<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:b1d17077-5d2c-49fc-a218-68e6164b8fd9" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-10-18T22:35:10Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.7.7</version>
        <hashes>
          <hash alg="MD5">436dfb24c63a322708e4a5143d8543af</hash>
          <hash alg="SHA-1">3ef2e8728dc9eff2f129c34057e46e9d2b10629a</hash>
          <hash alg="SHA-256">c185b79bf0f9264f43bc8c222c44db67bea275bb727e3327cf9aea6bf45292c9</hash>
          <hash alg="SHA-512">41488733e31e6c5315327dcc86187c2b9a6b96cd08f7e2157ce130688afde29c313fc6a73edb8a76333a930c78874aa2eac874448920030c0f7af0ac05e65ced</hash>
          <hash alg="SHA-384">f9462f86240fd9fc0942f34981e6d2371f252aa1a4e5e8c3c14e7f0f1a4e4de69ef972e51cf09a749afb6d97c13e67ed</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-hive_2.12@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-hive_2.12</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-hive_2.12@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-hive_2.12</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-hive_2.12</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-common</name>
      <version>1.18.0</version>
      <description>This module contains extension points of the Table/SQL API.
		It allows for implementing user-defined functions, custom
		formats, etc. with minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">45a1706451e69aea795eed2c458e4622</hash>
        <hash alg="SHA-1">f1976972a0af2bf4f5ab259848714f87db9ec852</hash>
        <hash alg="SHA-256">0e3988dead1f8b3bca5500afae2e5942f547d59a7b80473af329ff35138168ea</hash>
        <hash alg="SHA-512">83c593f9147776cacd6a6bd2c5e3941cfa5685e89f586c345d9353c839bdf0a8ef5e6a071e159f32098b995b4d9b6439f50b55b17286ea191401e03234088d31</hash>
        <hash alg="SHA-384">6d5e73bf184cbe74f31e54c4136b15f925623a6c110a65865e42f5dd75b154833a25ce0fd582779cc2c4cd41d2e294cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-core</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">169ee59939126e7afcc9a6dd14e237d9</hash>
        <hash alg="SHA-1">003872ba0164dde5cf3e1410ef6cbf258d80da7e</hash>
        <hash alg="SHA-256">ede889d1491cbe61450c650103084f9dda537938a0555f453a05f45e52301ed9</hash>
        <hash alg="SHA-512">066274dc7d364cca3b955eb21ce89f88f80dc30028184c2db13e4c132a10cf3a27c1ba0b6a25fdf95ea6771cb6aea33eeb667304d8f28e6b7b98da2da1def302</hash>
        <hash alg="SHA-384">5c304938871f314d46f1be06517d4d81413305bbd226d9f8fd57c2204ee8af0a4fb54483789577cf61ea28cae128fa39</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-metrics-core@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-metrics-core</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">846cb0b23b91c06bdb926cab57f731c8</hash>
        <hash alg="SHA-1">fb5b977c6306eb50646a2d648030b6796a4ef7e3</hash>
        <hash alg="SHA-256">4dc410cf9c1653f55e05ec76b8e1cf27f54a205c2a4df7e0660dbbdcc27d6ab0</hash>
        <hash alg="SHA-512">a35eee0a788052afe7829b572dc0752d97619cab49488bd5eadd6ffc7cff997d940430aafe8616b1e5b0f5d6783987a6a97f4edc0aa582f0e54ae841b75a527a</hash>
        <hash alg="SHA-384">aa100a2bd86b38cc15a471ba96842225ec60f8cddc56008013daa64e9b67e3b92a8252d8b39faffa809cb336b3d413da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-metrics-core@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-metrics/flink-metrics-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-metrics/flink-metrics-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-jackson</name>
      <version>2.14.2-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">492259ac7642687cc959257a5512542f</hash>
        <hash alg="SHA-1">689daca4a6fc14e361831e15abd96283166d0f62</hash>
        <hash alg="SHA-256">37e87311498ae8da80adb2aa09ab6e9739d8611e09868e7220822206c739231e</hash>
        <hash alg="SHA-512">3f4434cf93f2cd12b686aa84c4b1910d7e0191b2ddad7ba8de6d2c3805d3b49afcf5da06e1052faf01b6cb0dda554594f78e39db69d83208119c1f4f2cd5dc8f</hash>
        <hash alg="SHA-384">9e689ab8b7e7f7db269fd5b1b0fc1dc5f13fed06b283c9b8ceec5c500fc9f6a4200674eef2bb884a9e67133de32e9a77</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-jackson-parent/flink-shaded-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.10.0</version>
      <description>Apache Commons Text is a library focused on algorithms working on strings.</description>
      <hashes>
        <hash alg="MD5">4afc9bfa2d31dbf7330c98fcc954b892</hash>
        <hash alg="SHA-1">3363381aef8cef2dbc1023b3e3a9433b08b64e01</hash>
        <hash alg="SHA-256">770cd903fa7b604d1f7ef7ba17f84108667294b2b478be8ed1af3bffb4ae0018</hash>
        <hash alg="SHA-512">afd836a1094449e0a791fee67363666c47b6d24acff353a5089b837b332c0f4af89565c354682521e37062d20e6b52d70c77bb4f24cca9b9532c274fc708a831</hash>
        <hash alg="SHA-384">06c56e6e513dd77cf10d0da46cdea08c34e220e81fa024735b668c6650df4234e564fe865ff5cafea963f56b1e8ffd4a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <group>com.esotericsoftware.kryo</group>
      <name>kryo</name>
      <version>2.24.0</version>
      <description>Fast, efficient Java serialization</description>
      <hashes>
        <hash alg="MD5">6cf0fa5b5d4f6b8226fd4a4bfb7532b8</hash>
        <hash alg="SHA-1">0c6b206e80cfd97e66a1364003724491c757b92f</hash>
        <hash alg="SHA-256">7e56b32c635058f9aa2820f88919ab702d029cbcd15285da9992e36cc0ae52f2</hash>
        <hash alg="SHA-512">a4c6ce768528a03c219cc6a41b22293f78e433c849c90391b64dda3f2376fd79951a89c5f4e6701bcbcb6eee9abffe2390cfb12dba3b885e4a3d411a26b78f40</hash>
        <hash alg="SHA-384">678ad1b7f4d99910b8ff44a6c8f78ccae91f823161ce23de39077397352919b7257e1e6e0dea90900be973291ea19282</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/EsotericSoftware/kryo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/EsotericSoftware/kryo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar">
      <group>com.esotericsoftware.minlog</group>
      <name>minlog</name>
      <version>1.2</version>
      <description>Minimal overhead Java logging</description>
      <hashes>
        <hash alg="MD5">f7cfbdf63b67df0bbfa4c7cb260885bc</hash>
        <hash alg="SHA-1">59bfcd171d82f9981a5e242b9e840191f650e209</hash>
        <hash alg="SHA-256">a678cb1aa8f5d03d901c992c75741841d98a9bc3d55dad02e84d65315c4e60f2</hash>
        <hash alg="SHA-512">7b4082766ad740d86708783f3b08780ed72dd18062aa9ba422c4b9016b332d2334ae511f50ef7d89e4eedbdac5cebc51ab6ddaf4d1eea857a3250eb5962f0d08</hash>
        <hash alg="SHA-384">932a282a9c06864001f8212199e4be05543609adbd985c5f4517ee6eba734acd3fd8812213bc0c98af264637cbf9c78d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/minlog/</url></reference><reference type="vcs"><url>http://minlog.googlecode.com/svn/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-guava</name>
      <version>31.1-jre-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b8c5129f4164f8ee2086854bdb289690</hash>
        <hash alg="SHA-1">00fa393c1db1308f4fb920f010f79c4c774e2f39</hash>
        <hash alg="SHA-256">03442ae97c4ca34388568cbce0e67e9911b0137b2b3849dff7a550008d5a4336</hash>
        <hash alg="SHA-512">15bb65f24054768915fbc29a95dfa93307b0babc39a02a204ae65eff44f259357b471fef9967b864b7a78e07d266933ce8e3eda8a866fcc73643cc38bcc5653f</hash>
        <hash alg="SHA-384">c8e6f2630c0824bbd1902a25884f09c076efbbbe0265f5d3fb49370affcff81ee5dd8b7887ba4bf063915446b937117a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-guava</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-asm-9</name>
      <version>9.5-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">443601ddd70625d741be1d3382dcf012</hash>
        <hash alg="SHA-1">d09e84a77ad8258d26f6be6bbb31fe81e3f98658</hash>
        <hash alg="SHA-256">a79273d4fbea1683b5fe81bce25d7fe552a542690481132f7ded034a8f00169e</hash>
        <hash alg="SHA-512">b1414e5cd4cd63e1e8a2f4a18198834910a360dac22392e298458049d7bf05e74cea2a4206751026ad7dc2348112aa7f223d0ca6178a859cf343cf306a6bd4c8</hash>
        <hash alg="SHA-384">ff6195b15060e725158aa6c8406e441576c38318fa5ea26e27ffd09f4ed4596b5198579d69ef0192dbb6edb3fda79d40</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-asm-9</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-asm-9</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar">
      <group>com.ibm.icu</group>
      <name>icu4j</name>
      <version>67.1</version>
      <description>International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
    providing Unicode and Globalization support</description>
      <hashes>
        <hash alg="MD5">046a5f59abf6b67a464dea584d11e59d</hash>
        <hash alg="SHA-1">2e159807158095566726600534034030dddab6d0</hash>
        <hash alg="SHA-256">c4eb904caf5fba968a2f1a3b8aef14df801e9329b21697209ca30bfcf153867d</hash>
        <hash alg="SHA-512">b3036b162356a0a5dad39eee611dae27c6fbe53f9e5ec1f3529ab02d49d97093b58602f43dd855433a0bbe02f6253e46a9d1899911c8e2e73001ab2c9a79d68d</hash>
        <hash alg="SHA-384">c2b28649d0ef9bf68f258a9f432c627a553ead79670f0a7ada3d986091a0001c5ab9eca372f792734bff733370a61fb1</hash>
      </hashes>
      <licenses>
        <license>
          <name>Unicode/ICU License</name>
          <url>https://raw.githubusercontent.com/unicode-org/icu/master/icu4c/LICENSE</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.ibm.icu/icu4j@67.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://icu-project.org/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://unicode-org.atlassian.net/projects/ICU</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=icu-support</url></reference><reference type="vcs"><url>https://github.com/unicode-org/icu</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java-bridge</name>
      <version>1.18.0</version>
      <description>This module contains the Table/SQL API for writing table programs
		that interact with other Flink APIs using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d60851a9b3c4e7ec9d352e7da23dab87</hash>
        <hash alg="SHA-1">9ef753e7e5763fa2a7bedf30845075e5fd694ccf</hash>
        <hash alg="SHA-256">e1550ebd515a0770904032d6f751cfd9c699b1cbb84104c7dfbfe3b7e2e036f1</hash>
        <hash alg="SHA-512">85254f7ea6a2cbda07d4d838c6fe259a2918747fe74b1961f64b69e13ae4a0ef761879de0f39990f4643a670a89aea60d5d5e3952a1c0bcb7c98c97a6c33bba8</hash>
        <hash alg="SHA-384">99ac9aded4221a4f5fda2088d04b64d37645399dd472380cb997cefa4839097726b831ccbc690d6a6d73f4b9630c657f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-java-bridge</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-java-bridge</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-java</name>
      <version>1.18.0</version>
      <description>This module contains the Table/SQL API for writing table programs
		within the table ecosystem using the Java programming language.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">94c7ab0ad3eda16efa0290b5fd56d6fc</hash>
        <hash alg="SHA-1">d64860472d01361a4c86dd1a89c46f792c2fbbf3</hash>
        <hash alg="SHA-256">aab3403a5ecee2bbc071e18e447d82e6b2d70c916ed555cba880685ce4df1040</hash>
        <hash alg="SHA-512">745fe539d5d04e106ef7da9ebb565d461c3a23a3ae012335c9dc003868881fae932c586381042ea3864a4be0622234efec62cdf54b9608679fd9e139e3908ba2</hash>
        <hash alg="SHA-384">637d503589334c19961a716891a751efb9e2ac293d18f833a12d3f7c093fe01febb116b37afed8aed970ab8dfe1477d0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-api-bridge-base</name>
      <version>1.18.0</version>
      <description>This module contains the base code for bridging between Table API and DataStream API for
		both Java and Scala.</description>
      <hashes>
        <hash alg="MD5">bc2a43623ae2cc76b3e7fb0a15eb2332</hash>
        <hash alg="SHA-1">cf7afdaf5fa1b7d0f0ee52af9191379b15dd208f</hash>
        <hash alg="SHA-256">06ce58bb5f3c4df4567b8f5563a651caf04370e69821e32cf129221e53bcf6b7</hash>
        <hash alg="SHA-512">fcacc85648d893cb1abed0db5b3db84eaaaa8c16935e1d06449f9087351f774adf0453fcd81f342518a27abf9fa4897f3417997cf315bf742e2d25284291ed38</hash>
        <hash alg="SHA-384">e382359314223f57a70a8bd0ff90456cf00198e7dfb95e6000a6521692e6b916a4405e88b58e79bef7a8a1d46fa67308</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-api-bridge-base</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-api-bridge-base</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-streaming-java@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-streaming-java</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">16b51cc0ffc439e02bde42b90e6bca2d</hash>
        <hash alg="SHA-1">dcdc0f85cc181f028a351a31ce6d276f2435d83b</hash>
        <hash alg="SHA-256">903718b2d3adcabe055e83918dcde325a794a1f25b4f3064f456161bd438f78d</hash>
        <hash alg="SHA-512">05675fbd7b6ab1005ec80719177d2501c64d59567decfc2b5a39f37f3104a98b5a0ecdbae5b95b1aca993fed61ac73724828b82a452c8ff09b64acfa4f8baf37</hash>
        <hash alg="SHA-384">593c95a37e82efa23bfddfda8cc2877a76d2280913587ca4524d484eeef65ab129d9bfd596c9dacf40db57bc137ef761</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-streaming-java@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-streaming-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-streaming-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-runtime@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-runtime</name>
      <version>1.18.0</version>
      <description>This module contains classes that are required by a task manager for
		execution of table programs.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a0185183b1d67977b5d62291c91045e</hash>
        <hash alg="SHA-1">89fad1bfdf1d81600c59cfc797fcf0432c117890</hash>
        <hash alg="SHA-256">87f5a6f8bcfacd73dcd864c61aca10ebee46f4b3c7b398607440a1b6d1cf34e6</hash>
        <hash alg="SHA-512">28ba442ababf873413cfef3cb72d09f1c420e689cbf115563013c5f4db2f9e18fecc5b4790df24944853a865b9d8bde8f6bc7de895c478505e56976cbc7e19fe</hash>
        <hash alg="SHA-384">0aa7625400a146b7f80d10f2ad724371fcfcda4f8a78343df98b28b815c5cde3af0bbb120be34b959413eb29fb55257f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-runtime@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-runtime</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-cep@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-cep</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">3df99646fbd541f1fa9bb34fc04249a3</hash>
        <hash alg="SHA-1">182c0ed32176effd6d643f654f7fdd244a9c44ea</hash>
        <hash alg="SHA-256">733d14badc251d7525545eab96080f64ebd0c566e5a26e517e83365471c370a8</hash>
        <hash alg="SHA-512">d093607fc5ed4970038728ff58c1e39bdd22d3c9c17e1ab9c15e0386cc5c4141f10d13b24138aa0008ef8525da9ec95dc235f1fa02294ee1c9835e5f8031538d</hash>
        <hash alg="SHA-384">b77d1075010bb62ab420806f2da0abbef751e5eda644ccc3261fc1eee5273a750173cb3f1168b46b8effb5312cb3bf7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-cep@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-libraries/flink-cep</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-libraries/flink-cep</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-table-calcite-bridge@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-table-calcite-bridge</name>
      <version>1.18.0</version>
      <description>This module contains the Calcite dependencies for writing planner plugins (e.g. SQL dialects)
		that interact with Calcite APIs. More exactly, currently, it is intended to provide the ability
		to create RelNode, which involves accessing the RelOptCluster, RelBuilder, etc, provided by PlannerContext.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c15e12ccf21e2292ccfc4028e3d95502</hash>
        <hash alg="SHA-1">d44835a89ab8b3abc3ae0d1373929e28ef76166a</hash>
        <hash alg="SHA-256">9363d0b46abbd57429682aca1a468a650efeae3deb92354c3d1af614e4fa5d79</hash>
        <hash alg="SHA-512">0f73e019a4b892e2ae7bef8c3ddd276d7d485b168b3e6d87b4cdb09485ca14fa4a90e7815e70b3e23d34eb6b4ca09a0ee772894f1cc612a100f426cf0f5595c5</hash>
        <hash alg="SHA-384">81ce707fc077fd1dd46b49a9ba52f5c518edbfd96baa4845d89218c962d28358429730ce45404341e75fef10c2a44773</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-table-calcite-bridge@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-table-calcite-bridge</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-table-calcite-bridge</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar">
      <group>org.apache.calcite</group>
      <name>calcite-core</name>
      <version>1.32.0</version>
      <description>Core Calcite APIs and engine</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0bdb47d8d02d2dfe44473557fd097a04</hash>
        <hash alg="SHA-1">984545fa6d4c4d141a6f488d170df55ad1312be1</hash>
        <hash alg="SHA-256">7fba117d53393d363198294ab04271ac41deca766f5bbc80973a71e3e562311c</hash>
        <hash alg="SHA-512">1c0181760e182aac89cccbcdd794099abc2d2123494565044be62c6b09b77efbdd02a6044793266939fc553acc6161eb53052c078aebe61a5834588657886259</hash>
        <hash alg="SHA-384">a7148374ddf670cdef4677278ebb230395a54f4ac4efdd8db48a565e7c06b32734397792b437d3a216f68542e7f16143</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar">
      <group>org.apache.calcite</group>
      <name>calcite-linq4j</name>
      <version>1.32.0</version>
      <description>Calcite APIs for LINQ (Language-Integrated Query) in Java</description>
      <hashes>
        <hash alg="MD5">59634991957855bbcbcef275a5059f64</hash>
        <hash alg="SHA-1">fdf36eb703ed957959efe0ae2f6385bbe9f0d270</hash>
        <hash alg="SHA-256">c8538247c9ea1304a4e43ba844d3d0ae367c3ff6a8294e7a4ad7de70bc35c416</hash>
        <hash alg="SHA-512">1a5353a08616f0c45fdad969b5c2e94e2bfdecb3a0e7dec671f061c0b3bea7a86a70a749eb185d36ac22906401db124aa3553cca752a742eff8b3c3adae6647e</hash>
        <hash alg="SHA-384">9de95761c6b63f6d0607213b98a7ee1309e6335f85fc9c17559479f820d8a15ee7bc5e203b4e3f5519087b6747830f00</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar">
      <group>org.locationtech.jts</group>
      <name>jts-core</name>
      <version>1.19.0</version>
      <description>The JTS Topology Suite is an API for 2D linear geometry predicates and functions.</description>
      <hashes>
        <hash alg="MD5">a3b90d76c097fd275fbbf22f8e3cde6b</hash>
        <hash alg="SHA-1">3ff3baa0074445384f9e0068df81fbd0a168395a</hash>
        <hash alg="SHA-256">dbb8644cf324123d06c27aa982f570811e10b4cb1f2aef893b00de237d33efc0</hash>
        <hash alg="SHA-512">7d7d0dd08ed1b0d21dcdffa277eb2dc264b88fb950ca2dbe420729ce49c0106bb3aa27e26d943dbb8caa43b9ba61c41464dd7c5efd73b547fc85493ef3ea6443</hash>
        <hash alg="SHA-384">26070312a7c8bf366bf2981b3d62b87cfd6ac9c2a2f5f914d7f195b16a28b97a5fc46dffca77d6d74c79d0e60cae2909</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.locationtech.org/projects/technology.jts/jts-modules/jts-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/locationtech/jts/jts-modules/jts-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.14.3</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">f6ee414687751fbadc55998ec49b3ea6</hash>
        <hash alg="SHA-1">b49701acb02b8e95ae1967821cfbafc220cf5795</hash>
        <hash alg="SHA-256">ea1b3a9ec60a353f4d7e78559c7140abb9bcf71b31456e9d57c8289f7cf397f1</hash>
        <hash alg="SHA-512">d265ba6cc1d20721ba7803416005f25d70036cd659bf6071f4d3250d7dab272a2522d7db282e50aeae994907556ef63155d2c0bcc0bd1c96c6460143ff5a8d53</hash>
        <hash alg="SHA-384">551a607644bcb3f3c06ac9c94861858a0d8f2b62b9120d34f5c2aad94a3a0e75478a94dca7eb290d9814c8dec739905e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar">
      <group>org.apache.calcite.avatica</group>
      <name>avatica-core</name>
      <version>1.22.0</version>
      <description>JDBC driver framework</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3810fc5f9b3c618c4bf58c08254e6efc</hash>
        <hash alg="SHA-1">bc9b74c057f16201262e7c3cceb66e9e60e41cb9</hash>
        <hash alg="SHA-256">9cc97d76e7dda1478e417d1e63e877ba17efbf11a87bba3a5f2fdc495ab8da7f</hash>
        <hash alg="SHA-512">48ce7e20f3e65c9af88109e8b1bc676c9950c74bd92b28d116064776258772845e28f49f2e89aa3ab3b716b8ac00868968070921e7fe6b765cb8b85f983c5455</hash>
        <hash alg="SHA-384">68d99e45e576b63e005f41a032520cb21962e12ca2b623a6c903cca24cd885848c62d2e39d6b86febd70f2faa982dfe9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://calcite.apache.org/avatica</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CALCITE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?dev@calcite.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/calcite-avatica</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.14.3</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <hashes>
        <hash alg="MD5">abb25b80cda20ddc2cd3bbd8fccd0d34</hash>
        <hash alg="SHA-1">4fa101f81504ed6811bf1823270adb51a9b45ff3</hash>
        <hash alg="SHA-256">7ee2debad3c002e97b28b84d5f1b2044a38e780abb673948238f5bc656e2fe44</hash>
        <hash alg="SHA-512">7907fbde57f1ebd18d0935d34c5c9657e7dcff924c540b6ba732f87ed2e9e653ee499b21b464b3b74fa569d5865ffa717b8e2098d600a5f74cef4e97f39cc7d5</hash>
        <hash alg="SHA-384">0d584c6b0ce820441e7e8f341d567924ab236de62f4ad8a40f1af37e983946ea07a9de3a4b607b76bf3c421a02720d0e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <group>com.jayway.jsonpath</group>
      <name>json-path</name>
      <version>2.7.0</version>
      <description>Java port of Stefan Goessner JsonPath.</description>
      <hashes>
        <hash alg="MD5">2db2100b179bd83518fef0b563433a15</hash>
        <hash alg="SHA-1">f9d7d9659f2694e61142046ff8a216c047f263e8</hash>
        <hash alg="SHA-256">de82f0e4602eea0187df36779ae8cfc1653b6d920125674af4d365d0bca59508</hash>
        <hash alg="SHA-512">1f2b97f22607a2032f9c618eeb0c9f78aa3f99e94c902326d9f7e84903d603bcad293d2f566b7cc999c1aa6c9d607ef7509314e504fe9290b2b93913631790de</hash>
        <hash alg="SHA-384">e5d79e4ad4bec36a1bf1c7fd9aaa820fb3473e9cdbe55791e5e909a835ee595c47957e4e0033195d46968ed103c95355</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/jayway/JsonPath</url></reference><reference type="vcs"><url>scm:git:git://github.com/jayway/JsonPath.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.10?type=jar">
      <group>org.codehaus.janino</group>
      <name>commons-compiler</name>
      <version>3.1.10</version>
      <description>The "commons-compiler" API, including the "IExpressionEvaluator", "IScriptEvaluator", "IClassBodyEvaluator" and "ISimpleCompiler" interfaces.</description>
      <hashes>
        <hash alg="MD5">da4daadc5b609afd12639f6398b1423c</hash>
        <hash alg="SHA-1">d8eb6b0205afd0ffaeb89f9643055bbeb1a4dae9</hash>
        <hash alg="SHA-256">4f03835ef26b34d1eda8ff8339e0dd86cd9b46761419eccecba228d56325b31b</hash>
        <hash alg="SHA-512">ab00149fa5613e80b3f6eb662c83de9eb5ba001ff8068c478f6f6bb15c7e84f8f8f0a71ac8321874b3de93ee0d8fc4ae71a54af532b3dbd2793609e8f78a2657</hash>
        <hash alg="SHA-384">037532a85549c2c94a78150d13b28a9513d59168d467a9531cd14920a11a71d00b3002c6d4a3536f4d4edf5d9a3695e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/commons-compiler@3.1.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/commons-compiler/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/commons-compiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.janino/janino@3.1.10?type=jar">
      <group>org.codehaus.janino</group>
      <name>janino</name>
      <version>3.1.10</version>
      <description>The "JANINO" implementation of the "commons-compiler" API: Super-small, super-fast, independent from the JDK's "tools.jar".</description>
      <hashes>
        <hash alg="MD5">42fd54cfd57cbbee317ff3df4751e151</hash>
        <hash alg="SHA-1">b1f6ec131da8ba3a3261432d748c2fa9a1f6ab3e</hash>
        <hash alg="SHA-256">ce6f6b7ab76d800fa28cd0671c8a3d55cb7f5cf787c0498bbae98a9862acbce8</hash>
        <hash alg="SHA-512">80f95fbba11d60fbad6e84e8e4dec741ab3356ff98ee60fe2dd2c88220aceb72219252eaa94d43c6ff6e21d229e0da2e8b388b4e8132d5882392884b8956403b</hash>
        <hash alg="SHA-384">0e128ee15041f45c47627d09abffc99c6f39bb4751acad990b16048e625b4dd7e1ee587c70d2ac3bf6c664ef32ba9c4c</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.janino/janino@3.1.10?type=jar</purl>
      <externalReferences><reference type="website"><url>http://janino-compiler.github.io/janino/</url></reference><reference type="vcs"><url>https://github.com/janino-compiler/janino</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-sql-gateway-api@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-sql-gateway-api</name>
      <version>1.18.0</version>
      <description>This module contains extension points of the SQL Gateway API.
        It allows for implementing user-defined endpoint with
        minimal dependencies.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1a30a0447d9ded1cb803850a1e1cd690</hash>
        <hash alg="SHA-1">4a590a9ad90651cc68fc6d7956b691691a325ab3</hash>
        <hash alg="SHA-256">03d13fede643663850350ceb3ea2b57dda925b4379b4b625f59550a0423e574b</hash>
        <hash alg="SHA-512">1da495ffcbb80ac85cd5bb24b3415a700c775e64a1b73acb28091783b7250f9c25aad8e014cbb973e96440474cdb3065b4049301b84fdfe21c89433fa9d5700d</hash>
        <hash alg="SHA-384">2e9647b976e9a811db7a28f13807b4d9d20b4618ce91c15e224011d8f59730ade0a672380d795daf96ab1c4eb38c8fd1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-sql-gateway-api@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-table/flink-sql-gateway-api</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-table/flink-sql-gateway-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-annotations</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">35de8951f695a5fae3ec78a2b94922fc</hash>
        <hash alg="SHA-1">3db93916e96366e6cd4dcffbe0279015b2062dc8</hash>
        <hash alg="SHA-256">7631ab408b5bb5a91ff907bebb56b565a70d8049d92681141ae8a2ef629d5e00</hash>
        <hash alg="SHA-512">cd769f541def23612761a4188bf28de1331ca229efd605af1f0248eef7a19c4ce2be9584f2a107c61c8a71eca1e97f0206b998a3f9e1d34ca24355a2b5e0567f</hash>
        <hash alg="SHA-384">f0e82d0d3f637877e609a75da418cf15a6c229b7e672939d624fca6fa9bd78ec12c63d163c46e4947bb9b2e100863ecd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-json@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-json</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">18fc9933255102e37b70993180278287</hash>
        <hash alg="SHA-1">747699ff641f8a9b709d9d53e981e018cca9ce1d</hash>
        <hash alg="SHA-256">503f18452a51bca7c557fb6faf2e91434eff0a44dc05bcded185f53470b0bc88</hash>
        <hash alg="SHA-512">086242cf197cc4b40f115137a29390ad57886b5ef6d2df077a86635ffe2d3ca4ba2a0199e4e55f20b38be5c151bcb34c1666e6c4e68fb8d837938cc05b13c0f8</hash>
        <hash alg="SHA-384">970f0b47454fbaccb66fa02752244e5895b86b3711e82f36c851ebd16d6355d850d9030d947ec92377193c35140ef2e2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-json@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-json</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-compatibility_2.12@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-compatibility_2.12</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9a5b3c45af3919c39f3bc4c3133ffc83</hash>
        <hash alg="SHA-1">02f7fd34a95a343b46fcfa7baffce8873e01be04</hash>
        <hash alg="SHA-256">eeb3226ab0205b12b40bd84b740c506758b302e8dbdf09933b5db17b3b0726a3</hash>
        <hash alg="SHA-512">6de9ad3c9bd967dda3a5a2f466a90ae3623ea360c4a108af6146dcc5ece2206482e58428c2ef7f37eee7eec29fdb67f31e681fab69352250ba3acd80420c0e28</hash>
        <hash alg="SHA-384">f646154657173dcf4183bebf039be3bd275e93953c24e1c5056ae0f0c1dab931688785e87162338fa02e0ce3e6515565</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-compatibility_2.12@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-hadoop-compatibility_2.12</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-hadoop-compatibility_2.12</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-bulk@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-bulk</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cb0bc2565b3ffd9ad7cb76bab5d4648e</hash>
        <hash alg="SHA-1">8d3a16f31c9d6edca96e6863fd56115ac4bda9a2</hash>
        <hash alg="SHA-256">addd33842495afc1a8bb23b07dcb8b8923b4cbc128cd7b77dceef4e488a860c3</hash>
        <hash alg="SHA-512">501ddd379e1c40e12728c3154fd7ee64b4dad9d0b32caa7c33851e35c657be3cc9a908c19d19ed7fdd817bf5efa960e7ebd352c0b4c66070dc68eea89d0cae4c</hash>
        <hash alg="SHA-384">f74ad75aae9efebf5e52ad987d33d551a9035bedc3a9147d4aa3b7d912c27bdf03f00bf1736cc9f6a1d8307c61a6ed97</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-bulk@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-hadoop-bulk</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-hadoop-bulk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-connector-files@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-connector-files</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">d935b863d0f077e7f0a65248d6c123e9</hash>
        <hash alg="SHA-1">b45f13fdd27dfadc130f1142ef7292817164ca62</hash>
        <hash alg="SHA-256">d37ab7476a5d1b073aeab50a0268ffd97bbd217275c97e6db01d4cdbdd248e81</hash>
        <hash alg="SHA-512">d3710bfda8f408628b5d0f4daf83036322f014208487dbd93937228e1beb1539036f2c49c0ede28ab3003fd2bdc4b1d49f7921be765cd4f8125301e7c00b5855</hash>
        <hash alg="SHA-384">49250cc23888158c8059b37ac5b1629faa7340c97363d19396c72cbe9a73c2e61c8591f12db5f29346b0a24887072990</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-connector-files@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-connector-files</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-connector-files</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-file-sink-common</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">edfa3643214042c72bf6711834d1dc70</hash>
        <hash alg="SHA-1">d9097d8cb3e5cc3bad6109ab6ac7c1c1d75944db</hash>
        <hash alg="SHA-256">eb4c79596a466a242e3ba1f5e2db69e325527ce38d26645da28116c797c97c00</hash>
        <hash alg="SHA-512">5c244c8388a8009ebd8891b63fef9fc09fa0ca3008fd5115d7a6219d035d10019b3e008a05cce0b050c5710d869cc06895bfd65a0957cf19a5030635fee17e36</hash>
        <hash alg="SHA-384">5c774ee100a387eeb2d153b50697121660bbcee6ef18e11698a22982d8eca7c0c82eceac83c83df11e5c455e914d183c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-file-sink-common@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-connectors/flink-file-sink-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-connectors/flink-file-sink-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-orc@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-orc</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0b48b42a94b9d524309cd0457e9bb7a0</hash>
        <hash alg="SHA-1">fc5feac3894d7dbfa27109a4475abe672695c16f</hash>
        <hash alg="SHA-256">c95b8cb9389fd07afd26e5d72c8986b53190b8a11a9cb953f7f8b5a5956b07cf</hash>
        <hash alg="SHA-512">608739fee94ad28eb93e66257d4484b3a2e40fcccc77fcb3687dbd0af371def5ee5d11b6dd9bd11ca831033b2d1d4a400e07ea118b2b0c1a350bc14bb3fd214b</hash>
        <hash alg="SHA-384">1c078247eb0fe4d6ad5b6d556a005cd7dab4770f2947fd9cf10e7c20752576be812d65073bc238fca0c7c04fa86c80ba</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-orc@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-orc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-orc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-orc-nohive@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-orc-nohive</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bd46eedb9944a3e6bcef51d86aa5c42a</hash>
        <hash alg="SHA-1">9d98c836d39b486d37a6467574b4b70a51bbbc1b</hash>
        <hash alg="SHA-256">27a23878545834dec1d11218236b25fed65fa5a4fbda28a56464948b73350c41</hash>
        <hash alg="SHA-512">641a9655ee92e937835bab3b182e670ca14eb67439de266ef4821a077f25914bd83bd350dfa5eb83219f0537f5bbcda41633477252735708235a9e7617c3c6ec</hash>
        <hash alg="SHA-384">d7462e8dfdfe0ec912d4a21518598de4e1af02af02b1f3e08840600499831178ee5e9ca6322f1e1a186f78fb5fdb1a93</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-orc-nohive@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-orc-nohive</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-orc-nohive</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-parquet@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-parquet</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0251b2b186da7d5173eb729f30ba8ad2</hash>
        <hash alg="SHA-1">4aadf3e00a6d5998a56b0af2cd807ea67091bc7b</hash>
        <hash alg="SHA-256">2b4edc287e5e07c16902cf803cf26e01ef4218d5493d4e38427e7a8bae1f0b67</hash>
        <hash alg="SHA-512">b0782e1cc83050deee02bedd187dc1e58373bc134d5eaa334413b27836bff478faa0890c272922b7206b851dc9830ca6ce914ae3ebdc6b04b74085b59557674f</hash>
        <hash alg="SHA-384">92015743b54dc4156bb16a24ad5d7cc8024e4294d39a88731b54398fadadcbfdac6a1ada0b2f418a5b25bd5fc152dc99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-parquet@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-formats/flink-parquet</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-formats/flink-parquet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-hadoop</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">77cea2800fb038443a062ed25c0742cd</hash>
        <hash alg="SHA-1">6b9a84875b7576d64cf4890c69c2ed1c7557b950</hash>
        <hash alg="SHA-256">5b86f191d0bbfe866d194bd1a336fa79d049d342fb7a05aefcf31ea266792a40</hash>
        <hash alg="SHA-512">cacff5ff1e0b99c140a21181d26b3233c6118fc10a660f559919cb405631681d37073ad32dcd3b7399667a7d3364ad9fa7ce0f760feda5a6ffcc817c933f8ec6</hash>
        <hash alg="SHA-384">ebbd7008507e7f56a552a71df31b60c84c9be6bb7d99e86dd4070ea94708fbce10ee14348d79c0c518223c832faab450</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-hadoop</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-column</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">d75526e32d2630e5bad8d9fce847d838</hash>
        <hash alg="SHA-1">9ed76ae5d9fdfc6c2eb51aef87ad34c5cdc56384</hash>
        <hash alg="SHA-256">3ff4222b5da77cc85e3fee623ff9779f991a1a0987125e68bc642ff913ec5612</hash>
        <hash alg="SHA-512">4de18d73bdbf77f9327b7f61fd9e333d7d2700a552432401a1253ccb34c77f82d82ff514c9f1fefd8c21b407fdf21e68e8b2e9142c5fdffe0ef035485c716976</hash>
        <hash alg="SHA-384">76167345e924a70f01910bd3647388bd2e8c2d04e4ece65c1abf5968476a6870769c238e10e2cbfddb3962e30d4eff0d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-column</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-encoding</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">2ca33d628896a57c83fd338ba4b3712c</hash>
        <hash alg="SHA-1">2554cef74a90736ad42ed994116123038c0ffee9</hash>
        <hash alg="SHA-256">0c921d275bbcc31552ee94d383ea38b2615110790d59f11ad07ffe5f3f0c23b3</hash>
        <hash alg="SHA-512">7d08f31b531bdb58d1593e15807f82387a99540c09e90d1cb4fee5b5d3d7b1ad04a599533717c27b83dccf0635983448ea2ae88385424976a46c2dca2dbe5ee9</hash>
        <hash alg="SHA-384">7ac660630e30e2cda430223450010d2be60dfdfb094712c241db1a73780c62ee66a6e53890ec3065ab762e5f8c13619b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-encoding</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-format-structures</name>
      <version>1.13.1</version>
      <description>Parquet-mr related java classes to use the parquet-format thrift structures.</description>
      <hashes>
        <hash alg="MD5">b41fcfc59d68450b5153472d5a92345c</hash>
        <hash alg="SHA-1">550ac211af104eabeedfaabe68f6769010a80366</hash>
        <hash alg="SHA-256">57b3e31e9502a1121dc481a3017fc2f20d1d6116da82dd58155a69b10b28e1e6</hash>
        <hash alg="SHA-512">ce1fd360edf3cb86d0d0c3d8b00d7c840b5a997cd5d44213dd7c6cbaa15c9eea1f5ef61474a1879d1b245c8feafea0b1f22c554f63e742feb1c5e9e9d1c237d3</hash>
        <hash alg="SHA-384">1c73a54de30153c0813b402e5f4bed5caab94c2c1bc2f473e3b78f441636607fb11ed115ae7a8adf6ada6f9ce4bfe37e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-format-structures</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-common</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">6a52cc2d093a61027d8df49b6ae39a6a</hash>
        <hash alg="SHA-1">77e65a1a4522f476994aa90c06fcca842c4ab73f</hash>
        <hash alg="SHA-256">4a2d7a8eb395bbc8d202fa74b272e45374a1034b351028824ad46925366297ea</hash>
        <hash alg="SHA-512">236b9a8876c51f39aec3c7299642c4813b24f9a709b2b6306a058893ec1e97026dbd4009d9ea64a1984eaff0a6977648ff4e72363d1e9a25b635796aa5a472b4</hash>
        <hash alg="SHA-384">5afd34d71bbe49d7c875e02e2dfe234b4ca18e035f5e4348cc39d103a43fc303c72f3c7ac7b22ed8340c30f19cab33a9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.parquet</group>
      <name>parquet-jackson</name>
      <version>1.13.1</version>
      <description>Parquet is a columnar storage format that supports nested data. This provides the java implementation.</description>
      <hashes>
        <hash alg="MD5">83b70b16ef2ebd3e35d32af63a9d99c9</hash>
        <hash alg="SHA-1">c096efa2bb68d24d29139e93f9b5a5357f10f253</hash>
        <hash alg="SHA-256">d1e66f2a392d1777425688d3439b7f57d08c4404a81ae95bb247a16cfc773da1</hash>
        <hash alg="SHA-512">8c2b515d781e3cd2fc1d33671e2cae45d69e7d76e7e82b89a2c90022eb8852a135d920b198101328728f860008c8040d2628fda007d0ccfab0b761bfe8092afc</hash>
        <hash alg="SHA-384">2271d1678c68e85d847aee63392d15f165658f031c8c276cc44cae5bb19c8b0b2b2cfa36d2405575d4c0d5e4968009b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://parquet.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/PARQUET</url></reference><reference type="mailing-list"><url>dev-subscribe@parquet.apache.org</url></reference><reference type="vcs"><url>scm:git:git@github.com:apache/parquet-mr.git/parquet-jackson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar">
      <group>io.airlift</group>
      <name>aircompressor</name>
      <version>0.21</version>
      <description>Compression algorithms</description>
      <hashes>
        <hash alg="MD5">43f5c177aaca2ba4e4ad78e4d6f3e992</hash>
        <hash alg="SHA-1">0d1efd839d539481952a9757834054239774f057</hash>
        <hash alg="SHA-256">e968bd7f31641ae94ea4ae12971337bdfab794349cc0baa9ccd54553cce712ac</hash>
        <hash alg="SHA-512">5a2eb2c1fabc5159e00371ebb4ba7532705de7587980af3c7c92c942794f2e21e1af0a82427372eab632a0b1bd52895afa799b62b7f42512c52cf55fdccb4386</hash>
        <hash alg="SHA-384">ef54231df593357c29984e81d6605f1177cb0c77c496c80097f401ab75b74943429a351d7b09202ed4e1cad127106c97</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.airlift/aircompressor@0.21?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/airlift/aircompressor</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://github.com/airlift/aircompressor/tree/master</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar">
      <publisher>com.github.luben</publisher>
      <group>com.github.luben</group>
      <name>zstd-jni</name>
      <version>1.5.0-1</version>
      <description>JNI bindings for Zstd native library that provides fast and high compression lossless algorithm for Java and all JVM languages.</description>
      <hashes>
        <hash alg="MD5">29aafa647bb981b8f8f5713b856c22d5</hash>
        <hash alg="SHA-1">e7fe84d449409634be17ab7dfa0ea4e29c2a7076</hash>
        <hash alg="SHA-256">5264f7e82e37d46deb1af8b4d123043e1f1c5e923f1fabff7217fa702118acc7</hash>
        <hash alg="SHA-512">aa6c04ad9d6c0c64385a9673b620d0fcaf8ae41b296e824e193959289d0358bd758a40536bff89826960180cd4aa0c7c48a2a73b1ebc361e129b03e7c315d0eb</hash>
        <hash alg="SHA-384">81d544134359a650fec01852a1348584394d9096c556616571c812735a73b67838626bf68e928de42dabbd92f30e6a62</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-2-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/luben/zstd-jni</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.yetus</group>
      <name>audience-annotations</name>
      <version>0.13.0</version>
      <description>Annotations for defining API boundaries and tools for managing javadocs</description>
      <hashes>
        <hash alg="MD5">e7b6aa8d8967f6f34a711d763d1b4816</hash>
        <hash alg="SHA-1">8ad1147dcd02196e3924013679c6bf4c25d8c351</hash>
        <hash alg="SHA-256">3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b</hash>
        <hash alg="SHA-512">9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8</hash>
        <hash alg="SHA-384">bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://yetus.apache.org/audience-annotations</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/YETUS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/yetus-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/yetus.git/audience-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar">
      <group>com.google.protobuf</group>
      <name>protobuf-java</name>
      <version>3.21.7</version>
      <description>Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
    efficient yet extensible format.</description>
      <hashes>
        <hash alg="MD5">87417783d3677d733eae82bda7664943</hash>
        <hash alg="SHA-1">96cfc7147192f1de72c3d7d06972155ffb7d180c</hash>
        <hash alg="SHA-256">a204ec68748a7b26351ae37a311e8de468f248d1916d5f8dbe812c1289d0a0ff</hash>
        <hash alg="SHA-512">d2450e62ea4003295a50bd863c9cc25016f58a08e94171d581ae8fca626c6dabfc458b8f55310874f9e17189704e9b4d0cc259641c36ef5e83466bdaf2770bde</hash>
        <hash alg="SHA-384">23adb6f7e52739ca6e3c3f1f8a364a7ab3da5dabfe99fcc784c15fbff294fcdc91f40a2ee4362f66995eb9b1922b4746</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
          <url>https://opensource.org/licenses/BSD-3-Clause</url>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://developers.google.com/protocol-buffers/protobuf-java/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/protocolbuffers/protobuf/protobuf-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-hadoop-fs</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">b6578f39372240e88c55fbd144f7989b</hash>
        <hash alg="SHA-1">14e6ed7b6724d339228ace174a3f96ba37839c33</hash>
        <hash alg="SHA-256">aaa0581c63f9dbdf82a3f1144b62aa8be79b14bf4bb7828b4dd3f51263f9ed3c</hash>
        <hash alg="SHA-512">c40e65493247e68a8ab8f00b7e2d76e05aa07e4c81b6831ccabc76427d5e37663fdd3b93fa2ed8c4292b89f230bce37f90a03b576f68c3a7d25c896570cccfef</hash>
        <hash alg="SHA-384">acba6e28b47cfe7b1085797f46a60cc1df4ee52f9f2eec4d7df82e4421337d931b08d3d722c2318ab066ddf28c6255aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-hadoop-fs@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-filesystems/flink-hadoop-fs</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-filesystems/flink-hadoop-fs</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-common</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Common</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0e701d9a254fa21128f4a5a33aff13de</hash>
        <hash alg="SHA-1">fd5786fcd0228073e7c9c4ba5739519eceb55ddb</hash>
        <hash alg="SHA-256">fe93812dc299e17ebcfc12921bd3162c79ecfab84d120d51d4ddc275c7414ff9</hash>
        <hash alg="SHA-512">abce060bc87b2ed21b8b19c16db1dc5927c35e810189109bff58eaa5adfd048892af809ebd78913bf5c6b01d28f6809bade08f3b2042e1beb247b9eedeae64ea</hash>
        <hash alg="SHA-384">54ad68c163b4383bf10b88e7aee2e9bba5c36d42416812a675679eb5f030a22a5f651b8d2a5e9b8923833d88861be9f3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-annotations</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Annotations</description>
      <hashes>
        <hash alg="MD5">a3ff551c2ea8a5e17c3042ee46f1f763</hash>
        <hash alg="SHA-1">5b406750215dcbd8d322d57696cd52fdb796e528</hash>
        <hash alg="SHA-256">c47d615be08cb6631985188489ba17d376577b67e3690d6de1eb9d0d611f35e3</hash>
        <hash alg="SHA-512">a139640e5f7077610e72b939494825ff95c3d6d18c7c121d5d198bd0ba99bb399116633ee25149d915c3474d0afb9ebe101b48cce28d6f5903a233ceebd7cc6b</hash>
        <hash alg="SHA-384">6dbe2290de667a3f3dab7e3f4a4327010329bd36e0c50a709f01a41b2c9252475237255318f8b174a625cea17f860d7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar">
      <group>jdk.tools</group>
      <name>jdk.tools</name>
      <version>1.8</version>
      <hashes>
        <hash alg="MD5">4d4afd2357413c2d3b3ea9158fa1c6cc</hash>
        <hash alg="SHA-1">893985e36e7c858309b45524f47a1a7abe264449</hash>
        <hash alg="SHA-256">09175ca6e716feef22015377a59301c9ec70e39501a857193c45ac4454f08bad</hash>
        <hash alg="SHA-512">15b16a3a67df6c5b9092cde095e16da457cc2029b3d390217842b9211896de399eb1da76bf0dbba1aa0b3fbc2cbe2a67aa902ee6d320f5e8c566f51948550d24</hash>
        <hash alg="SHA-384">5d178a7ab6e7c75aae50a83fb0d47b79dae1c8be84ab994ddb453f534e7e9d1a58289b7bcd300bb4f812a3fc8b17b7db</hash>
      </hashes>
      <purl>pkg:maven/jdk.tools/jdk.tools@1.8?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>11.0.2</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.

    This project is a complete packaging of all the Guava libraries
    into a single jar.  Individual portions of Guava can be used
    by downloading the appropriate module and its dependencies.

    Guava (complete) has only one code dependency - javax.annotation,
    per the JSR-305 spec.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bed5977336ea1279d2bad3bb258dc8c3</hash>
        <hash alg="SHA-1">35a3c69e19d72743cac83778aecbee68680f63eb</hash>
        <hash alg="SHA-256">e144a0ec7f5139c58d4f3729ccfb4240f9c576a1aa43790e4090e09316129ee1</hash>
        <hash alg="SHA-512">392ae7e0c1b0da2ae91f0e5e022dbcd4bca3861242d57599f563e3a6561592df7baca18fe62000fcd701e1b81cb4ae6987698a5695358127fe4f74ff39776eb5</hash>
        <hash alg="SHA-384">e9f119ad115dddc4fe076dde2fe5c2fffec092ed4766b24055c234098096c8ccfabcfd351df7a0c382f0a6c62cd9a099</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@11.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues</url></reference><reference type="vcs"><url>http://code.google.com/p/guava-libraries/source/browse/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-cli</group>
      <name>commons-cli</name>
      <version>1.5.0</version>
      <description>Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.</description>
      <hashes>
        <hash alg="MD5">6c3b2052160144196118b1f019504388</hash>
        <hash alg="SHA-1">dc98be5d5390230684a092589d70ea76a147925c</hash>
        <hash alg="SHA-256">bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6</hash>
        <hash alg="SHA-512">b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40</hash>
        <hash alg="SHA-384">a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-cli/commons-cli@1.5.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-cli/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CLI</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-cli.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-math3</name>
      <version>3.6.1</version>
      <description>The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.</description>
      <hashes>
        <hash alg="MD5">5b730d97e4e6368069de1983937c508e</hash>
        <hash alg="SHA-1">e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf</hash>
        <hash alg="SHA-256">1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308</hash>
        <hash alg="SHA-512">8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226</hash>
        <hash alg="SHA-384">95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-math/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/MATH</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=commons-math.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar">
      <group>xmlenc</group>
      <name>xmlenc</name>
      <version>0.52</version>
      <description>xmlenc Library</description>
      <hashes>
        <hash alg="MD5">c962b6bc3c8de46795b0ed94851fa9c7</hash>
        <hash alg="SHA-1">d82554efbe65906d83b3d97bd7509289e9db561a</hash>
        <hash alg="SHA-256">282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026</hash>
        <hash alg="SHA-512">3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f</hash>
        <hash alg="SHA-384">3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/xmlenc/xmlenc@0.52?type=jar</purl>
      <externalReferences><reference type="website"><url>http://xmlenc.sourceforge.net</url></reference><reference type="vcs"><url>http://xmlenc.cvs.sourceforge.net/xmlenc/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpclient</name>
      <version>4.5.13</version>
      <description>Apache HttpComponents Client</description>
      <hashes>
        <hash alg="MD5">40d6b9075fbd28fa10292a45a0db9457</hash>
        <hash alg="SHA-1">e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada</hash>
        <hash alg="SHA-256">6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743</hash>
        <hash alg="SHA-512">3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089</hash>
        <hash alg="SHA-384">093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-client</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCLIENT</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.11.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3b4b7ccfaeceeac240b804839ee1a1ca</hash>
        <hash alg="SHA-1">a2503f302b11ebde7ebc3df41daebe0e4eea3689</hash>
        <hash alg="SHA-256">961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908</hash>
        <hash alg="SHA-512">5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10</hash>
        <hash alg="SHA-384">114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.11.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-net/commons-net@3.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-net</group>
      <name>commons-net</name>
      <version>3.1</version>
      <description>Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois</description>
      <hashes>
        <hash alg="MD5">23c94d51e72f341fb412d6a015e16313</hash>
        <hash alg="SHA-1">2298164a7c2484406f2aa5ac85b205d39019896f</hash>
        <hash alg="SHA-256">34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007</hash>
        <hash alg="SHA-512">66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8</hash>
        <hash alg="SHA-384">444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-net/commons-net@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/net/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/NET</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/net/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar">
      <group>javax.servlet</group>
      <name>servlet-api</name>
      <version>2.5</version>
      <hashes>
        <hash alg="MD5">69ca51af4e9a67a1027a7f95b52c3e8f</hash>
        <hash alg="SHA-1">5959582d97d8b61f4d154ca9e495aafd16726e34</hash>
        <hash alg="SHA-256">c658ea360a70faeeadb66fb3c90a702e4142a0ab7768f9ae9828678e0d9ad4dc</hash>
        <hash alg="SHA-512">363ba5590436ab82067b7a2e14b481aeb2b12ca4048d7a1519a2e549b2d3c09ddf718ac64dc2be6c2fc24c51fdc9c8160261329403113369588ce27d87771db6</hash>
        <hash alg="SHA-384">1d8b8aa3ad4edb7611a43e4e5b0f9538aa70df1d6ecf09cb977f6fb963797850d4350778530f2082aac9bedf09a27824</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.servlet/servlet-api@2.5?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.mortbay.jetty</group>
      <name>jetty</name>
      <version>6.1.26</version>
      <description>Jetty server core</description>
      <hashes>
        <hash alg="MD5">12b65438bbaf225102d0396c21236052</hash>
        <hash alg="SHA-1">2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0</hash>
        <hash alg="SHA-256">21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5</hash>
        <hash alg="SHA-512">4646b044a05424f1df113c5fddfc066c1fef47933b631efe63701170acc197e531330e583ae0e5000cf8ad38151c91a9e61b2864876de05cfd3ba710481ed484</hash>
        <hash alg="SHA-384">670285f35903def2e22a3e2430f36d47599e22d8cd96f8aad6c67704076d3648f1b4b790ef13cb0a5bbfbb3cc02e0d3e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JETTY</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/viewrep/jetty/modules/jetty/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.mortbay.jetty</group>
      <name>jetty-util</name>
      <version>6.1.26</version>
      <description>Utility classes for Jetty</description>
      <hashes>
        <hash alg="MD5">450fedce4f7f8ad3761577b10a664200</hash>
        <hash alg="SHA-1">e5642fe0399814e1687d55a3862aa5a3417226a9</hash>
        <hash alg="SHA-256">9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047</hash>
        <hash alg="SHA-512">695bfbfc0ecd8f410fea7c44451f1765a610ccfe427d91e2cf900cab18068e89ad98b75dc37d0fec9b83255e698fb7e26d7089c91dd1d85085e99ca7a9af0ec5</hash>
        <hash alg="SHA-384">056ad2d0482a77607ed1b135a745ad443eb2a66b0b0bd9786f648a620e40712cdca6dbf3db503bb7e9974269a48f0113</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/jetty/jetty-parent/project/jetty-util</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JETTY</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/viewrep/jetty/jetty-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.mortbay.jetty</group>
      <name>jetty-sslengine</name>
      <version>6.1.26</version>
      <description>Parent pom for Jetty at Codehaus</description>
      <hashes>
        <hash alg="MD5">d3bea45d6939e57fccf450a914fe4e1a</hash>
        <hash alg="SHA-1">60367999cee49a3b09fa86bdcb52310b6c896014</hash>
        <hash alg="SHA-256">9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87</hash>
        <hash alg="SHA-512">799b56fabb7f1dd299efe33be881a1253fd38f24764d2c478f08d00771f8176b3fe0839b71da7e67d5d6e32bfe10378284dd8701ec57233eb354cca88639ce44</hash>
        <hash alg="SHA-384">9c2a3838948b3d10eb6f9b72d2dd0b58ab52b3c392d4f0bdf76397c643112bc7a6a35571167d3b6de05df90e9120a6d7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jetty.mortbay.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JETTY</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/viewrep/jetty/jetty-sslengine/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar">
      <group>javax.servlet.jsp</group>
      <name>jsp-api</name>
      <version>2.1</version>
      <hashes>
        <hash alg="MD5">b8a34113a3a1ce29c8c60d7141f5a704</hash>
        <hash alg="SHA-1">63f943103f250ef1f3a4d5e94d145a0f961f5316</hash>
        <hash alg="SHA-256">545f4e7dc678ffb4cf8bd0fd40b4a4470a409a787c0ea7d0ad2f08d56112987b</hash>
        <hash alg="SHA-512">f320915bf27b05f5f93a69572ff0dad6e68f030b6f0fcb1832f80f7ffe56dba9e0575dd8e6b0425b3704ac75ea2b4a7656bdad64b8cc8610bfdcd5bc1989dcc5</hash>
        <hash alg="SHA-384">d4017a6b2b171512c97a00a9d84dbe60dd48b233964f1d4c1baa260ff65a7e901c896d38b81a57c98de977b49f0273f4</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-core</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">73d196595f5e410a37c0a4337350ceb7</hash>
        <hash alg="SHA-1">8341846f18187013bb9e27e46b7ee00a6395daf4</hash>
        <hash alg="SHA-256">2c6d0ec88fc8c36cb41637d9c00d0698c22cb6b6a137fa526ef782e00d2265bc</hash>
        <hash alg="SHA-512">9009037551b1a472ebfdf21697b22927028420607764fe91b9283488b54dbb5012e947328fbb0bfcd5393adde76ad1823baf52edd4e8b5a3bf479730c32f1dbb</hash>
        <hash alg="SHA-384">99509d6dfe02dd7131cbbb3b5b95d44ba3cc1b55acee760685d8616bcaad63fa2ec3cc432285799511a0838957326267</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-core/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-json</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">17ca6b0d49ed8db159b7827b6defa6b6</hash>
        <hash alg="SHA-1">1aa73e1896bcc7013fed247157d7f676226eb432</hash>
        <hash alg="SHA-256">cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6</hash>
        <hash alg="SHA-512">266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a</hash>
        <hash alg="SHA-384">6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-json/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar">
      <group>org.codehaus.jettison</group>
      <name>jettison</name>
      <version>1.1</version>
      <description>A StAX implementation for JSON.</description>
      <hashes>
        <hash alg="MD5">fc80e0aabd516c54739262c3d618303a</hash>
        <hash alg="SHA-1">1a01a2a1218fcf9faa2cc2a6ced025bdea687262</hash>
        <hash alg="SHA-256">377940288b0643c48780137f6f68578937e1ea5ca2b73830a820c50a7b7ed801</hash>
        <hash alg="SHA-512">075137cc1acbcdc4f07ac421d0f8fef7af5ac015520580aa3b908f22463b2ba86ba6be3b7511561d0459f1f14fac94617653c3777342ee0c857016baa7120ee9</hash>
        <hash alg="SHA-384">6fade925eed045ef42898f7e5cf72ac71e782ac802a9610aba57c78a39e16c7422eea88fd614e26ebe9e3e2e52bb4d2f</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar</purl>
      <externalReferences><reference type="distribution"><url>dav:https://dav.codehaus.org/repository/jettison/</url></reference><reference type="vcs"><url>https://svn.codehaus.org/jettison/tags/jettison-1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.xml.bind</group>
      <name>jaxb-impl</name>
      <version>2.2.3-1</version>
      <description>JAXB (JSR 222) reference implementation</description>
      <hashes>
        <hash alg="MD5">1b689e7f87caf2615c0f6a47831d0342</hash>
        <hash alg="SHA-1">56baae106392040a45a06d4a41099173425da1e6</hash>
        <hash alg="SHA-256">fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8</hash>
        <hash alg="SHA-512">6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683</hash>
        <hash alg="SHA-384">223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jaxb.java.net/</url></reference><reference type="distribution"><url>svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository</url></reference><reference type="vcs"><url>https://svn.java.net/svn/jaxb~version2/jaxb-ri</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-jaxrs</name>
      <version>1.8.3</version>
      <description>Jax-RS provider for JSON content type, based on 
Jackson JSON processor's data binding functionality.</description>
      <hashes>
        <hash alg="MD5">7634227657d2414a0c65e0818b30d5ed</hash>
        <hash alg="SHA-1">3604ca9f572170e2ef5813141ec1f0e0100efd19</hash>
        <hash alg="SHA-256">cadd12137aaf121722630d00117df63e34afc5b3dab5be68c921740114a05fba</hash>
        <hash alg="SHA-512">2b18eb8573a6f4e2e790aaf169f5b7529d13d0d9bdd0a93335fffde52cd968ec3bda471d6fdde5b8eb41a72640b13fa0765bc20908868e7cf920d461b7645249</hash>
        <hash alg="SHA-384">d4da3574d6b397dd75d3374aae9efb1af630430a764fbfd164013907c4e46d4ea01e4c0ed14638fb5a74b78349870103</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License (LGPL), Version 2.1</name>
          <url>http://www.fsf.org/licensing/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-xc</name>
      <version>1.8.3</version>
      <description>Extensions that provide interoperability support for
Jackson JSON processor's data binding functionality.</description>
      <hashes>
        <hash alg="MD5">0ee32b08580654d69147ecfab0321270</hash>
        <hash alg="SHA-1">1226667dcdb7c259b3ee07e112ed83446554516e</hash>
        <hash alg="SHA-256">e25789f6d6e0c60c0f46f89d33586190bef23626d9efd3b5d41fe42b45afec96</hash>
        <hash alg="SHA-512">5b23009a505ab04a43025e01d5905d57c03ef61417165fb08a67280a23ed15a8fc34a4b91fb50b26c75af8cb22bbbdb4917d39bd99af1806d2fe610453c137fb</hash>
        <hash alg="SHA-384">148dc3970f2219e527d316aeeb55cdeb8497ba04e2181ad928709805cf13394a60f4d5913637d0e9a3e32c7f5e55b043</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <name>GNU Lesser General Public License (LGPL), Version 2.1</name>
          <url>http://www.fsf.org/licensing/licenses/lgpl.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-server</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">0c98f6cca5df8197b310a0d1d89bb34a</hash>
        <hash alg="SHA-1">3a6ea7cc5e15c824953f9f3ece2201b634d90d18</hash>
        <hash alg="SHA-256">3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0</hash>
        <hash alg="SHA-512">9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8</hash>
        <hash alg="SHA-384">231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-server/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/asm/asm@3.1?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>asm</group>
      <name>asm</name>
      <version>3.1</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">b9b8d2d556f9458aac8c463fd511f86d</hash>
        <hash alg="SHA-1">c157def142714c544bdea2e6144645702adf7097</hash>
        <hash alg="SHA-256">333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a</hash>
        <hash alg="SHA-512">074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d</hash>
        <hash alg="SHA-384">c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/asm/asm@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm/</url></reference><reference type="distribution"><url>http://mojo.codehaus.org/my-project</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.ow2.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.1.3</version>
      <description>Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <hashes>
        <hash alg="MD5">92eb5aabc1b47287de53d45c086a435c</hash>
        <hash alg="SHA-1">f6f66e966c70a83ffbdb6f17a0919eaf7c8aca7f</hash>
        <hash alg="SHA-256">70903f6fc82e9908c8da9f20443f61d90f0870a312642991fe8462a0b9391784</hash>
        <hash alg="SHA-512">e5d1fc8ec4544e1fa0f7c4aae8dbcca466c4987bc92fbbc430b054b10d646b745add4a754b1be9d50edd64330c798c53173a97289db57a966312e16f934e9d1f</hash>
        <hash alg="SHA-384">00dc41783f4081585e20adcfe83fd4dbb6b5a27236ee633d7e53dedcbca83ba5e5f0ca68d31f95e9c724b365e4c67499</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/commons/proper/logging/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar">
      <group>net.java.dev.jets3t</group>
      <name>jets3t</name>
      <version>0.9.0</version>
      <description>JetS3t is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.</description>
      <hashes>
        <hash alg="MD5">22559a7c686b19534707228decc3c6d7</hash>
        <hash alg="SHA-1">792bc96ee7e57b89f472aa0cb5a31015b9f59c96</hash>
        <hash alg="SHA-256">e89893fc754b252af717d7d14accda946f7dfcfc1e293fd3e04725163d661bd7</hash>
        <hash alg="SHA-512">79fcaa8be8980b2fc9d8463854130eb7a7d6110fa795e73ac01d9abad23ec1588178e9d557d84f05b8e0b4ac909ae65eed1ff92e35c889208af003e195ff23c4</hash>
        <hash alg="SHA-384">c6e4516169d4d1c2241c3df7dd57e159cbe603cd746a125fff201cd097a351d82d6ca30e93aeee19a73bca0a009e94e0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jets3t.org</url></reference><reference type="vcs"><url>http://bitbucket.org/jmurty/jets3t/src</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar">
      <group>com.jamesmurty.utils</group>
      <name>java-xmlbuilder</name>
      <version>0.4</version>
      <description>XML Builder is a utility that creates simple XML documents using relatively sparse Java code</description>
      <hashes>
        <hash alg="MD5">0fa474213a6a0282cd9264f6e0dd3658</hash>
        <hash alg="SHA-1">ac5962e48cdee3a0a6e1f8e00fcb594747ac5aaf</hash>
        <hash alg="SHA-256">681e53c4ffd59fa12068803b259e3a83d43f07a47c112e748a187dee179eb31f</hash>
        <hash alg="SHA-512">4cbbf37807c05f714f554d0b340ebe78007c619a233ad243825e37e89403f550bd272e19733ad94bdfc48707cf8b5dd20d3e8552da9d40faa4cf549fdf0cddf5</hash>
        <hash alg="SHA-384">a9760f16e6bbe7155184e115f641a30341d6021a9f89e63c1d920403d1285059f10246df23a91e2749bf3cda3727a335</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/java-xmlbuilder/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://java-xmlbuilder.googlecode.com/svn/tags/java-xmlbuilder-0.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-lang</group>
      <name>commons-lang</name>
      <version>2.6</version>
      <description>Commons Lang, a package of Java utility classes for the
        classes that are in java.lang's hierarchy, or are considered to be so
        standard as to justify existence in java.lang.</description>
      <hashes>
        <hash alg="MD5">4d5c1693079575b362edf41500630bbd</hash>
        <hash alg="SHA-1">0ce1edb914c94ebc388f086c6827e8bdeec71ac2</hash>
        <hash alg="SHA-256">50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c</hash>
        <hash alg="SHA-512">4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42</hash>
        <hash alg="SHA-384">9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-lang/commons-lang@2.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/lang/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-configuration/commons-configuration@1.7?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-configuration</group>
      <name>commons-configuration</name>
      <version>1.7</version>
      <description>Tools to assist in the reading of configuration/preferences files in
        various formats</description>
      <hashes>
        <hash alg="MD5">0005907480f12ee461cb4cec25af61ea</hash>
        <hash alg="SHA-1">3559d47ea9e5f46d8cdc6503f08344b67b255dfd</hash>
        <hash alg="SHA-256">cdc6a3bf74d47965b8e011ae9a28ae30a2d62c229c25e67e0edae2479d599be3</hash>
        <hash alg="SHA-512">cc6a6075099f2edb228b6eb7424b9769a34f8bf66aa29ab5fd0e5422024fd23bb02fdbfd7d08d9557b12379114c9c5f0649c88700518a5f0b39df237955fd2c2</hash>
        <hash alg="SHA-384">f7083178493604784a2aa713658c11d56963cc815a99e63af344c1dc1cbac55a87836177a0d145e0e325ecf7d84681eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-configuration/commons-configuration@1.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/configuration/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/configuration/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-digester/commons-digester@1.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-digester</group>
      <name>commons-digester</name>
      <version>1.8</version>
      <description>The Digester package lets you configure an XML->Java object mapping module
    which triggers certain actions called rules whenever a particular 
    pattern of nested XML elements is recognized.</description>
      <hashes>
        <hash alg="MD5">cf89c593f0378e9509a06fce7030aeba</hash>
        <hash alg="SHA-1">dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e</hash>
        <hash alg="SHA-256">05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56</hash>
        <hash alg="SHA-512">138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2</hash>
        <hash alg="SHA-384">9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-digester/commons-digester@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/digester/</url></reference><reference type="distribution"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/digester/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-beanutils/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.12.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19fe50567358922bdad277959ea69545</hash>
        <hash alg="SHA-1">c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e</hash>
        <hash alg="SHA-256">d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e</hash>
        <hash alg="SHA-512">fbdbc0943cb3498b0148e86a39b773f97c8e6013740f72dbc727faeabea402073e2cc8c4d68198e5fc6b08a13b7700236292e99d4785f2c9989f2e5fac11fd81</hash>
        <hash alg="SHA-384">c34b8a0e0eba2168ad56fedeb7a1d710b6f1d3f1ce6aae99a4e0247bd120efbbadc8dcb2f731045b8a16e3efd30604dc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-core-asl</name>
      <version>1.9.13</version>
      <description>Jackson is a high-performance JSON processor (parser, generator)</description>
      <hashes>
        <hash alg="MD5">319c49a4304e3fa9fe3cd8dcfc009d37</hash>
        <hash alg="SHA-1">3c304d70f42f832e0a86d45bd437f692129299a4</hash>
        <hash alg="SHA-256">440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a</hash>
        <hash alg="SHA-512">11725da54c7c18af0b50967a9317866ce9d11eb94d3b52ff7a54c6550070e143b5a582de9a8ebb6d61a8104f4dcd7ddb9c2e6f5c3605b6900d48f5241fe38d89</hash>
        <hash alg="SHA-384">26bff8b72770f734bac78e1ef2f575b26b7676895a4f022f402c99e38b567905ace700f553771606603f508b749bfb4f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <publisher>FasterXML</publisher>
      <group>org.codehaus.jackson</group>
      <name>jackson-mapper-asl</name>
      <version>1.9.13</version>
      <description>Data Mapper package is a high-performance data binding package
built on Jackson JSON processor</description>
      <hashes>
        <hash alg="MD5">1750f9c339352fc4b728d61b57171613</hash>
        <hash alg="SHA-1">1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7</hash>
        <hash alg="SHA-256">74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2</hash>
        <hash alg="SHA-512">81cd7962fd9ee6d2354f5e44d23de1fa96d0da665b79a0f4ce6f8012bb4651683ae69b82daae3cf4feb101658a344bf4d665fefc3a57eca3a720761732963873</hash>
        <hash alg="SHA-384">d0f846e695d5ba34708b7d066a77b66c3f4c726300bd56f222b61b2c72cf35c95c98bfaf5cb99288a96aa54cc6f1d55c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jackson.codehaus.org</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/JACKSON</url></reference><reference type="vcs"><url>http://xircles.codehaus.org/projects/jackson/repos/primary/repo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.gson/gson@2.2.4?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.code.gson</group>
      <name>gson</name>
      <version>2.2.4</version>
      <description>Google Gson library</description>
      <hashes>
        <hash alg="MD5">2f54fc24807a4cad7297012dd8cebf3d</hash>
        <hash alg="SHA-1">a60a5e993c98c864010053cb901b7eab25306568</hash>
        <hash alg="SHA-256">c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb</hash>
        <hash alg="SHA-512">d7aa9214cefb99b2f39bab6bf5718dafcb43742f8a881e5fb6cbc3a757491c0082a536ed1fef6c7168412b6e5bdec28e68a40b4d4d0b57b63a7bbc9a55f820cd</hash>
        <hash alg="SHA-384">2c5d7ed5310c1a1b45b7b46479361debd5e2e49737f167bff9c11dd989fa38b973ccd7b4655dbb5e34b0ff4ff1a8d755</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.gson/gson@2.2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-gson/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-gson/issues/list</url></reference><reference type="vcs"><url>http://google-gson.googlecode.com/svn/trunk/gson</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-auth</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Auth - Java HTTP SPNEGO</description>
      <hashes>
        <hash alg="MD5">befc7be7bc7aa4dc9b6324626913cda8</hash>
        <hash alg="SHA-1">29ab697d6b925ed3a52b782554d59e3312c94572</hash>
        <hash alg="SHA-256">0acffe01db6dbbdce9e6d46aa758f956af60cc8ef0fa405ca7f5b8747a53687b</hash>
        <hash alg="SHA-512">b3aac5229209dc11ef20c1125c186fc4ae77e85679725c6a8364538e6026c35439f85ae37579130c6089ab899ba1da180f65a7cfdd0a9c3120fe1c7b0f2157cf</hash>
        <hash alg="SHA-384">25e6927a991abef2a6c6b75859c6b23a7cbdc90dd9fec7b18ebc0a0d594911a27b2b35ddd5f618b5cc0dca2fd1807d34</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar">
      <publisher>Connect2id Ltd.</publisher>
      <group>com.nimbusds</group>
      <name>nimbus-jose-jwt</name>
      <version>7.9</version>
      <description>Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)</description>
      <hashes>
        <hash alg="MD5">cf76d6f5280e5bb138b23076719f7d80</hash>
        <hash alg="SHA-1">b608cd5e306d67bb58fe5bd687387aa0671687a6</hash>
        <hash alg="SHA-256">b4f58453e180a981eb744a19b4d56afb12f10c3dd35e7531cc58ee6cbf5bf286</hash>
        <hash alg="SHA-512">2126e64143a0c30b42051bfd710fa47e76208bde44498a25de734401870c8b55b8c992067b865c93092adefccd09ba4650918b8ab250dcf9a8f3176c481f13a0</hash>
        <hash alg="SHA-384">3ce7bb4f4bc9c4ec4a73f0e41c976cd739e441a60f669f29df1402c69837cd1db1e705d5c6b1af4151172f666a99c2fc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://bitbucket.org/connect2id/nimbus-jose-jwt</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar">
      <group>com.github.stephenc.jcip</group>
      <name>jcip-annotations</name>
      <version>1.0-1</version>
      <description>A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.</description>
      <hashes>
        <hash alg="MD5">d62dbfa8789378457ada685e2f614846</hash>
        <hash alg="SHA-1">ef31541dd28ae2cefdd17c7ebf352d93e9058c63</hash>
        <hash alg="SHA-256">4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323</hash>
        <hash alg="SHA-512">02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069</hash>
        <hash alg="SHA-384">88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://stephenc.github.com/jcip-annotations</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/stephenc/jcip-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/stephenc/jcip-annotations/tree/master/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/json-smart@2.3?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>json-smart</name>
      <version>2.3</version>
      <description>JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.</description>
      <hashes>
        <hash alg="MD5">f2a921d4baaa7308de04eed4d8d72715</hash>
        <hash alg="SHA-1">007396407491352ce4fa30de92efb158adb76b5b</hash>
        <hash alg="SHA-256">903f48c8aa4c3f6426440b8d32de89fa1dc23b1169abde25e4e1d068aa67708b</hash>
        <hash alg="SHA-512">977ffe05c17965b403a60471eb6c160103263bbe454e942d67d4d725e1826b504de6c15038ff01ea90632bf9ad8a31b47c6662613bb905f020effa68c44d6f9a</hash>
        <hash alg="SHA-384">d3d68802a0379f45570af1028ae1c9532c399a8fa9956328f59d305b62add017c77835b139d135c7719efa73725bce83</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/json-smart@2.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.minidev.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.minidev/accessors-smart@1.2?type=jar">
      <publisher>Chemouni Uriel</publisher>
      <group>net.minidev</group>
      <name>accessors-smart</name>
      <version>1.2</version>
      <description>Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.</description>
      <hashes>
        <hash alg="MD5">c28b871d258b4d347559d2eb7ecec4a3</hash>
        <hash alg="SHA-1">c592b500269bfde36096641b01238a8350f8aa31</hash>
        <hash alg="SHA-256">0c7c265d62fc007124dc32b91336e9c4272651d629bc5fa1a4e4e3bc758eb2e4</hash>
        <hash alg="SHA-512">39fe6a5ebd2ae2d33d8737c8407a8caa4f6a62ce2057d726bb82496d35104b76f230bbb9721e1db5f535fefa3d70ee88c0a5a5e4a3f1266d7317cae897ad0882</hash>
        <hash alg="SHA-384">fd66aeb9655bbac142a595d90457497b8fdd908c8d0f35c9b331ccc111e89ba863ebb4d9463b768426d6445b59f35f75</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.minidev/accessors-smart@1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.minidev.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netplex/json-smart-v2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>5.0.4</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">c8a73cdfdf802ab0220c860d590d0f84</hash>
        <hash alg="SHA-1">0da08b8cce7bbf903602a25a3a163ae252435795</hash>
        <hash alg="SHA-256">896618ed8ae62702521a78bc7be42b7c491a08e6920a15f89a3ecdec31e9a220</hash>
        <hash alg="SHA-512">afee8f98ee21771f104318d95b839d9ea6ea083157bd62d8bc3462d9302dc20ea939d1b4ae2222f92f09b92bc9ab1317aff02734007f716cc805fe49b92a8a5a</hash>
        <hash alg="SHA-384">84f68859e74fc5a1bbb32bad682b3554ba0b4177f1e152991defe37151bdc31c1378da2876fe995c19445ca793260170</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@5.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.objectweb.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/trunk/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-kerberos-codec</name>
      <version>2.0.0-M15</version>
      <description>The Kerberos protocol encoder/decoder module</description>
      <hashes>
        <hash alg="MD5">3118e22eac44e150c383df1d417772f4</hash>
        <hash alg="SHA-1">1c16e4e477183641c5f0dd5cdecd27ec331bacb5</hash>
        <hash alg="SHA-256">4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded</hash>
        <hash alg="SHA-512">9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0</hash>
        <hash alg="SHA-384">c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.server</group>
      <name>apacheds-i18n</name>
      <version>2.0.0-M15</version>
      <description>Internationalization of errors and other messages</description>
      <hashes>
        <hash alg="MD5">f5877c02fd56ade67713560e589c81b9</hash>
        <hash alg="SHA-1">71c61c84683152ec2a6a65f3f96fe534e304fa22</hash>
        <hash alg="SHA-256">bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c</hash>
        <hash alg="SHA-512">2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632</hash>
        <hash alg="SHA-384">fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/apacheds/1.5/apacheds-i18n</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRSERVER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-asn1-api</name>
      <version>1.0.0-M20</version>
      <description>ASN.1 API</description>
      <hashes>
        <hash alg="MD5">cf4561832dab76e9f37461342ec18d17</hash>
        <hash alg="SHA-1">5e6486ffa3125ba44dc410ead166e1d6ba8ac76d</hash>
        <hash alg="SHA-256">484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298</hash>
        <hash alg="SHA-512">10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97</hash>
        <hash alg="SHA-384">f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.directory.api</group>
      <name>api-util</name>
      <version>1.0.0-M20</version>
      <description>Utilities shared across this top level project</description>
      <hashes>
        <hash alg="MD5">2c5a6722666882024becdd64301be492</hash>
        <hash alg="SHA-1">a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb</hash>
        <hash alg="SHA-256">fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1</hash>
        <hash alg="SHA-512">b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3</hash>
        <hash alg="SHA-384">1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar</purl>
      <externalReferences><reference type="website"><url>http://directory.apache.org/api-parent/api-util/</url></reference><reference type="build-system"><url>https://hudson.apache.org/hudson/view/A-F/view/Directory</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DIRAPI</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/directory-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar">
      <publisher>JCraft,Inc.</publisher>
      <group>com.jcraft</group>
      <name>jsch</name>
      <version>0.1.55</version>
      <description>JSch is a pure Java implementation of SSH2</description>
      <hashes>
        <hash alg="MD5">c395ada0fc012d66f11bd30246f6c84d</hash>
        <hash alg="SHA-1">bbd40e5aa7aa3cfad5db34965456cee738a42a50</hash>
        <hash alg="SHA-256">d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44</hash>
        <hash alg="SHA-512">b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5</hash>
        <hash alg="SHA-384">6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jcraft/jsch@0.1.55?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jcraft.com/jsch/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://git.jcraft.com/jsch.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-client</name>
      <version>2.13.0</version>
      <description>Low-level API</description>
      <hashes>
        <hash alg="MD5">ca2c6ca2277e78d1f6b865ee82e10357</hash>
        <hash alg="SHA-1">a1974d9b3251c055408059b2f408d19d7db07224</hash>
        <hash alg="SHA-256">62ab2201b5b9af63b215a4e6829dbe7d553a0805cfb0b1a665f9b49da8270c51</hash>
        <hash alg="SHA-512">72909bbf56f63fb7afba996336e7270ae08010976b4bb3b8bb90269d53fde78c63f8131a941ebb7cc554981a522f15e2b2a9ec63387d77f7117e5a1ed0b8c028</hash>
        <hash alg="SHA-384">57d338248aa56fa86aab71303a2746c7e4f061a18029a096f99bdadb7a87152f5067e1955aa2acb928edbcac0631b613</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-client</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-recipes</name>
      <version>2.13.0</version>
      <description>All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).</description>
      <hashes>
        <hash alg="MD5">02685a8f2e44faa1941e953ac426a8d7</hash>
        <hash alg="SHA-1">1e6d5cf7b18a402f5d52785877010711538d68a0</hash>
        <hash alg="SHA-256">22be05c1a3e6c5ede22e77372b08dc631a3b93b64acb7f682537ea65a6ddba06</hash>
        <hash alg="SHA-512">498ce3631ef135b96b467cd3c4fa8ac1797538047589b1454911ec77a5205773346a367492db0771167e8f612c911bac44c8c7c651be00e206eb60e2f0bba2f7</hash>
        <hash alg="SHA-384">08a4134a208a2c59b0354e5d4e88b29f0f2f4f0bd0b83a6ccd54da70602499a8dedd5711d5481c23ba8782049cdb546c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-recipes</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-recipes</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.htrace</group>
      <name>htrace-core4</name>
      <version>4.1.0-incubating</version>
      <description>A distributed tracing framework.</description>
      <hashes>
        <hash alg="MD5">34f428e68910ea6555c79e733d433f1a</hash>
        <hash alg="SHA-1">12b3e2adda95e8c41d9d45d33db075137871d2e2</hash>
        <hash alg="SHA-256">5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6</hash>
        <hash alg="SHA-512">1d61c8cc145a6e43ef99221032abd2e6e519b00ec159bb8f1ecd94cc475dc35097639b35d476a746103dccd04f88c49c52c7d72a43f6c59501ef7cd02f637d85</hash>
        <hash alg="SHA-384">07a10701d902d6e1f606d977272f6fc9f946cc9f50a1b3efe30d132beb32a00b7b962344d6f76e217012fd61a6f9f996</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar</purl>
      <externalReferences><reference type="website"><url>http://incubator.apache.org/projects/htrace.html</url></reference><reference type="build-system"><url>https://builds.apache.org/view/H-L/view/HTrace/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTRACE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.7.1</version>
      <description>ZooKeeper server</description>
      <hashes>
        <hash alg="MD5">5a983ef4352f2dc062dd764a6d3bb17d</hash>
        <hash alg="SHA-1">b598708e153ff74dd2ebb800419df96df8a01c2d</hash>
        <hash alg="SHA-256">1d119d812782388589725f1ab5b49080a0ea931da0dc93c7c0f1d9ee51a32fe8</hash>
        <hash alg="SHA-512">9e709a8f0a488f892e667dba09934443da431691dcdd331dda512b160f7ffbf8b7361abd287111d6c22c964885255bef257a7776c21bc4a4d05cb0e380f2744c</hash>
        <hash alg="SHA-384">9826f4986bd35167ce2ec6a5ade6c170af9835d1e2829553a35ba4f2de56b20dfb034481f72d93551ac4af0660c402da</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.zookeeper</group>
      <name>zookeeper-jute</name>
      <version>3.7.1</version>
      <description>ZooKeeper jute</description>
      <hashes>
        <hash alg="MD5">2fddc39d1851933f49f2c9dd79d6ec0f</hash>
        <hash alg="SHA-1">569a3fa7bad2127d74219bd2aaaac56a89c21b02</hash>
        <hash alg="SHA-256">ee6e6c0c3cbf2da1eb171272055b915351ecfdf4abdea5cc0371baf0275197d4</hash>
        <hash alg="SHA-512">163c9a75888d28072b964d08ef6650be2f46810a1b0c46ff3f96e48a2ecea994b71f9e5a655b8d4e13b2522e97a26921399ce55207301b6f6a14dc0724fb24b5</hash>
        <hash alg="SHA-384">56931db6c37b820bb97c3263cab82d196a4ad2eedd65ce3ce63864668b21045f9677a74c8d6c8a04093541a2127e6a7a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://zookeeper.apache.org/zookeeper-jute</url></reference><reference type="build-system"><url>https://ci-hadoop.apache.org/view/ZooKeeper/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/ZOOKEEPER</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/zookeeper-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-compress</name>
      <version>1.21</version>
      <description>Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.</description>
      <hashes>
        <hash alg="MD5">2a713d10331bc4e13459a3dc0463f16f</hash>
        <hash alg="SHA-1">4ec95b60d4e86b5c95a0e919cb172a0af98011ef</hash>
        <hash alg="SHA-256">6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a</hash>
        <hash alg="SHA-512">c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471</hash>
        <hash alg="SHA-384">da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-compress@1.21?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-compress/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/COMPRESS</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-compress.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar">
      <publisher>fasterxml.com</publisher>
      <group>org.codehaus.woodstox</group>
      <name>stax2-api</name>
      <version>4.2.1</version>
      <description>tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.</description>
      <hashes>
        <hash alg="MD5">af8377bc7882332e22456616a9f164f6</hash>
        <hash alg="SHA-1">a3f7325c52240418c2ba257b103c3c550e140c83</hash>
        <hash alg="SHA-256">678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579</hash>
        <hash alg="SHA-512">00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d</hash>
        <hash alg="SHA-384">97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/stax2-api</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/stax2-api/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/stax2-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.woodstox</group>
      <name>woodstox-core</name>
      <version>5.3.0</version>
      <description>Woodstox is a high-performance XML processor that
        implements Stax (JSR-173), SAX2 and Stax2 APIs</description>
      <hashes>
        <hash alg="MD5">89fb07387e448325eacc9c642e3d69af</hash>
        <hash alg="SHA-1">59a3a7fb46a364ee383ea7e8c67c152a224b3d99</hash>
        <hash alg="SHA-256">b2bd29c31fda49a9b28a22b9e5c2b26443bcfa99c1a28eab70ab9c7d349b5002</hash>
        <hash alg="SHA-512">a9e981b270cef762d2077522f158287141cc47a3d2705f7d03349390bfc12e2dc33641cab6278678e7225087d8e5a9a891f396e958ea1527628d7e8edf833ae2</hash>
        <hash alg="SHA-384">e653d5f0a2802aeb1e98e19d453850567c77fb31a3dfff41af953d2cd198d1a3fc374fb1c82f63a92bb5dd120b9f576a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/woodstox</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/woodstox/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/woodstox</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-mapreduce-client-core</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Project POM</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">dd27528b7eb179b35d725b11472a5421</hash>
        <hash alg="SHA-1">049f28d5dd3261273a407176437240f09b848729</hash>
        <hash alg="SHA-256">0bc0c95543d45ca5b64ecfb49ad7d9c5409ec3c922ef4a0374686e7c626c5312</hash>
        <hash alg="SHA-512">208b758ae8fa6fca4120e24d4ee685034847bce7c9ac9056d69835ecfafa33b576838e8cee26400615f30ea37d8dd4b82c1d9ec5f7331c49d63d38b0ffc96df1</hash>
        <hash alg="SHA-384">140aa4e4ed0050a38b82f59de56acd99a7219ef0a373ec5fa24c97f9905580d0a046a3874b4b3365a503597b52e51470</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-client</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">e336518a208caaa4061678428a39bab6</hash>
        <hash alg="SHA-1">19ac5a1ef4eed5327ba92f9d6ff513f1bfa4d047</hash>
        <hash alg="SHA-256">2055ad9335203e68c990788d09aebd0ff047dbd03ff7ee5a0126170fda534847</hash>
        <hash alg="SHA-512">ed7597e9d48e3ed14e769ad8e17b259e22ef8962c63e0a57ed21f764f29051a3a6e31b28325e083d0d531e2660e9a11987b141170ee30aa165eda49484c9722f</hash>
        <hash alg="SHA-384">f41ca628ca42c3084087fdfc0123695e9820f0dcea75c5356a13fbd32638612d0188aefbc4aa4e9108d858f9a7e94195</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-api</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">8c59fbf8a9da050f8e1b7d9cf51f38e8</hash>
        <hash alg="SHA-1">1094aa67b087960aefd4ff885ef057053009eb82</hash>
        <hash alg="SHA-256">b04b7708eeff04dfec1ce162c3cd37e1525087e7e692b3703b690d6f395e8fb6</hash>
        <hash alg="SHA-512">1f39c160ed764589a889cdcbced25f62c56fd1c2bbdab23b630325adf8105cce40f6a1da40f7661354aff79a517777a3bef094609e4de6d976d6704380685604</hash>
        <hash alg="SHA-384">bf69fb00b7e873baa86b551d1175868a8a7c3d2277fce4aaa593262d2b0f347a17768c9ef4846a733036982d7e1fd93d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-common</name>
      <version>2.10.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">8403df1df0610e28bf038523830586e7</hash>
        <hash alg="SHA-1">da1720fb74f72c3f85b50c6b2f9029b913360183</hash>
        <hash alg="SHA-256">5b4c7c2bfeaf083a2404b114ecad84e9a3e69e68bd43945c4dedda20d762869d</hash>
        <hash alg="SHA-512">86482b1a95a1370cb3f3a40131a57ffc7dc439ea94e784b97e1d0e61ba24d25e3b78e75532a91caf819d94f85292a53d919c7886b7d704a52bb234919ceeb2d2</hash>
        <hash alg="SHA-384">4f0c0ed73c972395115eb0659dbe64a59fddcf54bee5b9f2597c4b1f900159057f67b44fe4803e230f4293ce1950ebf5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>javax.xml.bind</group>
      <name>jaxb-api</name>
      <version>2.3.1</version>
      <description>JAXB (JSR 222) API</description>
      <hashes>
        <hash alg="MD5">bcf270d320f645ad19f5edb60091e87f</hash>
        <hash alg="SHA-1">8531ad5ac454cc2deb9d4d32c40c4d7451939b5d</hash>
        <hash alg="SHA-256">88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06</hash>
        <hash alg="SHA-512">93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790</hash>
        <hash alg="SHA-384">1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/javaee/jaxb-spec/jaxb-api</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/jaxb-spec/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/jaxb-spec.git/jaxb-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar">
      <publisher>Oracle</publisher>
      <group>javax.activation</group>
      <name>javax.activation-api</name>
      <version>1.2.0</version>
      <description>JavaBeans Activation Framework API jar</description>
      <hashes>
        <hash alg="MD5">5e50e56bcf4a3ef3bc758f69f7643c3b</hash>
        <hash alg="SHA-1">85262acf3ca9816f9537ca47d5adeabaead7cb16</hash>
        <hash alg="SHA-256">43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393</hash>
        <hash alg="SHA-512">8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9</hash>
        <hash alg="SHA-384">d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf</hash>
      </hashes>
      <licenses>
        <expression>(CDDL-1.0 OR GPL-2.0-with-classpath-exception)</expression>
      </licenses>
      <purl>pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.net/all/javax.activation-api/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/javaee/activation/issues</url></reference><reference type="vcs"><url>https://github.com/javaee/activation/javax.activation-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey</group>
      <name>jersey-client</name>
      <version>1.9</version>
      <description>Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311)
        production quality Reference Implementation for building
        RESTful Web services.</description>
      <hashes>
        <hash alg="MD5">cdbba85f9cb7ce5e0ca51d610f0228e9</hash>
        <hash alg="SHA-1">d3c4b2b5f89db32c96ceddcb863684821910a7bb</hash>
        <hash alg="SHA-256">8ae03af0d06c46a51b65d123ec40f245da690991aa3669cef4767db8f36fbe68</hash>
        <hash alg="SHA-512">06e4c88de3491fabc0db7b46e17a7fb234be00dc9e05409f390da914b9362621af6d24380f24a1b9f6992808ec5af0382ea7658acc7f98437e8da8ad650899f6</hash>
        <hash alg="SHA-384">1927620343cf270e0afdc4187f9f8d856dc0fd3bae3a871fa267a3b3ae14b65ed4a22d813309716d496a005032f98895</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-client/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-client</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject/guice@3.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject</group>
      <name>guice</name>
      <version>3.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 5 and above</description>
      <hashes>
        <hash alg="MD5">ca1c7ba366884cfcd2cfb48d2395c400</hash>
        <hash alg="SHA-1">9d84f15fe35e2c716a02979fb62f50a29f38aefa</hash>
        <hash alg="SHA-256">1a59d0421ffd355cc0b70b42df1c2e9af744c8a2d0c92da379f5fca2f07f1d22</hash>
        <hash alg="SHA-512">8695045803e3d391a427c57573ebea1af880f68d312014e156b977e5b6fa73cd327fe49dbc218e62c1d1e7bd4940bae454cd78c6ff60bad7e3620f66ea0dafbf</hash>
        <hash alg="SHA-384">f32bd5aaa4ebcda4843bc3aaaad127740d0c810a729cef2b3e8a4d3974f1e130860de52936b97177cf55bd6267718705</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject/guice@3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-guice/guice/</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/job/Google-Guice/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://code.google.com/p/google-guice/source/browse/guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.inject/javax.inject@1?type=jar">
      <group>javax.inject</group>
      <name>javax.inject</name>
      <version>1</version>
      <description>The javax.inject API</description>
      <hashes>
        <hash alg="MD5">289075e48b909e9e74e6c915b3631d2e</hash>
        <hash alg="SHA-1">6975da39a7040257bd51d21a231b76c915872d38</hash>
        <hash alg="SHA-256">91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff</hash>
        <hash alg="SHA-512">e126b7ccf3e42fd1984a0beef1004a7269a337c202e59e04e8e2af714280d2f2d8d2ba5e6f59481b8dcd34aaf35c966a688d0b48ec7e96f102c274dc0d3b381e</hash>
        <hash alg="SHA-384">ac04c9f03ccbe35a25deb8b50280a0ca01dbe6aff0dd795d55af6112bfe3cd5817eb82f32fb18378d86cd64b07597190</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.inject/javax.inject@1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/atinject/</url></reference><reference type="vcs"><url>http://code.google.com/p/atinject/source/checkout</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar">
      <group>aopalliance</group>
      <name>aopalliance</name>
      <version>1.0</version>
      <description>AOP Alliance</description>
      <hashes>
        <hash alg="MD5">04177054e180d09e3998808efa0401c7</hash>
        <hash alg="SHA-1">0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8</hash>
        <hash alg="SHA-256">0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08</hash>
        <hash alg="SHA-512">3f44a932d8c00cfeee2eb057bcd7c301a2d029063e0a916e1e20b3aec4877d19d67a2fd8aaf58fa2d5a00133d1602128a7f50912ffb6cabc7b0fdc7fbda3f8a1</hash>
        <hash alg="SHA-384">4dddf44338b5aff9580da2532b81c0ac3e1d09e1f28c6db871a55cad442b705dd7791eb07f9d4577d49d0be3673ba783</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/aopalliance/aopalliance@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aopalliance.sourceforge.net</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar">
      <publisher>Oracle Corporation</publisher>
      <group>com.sun.jersey.contribs</group>
      <name>jersey-guice</name>
      <version>1.9</version>
      <description>Projects that provide additional functionality to jersey, like integration
        with other projects/frameworks.</description>
      <hashes>
        <hash alg="MD5">a81140d246f420c1e2eabe649417c5b1</hash>
        <hash alg="SHA-1">5963c28c47df7e5d6ad34cec80c071c368777f7b</hash>
        <hash alg="SHA-256">544fc92d2625332a9a8eeaa7a7274cf1af6703936a50afa80d92a78200a7de34</hash>
        <hash alg="SHA-512">e0378d72c15fc74bb7b575fe444ba5d0ca205ebb22868ed44f01d0f64b3bc55f8fb10491575abce0986a05b70546089f7e90d8ab399b5fd5cf70270fe6cb32c1</hash>
        <hash alg="SHA-384">c331b2f942b90654c1b2bef206a0b9a54f670c101aaed4e28e0411e6db1bfbe11c4ef32a0485e19ed7b5dd1e48d569dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.1</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://jersey.java.net/jersey-contribs/jersey-guice/</url></reference><reference type="build-system"><url>http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/</url></reference><reference type="distribution"><url>https://maven.java.net/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://java.net/jira/browse/JERSEY/</url></reference><reference type="mailing-list"><url>http://java.net/projects/jersey/lists/users/archive</url></reference><reference type="vcs"><url>http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-contribs/jersey-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>com.google.inject.extensions</group>
      <name>guice-servlet</name>
      <version>3.0</version>
      <description>Guice is a lightweight dependency injection framework for Java 5 and above</description>
      <hashes>
        <hash alg="MD5">c9f66a5f6a0d840d9057b30853f25b85</hash>
        <hash alg="SHA-1">610cde0e8da5a8b7d8efb8f0b8987466ffebaaf9</hash>
        <hash alg="SHA-256">9e72a4b8582888d53c2f4297e93276a3c14c82880124490f2da7b16a9df1c618</hash>
        <hash alg="SHA-512">c9325bf3c317e820babb080b5e2453e8d08cd40b74528b38da2f63bdc2464c3209ed5f5af8d163a21c0424e1bf1252f28c9915b4591aaa864881e8ed452ec3fa</hash>
        <hash alg="SHA-384">1e9ee84a7d00b8a8d8a914242a1232104f594cab49d536ea3e053d0111013818171a37508ce4798af6cfc67e839fe67e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-guice/extensions-parent/guice-servlet/</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/job/Google-Guice/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://code.google.com/p/google-guice/source/browse/extensions-parent/guice-servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar">
      <publisher>The Netty Project</publisher>
      <group>io.netty</group>
      <name>netty</name>
      <version>3.10.6.Final</version>
      <description>The Netty project is an effort to provide an asynchronous event-driven
    network application framework and tools for rapid development of
    maintainable high performance and high scalability protocol servers and
    clients.  In other words, Netty is a NIO client server framework which
    enables quick and easy development of network applications such as protocol
    servers and clients. It greatly simplifies and streamlines network
    programming such as TCP and UDP socket server.</description>
      <hashes>
        <hash alg="MD5">e9cdf01138257f48d796fb2cf67af53e</hash>
        <hash alg="SHA-1">18ed04a0e502896552854926e908509db2987a00</hash>
        <hash alg="SHA-256">8768a50fbe3d93a88d8e6000ea5d68e30f50dc915b3764c3c5870f70c4fb3b49</hash>
        <hash alg="SHA-512">37cdb98e11b42006fbb26a1c6871261d8e8cb3254183116a550d4971171f576417392395fa0168c68751078148d177af9374ee0f542af527f57531773c62cbc5</hash>
        <hash alg="SHA-384">7c445aae5d4dd35c2fc8e236589f5711496a4a7ca2a8a4eb47f9359d39db7789f20b0c67f1c28bacf75c2680ba7cbc1e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/io.netty/netty@3.10.6.Final?type=jar</purl>
      <externalReferences><reference type="website"><url>http://netty.io/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/netty/netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar">
      <publisher>FuseSource, Corp.</publisher>
      <group>org.fusesource.leveldbjni</group>
      <name>leveldbjni-all</name>
      <version>1.8</version>
      <description>An uber jar which contains all the leveldbjni platform libraries and dependencies</description>
      <hashes>
        <hash alg="MD5">6944e9bc03c7938868e53c96726ae914</hash>
        <hash alg="SHA-1">707350a2eeb1fa2ed77a32ddb3893ed308e941db</hash>
        <hash alg="SHA-256">c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe</hash>
        <hash alg="SHA-512">2e9f806af5d89c00e345b4516ffd325893a07f30c87274fa5b8ce314aad021633750b665d8c338fbf5adc79a527e19caf96d0b12af57e56fb8d3d8f7fd845a96</hash>
        <hash alg="SHA-384">f10d7ce88da5a9fada67fcbf6fc02939346e67428ee5dd7b000f884d8046131391ee1ece83885d3de60532d1227a66f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-3-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>http://leveldbjni.fusesource.org/leveldbjni-all</url></reference><reference type="distribution"><url>http://repo.fusesource.com/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/fusesource/leveldbjni/issues</url></reference><reference type="mailing-list"><url>leveldbjni-dev-subscribe@fusesource.org</url></reference><reference type="vcs"><url>https://github.com/fusesource/leveldbjni/leveldbjni-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.14.3</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <hashes>
        <hash alg="MD5">d9aed5b42f6769cb06d6802250aed19b</hash>
        <hash alg="SHA-1">ba0373b04bf0f03b0cd268cd2e5e8444aaaf9208</hash>
        <hash alg="SHA-256">ef0694046dc86e8a601e69efef24cda88a85773aaf012f5b9b1167d6f2e7de45</hash>
        <hash alg="SHA-512">54f4842e09b4166bc0c0851407bdf988a0f88d5f68d58134eb0d393c80e20b337545fffa96c3563b79b71b105d9e55713815749af48cab752633d98c0dbfcf99</hash>
        <hash alg="SHA-384">624b07a0b597c07a2c82cd6fbbb31d796c69a189931b73b7ce9c35dd0aca6dfca378d08c05e943b10c7f12e06904bb04</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>https://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-metastore</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">864e92bb31a27605213b6136524999a4</hash>
        <hash alg="SHA-1">e9614e870f5a42b12a55fd5ea97dade5e062a835</hash>
        <hash alg="SHA-256">224b4a59344ff8136a68c0033801390f20d4d01c30ea5fd5dd9c4592f9c8a9ef</hash>
        <hash alg="SHA-512">1e9211c21886699f909d611f75f5128da7d190ab51d4748aa2c7f3b963d67bae4964f60b668242cf1c71573b6eaaab7fe4884147110ac975bc84d0a956f0a736</hash>
        <hash alg="SHA-384">418bc8a3f539dc748c6924123defe3e7e699a604783275f87ee64adf3977cc45c7df2bda46fae1d254b2bba05b05a5af</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-metastore</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-metastore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-serde</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4b78668ff65bf79e9c3df95ef73ee2d5</hash>
        <hash alg="SHA-1">b76292b52f9127039b6a4ec4c81ed426a0e8e901</hash>
        <hash alg="SHA-256">6703cd6a011723931631087b39ae4d0a7a46d594ede42d8584d5747df6111732</hash>
        <hash alg="SHA-512">8414502705a973aca77b39e3f58699512917ffb31c2292a2facc373c7e7ff2e707198629f5b1a4a7f9e5620c1f55e445ef00b32fa236419a2478f3501c9274ff</hash>
        <hash alg="SHA-384">d46aa092242b8be667b1ce4883fdc89d487c03f158f056533c793972b45aa0dcfdb3bf22f8cbf1f2f736efca2a273c9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-serde</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-serde</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar">
      <publisher>JolBox</publisher>
      <group>com.jolbox</group>
      <name>bonecp</name>
      <version>0.8.0.RELEASE</version>
      <description>Lightweight connection pool.</description>
      <hashes>
        <hash alg="MD5">730a2f3602f5f4c3ff7590b08205adce</hash>
        <hash alg="SHA-1">cec24ee9345b3678472bb1b8fdd6aa6b9428beb8</hash>
        <hash alg="SHA-256">a53d5b5a7ba6433fc7c29e29664313e50ddb53e7381698c41d1091e3c3d081fb</hash>
        <hash alg="SHA-512">00736d3aeebbc7e6ab973e5de92a33295ef9f4837b02d552a2e9460d05ce0b0801daab3fccaf4de7ee8b0c832e454df065c5e4ba468b92784a75b56963308fe1</hash>
        <hash alg="SHA-384">1030283627d5068b1a646ec837f8d4b952eab2972bc3344f18f8eed0c798ec12d8970d2c8bd65e13f020101ab4fbaf1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jolbox.com/bonecp</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://launchpad.net/bonecp</url></reference><reference type="vcs"><url>http://github.com/wwadge/bonecp/bonecp</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar">
      <publisher>Zaxxer.com</publisher>
      <group>com.zaxxer</group>
      <name>HikariCP</name>
      <version>2.5.1</version>
      <description>Ultimate JDBC Connection Pool</description>
      <hashes>
        <hash alg="MD5">4fd401dee8e525cbb8403476381e34cd</hash>
        <hash alg="SHA-1">b896b711e2d98fedf403de590559a123b5fbf1a6</hash>
        <hash alg="SHA-256">3cf7bc5258414b77613e8d8ef0ce63b3ae1c53a441fd95b9ea335ec051c652b2</hash>
        <hash alg="SHA-512">4a3137acfff20e17fb20bc582ed238d0305daef88f45d898c2b1c169343bece7970a4535d558333bacb24ddf52a4a90ccd6a7c49ffbefd31e0611bd86dc15cfc</hash>
        <hash alg="SHA-384">4254051930ab34c016fbe438065d368c288352f626fa2b0f0855b9deac6d70406eba16cc3e63fddfc93facad597bdac2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/brettwooldridge/HikariCP</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar">
      <group>org.datanucleus</group>
      <name>datanucleus-api-jdo</name>
      <version>4.2.4</version>
      <description>Plugin providing DataNucleus implementation of the JDO API.</description>
      <hashes>
        <hash alg="MD5">f54789e11168bdfa5063d5241573ff21</hash>
        <hash alg="SHA-1">7e2c71f7eb9b40b660d009c3ea1b55fb71694bca</hash>
        <hash alg="SHA-256">f30f1f09658329190811468e58a622f069d97a7284d67a88b8d01c809ab3d1f3</hash>
        <hash alg="SHA-512">948027e5d289b8e9718fb0c552a60b8c9f3d1db42bdeae3e45f42701bd5bb23d5cccceedd98f958a09e2ff32b6a16a80dd11b397738521f8cb37f1af6c748384</hash>
        <hash alg="SHA-384">c577425c7c1451c7eaf96203ef7cfdcb3373ac72eab3193df37e317dd54e28d45a047a332d2bff1c395d391f992510f0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.datanucleus.org/#/datanucleus-api-jdo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/datanucleus/datanucleus-api-jdo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar">
      <group>org.datanucleus</group>
      <name>datanucleus-core</name>
      <version>4.1.17</version>
      <description>DataNucleus Core provides the primary components of a heterogenous Java persistence solution. 
        It supports persistence API's being layered on top of the core functionality.</description>
      <hashes>
        <hash alg="MD5">56845c7af1890cde68d67c39f2d0e1d3</hash>
        <hash alg="SHA-1">c03898d49b506b60849fe1db39d04ab27fa15422</hash>
        <hash alg="SHA-256">adb64b5ec1837821e289fc82b04c13f6b5a2f1c68a24628bcec6a7c43b5f5bca</hash>
        <hash alg="SHA-512">b9b8bb43cdc876432793a85f50c0711661dc6aae563e18d4fd15be3495c3cec64f50d1c779ddd6cb46b6adbacdf8e2c51b322022146dcfcfdb1cfec45187ba93</hash>
        <hash alg="SHA-384">4341bf82943ead7348c5e6ff18c66f388418ecc52b857a6374a07a1f684deebd24538035af98086a525e7bedd09fe8c7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.datanucleus.org/#/datanucleus-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/datanucleus/datanucleus-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar">
      <group>org.datanucleus</group>
      <name>datanucleus-rdbms</name>
      <version>4.1.19</version>
      <description>Plugin for DataNucleus providing persistence to RDBMS datastores.</description>
      <hashes>
        <hash alg="MD5">7d1ad32dea1b7f5bf2d6c04e83a7bb17</hash>
        <hash alg="SHA-1">923fa411f49cca5dbb6221140b1ae89c90b3a3fd</hash>
        <hash alg="SHA-256">a189e10fb48dc0fa550721ee2206a1df8a2fd68d213149bf68793976b0ade687</hash>
        <hash alg="SHA-512">33288f43d5d3c6cc5d86079f784fcc6c12761480628e8f276f24ebed74f1844d2fb8175de11c29b4e8e5acc105e64f968f24a6df0ba0b5ea7f1d6c474c57a5e6</hash>
        <hash alg="SHA-384">33d88a62fae54d975579667a584c3784621e7489cf69e3d6f25432691c7ac48915ec8a7b10f91523d3230ecb23662694</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.datanucleus.org/#/datanucleus-rdbms</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/datanucleus/datanucleus-rdbms</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-pool/commons-pool@1.5.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-pool</group>
      <name>commons-pool</name>
      <version>1.5.4</version>
      <description>Commons Object Pooling Library</description>
      <hashes>
        <hash alg="MD5">80e9d1cbd70542f4f293793d109679a9</hash>
        <hash alg="SHA-1">75b6e20c596ed2945a259cea26d7fadd298398e6</hash>
        <hash alg="SHA-256">22095672ac3ad6503e42ec6d4cbc330cd1318040223f6c5d9605473b6d2aa0fd</hash>
        <hash alg="SHA-512">bb5a66d7da8f389660fb369c1a6e77296f39239cca1d69ca1b7c80e8e81c38a9d25debefb702a2eaac987e83885898ca0c95c6387d8440e548653d6bdae686a6</hash>
        <hash alg="SHA-384">6767d16144c5e86926f71f5ff24c4dd25f8d1aef47264502367cb7cfe63abaf9f914aba0de9fe998af4b510b85e76bf4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-pool/commons-pool@1.5.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/pool/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/pool/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-dbcp</group>
      <name>commons-dbcp</name>
      <version>1.4</version>
      <description>Commons Database Connection Pooling</description>
      <hashes>
        <hash alg="MD5">b004158fab904f37f5831860898b3cd9</hash>
        <hash alg="SHA-1">30be73c965cc990b153a100aaaaafcf239f82d39</hash>
        <hash alg="SHA-256">a6e2d83551d0e5b59aa942359f3010d35e79365e6552ad3dbaa6776e4851e4f6</hash>
        <hash alg="SHA-512">c0512b255c4a7242634b820c78c397296fc9388deceb4dec199775341598f0c87b21164425a97dfdeadfad9f3c80e1d4dab735d32b1362377820a4204b4e5a78</hash>
        <hash alg="SHA-384">c28b64ac524706ba21a94657e334c9b9ea83738db222d6761290b1e2ea3caea267b63f54dd0044d4cd77d9f13e6c42b1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/dbcp/</url></reference><reference type="build-system"><url>http://vmbuild.apache.org/continuum/</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/DBCP</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/dbcp/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>javax.jdo</group>
      <name>jdo-api</name>
      <version>3.0.1</version>
      <description>The Java Data Objects (JDO) API is a standard interface-based Java model abstraction of persistence, developed as Java Specification Request 243 under the auspices of the Java Community Process.</description>
      <hashes>
        <hash alg="MD5">978ae9726514457b8cfe8a3ba1c17ca5</hash>
        <hash alg="SHA-1">058e7a538e020b73871e232eeb064835fd98a492</hash>
        <hash alg="SHA-256">2a2e63d44a4d7fe267650d08431218648adee14f725df3896d09db3084d7a2f2</hash>
        <hash alg="SHA-512">0cda5bbbbe791e91d4b8a8ca2e27a18f661c9c27324107cda69c346f12181e520a29a52048fcd0f31db0a7d60409de4c509689f793d5c56061b81c1087dbf428</hash>
        <hash alg="SHA-384">6ea573adcac7e5d2b6f676d783578079538f10f0de59d2699ef3a4ada0baf70c0d77ee8fdd5dc88a1bc0956e7cf7ae67</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://db.apache.org/jdo</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/db-jdo-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/db/jdo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.transaction/jta@1.1?type=jar">
      <group>javax.transaction</group>
      <name>jta</name>
      <version>1.1</version>
      <description>The javax.transaction package. It is appropriate for inclusion in a classpath, and may be added to a Java 2 installation.</description>
      <hashes>
        <hash alg="MD5">82a10ce714f411b28f13850059de09ee</hash>
        <hash alg="SHA-1">2ca09f0b36ca7d71b762e14ea2ff09d5eac57558</hash>
        <hash alg="SHA-256">b8ec163b4a47bad16f9a0b7d03c3210c6b0a29216d768031073ac20817c0ba50</hash>
        <hash alg="SHA-512">fa9a5ab51f97e2cd63b5c1cb1775b63b1edc0197aedbcc0e8ab3116dfe27d47365865d24eefaf19b648554b60f1a1ece13e3192d157c319344a97ad551c628c4</hash>
        <hash alg="SHA-384">5119a3fdd809a087087c6491df078247ee50769529d793e5722b18270cf7399b5fc218763e2331c66ebd47fc0825ee79</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.transaction/jta@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/products/jta</url></reference><reference type="distribution"><url>http://java.sun.com/products/jta</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar">
      <group>org.datanucleus</group>
      <name>javax.jdo</name>
      <version>3.2.0-m3</version>
      <description>The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP.</description>
      <hashes>
        <hash alg="MD5">53e1eac14fa3a58cf0054f03373af8f4</hash>
        <hash alg="SHA-1">c911b22710a8f77541a966615033b4ab943fd6f3</hash>
        <hash alg="SHA-256">b0e338881376e4588f7564ae2dcc91737148e7c950873f6b0b899cbf0feef80b</hash>
        <hash alg="SHA-512">7e4959c1ed0e96af512a3bb058d25b1e284a76bae12063f3f179a24a6397acde2341a96d994bcb5f6c0e655fc4908e519c068a35bbb69e7010f09dac68d0047c</hash>
        <hash alg="SHA-384">fbe7e534591f03b5a538fc30dfea213e2a6e7bd86b8a45d778b312f859c745936bf45b0177a32d8b127506104f9c1c8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.datanucleus.org/#/javax.jdo</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/datanucleus/javax.jdo</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar">
      <publisher>ANTLR</publisher>
      <group>org.antlr</group>
      <name>antlr-runtime</name>
      <version>3.5.2</version>
      <description>A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1fbbae2cb72530207c20b797bdabd029</hash>
        <hash alg="SHA-1">cd9cd41361c155f3af0f653009dcecb08d8b4afd</hash>
        <hash alg="SHA-256">ce3fc8ecb10f39e9a3cddcbb2ce350d272d9cd3d0b1e18e6fe73c3b9389c8734</hash>
        <hash alg="SHA-512">71adb4a78a23e4106e9f09c92a7e0c1d975ad314a49f4a06472e22a2ec09c83fc02c6b684a20055b46ae69fcc119b155b7109ef56e170579c9a462c8839bae52</hash>
        <hash alg="SHA-384">e56770e380da87eda373e1f0fa7da0fd031b3e310e70b581d8a7eeffa80192f7cdccd073e45f277610ca1e161662db62</hash>
      </hashes>
      <licenses>
        <license>
          <name>BSD licence</name>
          <url>http://antlr.org/license.html</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.antlr.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/antlr/antlr3/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/?fromgroups#!forum/antlr-discussion</url></reference><reference type="vcs"><url>https://github.com/antlr/antlr3/tree/master/antlr-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar">
      <group>org.apache.thrift</group>
      <name>libthrift</name>
      <version>0.9.3</version>
      <description>Thrift is a software framework for scalable cross-language services development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">96af680a50acae601ce823b1da70b24a</hash>
        <hash alg="SHA-1">8625e8f9b6f49b881fa5fd143172c2833df1ce47</hash>
        <hash alg="SHA-256">bca5e8cdee1e0fbf563de7d41c452385e7bed69723fa28225a9ce718a8ee3419</hash>
        <hash alg="SHA-512">75658fa43a04a1cb8184af3fe832fc910186779b2cdfa243d98268a7fd8ea344dbe01139a415298a9abfa36b72740f4c4aa5726d0883434a6713bfbaafa4e62c</hash>
        <hash alg="SHA-384">45920ff27316bd88798d4f055d845333e6aa14b518f4f884f234203ff339618f8498afebda859fd6d02c9ed9363df2ee</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://thrift.apache.org</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=thrift.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-exec@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-exec</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e30a2f3569a0366c4ddec96b5e232984</hash>
        <hash alg="SHA-1">60ef332bf683e2143b67594266529128e3d25a2a</hash>
        <hash alg="SHA-256">df27eeeee394b36be507b328930be7a22d37efbf5d016ff96d10fa6a8c82076f</hash>
        <hash alg="SHA-512">46c03db07557c9bd6eee2fc771ed87d555c7c9e22f7661c4f62e90070c139d0f35bd7433913c2edd55f657169000ddc1e037d51dd849435335396c2d747b9ca9</hash>
        <hash alg="SHA-384">ec256945239efbf573706a711f3364bcd1a06169797af642ab7614edeb482e8df95368063d63bbdef0b3e80c1bb7b286</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-exec@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-exec</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-exec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/net.hydromatic/eigenbase-properties@1.1.5?type=jar">
      <publisher>Julian Hyde</publisher>
      <group>net.hydromatic</group>
      <name>eigenbase-properties</name>
      <version>1.1.5</version>
      <description>Type-safe access to Java system properties</description>
      <hashes>
        <hash alg="MD5">74250b1aa57ff13507bf28c09e5299eb</hash>
        <hash alg="SHA-1">a941956b3a4664d0cf728ece06ba25cc2110a3aa</hash>
        <hash alg="SHA-256">9394a752411d9729a083cf578ed9666ec9a7f59c18c9ca889127480a44c7285c</hash>
        <hash alg="SHA-512">f87d4df95755d6ca1e09d119aada0a9f4c690b69e84d13f90619b6507e4367c2db863e6dd6c24a3463f122154bb96b1379c530f16384b8804c58938ce0b2965b</hash>
        <hash alg="SHA-384">4177495d1178f1ca56559282ce6dcc59d5885a64a69bb7caf7b7ee6900c633633d3eb2f0152f837c757b084fc922d614</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/net.hydromatic/eigenbase-properties@1.1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/julianhyde/eigenbase-properties</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/julianhyde/eigenbase-properties/issues</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/incubator-calcite-dev</url></reference><reference type="vcs"><url>scm:git:git://github.com/julianhyde/eigenbase-properties.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-java</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">4d4c34ce5f3a15bd70e385e489880b3b</hash>
        <hash alg="SHA-1">ac46732d686e5991e611c769f8eafecdfe921acc</hash>
        <hash alg="SHA-256">4f35782b7e420e6549b4dd57ba35d08308c09db72fbf24f410448ef740e32edd</hash>
        <hash alg="SHA-512">3df0363514fa3d051c62eaa6cc33cc8f2487758ac49ff20e570987ffec7001646361c3a421bb2d1e8a84f95ab54ad897d092dd5728ed524280c24ebc87c175a9</hash>
        <hash alg="SHA-384">40dba1d5fbda7e5d04ec1cefad7aee9c16cae553f75a85fe5ef4c57a8a9f8752eb59422d53933c06f8bb735c560f85b6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <publisher>com.twitter</publisher>
      <group>com.twitter</group>
      <name>chill-java</name>
      <version>0.7.6</version>
      <description>chill-java</description>
      <hashes>
        <hash alg="MD5">886eb8ef6db3880433f4a8e10ef37300</hash>
        <hash alg="SHA-1">a74b8d019d6941d82ff86d1612e382f4a0ae8259</hash>
        <hash alg="SHA-256">f7c41a2257be11e6c9bca97095c8f4b0299626941a3508469f90622eb8f8368e</hash>
        <hash alg="SHA-512">dc9973909b87cfb85ee45c90662612dd2bc137b7510172221eb47020f76b23eb3ea76c6b4fba4cee5d81e910f87aba71359136d33ae0f6424e3ce7123bf77dbf</hash>
        <hash alg="SHA-384">41e7faed7c2c22987868fba7cd6dac0d59d174d82d841ba4e5aa8675cc9265bf9d9df021553a781cfa24c4c9c7a35c5c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.twitter/chill-java@0.7.6?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/twitter/chill</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-runtime@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-runtime</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e634e06ba7c14eca27d3d855c5f0c0b6</hash>
        <hash alg="SHA-1">372e631de9b1908f5d488c43e7d9fc281f1fe89a</hash>
        <hash alg="SHA-256">9dc92c2551e5e06a6246b4493fd0065c6c7140247184da694e75a410459ecb15</hash>
        <hash alg="SHA-512">0c70d3392d84d22962b57ab546d34ed4aec480aac62a320447a14e69f1ffedbc9bb5b3f9a897137861192f2f4183abc16c571b979b887de44819ddb8b11b22e8</hash>
        <hash alg="SHA-384">711311e1d288b809d9b3e9d0d5465a90213bf5a2d2a8161582a9b4b418cddde8b7f8d0a260fb1c93c1f6f236971af2ed</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-runtime@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-runtime</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-core@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-core</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">dd0ae96d83b402ab2bfefadb2839325b</hash>
        <hash alg="SHA-1">6646ed46c85a95b781ba06d40fb3bc8776a4c572</hash>
        <hash alg="SHA-256">58ddc10dda3be0702e69dc0ab86a6dac15948d3e3cf3d5a47c26f60b8df17d24</hash>
        <hash alg="SHA-512">12cf425ee0d76808fa92b50a7b7cb8cc142e77a061718453f8edb98d442ccbecdcc3e867ec6ee7cd46ea36aec46809c6c83c16b4d93fd0be98b45c72158559a7</hash>
        <hash alg="SHA-384">1b6b626cbef8bc214189e2ad90edf8ed198a5d6a98ef00b74dbc78e35c04526d950500d4009ad555685d10a40f63705b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-core@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-rpc-akka-loader</name>
      <version>1.18.0</version>
      <description>This module contains the mechanism for loading flink-rpc-akka through a separate classloader.</description>
      <hashes>
        <hash alg="MD5">19aa6d3b4a0b45cd9f2720722b49d469</hash>
        <hash alg="SHA-1">088b9d2e67173bfb8647ca510199cbf874c13918</hash>
        <hash alg="SHA-256">86afa1bfc8f67607ed265e3a37b39c1c04b5c31a705419ce84c339618253362c</hash>
        <hash alg="SHA-512">0469fb5da6dbb4107fb5f9b44c6dc232d615a6b9deac3cd8115af3e379511347a9512f74fef8e547ba880223f85f6dcddd7986da20a1e916f07096908605946b</hash>
        <hash alg="SHA-384">4aaba841cf440f5dfa6f88c0776b708ffc22c47196b5350c73d82a42794346ee239c932cf6676747e26493ed08c543a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-rpc/flink-rpc-akka-loader</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-rpc/flink-rpc-akka-loader</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.18.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-queryable-state-client-java</name>
      <version>1.18.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">65db296caab963ba6133ad746e9a07f9</hash>
        <hash alg="SHA-1">6b06ebc8fc50df4f9c31d7bd5d95bd92d01f2301</hash>
        <hash alg="SHA-256">dd0a653baf7599c65ff58d31d29f83d44cb0212e9612513983f875b6ba2053d9</hash>
        <hash alg="SHA-512">1855eb6e46c3f9ab3ea3e902dc443c50d4970228b95612e1f45d801101e714aa7bf2b4e6063f70767e029c4578582abd98949d874b7b50255d3be021b2f5c162</hash>
        <hash alg="SHA-384">8806d0704963ca8ff831b035ab329040ceea11eb2c183af7502d941091ebde8f4a4423d64b8a1af61630927dea22309a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.18.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://flink.apache.org/flink-queryable-state/flink-queryable-state-client-java</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink/flink-queryable-state/flink-queryable-state-client-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-netty</name>
      <version>4.1.91.Final-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">f3e6fd4f43c7a8647604df2a9b712dab</hash>
        <hash alg="SHA-1">81b6e0b28e0309946cb6d03792199fabfc0d9f09</hash>
        <hash alg="SHA-256">c4d370f1b2bda0b55686fdec840c8a047950b9448f26cd01f1594a3bf0fde75b</hash>
        <hash alg="SHA-512">7f2010cda152f6baecc2a0c9d79f8bb2b7eee8a88f80dd8ed5bf2f723885cf3f9f60e373db77bd591225f3037f33f4a7c08d05e807356899a6af818225b6aa4c</hash>
        <hash alg="SHA-384">d1d99aee334155d4c2dfddcc63dfd1b8ce9d7e4a67bba29be0b6b5a54a717ea95decb0fa300ef9e05b589d273952e22e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-netty</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-netty</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-zookeeper-3</name>
      <version>3.7.1-17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">a2737bcfc729e776a7d4dd3a13067999</hash>
        <hash alg="SHA-1">6206880a4f471a7f560fa824d1ad8b0596d7e59c</hash>
        <hash alg="SHA-256">e91cb263c67631a27e7a6cee147b75a9a638f3c52fcd053106fc4584feb6e585</hash>
        <hash alg="SHA-512">62cba94bbd87bd678f6cbbee07168dba3f2d1bac21371c4b5c1d035ef2596711bc46b1a273f4b89fe8110b2b855dc425614ca42fc866340a9edb89226f093c6a</hash>
        <hash alg="SHA-384">ee4a3d27059c35a13559599d5b00267b9db9514ea4c04b2b3432ade93d71fe4d8510fe2c3416fac2dada3b218019e454</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-zookeeper-parent/flink-shaded-zookeeper-3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar">
      <publisher>Shigeru Chiba, www.javassist.org</publisher>
      <group>org.javassist</group>
      <name>javassist</name>
      <version>3.24.0-GA</version>
      <description>Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.</description>
      <hashes>
        <hash alg="MD5">23fd22d0d089ddfac567a39ce0cb1a91</hash>
        <hash alg="SHA-1">d7466fc2e3af7c023e95c510f06448ad29b225b3</hash>
        <hash alg="SHA-256">aba81efa678b621203fb89aeff81d6f126f7a9dd709401e5609c42976684ae23</hash>
        <hash alg="SHA-512">e57dad74a3edef837ece841d06e4a7c96ffecab8fbcba56fe5f7eccd662f0c0d757880a6073793a8c75ad7a0a1d146346b75cdbfe4fd8a271048a54446e5d1a2</hash>
        <hash alg="SHA-384">4867afdb7522b3dbfa10a51264ac6c15a2a8083d16c8dbef318275d24687768f35130b1c17d8407ca8ecf855abd83dff</hash>
      </hashes>
      <licenses>
        <license>
          <id>MPL-1.1</id>
        </license>
        <license>
          <id>LGPL-2.1-only</id>
        </license>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.javassist.org/</url></reference><reference type="distribution"><url>https://repository.jboss.org/nexus/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://jira.jboss.org/jira/browse/JASSIST/</url></reference><reference type="vcs"><url>scm:git:git@github.com:jboss-javassist/javassist.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar">
      <group>org.lz4</group>
      <name>lz4-java</name>
      <version>1.8.0</version>
      <description>Java ports and bindings of the LZ4 compression algorithm and the xxHash hashing algorithm</description>
      <hashes>
        <hash alg="MD5">936a927700aa8fc3b75d21d7571171f6</hash>
        <hash alg="SHA-1">4b986a99445e49ea5fbf5d149c4b63f6ed6c6780</hash>
        <hash alg="SHA-256">d74a3334fb35195009b338a951f918203d6bbca3d1d359033dc33edd1cadc9ef</hash>
        <hash alg="SHA-512">98d59086a6021ca571d9c1d64b715e43044c730e1ac563f514c40cf44302615d30378b6d5cc69990446522de6260dc8e7b303e3990a3139dc326d058dfb6dbd9</hash>
        <hash alg="SHA-384">8e3f2acdbb41a00c4d9cc5f328e63fb626ac7c6c84e1bf9502e2fcc76a591b2b819b2d27b29925ff986b95c297b30e2c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.lz4/lz4-java@1.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/lz4/lz4-java</url></reference><reference type="vcs"><url>git://github.com/lz4/lz4-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-service-rpc@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-service-rpc</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">be25bb5f9c00303e97f4d5b4ee384859</hash>
        <hash alg="SHA-1">95c4996e5c131ce257d3573b91c0e6bcc8eec051</hash>
        <hash alg="SHA-256">ec06c8bd522c5e01d1c732cfef1826f4c4372d4d4a12f0b20232ad4fe4e6352d</hash>
        <hash alg="SHA-512">4be2699437e412eab5a2984549454cff360d7ac0dc046dc675dde6d87c12c267e5a192332874ff36f732afd5a81ebb55291122a5ab69bfab28b1f622a3f5e919</hash>
        <hash alg="SHA-384">2e7a0afdd225ea0a714beceeb73d71e82e17eb52d15591f79374c6aea757e694939d3a5140424725778254f0dddc9511</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-service-rpc@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-service-rpc</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-service-rpc</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.tdunning/json@1.8?type=jar">
      <group>com.tdunning</group>
      <name>json</name>
      <version>1.8</version>
      <description>A clean-room Apache-licensed implementation of simple JSON processing</description>
      <hashes>
        <hash alg="MD5">a89b66cf37063d0ee4f401193eb0ca2d</hash>
        <hash alg="SHA-1">fa57d5adf557b226738cd42e6c093dd0a76c5fd4</hash>
        <hash alg="SHA-256">e0b487de3ccd3d1c288976677835e49880799c35507059039a18fa4ae1e7c59a</hash>
        <hash alg="SHA-512">558e9780bcea2d0e077cc4c8d07eccd5d821361e0d9298bdfc30fc4b4472c5e5bec2aebae5ec677f9fa2047f3f356c6a41588d73eabd7ff45cd6bb37156f58fc</hash>
        <hash alg="SHA-384">b7b0cfb7092ff5d32fb84a981c5f8a4b41e271057c3558dfa49cec23c91645311cae46758f31fb74d0d7a98d78d128b8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.tdunning/json@1.8?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/tdunning/open-json</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/tdunning/open-json</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.orc/orc-core@1.3.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.orc</group>
      <name>orc-core</name>
      <version>1.3.4</version>
      <description>The core reader and writer for ORC files. Uses the vectorized column batch
    for the in memory representation.</description>
      <hashes>
        <hash alg="MD5">e97add190d107dcff3471b39d903f20d</hash>
        <hash alg="SHA-1">dd4c7eb3d00f03c976fd91d9e802536399f7d8ea</hash>
        <hash alg="SHA-256">853b0e0b511228757b0c0cd00ebb3470e06b85cd79ccd35f2c81c6e783e456d9</hash>
        <hash alg="SHA-512">a2ab68da20d90c41b8e130d6d519158f20ec4ab220e58b8d266a69c7b2ee66191c68f36e7762ee3333313baa0a998796bf0a6325069f29adc5e6f0f40533b9ae</hash>
        <hash alg="SHA-384">fb78bb4c78c905c2d3e83d8c9f2119cb3af6549c3822758c6c0fb6eb1dd69d10da78cf8522163bdba516f85a6c77b73d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.orc/orc-core@1.3.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://orc.apache.org/orc-core</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/orc-user/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18/orc/orc-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.eclipse.jetty.aggregate</group>
      <name>jetty-all</name>
      <version>7.6.0.v20120127</version>
      <description>Administrative parent pom for Jetty modules</description>
      <hashes>
        <hash alg="MD5">f66b786ade84a53c3be0b406c91ca184</hash>
        <hash alg="SHA-1">47bb68e3837e5c6422138dd1e0d4d75c60dce87a</hash>
        <hash alg="SHA-256">3ea076739a83111fadb6cf6491f2173acec72380a9024bc1e3ec6adf04472c99</hash>
        <hash alg="SHA-512">425517cb1318c147c1ad5358cc1585c37108c6b8723977f05682210a4d20f98ea85872bd93666d9c999cf3865644a0e95e3b981825472384b349d89cc986a2da</hash>
        <hash alg="SHA-384">b6b364f9dea032e7de29f204bcca6c2592ff6283594b2094e9df5adcebcd7084b85a116b9298df5bd34e5d10afb10769</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/jetty/jetty-aggregate-project/jetty-all</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Jetty</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/jetty/org.eclipse.jetty.project.git/tree/jetty-aggregate-project/jetty-all</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jta_1.1_spec</name>
      <version>1.1.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <hashes>
        <hash alg="MD5">4aa8d50456bcec0bf6f032ceb182ad64</hash>
        <hash alg="SHA-1">aabab3165b8ea936b9360abbf448459c0d04a5a4</hash>
        <hash alg="SHA-256">3a0c3c1bbc2efe8383969574922791959670ef547d6c897496915617025c3023</hash>
        <hash alg="SHA-512">ee10f942eda7199a522aa0838ad69c9b58117580bd60185b4c01bfc43913fd485154b1b3d437b0a361d1bed8a18974c84f5bdf1cb27ed9bc18fe33fba4d8f1f8</hash>
        <hash alg="SHA-384">56f9ad1bcf3f0c3d9ed9c6c372274a47e046ad88335c842f2959c95646eebc14d0ca68562d86a53b8ed6fd56613297bc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/specs/geronimo-jta_1.1_spec</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-jta_1.1_spec-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.mail/mail@1.4.1?type=jar">
      <group>javax.mail</group>
      <name>mail</name>
      <version>1.4.1</version>
      <description>The JavaMail API provides a platform-independent and protocol-independent framework to build mail and messaging applications.</description>
      <hashes>
        <hash alg="MD5">584010e5e62f4fa4b8ccfdf35a2c3a8a</hash>
        <hash alg="SHA-1">8b7bc69010655425dabf091b51d1e90b4de36715</hash>
        <hash alg="SHA-256">294f0b3fbc55e0fcf7b20370a57846f5d7edf9f5cfa7dfaea01eb1aad178eac3</hash>
        <hash alg="SHA-512">5065f0756ec322e222a068fa3791076a742a5ee69091e7692a46c27ed88cd4ea27a78e9ae7795d263e5e2b84b4d14ab78ecf0705a81c907d7967c06a15d42081</hash>
        <hash alg="SHA-384">6c149428023f84ef4381cbd6df3463bb48bfad3ba8b36af9d52bc64abac53a5d089caea5c06ffc45ecdb5d8a045ca718</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.mail/mail@1.4.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://glassfish.dev.java.net/javaee5/mail/</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.mail/jars/mail-1.4.jar</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.activation/activation@1.1?type=jar">
      <group>javax.activation</group>
      <name>activation</name>
      <version>1.1</version>
      <description>JavaBeans Activation Framework (JAF) is a standard extension to the Java platform that lets you take advantage of standard services to: determine the type of an arbitrary piece of data; encapsulate access to it; discover the operations available on it; and instantiate the appropriate bean to perform the operation(s).</description>
      <hashes>
        <hash alg="MD5">8ae38e87cd4f86059c0294a8fe3e0b18</hash>
        <hash alg="SHA-1">e6cb541461c2834bdea3eb920f1884d1eb508b50</hash>
        <hash alg="SHA-256">2881c79c9d6ef01c58e62beea13e9d1ac8b8baa16f2fc198ad6e6776defdcdd3</hash>
        <hash alg="SHA-512">c0ff5bf3ace7acc1b31fcc109cee48d9eb8f025ae15a31dc91eca760933bdb97c93f05d61e95af1e317859d72e5f179f897f5bf3df0e3810f4212d43bacee4bd</hash>
        <hash alg="SHA-384">c4ee54d80a2e67e819700051d6cfa01a17631c89f942b8690afb601e491f02d7497fe57bd5c70edfb9b444ae8222b846</hash>
      </hashes>
      <licenses>
        <license>
          <id>CDDL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/javax.activation/activation@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://java.sun.com/products/javabeans/jaf/index.jsp</url></reference><reference type="distribution"><url>https://maven-repository.dev.java.net/nonav/repository/javax.activation/jars/activation-1.1.jar</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-jaspic_1.0_spec@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-jaspic_1.0_spec</name>
      <version>1.0</version>
      <description>Java Authentication Service Provider Interface for Containers (JSR-196) api</description>
      <hashes>
        <hash alg="MD5">ca9e6d47bf1ba5830c545500500df446</hash>
        <hash alg="SHA-1">44b95be7dae1147716dce5336419eafade880756</hash>
        <hash alg="SHA-256">3e3728a64ed0df8b9cfc3f9753815fd245cf8d20b73c63c337dfa3484233ef6c</hash>
        <hash alg="SHA-512">79a6c3ef6aa849977f24bb2054427b71fef0de44d45fd1a22938fcf320e21298c4acf9cc0fce2e730abe01086fc76faad5ea550f239cf0a16fe3ce2ab3e0c9f3</hash>
        <hash alg="SHA-384">406d968c77add5ac10a3156dee4dd03ba0b89e97fb1a315945ac2ff178b5dc9587254807e9f83503493f56f0594296f2</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-jaspic_1.0_spec@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/maven/specs/geronimo-jaspic_1.0_spec/1.0</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>http://svn.apache.org/viewcvs.cgi/geronimo/specs/tags/geronimo-jaspic_1.0_spec-1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.0_spec@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.geronimo.specs</group>
      <name>geronimo-annotation_1.0_spec</name>
      <version>1.1.1</version>
      <description>Provides open-source implementations of Sun specifications.</description>
      <hashes>
        <hash alg="MD5">4bcea8aa3540b81b66de5e9893a2b5d7</hash>
        <hash alg="SHA-1">47caa799389f69d297b86bf90523d431599c3796</hash>
        <hash alg="SHA-256">41a3705fadf44c27cc4e1045b8c4775a10b23d7fbe2e8285ad2e08d809bd6d7e</hash>
        <hash alg="SHA-512">df794a90cdad9a24231816caa00694617c98aba6e189be4323f70f6c71a746d18dd96f571498ae2d0b0cee7a7045ed035d40e12c6aa98f3f816bded7014f07fd</hash>
        <hash alg="SHA-384">738e4b793143228e7bdc8234c7fb88f2eb57152c46f8de105bc244ed8a5be0327399bee7c5fe7e98200723b9116d6b8a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.0_spec@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://geronimo.apache.org/specs/geronimo-annotation_1.0_spec</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/GERONIMO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/geronimo-user</url></reference><reference type="vcs"><url>scm:svn:https://svn.apache.org/repos/asf/geronimo/specs/tags/geronimo-annotation_1.0_spec-1.1.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/asm/asm-commons@3.1?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>asm</group>
      <name>asm-commons</name>
      <version>3.1</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">426f9de8217104859fa43b060760e1b3</hash>
        <hash alg="SHA-1">1b607fbfe7889c6fdff1b7c16439ade0a60869ac</hash>
        <hash alg="SHA-256">173b93d70a6190884fe93d7a0e811e3b9fa6c01039fc2c7ff28bc3b23177c761</hash>
        <hash alg="SHA-512">d288626a06c664420ca6864a60da0edfdf4b8f9759417408b91bb34bf9c35f8773c48fcebf9e39899804107ddba86d18ae7b3cd8f2deb6925c4fdcdb3ea4b3b9</hash>
        <hash alg="SHA-384">ad3b8799e20b6f1e23034678d2ddf5294f855b0c94a4733f796499a420994ba76794ec4c18a4edcbc00325362361e2b9</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/asm/asm-commons@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm-commons/</url></reference><reference type="distribution"><url>http://mojo.codehaus.org/my-project</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.ow2.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm-commons/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/asm/asm-tree@3.1?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>asm</group>
      <name>asm-tree</name>
      <version>3.1</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">47d54dcdea050b9e9d0acedba704e39a</hash>
        <hash alg="SHA-1">c9a5d4334ddf194ea492f22107d45119a5c5322f</hash>
        <hash alg="SHA-256">bcdc1b0c9b807c565abce5148b4f0c01cc064ccd8a3284cf934ce38ce79e7f3e</hash>
        <hash alg="SHA-512">dd1bbf5487f11de76ff8fd94b7116182afc1e068065567c45bdb93233e401944a810b7619e5a28b0a94bfa3acb722f60aeb7ec611fcf796feae2a04720b354ac</hash>
        <hash alg="SHA-384">d49c565d2cca472a5a25ff13ecf6957b8c5da07bd4fe88e799e1db4cf0744d6d7103a32ec9bb0e7f9eb1447121ef5122</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/asm/asm-tree@3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm-tree/</url></reference><reference type="distribution"><url>http://mojo.codehaus.org/my-project</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.ow2.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm-tree/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/tomcat/jasper-compiler@5.5.23?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>tomcat</group>
      <name>jasper-compiler</name>
      <version>5.5.23</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">118a663a65385184b50cf3795f9c5318</hash>
        <hash alg="SHA-1">6d35bd7fb8c4fbc1f5401fb3678aa976d2e4c241</hash>
        <hash alg="SHA-256">e493e53f7231f6c715341c661b95157aef3fb44bc44f82b4b1ec6d9380dc6c93</hash>
        <hash alg="SHA-512">4486697e5a59569c7f9b5778cbd2c33ee170fb9ccf7a6be2a6d8c557aaf8e20ca887abc4de2fd90787192baaa2b1ff9c610ed91980cb3821c3d7067cb4949665</hash>
        <hash alg="SHA-384">02c4231a8fdf5406b088ab2ca62cb22dc3842b4e76a843e58c991a90f858b19cd4e25ca37b59829b0ac4a2e65cb109fb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/tomcat/jasper-compiler@5.5.23?type=jar</purl>
      <externalReferences><reference type="website"><url>http://tomcat.apache.org/jasper-compiler</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-4/tomcat-parent/jasper-compiler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/javax.servlet/jsp-api@2.0?type=jar">
      <group>javax.servlet</group>
      <name>jsp-api</name>
      <version>2.0</version>
      <hashes>
        <hash alg="MD5">8d4a9cf34eb4e374b41b6b98960028d0</hash>
        <hash alg="SHA-1">e6def06602b51b1d9be51f6c3fcdf163ecd01644</hash>
        <hash alg="SHA-256">b20a1ec41d6f97ec5e50e5228682928b87e86dd038ce1b216f3e645e3be6e13e</hash>
        <hash alg="SHA-512">4a67cacb7a878aaa8a6e089d8b2db818665cb5c26af868974003fd2115ccc50980a5f1148995b6557ed5fa8a7a2b562a17bddbea43dd100ef800904d3cd3efa7</hash>
        <hash alg="SHA-384">31f9e247be3cb9d76ab562ed443b7bab2e8bc9f9464b3d34962157feb7852b4ac4eae5444e8eceef984e00a4dc066ca2</hash>
      </hashes>
      <licenses/>
      <purl>pkg:maven/javax.servlet/jsp-api@2.0?type=jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/ant/ant@1.6.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>ant</group>
      <name>ant</name>
      <version>1.6.5</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">c5c499f1eef9367c657e89bb881c69aa</hash>
        <hash alg="SHA-1">7d18faf23df1a5c3a43613952e0e8a182664564b</hash>
        <hash alg="SHA-256">f06a601c718a7c9262d74b7ec3baad14c82584e89235089b4f821d6a44d9e1e4</hash>
        <hash alg="SHA-512">e18edf49426ccd0da07136d4aac101905afaa531b5e4943d13f9dc227142471fe06ca56bd8c0c44a3b530b4862eb725e6690537fe378aded361d11f1f926ce5e</hash>
        <hash alg="SHA-384">2a88e9a7e5b37d743cd58e4f2c9e3e8c7b41f0af775059fe491aa075ef7ed451f749e4ecf5f246835218df8db832cb1d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/ant/ant@1.6.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/ant/</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-4/ant</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/tomcat/jasper-runtime@5.5.23?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>tomcat</group>
      <name>jasper-runtime</name>
      <version>5.5.23</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">00e6f385adab8441f27e75d6038ea2ae</hash>
        <hash alg="SHA-1">96ca5528a93ab47b001476b74320c644beb89dde</hash>
        <hash alg="SHA-256">3564c35fa738e2e683af8b7ae28c4345a32e2bd97ff88498f17423f329975890</hash>
        <hash alg="SHA-512">b7b435a797a3e23ecbc063db654f43e410c1b7ea594e001fa0ff91d3e6c2353be3a0135c407b73553ff2af2a4ad793e58a9e9849d4073797398b438b12323ec2</hash>
        <hash alg="SHA-384">51caf327a9ca50ed2d55be24c8815695733cf3960c4a7a1719ab9c1f1f0e565a1164dfd262eabb8a828c51b88960359b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/tomcat/jasper-runtime@5.5.23?type=jar</purl>
      <externalReferences><reference type="website"><url>http://tomcat.apache.org/jasper-runtime</url></reference><reference type="distribution"><url>scp://people.apache.org/www/people.apache.org/repo/m2-ibiblio-rsync-repository</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-4/tomcat-parent/jasper-runtime</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-el/commons-el@1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-el</group>
      <name>commons-el</name>
      <version>1.0</version>
      <description>JSP 2.0 Expression Language Interpreter Implementation</description>
      <hashes>
        <hash alg="MD5">7c98594df7c126f33688fa6d93169639</hash>
        <hash alg="SHA-1">1df2c042b3f2de0124750241ac6c886dbfa2cc2c</hash>
        <hash alg="SHA-256">0d67550ec0022b653453c759f063a643c2fe64bc48faa8b25f95a220e2a282e2</hash>
        <hash alg="SHA-512">006bb34a74baf740a9ab2b1218dbdbacdebf7ef8f9d756b69b3936257bd2d2977b0d7f8920377f04805298965246cd813bea6344557f76d77e9c0dc0fff91a5e</hash>
        <hash alg="SHA-384">9f2dd90e725a465a266fab7d6f7b4a68df0b4ad846ae379766939d14be4f8016381b445975ca2c4717e0fd2b4ba67516</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-el/commons-el@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://jakarta.apache.org/commons/el/</url></reference><reference type="distribution"><url>file:///www/jakarta.apache.org/builds/jakarta-commons/el/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/eyebrowse/SummarizeList?listName=commons-dev@jakarta.apache.org</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/jakarta/commons/proper/el/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar">
      <group>org.apache.thrift</group>
      <name>libfb303</name>
      <version>0.9.3</version>
      <description>Thrift is a software framework for scalable cross-language services development.</description>
      <hashes>
        <hash alg="MD5">5e1c646346ecf2750a1b8b6cb2aa1c4f</hash>
        <hash alg="SHA-1">5d1abb695642e88558f4e7e0d32aa1925a1fd0b7</hash>
        <hash alg="SHA-256">23fc397a42181b17bb7d0fada2213735ed8db38cfbf038d12b9c00ea7419e11b</hash>
        <hash alg="SHA-512">e30ddf2b4651d08bfcf980f98263fa95cc0a37fb722a2972811c9f9437dbfba4ab20d81e142a991501a3c5409e2651c43b936321f85f1e5e9ab5ad55ca3d6a82</hash>
        <hash alg="SHA-384">f8650670a386fb6234e7ec70a8cbc12d257506359997e1b14de6833d94364ce003f7113606bfa88840586e9153b8e524</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://thrift.apache.org</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=thrift.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.curator</group>
      <name>curator-framework</name>
      <version>2.7.1</version>
      <description>High-level API that greatly simplifies using ZooKeeper.</description>
      <hashes>
        <hash alg="MD5">35bff30d2a79a8b0731269604b1327ee</hash>
        <hash alg="SHA-1">8c7b1eeb78e43bb91ea737111ba3dec0512be876</hash>
        <hash alg="SHA-256">a65e3f515b022d84d86c553c99216e384bc82d1de51b5a32b10f33314ad81ceb</hash>
        <hash alg="SHA-512">c272e0c5340bbbbf3635cdc75b863eb369dfa23c799d2027edfd0601f46fa415d31c4c4897188e3e363eca2fde5b66bf22be191902b3c186296ef4973f1eb36b</hash>
        <hash alg="SHA-384">62ace5a2949d5add675482730b8bf3bceb8cdcbbc70c697c1d055eea2b3aebccea21bcc46ec0f2431db37b1c66567b01</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://curator.apache.org/curator-framework</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Curator/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CURATOR</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/curator-user/</url></reference><reference type="vcs"><url>https://github.com/apache/curator.git/curator-framework</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jline/jline@2.12?type=jar">
      <group>jline</group>
      <name>jline</name>
      <version>2.12</version>
      <description>Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/</description>
      <hashes>
        <hash alg="MD5">391c352dda90e0e16aa129286d72f2c7</hash>
        <hash alg="SHA-1">ce9062c6a125e0f9ad766032573c041ae8ecc986</hash>
        <hash alg="SHA-256">d34b45c8ca4359c65ae61e406339022e4731c739bc3448ce3999a60440baaa72</hash>
        <hash alg="SHA-512">ba11bdcb8e1ee39d16a705081e6b74c0a3a1fa07e1b435ae0571f61842ee1276f4946c63088a6bd9407cd5394f0a47f6ac695b488870a70557b7bdcd8691a158</hash>
        <hash alg="SHA-384">edc17388ff37c1f3f2a10faa8c8131e383aefdd44964a104dd6181f1d90238692bb43f16072a63af26c74a3a97920d8e</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/jline/jline@2.12?type=jar</purl>
      <externalReferences><reference type="website"><url>http://nexus.sonatype.org/oss-repository-hosting.html/jline</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/jline/jline2/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/group/jline-users</url></reference><reference type="vcs"><url>http://github.com/jline/jline2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-common</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">991e918a220b24fc2134adb99f38195b</hash>
        <hash alg="SHA-1">f33a3bce9955c959afe9f441ad1eb7f2885c2ddb</hash>
        <hash alg="SHA-256">ed07a7cb6dd1e2f2f08a4f2e2df5b82381cceac510516597899d163dc69c10e1</hash>
        <hash alg="SHA-512">2d9074438614d96aaddd1a00b1c2a07e105585ad8004a57fa82f6a60b2df1621ce1c318101836e99e50cde62ae4fd47af8b2626856985f2a7beb058ee5109237</hash>
        <hash alg="SHA-384">713d8d5a63a1d63d971700b020a6ad6ba49a3d21ea510a8f3bd1ee3a511407f53e903d506c669008d981d84842ae16d9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-storage-api@2.4.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-storage-api</name>
      <version>2.4.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">10cc0b05f8548953243b7c46ae852c88</hash>
        <hash alg="SHA-1">a66a306bb971a25d135ea25ab2ea687af123c619</hash>
        <hash alg="SHA-256">7904da3500fc5d7b04c5af4ecfa17d5f64ce959b5c69d7e9139d09e3f2b57fa2</hash>
        <hash alg="SHA-512">b79241d1533fd51583ce5342e369f851cdc661b2966ffb09cb44d2c79b7acc495d889f5b868a730dde30c29ea089ebe377abcad1f205837557bfef74b124b009</hash>
        <hash alg="SHA-384">ddfe03341c506fec577369dd2ee7fe27abfc0c8c09ec03145ea86ff3a1ae33b2b82c3d34d546ff4f3b41fe66e607040c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-storage-api@2.4.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hive-storage-api/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/viewvc/maven/pom/tags/apache-18/hive-storage-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.0.0.v201112011016?type=jar">
      <publisher>Mort Bay Consulting</publisher>
      <group>org.eclipse.jetty.orbit</group>
      <name>javax.servlet</name>
      <version>3.0.0.v201112011016</version>
      <description>This artifact originates from the Orbit Project at Eclipse, 
    it is an osgi bundle and is signed as well.</description>
      <hashes>
        <hash alg="MD5">f8e61ace5135ef2a775a0b80ac7012e9</hash>
        <hash alg="SHA-1">0aaaa85845fb5c59da00193f06b8e5278d8bf3f8</hash>
        <hash alg="SHA-256">a2cc192a076d9effd10becee8aacbe157f0fe2010fd4322e58aaeff198e56dbe</hash>
        <hash alg="SHA-512">38b2edc2923da1afad31caf94a48b528c8a09a025c6a50a3852de9645536784bcba164f911250060f5e62bf90795a60c5137c0a7a4f8453d034e517dd7bcb3e3</hash>
        <hash alg="SHA-384">190a4a27fc8883164d5d3dbdb63140e3dc7bd21fe8cb73efd264b1eaa10d9750473bd6bcc1693f1b9ba4c52d13b8b064</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.0.0.v201112011016?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/jetty/jetty-orbit/javax.servlet</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/enter_bug.cgi?product=Jetty</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/jetty/org.eclipse.jetty.orbit.git/tree/jetty-orbit/javax.servlet</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/joda-time/joda-time@2.5?type=jar">
      <publisher>Joda.org</publisher>
      <group>joda-time</group>
      <name>joda-time</name>
      <version>2.5</version>
      <description>Date and time library to replace JDK date handling</description>
      <hashes>
        <hash alg="MD5">c18e34f88c183cb21bbb693b3505e7d2</hash>
        <hash alg="SHA-1">c73038a3688525aad5cf33409df483178290cd64</hash>
        <hash alg="SHA-256">f75a29b82613411c9be37d419658e044179f1bf6b91d8786a4a49407531425b6</hash>
        <hash alg="SHA-512">77ebe5b92875140002fda1e4d7b05893fe603b019aa1257c44cf09c920fee8998b538bc0d8fb0d76171d65b8b3d752e95d1667db2d0cf21e2250fa9e09b822f6</hash>
        <hash alg="SHA-384">e5d4f8119f1feeb3dd15d2a1b3f02646629ecad98db64f084ac76a2143d324f489ad0558f2d6530490bbc9e9e172d4e3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/joda-time/joda-time@2.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.joda.org/joda-time/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/content/repositories/joda-releases</url></reference><reference type="issue-tracker"><url>https://github.com/JodaOrg/joda-time/issues</url></reference><reference type="mailing-list"><url>http://sourceforge.net/mailarchive/forum.php?forum_name=joda-interest</url></reference><reference type="vcs"><url>https://github.com/JodaOrg/joda-time</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-web@2.6.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-web</name>
      <version>2.6.2</version>
      <description>The Apache Log4j support for web servlet containers</description>
      <hashes>
        <hash alg="MD5">774e4636e1bf7491ac1ab6488bb26856</hash>
        <hash alg="SHA-1">99fc279cdf020a4b75a4f94d996646b86da4fd7b</hash>
        <hash alg="SHA-256">d6308fd1f8e2fa293e3085de6978484c2ef54d6447dde05b90fdd289a3d59872</hash>
        <hash alg="SHA-512">2393e361d74bc498d5a89e53770443b5d7cca4b7a0434fc481c4bdc1ae9a2827b6138e59602c3a2d6942c3b86b120f8d31c7281518d47d4d152827a3ca7f9a49</hash>
        <hash alg="SHA-384">c7414e3c3675df9db6e401805ea348af3cb865a264397229df7fff979668efb27423836393839b9ad29cf478026da052</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-web@2.6.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://logging.apache.org/log4j/2.x/log4j-web/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Log4j%202.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=logging-log4j2.git;a=summary/log4j-web</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant@1.9.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant</name>
      <version>1.9.1</version>
      <description>master POM</description>
      <hashes>
        <hash alg="MD5">3dbb7cede3dc3f8745286a6322b14b38</hash>
        <hash alg="SHA-1">35900c96dbebc85dcfbd71f4661059ebcf93c077</hash>
        <hash alg="SHA-256">1b91669d67b31fd0f45a7e714064595d3de3a5d2ae11757376246fe2d00910d9</hash>
        <hash alg="SHA-512">3a65a53018ef372c73cd0bba56e04c87ba41c6833a0944e94db8520c9c27062da44d09928e9f67471eb41df2827ca3729da7889fb8f3dbe3f2ca13c11646c310</hash>
        <hash alg="SHA-384">de8692a93f7c153bbcdfa38fe718f9d53e0040c143eabed48b3d97126fbae9fa50369dc3055f9e305553471d36a7f25e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant@1.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ant.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Ant_BuildFromPOMs/</url></reference><reference type="distribution"><url>http://nowhere.net/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/ant/core/trunk/ant</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.ant/ant-launcher@1.9.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.ant</group>
      <name>ant-launcher</name>
      <version>1.9.1</version>
      <description>master POM</description>
      <hashes>
        <hash alg="MD5">5a94ba739b36bc2f79674109c1fb2677</hash>
        <hash alg="SHA-1">7c71043ca185eaada9e36391dd022d92859327de</hash>
        <hash alg="SHA-256">e0293380bf3b78c67deee3c96d2ccf65ede530e6b680dd088a5203550dde6093</hash>
        <hash alg="SHA-512">5265c16c35a809c69ef13494b5f66beb5edbc4cb6ed96c75089ba1bacf18ed1dc54290b177e111cdaf438c9a8c3b958bd7159b4ec042f255612b6e5bf114b00c</hash>
        <hash alg="SHA-384">459f44723199ee187b87faba245ffdc68f861ec56c40dbc11e8bbaf04cae62b6b729a3b55140d03d62a6fb137be575e9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.ant/ant-launcher@1.9.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://ant.apache.org/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/Ant_BuildFromPOMs/</url></reference><reference type="distribution"><url>http://nowhere.net/</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/bugzilla/</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/ant-dev</url></reference><reference type="vcs"><url>http://svn.apache.org/repos/asf/ant/core/trunk/ant-launcher</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-core</name>
      <version>3.1.0</version>
      <description>Metrics is a Java library which gives you unparalleled insight into what your code does in
        production. Metrics provides a powerful toolkit of ways to measure the behavior of critical
        components in your production environment.</description>
      <hashes>
        <hash alg="MD5">48e838f9753a2540cd5588466b20ec99</hash>
        <hash alg="SHA-1">40e16d596ca49964a88bbce2261e387895b3499e</hash>
        <hash alg="SHA-256">d88845f17cd2c2d2203145e6f52e0c992cbe14d5887ddce97c9aceeae444b331</hash>
        <hash alg="SHA-512">e21b0efbf925cbb54a7d8651116e8951f2c6ea533b18f8e8f525b0d2a47dfeb0800d172a7adda49d6a70260e878c2a5fa8bc8701dd597c6ff80b6ab4b963f350</hash>
        <hash alg="SHA-384">8e5da37be883e9214b7bed23e196ff228872cf6eb69d9e977be1acfac75aeb76baaaafbe953cce378254e6daf5174b13</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.codahale.com/metrics-core/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-core/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@3.1.0?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-jvm</name>
      <version>3.1.0</version>
      <description>A set of classes which allow you to monitor critical aspects of your Java Virtual Machine
        using Metrics.</description>
      <hashes>
        <hash alg="MD5">e37b9bd70f69985c6d38e656b4c9a5d9</hash>
        <hash alg="SHA-1">56b1ed0c306cc938515d3e321b59f4f836f6892a</hash>
        <hash alg="SHA-256">5368b443636b199dad6ab60cfab97ab854f63678ccbf92cb22e5faeb355325d8</hash>
        <hash alg="SHA-512">9360695ea6d3888a10ed90e3ee7b8265acdbd596f1aa8357cfafd7b646c23cba0a2becc561b11577d8f845215f1dd29270da248fca2b9249488128603f98f4ba</hash>
        <hash alg="SHA-384">7985f9c696dc2f3eb033e4b34ded9498f7bd749dd11e9888b9dc40e06ca1ebe0db3b77f19dece9bea477e52676d2c767</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-jvm@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.codahale.com/metrics-jvm/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-jvm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/io.dropwizard.metrics/metrics-json@3.1.0?type=jar">
      <group>io.dropwizard.metrics</group>
      <name>metrics-json</name>
      <version>3.1.0</version>
      <description>A set of Jackson modules which provide serializers for most Metrics classes.</description>
      <hashes>
        <hash alg="MD5">a7f898ccb95b7494187bacc1a00cb44b</hash>
        <hash alg="SHA-1">47b1c72af77ca81771422269b807ef6198392741</hash>
        <hash alg="SHA-256">fa0b11982c8dc00b776905b5a8e74c2be12e34098abb85a8e6dd73675e5d784d</hash>
        <hash alg="SHA-512">986a4e6e73f0845ba94c2acd637029e38a8f8f8f29cfb31a558974eead9917fdd436a40ad1d799c4eebd768d78ce93655cb49f103994e3ece1465e6fa02be8ef</hash>
        <hash alg="SHA-384">ce7527753a09643ebd99914e789e6e8efce909101519ee87395d5fad5ac300a662d78cff2c5b917824b55eaa1927254a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/io.dropwizard.metrics/metrics-json@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://metrics.codahale.com/metrics-json/</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/dropwizard/metrics/issues#issue/</url></reference><reference type="vcs"><url>http://github.com/dropwizard/metrics/metrics-json/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar">
      <group>com.github.joshelser</group>
      <name>dropwizard-metrics-hadoop-metrics2-reporter</name>
      <version>0.1.2</version>
      <description>A reporter for Dropwizard Metrics which announces measurements using Hadoop Metrics2.</description>
      <hashes>
        <hash alg="MD5">7c59244206bb5ed013cbd52b4c84d94d</hash>
        <hash alg="SHA-1">ff3520ab6e48718e2d79e47f6cf2bd7b50180b84</hash>
        <hash alg="SHA-256">a22d6889790fa98d5f85de6e25f7dc89946b26964742e6deb9f91681946fa03a</hash>
        <hash alg="SHA-512">f3ce33c36b41a727f4fe34644f5fa9980ff178fa9761030d6545e561f90940d4d7041b3342d155ac90f2f2f85e4bc668a7bdc5af4fcd593d37fd66db6d8ec8dc</hash>
        <hash alg="SHA-384">37423aca07f575a0d29140bb672f4c2ac8b80e1ce603142180aa8a74f29df6812c53472ac55f52b6934e92eccec20a61</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/joshelser/dropwizard-hadoop-metrics2</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/joshelser/dropwizard-hadoop-metrics2/issues</url></reference><reference type="vcs"><url>https://github.com/joshelser/dropwizard-hadoop-metrics2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avro/avro@1.8.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.avro</group>
      <name>avro</name>
      <version>1.8.2</version>
      <description>Avro core components</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">10395e5a571e1a1f6113411f276d2fea</hash>
        <hash alg="SHA-1">91e3146dfff4bd510181032c8276a3a0130c0697</hash>
        <hash alg="SHA-256">f754a0830ce67a5a9fa67a54ec15d103ef15e1c850d7b26faf7b647eeddc82d3</hash>
        <hash alg="SHA-512">74d39c7f55edbe5f8124e2905567424fdd0149d4f76b7345416cd1e4838bdc8630e9c0e93e7a38537ae39a72883dd8eee9dbea11f288bcfe15895046cc3103af</hash>
        <hash alg="SHA-384">bed8ac1832b6026a44e11adcf19f3a8da12861bf5b9584db19f0621c24fe8642160ad10904e6a47fd5b6ddd68efdf105</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avro/avro@1.8.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://avro.apache.org</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/AVRO</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/avro-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/avro/trunk/avro-parent/avro</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.7?type=jar">
      <group>com.thoughtworks.paranamer</group>
      <name>paranamer</name>
      <version>2.7</version>
      <description>Paranamer allows runtime access to constructor and method parameter names for Java classes</description>
      <hashes>
        <hash alg="MD5">5707a297363249fffe38e8189cd6f9cb</hash>
        <hash alg="SHA-1">3ed64c69e882a324a75e890024c32a28aff0ade8</hash>
        <hash alg="SHA-256">63e3f53f8f70784b65c25b2ee475813979d6d0e7f7b2510b364c4e1f4a803ccc</hash>
        <hash alg="SHA-512">09291199b6e688faa5c359725461a000a930e9dcbca63ffe998ca6b56108957f61237c70830f163b7f20891e1639cd3771f7b386275ef2a501c2a3a3630ec3a9</hash>
        <hash alg="SHA-384">393b4aefd71cf0050bf23f0490f7a738b4e59a654551b96c6c7d473d5731d514534e39a84bd126402c412105dc7fcb87</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.thoughtworks.paranamer/paranamer@2.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://paranamer.codehaus.org/paranamer</url></reference><reference type="distribution"><url>https://nexus.codehaus.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://git.codehaus.org/gitweb.cgi?p=paranamer-git.git/paranamer</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar">
      <publisher>xerial.org</publisher>
      <group>org.xerial.snappy</group>
      <name>snappy-java</name>
      <version>1.1.10.4</version>
      <description>snappy-java: A fast compression/decompression library</description>
      <hashes>
        <hash alg="MD5">d1d3b91e925c46a1a0f68b87298bafe8</hash>
        <hash alg="SHA-1">50d0390056017158bdc75c063efd5c2a898d5f0c</hash>
        <hash alg="SHA-256">55b30c94e5c4cc2d4b6976916098d0678a8a6cc7427fa8c875621bd94e731ac8</hash>
        <hash alg="SHA-512">9e52bad4eaa0d0a2e0083cdd3433d84c4bb44c4d3f0314a48c3d6eacbb64d0f4fb2d71197944115618a598eb4a4941c13af2a9ec676b003fb3462ddac58bbe41</hash>
        <hash alg="SHA-384">9539e8eb2dea244f07a7216db38970e3f336b5dc9d132cbe54e201c818dba3e02a1fc467b4529a18eca7127f86d742dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/xerial/snappy-java</url></reference><reference type="vcs"><url>https://github.com/xerial/snappy-java</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.tukaani/xz@1.5?type=jar">
      <group>org.tukaani</group>
      <name>xz</name>
      <version>1.5</version>
      <description>XZ data compression</description>
      <hashes>
        <hash alg="MD5">51050e595b308c4aec8ac314f66e18bc</hash>
        <hash alg="SHA-1">9c64274b7dbb65288237216e3fae7877fd3f2bee</hash>
        <hash alg="SHA-256">86f30fa8775fa3a62cdb39d1ed78a6019164c1058864048d42cbee244e26e840</hash>
        <hash alg="SHA-512">c5c130bf22f24f61b57fc0c6243e7f961ca2a8928416e8bb288aec6650c1c1c06ace4383913cd1277fc6785beb9a74458807ea7e3d6b2e09189cfaf2fb9ab7e1</hash>
        <hash alg="SHA-384">c67ff55c122a99db681047f37595472c7816b65b100da64c0469747779f08925175055b4105150bc17e3b774f31fec41</hash>
      </hashes>
      <licenses>
        <license>
          <name>Public Domain</name>
        </license>
      </licenses>
      <purl>pkg:maven/org.tukaani/xz@1.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://tukaani.org/xz/java.html</url></reference><reference type="vcs"><url>http://git.tukaani.org/?p=xz-java.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive</group>
      <name>hive-shims</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">b435fe22c29e6e297d785dc6537c2f9c</hash>
        <hash alg="SHA-1">758b531c2e0e925b8d00f0761e091a38a762bcdd</hash>
        <hash alg="SHA-256">209541ef8d51baff0f2120fff3873d3b9eacc2ec70a95254321836818feb460c</hash>
        <hash alg="SHA-512">5a9443dde70164011628877e379bf7463377dc9209ef22231070a5dfac5c47ff163a2101d05dbdd3f3a002cfee13d869ae1d2752c56cb43991ee3d239381b894</hash>
        <hash alg="SHA-384">5f9a7513a3b9b009fd7782229594819d7f4d2b880024aee0582e49893924ce256ee485f329101d4fd7291e14cd0fc3bb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-shims</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-shims</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive.shims</group>
      <name>hive-shims-common</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">434e3232d5b50bf6a36db15158bb0adc</hash>
        <hash alg="SHA-1">74624533c53d1163d9d6954ba5c97c845b99dd11</hash>
        <hash alg="SHA-256">f27de4431b46596ab829754840633689181ad5a464e99d2759d0eab106ec73c0</hash>
        <hash alg="SHA-512">d4c1c8f667cc16c13a0282c7525c1fd2825dda9b638663dd38e2402fe760b91487dbdd56404b904e90d91fe1e6daa5777126adfcade388238cc38be6051e8d61</hash>
        <hash alg="SHA-384">f89678f3be35113f524d38bad49d9c6ec08252a10fe50b924b04e845a5e6ae1b773d3511c0739e246bd5b8427c788797</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-shims-common</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-shims-common</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive.shims</group>
      <name>hive-shims-0.23</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">575e4146191b23a1946f5d716f8f57cf</hash>
        <hash alg="SHA-1">8dbc9520ce98cf661a90c652f817c7b4c168dc17</hash>
        <hash alg="SHA-256">57fa048f7c8e9395f6d8d74b2ee5f6133a8206bbe2ea885bea366e85d9d78168</hash>
        <hash alg="SHA-512">912a2132793309903623c85a0ac418d989a91beca578d1b9dc960977df7ec913c869880a2f843f2f01221320bb9c438ac2c06f9c149bf2b0912258fb87ef4595</hash>
        <hash alg="SHA-384">377d7005a9af31505c354f5081f0566a911bf82f09cd9eb6bef4eaa35b31e6478f7799f3ab0d6e6e123081ac18ae6121</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-shims-0.23</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-shims-0.23</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-resourcemanager@2.7.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-server-resourcemanager</name>
      <version>2.7.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">ecc801b084064fa93f388f5d1516f18a</hash>
        <hash alg="SHA-1">6444a32767712596c11767943ba10070a82b34da</hash>
        <hash alg="SHA-256">c47ba62c46a14d2f9cc86bedede9153d3dc131af7c95e2d75f85c4b9bc313b3f</hash>
        <hash alg="SHA-512">0b630a96fc22395c2e2bff6cf88cd95bd9380b740498bf90bf508e811afbbcb61c5d32dc2eb2aaaad6631d8bd3bf93c147c187af00b1059b684b0f5e96b62e0f</hash>
        <hash alg="SHA-384">3fc39b4fc30dfe48fc57504c0ab7e2c56aa86f2f346d46baafd664d482bae5e7b64c69e0169991da9965d369adbe6277</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-server-resourcemanager@2.7.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-server-common</name>
      <version>2.7.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">8165e26c7b1edfd70b007df664d62015</hash>
        <hash alg="SHA-1">514ebf83b773352e9e662a7b5011c8d947162c5f</hash>
        <hash alg="SHA-256">86762a2adf4b8372b35281bbdc02264daba31af826252fb9216c65b7456f2018</hash>
        <hash alg="SHA-512">babb7b3dedb333a323ad9ed1a591f97dcb2b41102f51dad47e5699ce09a722d679a2f348b81363954a87e045f3b9529c74e934579ff277442ead9948a25ae4bd</hash>
        <hash alg="SHA-384">bee94d6de540dc5aaadb97776ea918296363642b730828bcc47a782fdcfb79fce5c4d8f7faaf222aa083a032cd66eb27</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-applicationhistoryservice@2.7.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-server-applicationhistoryservice</name>
      <version>2.7.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">2798dea725c7f405f1f20ee5c5d39f56</hash>
        <hash alg="SHA-1">5ecdbd3bcc77826e4f4491ce12df722252f04f68</hash>
        <hash alg="SHA-256">4685c8db44461d1d31f4f5328703cf5bade0445e3bd4d188a72ab5bf337ee8a6</hash>
        <hash alg="SHA-512">9a195f58757548eae7dbf65d27c077af3513061be42c1f5f2be3c63d819c269cdc5a7c659d3a0f8fc2782270edbec0bc0065ac12a3fedca4a2a3d50a3269b03f</hash>
        <hash alg="SHA-384">c13b8bf484029b7805b35716b87b84e258d2d12ce4e8937b4b678b7b2c6857d0f04a20e32550b53283591cde931d325f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-server-applicationhistoryservice@2.7.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-web-proxy@2.7.2?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-yarn-server-web-proxy</name>
      <version>2.7.2</version>
      <description>Apache Hadoop Project POM</description>
      <hashes>
        <hash alg="MD5">6b78fd5f7e8cea506e7ec241d5bf19ad</hash>
        <hash alg="SHA-1">430c3b53dcf1901f37a92d703bb4ce343298561b</hash>
        <hash alg="SHA-256">c8286506c2679f5a941c0807dbbafbd3ce66f489a298faab5895d62ecdbc7731</hash>
        <hash alg="SHA-512">20b74f5c02da3a111902ba802dadf3aa01ff7442f1454e4829fcc5ebc3aef3b445a891a2ad237180b4a67698743849c00c7f6d0aa423922c24be2276825f48a4</hash>
        <hash alg="SHA-384">b7fe2463ce46096e30d7ef8f5874cfe8cc26923a102a248f4b2aec8c89965e92c22923127e6fbdc31a547c91b6c98abd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-yarn-server-web-proxy@2.7.2?type=jar</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.zookeeper/zookeeper@3.4.6?classifier=tests&amp;type=test-jar">
      <group>org.apache.zookeeper</group>
      <name>zookeeper</name>
      <version>3.4.6</version>
      <hashes>
        <hash alg="MD5">60c071bb9817c3c60acf79f6dc109da6</hash>
        <hash alg="SHA-1">abeecacad507fcc43cc1a2e71b8a5cc3264d70b0</hash>
        <hash alg="SHA-256">286a9f0e59bc5c926c9ca742d25c977079effccd85b46e4cd0892490dbadeb6d</hash>
        <hash alg="SHA-512">088bf30cb9b3593a3387367bf13e80166766f8807cc3ea63dc6af23cb26e61591fb77b4d8b2914ceafbedb40e87e85d04a30348dd8074c21cf0af03607b68ddd</hash>
        <hash alg="SHA-384">4c99679d2f4be36ae77587dcc9e7c2effa6e281355446881c819e18e1a784c8a69c3e21c9722917a9a94770a6474af9f</hash>
      </hashes>
      <purl>pkg:maven/org.apache.zookeeper/zookeeper@3.4.6?classifier=tests&amp;type=test-jar</purl>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.hive.shims</group>
      <name>hive-shims-scheduler</name>
      <version>2.3.9</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <hashes>
        <hash alg="MD5">786e39d9cace245b716de38467502353</hash>
        <hash alg="SHA-1">8c7b61a1d3b54bf865d3b525dc51d9c27a3dbd21</hash>
        <hash alg="SHA-256">867c38353fa9fe9cd0763de267473b0a770475bc5918f02bef4df966e7327bf0</hash>
        <hash alg="SHA-512">a37fcd74e17da457216416dcfea7b5be198f59413f96759d0a0b3cd5beb487d8cc5c13cd3bfae774879746edb6f1b8c0f14984958099bba749886a9103322590</hash>
        <hash alg="SHA-384">8bbeae4d19bab25f0a4eb685160bcdaa6dc3babed40c2f9425f312e697d008f9ef1c8cba61476939df9e8458d5956f11</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>https://hive.apache.org/hive-shims-scheduler</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/pom/tags/apache-14/hive/hive-shims-scheduler</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.httpcomponents</group>
      <name>httpcore</name>
      <version>4.4.14</version>
      <description>Apache HttpComponents Core (blocking I/O)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">2b3991eda121042765a5ee299556c200</hash>
        <hash alg="SHA-1">9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1</hash>
        <hash alg="SHA-256">f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28</hash>
        <hash alg="SHA-512">f16a652f4a7b87dbf7cb16f8590d54a3f719c4c7b2f8883ce59db2d73be4701b64f2ca8a2c45aca6a5dbeaddeedff0c280a03722f70c076e239b645faa54eff9</hash>
        <hash alg="SHA-384">1cd0a3c120cfb4974573b0f499b2ac8a200aa43506777ed09f9806c6899541605fd355a3b5f44977517dd1cb463e808b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar</purl>
      <externalReferences><reference type="website"><url>http://hc.apache.org/httpcomponents-core-ga</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/HTTPCORE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/</url></reference><reference type="vcs"><url>https://github.com/apache/httpcomponents-core/tree/4.4.14/httpcore</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>1.3.9</version>
      <description>JSR305 Annotations for Findbugs</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1d5a772e400b04bb67a7ef4a0e0996d8</hash>
        <hash alg="SHA-1">40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf</hash>
        <hash alg="SHA-256">905721a0eea90a81534abb7ee6ef4ea2e5e645fa1def0a5cd88402df1b46c9ed</hash>
        <hash alg="SHA-512">06da282cfd8e30d9f8cf17702b8709172b00e22b75a627a1d85f8989615b8a1a401bc25d9aee7b14aed1d9b5df73bf2ea8d66f9c8468d9577c29f0ccfa2cc70a</hash>
        <hash alg="SHA-384">56e6b41ef62eb5edfed0203802cefae9c2df86388148e420bb0c687abb2b80e14d5c2a82d5b35dce4badaf148f94eada</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="vcs"><url>http://findbugs.googlecode.com/svn/trunk/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.flink</group>
      <name>flink-shaded-force-shading</name>
      <version>17.0</version>
      <description>The Apache Software Foundation provides support for the Apache community of open-source software projects.
    The Apache projects are characterized by a collaborative, consensus based development process, an open and
    pragmatic software license, and a desire to create high quality software that leads the way in its field.
    We consider ourselves not simply a group of projects sharing a server, but rather a community of developers
    and users.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">6890ff555c82f3bb156cf9c73bf09cf9</hash>
        <hash alg="SHA-1">345c153973a17fb8a98d368352e14893edcbd610</hash>
        <hash alg="SHA-256">dcc7dff160a40b74fa5db2805b2004153ffd0517968f3c7843a8ee43be82e710</hash>
        <hash alg="SHA-512">9de23513832248618b78e279c0e3900f5cafb7193254ef6818b4f0b6f3b70045dd9cc4fdd13caeeca8b70a44f38201ce055f07248cdf08930a20e1b7a73997ff</hash>
        <hash alg="SHA-384">063611872b4b1a1718e0472e32198bded0d74fa656e5c47a7b20038cd5ff70106e3109b60fe882880feea486e1ef83bf</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://flink.apache.org/flink-shaded-force-shading</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/flink-shaded/flink-shaded-force-shading</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar">
      <group>org.apiguardian</group>
      <name>apiguardian-api</name>
      <version>1.1.2</version>
      <description>@API Guardian</description>
      <hashes>
        <hash alg="MD5">8c7de3f82037fa4a2e8be2a2f13092af</hash>
        <hash alg="SHA-1">a231e0d844d2721b0fa1b238006d15c6ded6842a</hash>
        <hash alg="SHA-256">b509448ac506d607319f182537f0b35d71007582ec741832a1f111e5b5b70b38</hash>
        <hash alg="SHA-512">d7ccd0e7019f1a997de39d66dc0ad4efe150428fdd7f4c743c93884f1602a3e90135ad34baea96d5b6d925ad6c0c8487c8e78304f0a089a12383d4a62e2c9a61</hash>
        <hash alg="SHA-384">5ae11cfedcee7da43a506a67946ddc8a7a2622284a924ba78f74541e9a22db6868a15f5d84edb91a541e38afded734ea</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/apiguardian-team/apiguardian</url></reference><reference type="vcs"><url>https://github.com/apiguardian-team/apiguardian</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar">
      <publisher>Joe Walnes, Henri Tremblay, Leonardo Mesquita</publisher>
      <group>org.objenesis</group>
      <name>objenesis</name>
      <version>2.1</version>
      <description>A library for instantiating Java objects</description>
      <hashes>
        <hash alg="MD5">32ccb1d20a42b5aaaceb90c9082a2efa</hash>
        <hash alg="SHA-1">87c0ea803b69252868d09308b4618f766f135a96</hash>
        <hash alg="SHA-256">c74330cc6b806c804fd37e74487b4fe5d7c2750c5e15fbc6efa13bdee1bdef80</hash>
        <hash alg="SHA-512">1dec9ee30812b8006e536a2749c5781ccdc4b446539efb6fa534f22e70562033876bf2eb22c6946d617695729bd65f0f65b984f15f05ac63db5bed215e74427c</hash>
        <hash alg="SHA-384">657b8a3b80a5475f198425396f7264301f9e0f3ad5dc336ef0c7b46874f5544861a8a2fd48cdb5f672e199a6935c19d1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.objenesis/objenesis@2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://objenesis.org</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/easymock/easymock/objenesis</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-slf4j-impl</name>
      <version>2.17.1</version>
      <description>The Apache Log4j SLF4J API binding to Log4j 2 Core</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d0e5934a9c341dbc3493d4039afd985</hash>
        <hash alg="SHA-1">84692d456bcce689355d33d68167875e486954dd</hash>
        <hash alg="SHA-256">e9a03720e5d5076009c2530635da9d08485e28a0b0ec20708dadc51afb78e41e</hash>
        <hash alg="SHA-512">3559e139a0c6d47fa0af233ac079fbde2227d701a846d6e6f7463129f7237e587bc3c337aebe5e4088f633ea83d1456dbc5b1999d1d485da67bfe2d5c12cde21</hash>
        <hash alg="SHA-384">ba0f5d2de2c0a7f816cb7ef98e9449e4a975ba5e34f1634e8eae6f84855df84ae6b2baf0c4762636fe5c337d6c561ef9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-slf4j-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-api</name>
      <version>2.17.1</version>
      <description>The Apache Log4j API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">dfd5f2d81aba31583ee87fe16c7b78f8</hash>
        <hash alg="SHA-1">d771af8e336e372fb5399c99edabe0919aeaf5b2</hash>
        <hash alg="SHA-256">b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4</hash>
        <hash alg="SHA-512">48a58c2f317d451ac1622bdfbfa5d3cd9de45d40d5d5df98f39fe6d53c74da56e200f8e3d19a309d4e1ea364369379c0ef9d79b928fc20ea743857f347259c03</hash>
        <hash alg="SHA-384">3686abf7edebe4bd29bdae0495a6b881d38cfe7a870350d1f1b43056f51c25cd39a5fccb74a28abf62069862dd25e416</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-core</name>
      <version>2.17.1</version>
      <description>The Apache Log4j Implementation</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">8d2f5c52700336dae846b2c3ecde7a6e</hash>
        <hash alg="SHA-1">779f60f3844dadc3ef597976fcb1e5127b1f343d</hash>
        <hash alg="SHA-256">c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41</hash>
        <hash alg="SHA-512">8d3d6a17afc41cde43b19c9a696793d009d9271bc6430762f10157018453f8a53cde6e6aa4f3f0b703eaf1f2944d047398d29b470924ecc3290d1923b0e29750</hash>
        <hash alg="SHA-384">28500f2bb8fa430788eb526d8197671b9bcb49cc8a04fac22b12ae0c46bfefd682f1ce363cb237e41ae87185635e8ff3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-core/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.17.1</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">a54a1f9fc3ce8352fb29cf66fbe07219</hash>
        <hash alg="SHA-1">db3a7e7f07e878b92ac4a8f1100bee8325d5713a</hash>
        <hash alg="SHA-256">ca3e9150f95c31d15b9680a609b8817f8549bd395591c5ca55957d1ef0f464d6</hash>
        <hash alg="SHA-512">5cc9544fabb4d354b1452ae244655d8a72fe2e08c34b2219a712a58c74434bfcb62b3f999bfb3f2aeb8d44ca74e616ddc7f5090d6613487ade3c37ce79776d6f</hash>
        <hash alg="SHA-384">4e7ec699f692b95b18e928b67c29cb5201a70baca8106ae4c925f810c9b9e572f645febee2b98f46962c8b0f67fdf427</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/job/Logging/job/log4j/</url></reference><reference type="distribution"><url>https://logging.apache.org/log4j/2.x/download.html</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOG4J2</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=logging-log4j2.git/log4j-1.2-api</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-hive_2.12@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-calcite-bridge@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-sql-gateway-api@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-json@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-compatibility_2.12@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-bulk@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-orc@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-orc-nohive@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-parquet@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-exec@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-metrics-core@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-asm-9@9.5-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
      <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.esotericsoftware.minlog/minlog@1.2?type=jar"/>
    <dependency ref="pkg:maven/org.objenesis/objenesis@2.1?type=jar"/>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    <dependency ref="pkg:maven/com.ibm.icu/icu4j@67.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-api-bridge-base@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
    <dependency ref="pkg:maven/com.twitter/chill-java@0.7.6?type=jar">
      <dependency ref="pkg:maven/com.esotericsoftware.kryo/kryo@2.24.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-streaming-java@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-runtime@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-jackson@2.14.2-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.10.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-rpc-akka-loader@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-rpc-core@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-queryable-state-client-java@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-netty@4.1.91.Final-17.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-fs@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-core@1.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-zookeeper-3@3.7.1-17.0?type=jar"/>
    <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
    <dependency ref="pkg:maven/org.javassist/javassist@3.24.0-GA?type=jar"/>
    <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
    <dependency ref="pkg:maven/org.lz4/lz4-java@1.8.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-cep@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-cep@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-shaded-guava@31.1-jre-17.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-table-calcite-bridge@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.calcite/calcite-core@1.32.0?type=jar">
      <dependency ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar"/>
      <dependency ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar"/>
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.calcite/calcite-linq4j@1.32.0?type=jar">
      <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apiguardian/apiguardian-api@1.1.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.calcite.avatica/avatica-core@1.22.0?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.14.3?type=jar"/>
    <dependency ref="pkg:maven/org.locationtech.jts/jts-core@1.19.0?type=jar"/>
    <dependency ref="pkg:maven/com.jayway.jsonpath/json-path@2.7.0?type=jar">
      <dependency ref="pkg:maven/net.minidev/json-smart@2.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/json-smart@2.3?type=jar">
      <dependency ref="pkg:maven/net.minidev/accessors-smart@1.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.minidev/accessors-smart@1.2?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-sql-gateway-api@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-annotations@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-api-java-bridge@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-common@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-json@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.flink/flink-table-runtime@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-json@1.18.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-compatibility_2.12@1.18.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.flink/flink-hadoop-bulk@1.18.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-connector-files@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-file-sink-common@1.18.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-orc@1.18.0?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-orc-nohive@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.flink/flink-orc@1.18.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-parquet@1.18.0?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-hadoop@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar"/>
      <dependency ref="pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"/>
      <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-column@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-format-structures@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-encoding@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.apache.parquet/parquet-common@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.parquet/parquet-jackson@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar"/>
    <dependency ref="pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"/>
    <dependency ref="pkg:maven/com.github.luben/zstd-jni@1.5.0-1?type=jar"/>
    <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"/>
      <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.7?type=jar"/>
      <dependency ref="pkg:maven/commons-digester/commons-digester@1.8?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.gson/gson@2.2.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar">
      <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar">
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/xmlenc/xmlenc@0.52?type=jar"/>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar">
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    <dependency ref="pkg:maven/commons-net/commons-net@3.1?type=jar"/>
    <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    <dependency ref="pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar">
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"/>
    <dependency ref="pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar">
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet.jsp/jsp-api@2.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
    <dependency ref="pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar">
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar">
      <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
    <dependency ref="pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpcore@4.4.14?type=jar"/>
      <dependency ref="pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"/>
    <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
    <dependency ref="pkg:maven/commons-configuration/commons-configuration@1.7?type=jar">
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-digester/commons-digester@1.8?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avro/avro@1.8.2?type=jar">
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.7?type=jar"/>
      <dependency ref="pkg:maven/org.xerial.snappy/snappy-java@1.1.10.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.tukaani/xz@1.5?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.thoughtworks.paranamer/paranamer@2.7?type=jar"/>
    <dependency ref="pkg:maven/org.tukaani/xz@1.5?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.gson/gson@2.2.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"/>
      <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar">
      <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
      <dependency ref="pkg:maven/net.minidev/json-smart@2.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper-jute@3.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.curator/curator-client@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jcraft/jsch@0.1.55?type=jar"/>
    <dependency ref="pkg:maven/org.apache.curator/curator-recipes@2.13.0?type=jar">
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-core@2.10.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avro/avro@1.8.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.10.2?type=jar">
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-core-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-mapper-asl@1.9.13?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-jaxrs@1.8.3?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jackson/jackson-xc@1.8.3?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar">
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar">
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
    <dependency ref="pkg:maven/aopalliance/aopalliance@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar">
      <dependency ref="pkg:maven/javax.inject/javax.inject@1?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hive/hive-metastore@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar"/>
      <dependency ref="pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar"/>
      <dependency ref="pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar"/>
      <dependency ref="pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar"/>
      <dependency ref="pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar"/>
      <dependency ref="pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"/>
      <dependency ref="pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar"/>
      <dependency ref="pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar"/>
      <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-serde@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-service-rpc@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@1.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-common@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.4.0?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.orc/orc-core@1.3.4?type=jar"/>
      <dependency ref="pkg:maven/jline/jline@2.12?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.0.0.v201112011016?type=jar"/>
      <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-web@2.6.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"/>
      <dependency ref="pkg:maven/org.apache.ant/ant@1.9.1?type=jar"/>
      <dependency ref="pkg:maven/com.tdunning/json@1.8?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-shims@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.curator/curator-framework@2.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-slf4j-impl@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-0.23@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-resourcemanager@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-resourcemanager@2.7.2?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-applicationhistoryservice@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-web-proxy@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.4.6?classifier=tests&amp;type=test-jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-applicationhistoryservice@2.7.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject.extensions/guice-servlet@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/com.google.inject/guice@3.0?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey.contribs/jersey-guice@1.9?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.jettison/jettison@1.1?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-core@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.sun.jersey/jersey-client@1.9?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
      <dependency ref="pkg:maven/org.fusesource.leveldbjni/leveldbjni-all@1.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-web-proxy@2.7.2?type=jar">
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-server-common@2.7.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-common@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop/hadoop-yarn-api@2.10.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@11.0.2?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
      <dependency ref="pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.zookeeper/zookeeper@3.4.6?classifier=tests&amp;type=test-jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
      <dependency ref="pkg:maven/io.netty/netty@3.10.6.Final?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-scheduler@2.3.9?type=jar">
      <dependency ref="pkg:maven/org.apache.hive.shims/hive-shims-common@2.3.9?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-storage-api@2.4.0?type=jar">
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.orc/orc-core@1.3.4?type=jar">
      <dependency ref="pkg:maven/com.google.protobuf/protobuf-java@3.21.7?type=jar"/>
      <dependency ref="pkg:maven/commons-lang/commons-lang@2.6?type=jar"/>
      <dependency ref="pkg:maven/io.airlift/aircompressor@0.21?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/jline/jline@2.12?type=jar"/>
    <dependency ref="pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127?type=jar">
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/javax.mail/mail@1.4.1?type=jar"/>
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jaspic_1.0_spec@1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.0_spec@1.1.1?type=jar"/>
      <dependency ref="pkg:maven/asm/asm-commons@3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jta_1.1_spec@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/javax.mail/mail@1.4.1?type=jar">
      <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.activation/activation@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-jaspic_1.0_spec@1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.geronimo.specs/geronimo-annotation_1.0_spec@1.1.1?type=jar"/>
    <dependency ref="pkg:maven/asm/asm-commons@3.1?type=jar">
      <dependency ref="pkg:maven/asm/asm-tree@3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/asm/asm-tree@3.1?type=jar">
      <dependency ref="pkg:maven/asm/asm@3.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.jetty.orbit/javax.servlet@3.0.0.v201112011016?type=jar"/>
    <dependency ref="pkg:maven/joda-time/joda-time@2.5?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.1?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-web@2.6.2?type=jar">
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-core@2.17.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant@1.9.1?type=jar">
      <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.9.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.ant/ant-launcher@1.9.1?type=jar"/>
    <dependency ref="pkg:maven/com.tdunning/json@1.8?type=jar"/>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-jvm@3.1.0?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-json@3.1.0?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.14.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.github.joshelser/dropwizard-metrics-hadoop-metrics2-reporter@0.1.2?type=jar">
      <dependency ref="pkg:maven/io.dropwizard.metrics/metrics-core@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.hive/hive-service-rpc@2.3.9?type=jar">
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"/>
      <dependency ref="pkg:maven/tomcat/jasper-compiler@5.5.23?type=jar"/>
      <dependency ref="pkg:maven/tomcat/jasper-runtime@5.5.23?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/tomcat/jasper-compiler@5.5.23?type=jar">
      <dependency ref="pkg:maven/javax.servlet/jsp-api@2.0?type=jar"/>
      <dependency ref="pkg:maven/ant/ant@1.6.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.servlet/jsp-api@2.0?type=jar">
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/ant/ant@1.6.5?type=jar"/>
    <dependency ref="pkg:maven/tomcat/jasper-runtime@5.5.23?type=jar">
      <dependency ref="pkg:maven/javax.servlet/servlet-api@2.5?type=jar"/>
      <dependency ref="pkg:maven/commons-el/commons-el@1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-el/commons-el@1.0?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.thrift/libfb303@0.9.3?type=jar">
      <dependency ref="pkg:maven/org.apache.thrift/libthrift@0.9.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.jolbox/bonecp@0.8.0.RELEASE?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.zaxxer/HikariCP@2.5.1?type=jar">
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.datanucleus/datanucleus-api-jdo@4.2.4?type=jar"/>
    <dependency ref="pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar"/>
    <dependency ref="pkg:maven/org.datanucleus/datanucleus-rdbms@4.1.19?type=jar"/>
    <dependency ref="pkg:maven/commons-dbcp/commons-dbcp@1.4?type=jar">
      <dependency ref="pkg:maven/commons-pool/commons-pool@1.5.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.jdo/jdo-api@3.0.1?type=jar">
      <dependency ref="pkg:maven/javax.transaction/jta@1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/javax.transaction/jta@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.datanucleus/javax.jdo@3.2.0-m3?type=jar"/>
    <dependency ref="pkg:maven/org.antlr/antlr-runtime@3.5.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hive/hive-exec@2.3.9?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.11.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.17.1?type=jar"/>
      <dependency ref="pkg:maven/org.datanucleus/datanucleus-core@4.1.17?type=jar"/>
      <dependency ref="pkg:maven/net.hydromatic/eigenbase-properties@1.1.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.10?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.10?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/net.hydromatic/eigenbase-properties@1.1.5?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.10?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.janino/janino@3.1.10?type=jar">
      <dependency ref="pkg:maven/org.codehaus.janino/commons-compiler@3.1.10?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.flink/flink-shaded-force-shading@17.0?type=jar"/>
  </dependencies>
</bom>
