51e82c7f9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/AsyncHttpClient/async-http-client/async-http-client-netty-utils</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AHC</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/asynchttpclient/topics</url></reference><reference type="vcs"><url>https://github.com/AsyncHttpClient/async-http-client/async-http-client-netty-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-socks@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-socks</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">2589891958e846e18148a35888ccc53c</hash>
        <hash alg="SHA-1">b9192c7cda295d75f236a13a0b1f5a008f05d516</hash>
        <hash alg="SHA-256">1c0b4ee0b623402dd5bb78fd4a69bf808da2510524f489a24b0f3cc58ded046e</hash>
        <hash alg="SHA-512">bf7239927fb5e28942fb63828bb7f508b5f1c26faa079429b36491e6f4743c930baa3c8c6308bb813660b228d709daf0b9128c00b1b5006a196a3534a2b202b1</hash>
        <hash alg="SHA-384">482e9bf612d08b14d34a895b337d0dc507e0aab1e3ce92591a782b50bd10ae83e41fdd7d77c148d6b505d4f3a0090091</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-socks@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-socks/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-socks</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-handler-proxy@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-handler-proxy</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">85b024ad255ae6399632f892f6a7b8f8</hash>
        <hash alg="SHA-1">26ba9d30b8f7b095155b9ac63378d6d9386d85c3</hash>
        <hash alg="SHA-256">378738bfeb84c81228ae5de209f964ca87849f9a720c916c77f7cba6494bb1ec</hash>
        <hash alg="SHA-512">792fee1c3a4791e22ae4c9eb7824f299b64585049da4d2de54b6b47e41549639a0d49081ed1e514c0d53fa6628968cdada2614002265da2e55d8b12177eae9dd</hash>
        <hash alg="SHA-384">581d8ecc11705c024e1c90af20a81d4567f86e8e46e68286e6b4ab573dcc440cd98ae30e22d89fd63dc39361ca48cba0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-handler-proxy@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-handler-proxy/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-handler-proxy</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.94.Final?classifier=linux-x86_64&amp;type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-native-epoll</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">17a0beac0d3c565624bb5c34bf3c7047</hash>
        <hash alg="SHA-1">6e60c2cd22dc8856a33e5465ee4df19f287223dc</hash>
        <hash alg="SHA-256">e25e0ef347f7850e6f3d8a6031d64b0edb06ba0e75533c36edb350d4defde5f3</hash>
        <hash alg="SHA-512">32151450be19d0670437caaff5ca3f65fb417b9829af02048f8b8fbf59047309ae5004036a0bc547b1bc53ab3793d64787f64bfbb052e442856c3a8139073de6</hash>
        <hash alg="SHA-384">993ab04665652ae5098747d3c2ea437c05b679cefd82547e129fcae6dc352b03b89362b2582fb0d351f36a8a14bf20ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-native-epoll@4.1.94.Final?classifier=linux-x86_64&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-native-epoll/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-native-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-transport-classes-epoll</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">2dc4fe8c18b086815255d05e613b316f</hash>
        <hash alg="SHA-1">240e36cd5c2ffaf655913f8857f2d58b26394679</hash>
        <hash alg="SHA-256">9d5d51eb42081d6fc13f4dca6855cd30d098a5b1d0b06d5644a1342bd1e50a44</hash>
        <hash alg="SHA-512">04f8203602a413a6ff90c6ed2b8cb325c18ee396cc8a55f7cab4dbd07e43ede54cc1eb75350144bdd2bd73c2f0be9173dcee795873ddaa22f46a239f891b9468</hash>
        <hash alg="SHA-384">4a05bc85b438907fb619732a947edf9d86a45f6e79299ab7ebf3d756d12bb8aceec2ef5e5e729b82c6f77ae71ba3021b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-transport-classes-epoll@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-transport-classes-epoll/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-transport-classes-epoll</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-resolver-dns@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-resolver-dns</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">ea91fa9558a8a5888c3089c57f9813f7</hash>
        <hash alg="SHA-1">25bbe90e10685ce63c32bd0db56574cffffa28de</hash>
        <hash alg="SHA-256">d6a0871adbc47ce4b08ab7c23c6e32047bd197641f5f3fd35d165faed79a89e8</hash>
        <hash alg="SHA-512">1ee02e75ec1d549dc2c810d9cb6c08f248cf0970fe6da942fec7d3013982a79e42bb1d4e8ebd6700c91d1237fffeebc184601e85195e97caf237339f37f3d787</hash>
        <hash alg="SHA-384">5dae891bc232aed81b2e1f5bd0351a55cf1bf1372a6dbe52c962d6a4d330b083d060be9e0fffeb27620216b5b0ada673</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-resolver-dns@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-resolver-dns/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-resolver-dns</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty-codec-dns@4.1.94.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty-codec-dns</name>
      <version>4.1.94.Final</version>
      <description>Netty is an asynchronous event-driven network application framework for
    rapid development of maintainable high performance protocol servers and
    clients.</description>
      <hashes>
        <hash alg="MD5">87060c553239f7de5339d4ec2874e0dc</hash>
        <hash alg="SHA-1">9180660dc8479e1594b60b02fc27404af0ea43a6</hash>
        <hash alg="SHA-256">b345048b7692204803b49eb11f5203b52e18aa7647f8b77dd63118fd8d5fd2a2</hash>
        <hash alg="SHA-512">0d5fccb20fcce1740ad57b20bd3423bfe74adc1ae11726be897f3e29f57b2230304d95a49568b304308fefbdfa7f13d0aa407b7a5d7f300043e7dabe1efc891f</hash>
        <hash alg="SHA-384">e49dc8f8378cae1f5f456dcfd35a9be5384560dedca2cdb9d3bdcc5a7128b16bbff9bbe975effd8ce8c2662f0da6c06e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty-codec-dns@4.1.94.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>https://netty.io/netty-codec-dns/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty/netty-codec-dns</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.2?type=jar">
      <group>org.reactivestreams</group>
      <name>reactive-streams</name>
      <version>1.0.2</version>
      <description>A Protocol for Asynchronous Non-Blocking Data Sequence</description>
      <hashes>
        <hash alg="MD5">022ff8ca0101daeb35c8df9b120ff99e</hash>
        <hash alg="SHA-1">323964c36556eb0e6209f65c1cef72b53b461ab8</hash>
        <hash alg="SHA-256">cc09ab0b140e0d0496c2165d4b32ce24f4d6446c0a26c5dc77b06bdf99ee8fae</hash>
        <hash alg="SHA-512">873ad9eaf57ab70d9d47a99b12ecdbad60ba81e38c0961262e92f48b2a046ef0e76dafbf76f5766410f406b1155cde94622062cd657d29b0b3ce157f8de0a082</hash>
        <hash alg="SHA-384">6e5860dedc6a6ffd4dd8e7acbdfe655c34acb36f9a98351223232214019c304bac33fcae9c86dd2c980b410e3dc9afb7</hash>
      </hashes>
      <licenses>
        <license>
          <id>CC0-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.reactivestreams/reactive-streams@1.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.reactive-streams.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?type=jar">
      <publisher>Typesafe</publisher>
      <group>com.typesafe.netty</group>
      <name>netty-reactive-streams</name>
      <version>2.0.0</version>
      <description>Reactive streams implementation for Netty.</description>
      <hashes>
        <hash alg="MD5">928c55b271314a38e0cc2f0784bff350</hash>
        <hash alg="SHA-1">84ede759015e7480ca8e6ec2af6e2f596aa92dec</hash>
        <hash alg="SHA-256">06e8dda47acca9cf719e04c07137e951c1cd35ade4f2fa7e8207d85af69fc013</hash>
        <hash alg="SHA-512">08ce1a791560661c1e9e695e5b87441f13ca7cf68402dafb010b2001e6d9dfca03812072352bffa0753a726f9164b222d7dd0c2d54690516d1ea61f562957ca9</hash>
        <hash alg="SHA-384">86c0feed762ad649ee619cd62a10ca746455d362a0abafe52200a018c7751294237942f01484f6066f8b1b385338981e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/playframework/netty-reactive-streams/netty-reactive-streams</url></reference><reference type="issue-tracker"><url>https://github.com/playframework/netty-reactive-streams/issues</url></reference><reference type="vcs"><url>scm:git://github.com/playframework/netty-reactive-streams.git/netty-reactive-streams</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>com.sun.activation</group>
      <name>javax.activation</name>
      <version>1.2.0</version>
      <description>JavaBeans Activation Framework</description>
      <hashes>
        <hash alg="MD5">be7c430df50b330cffc4848a3abedbfb</hash>
        <hash alg="SHA-1">bf744c1e2776ed1de3c55c8dac1057ec331ef744</hash>
        <hash alg="SHA-256">993302b16cd7056f21e779cc577d175a810bb4900ef73cd8fbf2b50f928ba9ce</hash>
        <hash alg="SHA-512">b4cbdd8fd1703e4b2e1e691db78fbcf2232d836f740d1821c4c191a14f9472508e27a40d06e4b6b153964af68032959c22945ba169a0ca4018b7748162f420a6</hash>
        <hash alg="SHA-384">7e64f03db2d4f9bacde713ca8aadfcf55e327d92b3cfa54b8cb2f2ffa0cc478d3c7e16f23230ae8266f0dace035142d4</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.net/all/javax.activation/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation/javax.activation</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hyperic/sigar@1.6.5.132?type=jar">
      <publisher>Hyperic, Inc.</publisher>
      <group>org.hyperic</group>
      <name>sigar</name>
      <version>1.6.5.132</version>
      <description>SIGAR (System Information Gatherer and Reporter) is a cross-platform, cross-language library and command-line tool for accessing operating system and hardware level information in Java, Perl, Ruby, Python, Erlang, PHP and C#.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">25d3500e9d397fe2e1ad5773095fb025</hash>
        <hash alg="SHA-1">e349501d4275363646a099e1d3baed064aa2eca5</hash>
        <hash alg="SHA-256">a20dfc47cdfd1173f073b315f8a5e2ab5c2f9c4a901754430e515b9e254f639e</hash>
        <hash alg="SHA-512">dbdde1046fa2319b1fa9b3b8b53d4ecbf9aa27ff33937b40fe374188b43ee5c13e65e69b55dad271e65bffab176a238da78d5acb2a64c74c6b622f2be7f1d13d</hash>
        <hash alg="SHA-384">3ec060d5c1b3d7c9b8a1111d70c9809ad764448c8ed14d469e47b66b559313e6d58db0669f9eab51874fb12fd8b4c404</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.hyperic/sigar@1.6.5.132?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sigar.hyperic.com/</url></reference><reference type="issue-tracker"><url>http://jira.hyperic.com/browse/SIGAR</url></reference><reference type="vcs"><url>http://svn.hyperic.org/?root=Hyperic+SIGAR</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.hyperic/sigar-dist@1.6.5.132?type=zip">
      <group>org.hyperic</group>
      <name>sigar-dist</name>
      <version>1.6.5.132</version>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">1b709e5b97b5e33c1f420e2424b57bc5</hash>
        <hash alg="SHA-1">0594c7104d5514676487b059a1c97a726d03d62c</hash>
        <hash alg="SHA-256">fced8d34e64acedbf07323a7a248ff121e37826a4924304e13ab59ba36dc6b0b</hash>
        <hash alg="SHA-512">19e2dd163685c25f0e3483b05458d707a6107f2603afbbeacf604c6432f6b39be9cf3f14926ced17382956c43760a2226d5fe6d508768313a694b377058e2f8e</hash>
        <hash alg="SHA-384">86b5a81113ccfcae60181784715edcc48d9f624544325655455bbfc37973d6a8323b02fb861a6f13c85d3fb410345ff7</hash>
      </hashes>
      <purl>pkg:maven/org.hyperic/sigar-dist@1.6.5.132?type=zip</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.oshi/oshi-core@6.4.2?type=jar">
      <publisher>oshi</publisher>
      <group>com.github.oshi</group>
      <name>oshi-core</name>
      <version>6.4.2</version>
      <description>A JNA-based (native) operating system information library for Java that aims to provide a
        cross-platform implementation to retrieve system information, such as version, memory, CPU, disk, battery, etc.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c5e2a580b6e1a8c86892f8827b27975a</hash>
        <hash alg="SHA-1">4e6cc1e2c2f2dafeee3731b70645e4a4bc999a6f</hash>
        <hash alg="SHA-256">938089c29f3af2b6174b5ec2a1d513c058dcc8990761255c032b85ac10ee6b27</hash>
        <hash alg="SHA-512">9d93c379e38e66c0f962e34014bbb4c5f9abe33f32edd51f08eec3548c9310208dceccacf6a440cecdb21b8ed10b61a2ab99ce00ef1b9f5d9fc273f1bb7618b1</hash>
        <hash alg="SHA-384">b68cf8ac6ed724cca214ab9a6c1f61df08c3bdf7564d53748f842f33ba1daaf3c8de05fa39a5577e1139dd35aa180b74</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.oshi/oshi-core@6.4.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/oshi/oshi/oshi-core</url></reference><reference type="build-system"><url>https://github.com/oshi/oshi/actions</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/oshi/oshi/issues</url></reference><reference type="vcs"><url>https://github.com/oshi/oshi.git/oshi-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jna/jna-platform@5.13.0?type=jar">
      <group>net.java.dev.jna</group>
      <name>jna-platform</name>
      <version>5.13.0</version>
      <description>Java Native Access Platform</description>
      <hashes>
        <hash alg="MD5">7cc7af47ad1f151faa57ef0624b2f271</hash>
        <hash alg="SHA-1">88e9a306715e9379f3122415ef4ae759a352640d</hash>
        <hash alg="SHA-256">474d7b88f6e97009b6ec1d98c3024dd95c23187c65dabfbc35331bcac3d173dd</hash>
        <hash alg="SHA-512">ddfce8060983b3bf73ae939f7f77f133052aadbe4d3e9d1992f1d8bf9c7210611bf3931ea72137059bd1341a8d4d137910e843c3a52fa50526e21143319f078e</hash>
        <hash alg="SHA-384">cb5144546ed268fdcb7f4d7daa6ea5d08d1076e3c8b92798e606c28837ca5a9bd1ac4d990ef90f9fafbb6ca9aa400e7d</hash>
      </hashes>
      <licenses>
        <license>
          <id>LGPL-2.1-or-later</id>
          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jna/jna-platform@5.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/java-native-access/jna</url></reference><reference type="vcs"><url>https://github.com/java-native-access/jna</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.druid/druid-processing@27.0.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/org.skife.config/config-magic@0.9?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-multibindings@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.20.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@9.3?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.0?type=jar"/>
      <dependency ref="pkg:maven/javax.el/javax.el-api@3.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.jdbi/jdbi@2.63.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.github.rvesse/airline@2.8.4?type=jar"/>
      <dependency ref="pkg:maven/org.hibernate/hibernate-validator@5.3.6.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.12.4?type=jar"/>
      <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.0?type=jar"/>
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil@8.5.4?type=jar"/>
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil-core@8.5.4?type=jar"/>
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil-extra@8.5.4?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.5.1?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@55.1?type=jar"/>
      <dependency ref="pkg:maven/org.mozilla/rhino@1.7.11?type=jar"/>
      <dependency ref="pkg:maven/com.ning/compress-lzf@1.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-3?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@4.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.2.0?type=jar"/>
      <dependency ref="pkg:maven/com.github.seancfoley/ipaddress@5.3.4?type=jar"/>
      <dependency ref="pkg:maven/com.opencsv/opencsv@4.6?type=jar"/>
      <dependency ref="pkg:maven/net.thisptr/jackson-jq@0.0.10?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/io.timeandspace/cron-scheduler@0.1?type=jar"/>
      <dependency ref="pkg:maven/com.lmax/disruptor@3.3.6?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.asynchttpclient/async-http-client@2.5.3?type=jar"/>
      <dependency ref="pkg:maven/org.hyperic/sigar@1.6.5.132?type=jar"/>
      <dependency ref="pkg:maven/org.hyperic/sigar-dist@1.6.5.132?type=zip"/>
      <dependency ref="pkg:maven/com.github.oshi/oshi-core@6.4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-guava@2.10.5?type=jar">
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.10.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.12.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/joda-time/joda-time@2.12.4?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-smile@2.10.5?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.10.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.skife.config/config-magic@0.9?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject/guice@4.1.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@16.0.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.inject.extensions/guice-multibindings@4.1.0?type=jar">
      <dependency ref="pkg:maven/com.google.inject/guice@4.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@2.0.1?type=jar"/>
    <dependency ref="pkg:maven/com.google.errorprone/error_prone_annotations@2.20.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar"/>
    <dependency ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm-commons@9.3?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@9.3?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-tree@9.3?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@9.3?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.6.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.0.24?type=jar"/>
    <dependency ref="pkg:maven/javax.el/javax.el-api@3.0.0?type=jar"/>
    <dependency ref="pkg:maven/org.glassfish/jakarta.el@3.0.4?type=jar"/>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.jdbi/jdbi@2.63.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.18.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-jul@2.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/jcl-over-slf4j@1.7.36?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.rvesse/airline@2.8.4?type=jar">
      <dependency ref="pkg:maven/com.github.rvesse/airline-io@2.8.4?type=jar"/>
      <dependency ref="pkg:maven/jakarta.inject/jakarta.inject-api@1.0.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.rvesse/airline-io@2.8.4?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar"/>
    <dependency ref="pkg:maven/org.hibernate/hibernate-validator@5.3.6.Final?type=jar">
      <dependency ref="pkg:maven/javax.validation/validation-api@1.1.0.Final?type=jar"/>
      <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.3.0.Final?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml/classmate@1.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jboss.logging/jboss-logging@3.3.0.Final?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml/classmate@1.3.1?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.roaringbitmap/RoaringBitmap@0.9.0?type=jar">
      <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.roaringbitmap/shims@0.9.0?type=jar"/>
    <dependency ref="pkg:maven/it.unimi.dsi/fastutil@8.5.4?type=jar">
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil-extra@8.5.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/it.unimi.dsi/fastutil-extra@8.5.4?type=jar">
      <dependency ref="pkg:maven/it.unimi.dsi/fastutil-core@8.5.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/it.unimi.dsi/fastutil-core@8.5.4?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/antlr4-runtime@4.5.1?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@55.1?type=jar"/>
    <dependency ref="pkg:maven/org.mozilla/rhino@1.7.11?type=jar"/>
    <dependency ref="pkg:maven/com.ning/compress-lzf@1.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.2-3?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-java@4.1.0?type=jar">
      <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.datasketches/datasketches-memory@2.2.0?type=jar"/>
    <dependency ref="pkg:maven/com.github.seancfoley/ipaddress@5.3.4?type=jar"/>
    <dependency ref="pkg:maven/com.opencsv/opencsv@4.6?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-collections4@4.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/net.thisptr/jackson-jq@0.0.10?type=jar">
      <dependency ref="pkg:maven/org.jruby.joni/joni@2.1.27?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jruby.joni/joni@2.1.27?type=jar">
      <dependency ref="pkg:maven/org.jruby.jcodings/jcodings@1.0.43?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jruby.jcodings/jcodings@1.0.43?type=jar"/>
    <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.3.0?type=jar">
      <dependency ref="pkg:maven/net.minidev/json-smart@2.4.11?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/json-smart@2.4.11?type=jar">
      <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/accessors-smart@2.4.11?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.timeandspace/cron-scheduler@0.1?type=jar"/>
    <dependency ref="pkg:maven/com.lmax/disruptor@3.3.6?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.asynchttpclient/async-http-client@2.5.3?type=jar">
      <dependency ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.94.Final?classifier=linux-x86_64&amp;type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver-dns@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.2?type=jar"/>
      <dependency ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.asynchttpclient/async-http-client-netty-utils@2.5.3?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.activation/javax.activation@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-handler-proxy@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-socks@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-http@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-native-epoll@4.1.94.Final?classifier=linux-x86_64&amp;type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-transport-classes-epoll@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport-native-unix-common@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-resolver-dns@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-resolver@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec-dns@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty-codec-dns@4.1.94.Final?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-common@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-buffer@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-transport@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty-codec@4.1.94.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.2?type=jar"/>
    <dependency ref="pkg:maven/com.typesafe.netty/netty-reactive-streams@2.0.0?type=jar">
      <dependency ref="pkg:maven/io.netty/netty-handler@4.1.94.Final?type=jar"/>
      <dependency ref="pkg:maven/org.reactivestreams/reactive-streams@1.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.hyperic/sigar@1.6.5.132?type=jar"/>
    <dependency ref="pkg:maven/org.hyperic/sigar-dist@1.6.5.132?type=zip"/>
    <dependency ref="pkg:maven/com.github.oshi/oshi-core@6.4.2?type=jar">
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@5.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.java.dev.jna/jna-platform@5.13.0?type=jar">
      <dependency ref="pkg:maven/net.java.dev.jna/jna@5.13.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
