<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a5261e32-c14e-3a8b-b00c-60ea2a0630b4" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.8.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">42c73e70d517b359d40b757c368d68fc</hash>
            <hash alg="SHA-1">c66892e13fb7ed7b8105cb5a280fa767d9e0bf12</hash>
            <hash alg="SHA-256">566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5</hash>
            <hash alg="SHA-512">93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb</hash>
            <hash alg="SHA-384">04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665</hash>
            <hash alg="SHA3-384">eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73</hash>
            <hash alg="SHA3-256">2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e</hash>
            <hash alg="SHA3-512">636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-parser</name>
      <version>4.0.0</version>
      <description>This Service functions as a repository for Parser components.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://turbine.apache.org/fulcrum/fulcrum-parser</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/turbine-fulcrum-parser/tree/fulcrum-parser-4.0.0-candidate</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeAggregateBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.avalon.framework</group>
      <name>avalon-framework-api</name>
      <version>4.3.1</version>
      <description>Avalon Framework API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c543869a7eb2bad323a54e873973acf</hash>
        <hash alg="SHA-1">2dacadeb49bc14420990b1f28897d46f96e2181d</hash>
        <hash alg="SHA-256">bca4c94b5e53acee3c97fe11cce0749d682d5591bf4a217cd45273adeb08c60f</hash>
        <hash alg="SHA-512">cfb68cb59fd86a4dd1352bef5c1e538dccb7525d1ab81c89ad1aa50e6885966c28e01fc2d8a4d7c7f519bb8239a5de2207e54f665bdb3a34103f0c7a16e1e8be</hash>
        <hash alg="SHA-384">61d2e9079de88eb1908cf711f27ca3242511acf619950ec2adc9bf70a4d2f474ff1e0c4bca940500f770d9d1a76c11f5</hash>
        <hash alg="SHA3-384">a74ab0deabe4d0d12e851a5e51ebf5e55ddbf6acaebcb1faeea4d006cc9caeb37c820528ed2d331858fe55d6eeac8888</hash>
        <hash alg="SHA3-256">740958726cea095c0143215db074cbf0a7974fb49d4cff8e111de88820d8eabb</hash>
        <hash alg="SHA3-512">8e7f42d535e29550050223c9ebb6262b104e864afdd3bdd23b7874968b2152c78a9a834bda7fb884130aa1434d476046db2901b2af89f412e18040e360d72cf1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/excalibur/avalon-framework/avalon-framework-api/</url></reference><reference type="distribution-intake"><url>file:///Users/jheymans/tmp/stagingrepo</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/excalibur/tags/excalibur-first-maven2-release</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar">
      <publisher>Eclipse Foundation</publisher>
      <group>jakarta.servlet</group>
      <name>jakarta.servlet-api</name>
      <version>6.1.0</version>
      <description>Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs,
        implementations of those APIs, and technology compatibility kits for Java runtimes
        that enable development, deployment, and management of server-side and cloud-native applications.</description>
      <scope>optional</scope>
      <hashes>
        <hash alg="MD5">314c930b3e40ac1abc3529c7c9942f09</hash>
        <hash alg="SHA-1">1169a246913fe3823782af7943e7a103634867c5</hash>
        <hash alg="SHA-256">8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4</hash>
        <hash alg="SHA-512">8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec</hash>
        <hash alg="SHA-384">48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248</hash>
        <hash alg="SHA3-384">2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617</hash>
        <hash alg="SHA3-256">4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3</hash>
        <hash alg="SHA3-512">07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.servlet</url></reference><reference type="distribution-intake"><url>https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/servlet-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/servlet-dev</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/servlet-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.13.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">3435b913691a5c1b173485a49850b1a8</hash>
        <hash alg="SHA-1">b7263237aa89c1f99b327197c41d0669707a462e</hash>
        <hash alg="SHA-256">82f528cf718c7a3c2f30fc5bc784e3c6a0a10b17605dadb9e16c82ede11e6064</hash>
        <hash alg="SHA-512">9cce41fd8bb2a24bcf8e75898190730d62b656af0d1a199202cd6cc848956b8cce4840ee616fb559c254fdff0bd09def9e65de6940a65bc7a07a386cec2bec0b</hash>
        <hash alg="SHA-384">cb663314025f3c2da314c0880e6928f5567cc448ded5deabd5cece5695e6fd0d4a84349fc7ee9638c732204dc3b26519</hash>
        <hash alg="SHA3-384">0642f12aef0ef38c8a6f5081f05de8bdc0e585b9556cd496c1df66b977746aefd2672a8941cdbcdaf169e5e2aba5d583</hash>
        <hash alg="SHA3-256">9ea297efa12a940dc9191a352256c9f89bddb30b40af603143775330c6bdb0a0</hash>
        <hash alg="SHA3-512">c08c8c538c21ab4ad7d7e5c1e5c27ef075acdf15177c777a33209ea095fb3e3be8a97d14f3dd86306e7c310a6dbe5be030a696b9f819848f6eeec045149ee091</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-pool2</name>
      <version>2.12.0</version>
      <description>The Apache Commons Object Pooling Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0516bf5ac1549e8ba78f6b7c49d09ed2</hash>
        <hash alg="SHA-1">458563f69fbdaebf7daadfe10dc3a22e42a7de50</hash>
        <hash alg="SHA-256">6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b</hash>
        <hash alg="SHA-512">08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2</hash>
        <hash alg="SHA-384">5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48</hash>
        <hash alg="SHA3-384">a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6</hash>
        <hash alg="SHA3-256">36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f</hash>
        <hash alg="SHA3-512">8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-pool/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-pool/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-pool.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-pool</name>
      <version>1.0.5</version>
      <description>Fulcrum Pool Service</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">19c042b1e0ef706ff8068b42dd9d70aa</hash>
        <hash alg="SHA-1">60a9ce4649801376de695f35fa82e2a5674914a1</hash>
        <hash alg="SHA-256">46fd541a8a2ca198eacababad59d9c0f3dbabc35bffc0968a6508df852dc9463</hash>
        <hash alg="SHA-512">ee796ae274aa47c321aa32d84515e0d9801525d8eb9c2b3283be5e0669e4233dcf5932a3ebe37c9378693de9d9a1ebbfe950b9f76c2e272297cf4d4c9dc7d1b7</hash>
        <hash alg="SHA-384">ea39572c095e7ff97dd3d6a15f0959b901849a52feeeec081ed14f20dfc3a41c494037f8f4eda15d25cb5af1be96f044</hash>
        <hash alg="SHA3-384">0815b55b29e96974438c677a37a2b7ac0073e06f234134cfef0b4c71ed32cbd70a725836da502aeef1232515c4d115d2</hash>
        <hash alg="SHA3-256">6d9a303224d6e68b265868ab9411d439d1d25a7e747fa5afe4127b4e6914cf4f</hash>
        <hash alg="SHA3-512">2db1eed71cad675aa8a400810dba929159538046f7519fbcced8988b8d11751775a449b1a6bd8caecbd62b840ca801d8772746c05b92c4e881f667efdce57dd9</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://turbine.apache.org/fulcrum/fulcrum-pool</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/turbine/fulcrum/tags/fulcrum-pool-1.0.5</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-factory</name>
      <version>1.1.1</version>
      <description>Fulcrum Factory Service</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">9c202c7e96e86788e79ac38cb11b080a</hash>
        <hash alg="SHA-1">e43eca7a0a0bed664bfeb6987b4aadc4e665c706</hash>
        <hash alg="SHA-256">160998a6edefd81f6f1257a1064fce46ae892a14bb82b0fd7e8d9102fa7bb3a6</hash>
        <hash alg="SHA-512">61343fe074212a2e74faacd4e5e5eaa966c84526aa4315b6e16b4fe44241fc99fce4795aa85c65e5aac0b5f8177e78c8b0e4b849133e67b1438601640276b98c</hash>
        <hash alg="SHA-384">195f74d5850afa0289b055fd1c95a474e0c665f98580354893d3b023b746f7eba5412eb9d1b11e45982cd756fc5c98b1</hash>
        <hash alg="SHA3-384">1d2c54a41e7031afcf30cc63cf2767959e015bd566ea6b7b20bdcefe198ea54935bccfa32e802d507eb61489873cfb53</hash>
        <hash alg="SHA3-256">6a7fbc0233679a94e44fd772868048b950b86426e0ceb589bbac394f39540d70</hash>
        <hash alg="SHA3-512">c196baad97c04f138231fc52830f7873a9de4bf388325a48ef7e90fec35d0d53722f429e622ed06f7a06c3249a60558c9b6ddfaf0eef0f19881bee42896b7ad6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://turbine.apache.org/fulcrum/fulcrum-factory</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/turbine/fulcrum/tags/fulcrum-factory-1.1.1</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-parser@4.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
      <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
    <dependency ref="pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.13.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-pool@1.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-factory@1.1.1?type=jar">
      <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
    </dependency>
  </dependencies>
</bom>
