{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:a5261e32-c14e-3a8b-b00c-60ea2a0630b4",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.8.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "42c73e70d517b359d40b757c368d68fc"
            },
            {
              "alg" : "SHA-1",
              "content" : "c66892e13fb7ed7b8105cb5a280fa767d9e0bf12"
            },
            {
              "alg" : "SHA-256",
              "content" : "566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5"
            },
            {
              "alg" : "SHA-512",
              "content" : "93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb"
            },
            {
              "alg" : "SHA-384",
              "content" : "04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665"
            },
            {
              "alg" : "SHA3-384",
              "content" : "eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73"
            },
            {
              "alg" : "SHA3-256",
              "content" : "2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e"
            },
            {
              "alg" : "SHA3-512",
              "content" : "636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882"
            }
          ],
          "type" : "library"
        }
      ]
    },
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.fulcrum",
      "name" : "fulcrum-parser",
      "version" : "4.0.0",
      "description" : "This Service functions as a repository for Parser components.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://turbine.apache.org/fulcrum/fulcrum-parser"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TRB"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/turbine-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/turbine-fulcrum-parser/tree/fulcrum-parser-4.0.0-candidate"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeAggregateBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.avalon.framework",
      "name" : "avalon-framework-api",
      "version" : "4.3.1",
      "description" : "Avalon Framework API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c543869a7eb2bad323a54e873973acf"
        },
        {
          "alg" : "SHA-1",
          "content" : "2dacadeb49bc14420990b1f28897d46f96e2181d"
        },
        {
          "alg" : "SHA-256",
          "content" : "bca4c94b5e53acee3c97fe11cce0749d682d5591bf4a217cd45273adeb08c60f"
        },
        {
          "alg" : "SHA-512",
          "content" : "cfb68cb59fd86a4dd1352bef5c1e538dccb7525d1ab81c89ad1aa50e6885966c28e01fc2d8a4d7c7f519bb8239a5de2207e54f665bdb3a34103f0c7a16e1e8be"
        },
        {
          "alg" : "SHA-384",
          "content" : "61d2e9079de88eb1908cf711f27ca3242511acf619950ec2adc9bf70a4d2f474ff1e0c4bca940500f770d9d1a76c11f5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a74ab0deabe4d0d12e851a5e51ebf5e55ddbf6acaebcb1faeea4d006cc9caeb37c820528ed2d331858fe55d6eeac8888"
        },
        {
          "alg" : "SHA3-256",
          "content" : "740958726cea095c0143215db074cbf0a7974fb49d4cff8e111de88820d8eabb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8e7f42d535e29550050223c9ebb6262b104e864afdd3bdd23b7874968b2152c78a9a834bda7fb884130aa1434d476046db2901b2af89f412e18040e360d72cf1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.apache.org/excalibur/avalon-framework/avalon-framework-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "file:///Users/jheymans/tmp/stagingrepo"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/www-announce/"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.apache.org/repos/asf/excalibur/tags/excalibur-first-maven2-release"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"
    },
    {
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.1.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg" : "SHA-1",
          "content" : "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg" : "SHA-384",
          "content" : "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.13.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3435b913691a5c1b173485a49850b1a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7263237aa89c1f99b327197c41d0669707a462e"
        },
        {
          "alg" : "SHA-256",
          "content" : "82f528cf718c7a3c2f30fc5bc784e3c6a0a10b17605dadb9e16c82ede11e6064"
        },
        {
          "alg" : "SHA-512",
          "content" : "9cce41fd8bb2a24bcf8e75898190730d62b656af0d1a199202cd6cc848956b8cce4840ee616fb559c254fdff0bd09def9e65de6940a65bc7a07a386cec2bec0b"
        },
        {
          "alg" : "SHA-384",
          "content" : "cb663314025f3c2da314c0880e6928f5567cc448ded5deabd5cece5695e6fd0d4a84349fc7ee9638c732204dc3b26519"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0642f12aef0ef38c8a6f5081f05de8bdc0e585b9556cd496c1df66b977746aefd2672a8941cdbcdaf169e5e2aba5d583"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9ea297efa12a940dc9191a352256c9f89bddb30b40af603143775330c6bdb0a0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c08c8c538c21ab4ad7d7e5c1e5c27ef075acdf15177c777a33209ea095fb3e3be8a97d14f3dd86306e7c310a6dbe5be030a696b9f819848f6eeec045149ee091"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-pool2",
      "version" : "2.12.0",
      "description" : "The Apache Commons Object Pooling Library.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0516bf5ac1549e8ba78f6b7c49d09ed2"
        },
        {
          "alg" : "SHA-1",
          "content" : "458563f69fbdaebf7daadfe10dc3a22e42a7de50"
        },
        {
          "alg" : "SHA-256",
          "content" : "6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2"
        },
        {
          "alg" : "SHA-384",
          "content" : "5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-pool/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-pool/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/POOL"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-pool.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.fulcrum",
      "name" : "fulcrum-pool",
      "version" : "1.0.5",
      "description" : "Fulcrum Pool Service",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "19c042b1e0ef706ff8068b42dd9d70aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "60a9ce4649801376de695f35fa82e2a5674914a1"
        },
        {
          "alg" : "SHA-256",
          "content" : "46fd541a8a2ca198eacababad59d9c0f3dbabc35bffc0968a6508df852dc9463"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee796ae274aa47c321aa32d84515e0d9801525d8eb9c2b3283be5e0669e4233dcf5932a3ebe37c9378693de9d9a1ebbfe950b9f76c2e272297cf4d4c9dc7d1b7"
        },
        {
          "alg" : "SHA-384",
          "content" : "ea39572c095e7ff97dd3d6a15f0959b901849a52feeeec081ed14f20dfc3a41c494037f8f4eda15d25cb5af1be96f044"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0815b55b29e96974438c677a37a2b7ac0073e06f234134cfef0b4c71ed32cbd70a725836da502aeef1232515c4d115d2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d9a303224d6e68b265868ab9411d439d1d25a7e747fa5afe4127b4e6914cf4f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2db1eed71cad675aa8a400810dba929159538046f7519fbcced8988b8d11751775a449b1a6bd8caecbd62b840ca801d8772746c05b92c4e881f667efdce57dd9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://turbine.apache.org/fulcrum/fulcrum-pool"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/TRB"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/turbine-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/turbine/fulcrum/tags/fulcrum-pool-1.0.5"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.fulcrum",
      "name" : "fulcrum-factory",
      "version" : "1.1.1",
      "description" : "Fulcrum Factory Service",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c202c7e96e86788e79ac38cb11b080a"
        },
        {
          "alg" : "SHA-1",
          "content" : "e43eca7a0a0bed664bfeb6987b4aadc4e665c706"
        },
        {
          "alg" : "SHA-256",
          "content" : "160998a6edefd81f6f1257a1064fce46ae892a14bb82b0fd7e8d9102fa7bb3a6"
        },
        {
          "alg" : "SHA-512",
          "content" : "61343fe074212a2e74faacd4e5e5eaa966c84526aa4315b6e16b4fe44241fc99fce4795aa85c65e5aac0b5f8177e78c8b0e4b849133e67b1438601640276b98c"
        },
        {
          "alg" : "SHA-384",
          "content" : "195f74d5850afa0289b055fd1c95a474e0c665f98580354893d3b023b746f7eba5412eb9d1b11e45982cd756fc5c98b1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1d2c54a41e7031afcf30cc63cf2767959e015bd566ea6b7b20bdcefe198ea54935bccfa32e802d507eb61489873cfb53"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a7fbc0233679a94e44fd772868048b950b86426e0ceb589bbac394f39540d70"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c196baad97c04f138231fc52830f7873a9de4bf388325a48ef7e90fec35d0d53722f429e622ed06f7a06c3249a60558c9b6ddfaf0eef0f19881bee42896b7ad6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://turbine.apache.org/fulcrum/fulcrum-factory"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/TRB"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/turbine-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/turbine/fulcrum/tags/fulcrum-factory-1.1.1"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
        "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
        "pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar",
        "pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"
      ]
    }
  ]
}