<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:daa350c0-b486-3237-a48d-dc4e41775784" version="1" xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <lifecycles>
      <lifecycle>
        <phase>build</phase>
      </lifecycle>
    </lifecycles>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.8.1</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
            <hash alg="MD5">42c73e70d517b359d40b757c368d68fc</hash>
            <hash alg="SHA-1">c66892e13fb7ed7b8105cb5a280fa767d9e0bf12</hash>
            <hash alg="SHA-256">566681b9fcb1b0178e101cd899d2ea399e2039255e208a1a477bc079158dbdc5</hash>
            <hash alg="SHA-512">93d7b7421ee2d91f84930e75a52864952f26fee96114740dab477ee5f0e62b6448759ad5a160f1749650379f771941100c7fd84ed523b2407d2004b928998ecb</hash>
            <hash alg="SHA-384">04b0c71c1b79f77e723e7db96c72705f50172e94df5a7f28edbd96024b886fff65f61f37fc77abb1d12b0809813ae665</hash>
            <hash alg="SHA3-384">eafa68c2c25670f0b77c5db3acdfd97cfe97dfc50c47bba2103353327b049b9bbac0d8b621b1168200ddf21719048c73</hash>
            <hash alg="SHA3-256">2c07b6997ba0e40ca3b66e39cfcf101fcebdceaa19fce0baf12e013cf392466e</hash>
            <hash alg="SHA3-512">636f068843bad92259885cd4d427630619864c0172bd1b41df15c33a7d411767ab09cf2ff339a97fda149ee44c95a162fdf6cb12de19e2dc0250c2fadc80d882</hash>
          </hashes>
        </component>
      </components>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-security-torque@4.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-security-torque</name>
      <version>4.0.0</version>
      <description>Fulcrum Security Torque Impl is an implementation of the Fulcrum Security API
    that uses Apache DB Torque as a database backend.</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-security-torque@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://turbine.apache.org/fulcrum/fulcrum-security/fulcrum-security-torque</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/turbine-fulcrum-security/tree/fulcrum-security-4.0.0-candidate</url></reference></externalReferences>
    </component>
    <properties>
      <property name="maven.goal">makeBom</property>
      <property name="maven.scopes">compile,provided,runtime,system</property>
      <property name="cdx:reproducible">enabled</property>
    </properties>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-security-api@4.0.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-security-api</name>
      <version>4.0.0</version>
      <description>Fulcrum Security Basic API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">107cc612f2a62445560f2934faeebad3</hash>
        <hash alg="SHA-1">3e007ef285cf951b6c283065854f9bd52eb7e795</hash>
        <hash alg="SHA-256">dbb1cf3a27a57311d6d1278409d4434a1a543c53a1b61dc6bb0d62fb7f96635f</hash>
        <hash alg="SHA-512">ae886074d2d673a01c6b50247d9387196a77715f9aebde65dea67ab9d3917e3090a89208646115548f68f6d08fb283b415b4fa1867d5662c8cf88a504c1d57dd</hash>
        <hash alg="SHA-384">dd4dce920e5dbdcde20db2e61bf1ae4ecfd02a7403cc66e547b3f4ac29b190d10a5b174ccdf94137d858167bc129415c</hash>
        <hash alg="SHA3-384">8b686d37d086f4b93a4ff17c9ae0f0656b3329c65443a0e381015ddc3e8c6945cb8deb7aba3a1da5a16cf127e03d5af6</hash>
        <hash alg="SHA3-256">d595b2a1cb31a165c6ed4a775646440335293c1b74109b5ea25cce7ac3c4e337</hash>
        <hash alg="SHA3-512">6dfb38c4a35c8f6a82c967aabf4389bd3aca7c0ee92ea7c2c587015f71d62134f0e14612767147c84f96fa84026748e6f40bc6f70bcc9c2ed58b35a26647d51e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-security-api@4.0.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://turbine.apache.org/fulcrum/fulcrum-security/fulcrum-security-api</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>https://github.com/apache/turbine-fulcrum-security/tree/fulcrum-security-4.0.0-candidate</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-lang3</name>
      <version>3.14.0</version>
      <description>Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">4e5c3f5e6b0b965ef241d7d72ac8971f</hash>
        <hash alg="SHA-1">1ed471194b02f2c6cb734a0cd6f6f107c673afae</hash>
        <hash alg="SHA-256">7b96bf3ee68949abb5bc465559ac270e0551596fa34523fddf890ec418dde13c</hash>
        <hash alg="SHA-512">0338b50767166e5746ada6d6aa2e071e7221d699323bfb629f7f204b294c1dc4cad140610a129ed751798443b43e74e0818989c7df7d33c5915aa29742be9ba8</hash>
        <hash alg="SHA-384">908d0a22dc17aaa04caa5104cff7cad5b88b77eecb78dd5b3b3fefa22ff71ac50a4fb9e31c897ac243f9d841e4b3453d</hash>
        <hash alg="SHA3-384">8a7f2e061b998780870eddd571620fbf3d3c70bcb54e24539d0db504f59d65bc6bda58136284498babe29fcc5eabb7a6</hash>
        <hash alg="SHA3-256">022bf1f8039fcea717e9e34dd96eb80cfff05b43c9cbb76e9739b2421e2d027c</hash>
        <hash alg="SHA3-512">0bcbc4edce974ea970c46e2da12ec98d9fd962c2cf64f757ac97136dec5623ca52af0c225895303c17ffabb57090e6772d7bd326d5e7438cef5454f8bbaeecfa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-lang/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LANG</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-lang.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.fulcrum/fulcrum-crypto@1.0.8?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.fulcrum</group>
      <name>fulcrum-crypto</name>
      <version>1.0.8</version>
      <description>Fulcrum Crypto Service</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e1befc830bfedd555a706a7026cd17a7</hash>
        <hash alg="SHA-1">06d1b907591e530d07889d12581f43fc2737c0dc</hash>
        <hash alg="SHA-256">8a6b1d778d720f535bb8bc71d4efcc0371c283618f9d31abc44145fa6c4f7c0d</hash>
        <hash alg="SHA-512">4e55d5594135cf0760c92309e7ad423a111eb79af0effb1672b346b2013be9494f983ecf8e1705f37578c8a922b2aa2802c3cdbdaec9e72ff7cb6da357aeb9a2</hash>
        <hash alg="SHA-384">1a335512894540146f77b421344693120bb65f8831bdfedef6083fad2020ee49069d46ff4af19d7ef0f7a75335654e0a</hash>
        <hash alg="SHA3-384">8ef66a4adecf6cc8b2e72d707633ad78a73808acc564aa47b08f290348b361ca8c1492f33e7b062739e9dc6b2d94d03b</hash>
        <hash alg="SHA3-256">b08fafc699232e3bf240956f4320a0fcb1f23bc7ae0a29428a39f68818055fb3</hash>
        <hash alg="SHA3-512">20d8f37937045839fa3c0616193e3dadf0d676f2476282a498f7fcc79aa4f2561a7bc9ba8efdc6d847cd12a58331aadf9c2aa4a00867666d9afb9e0de793cec8</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.fulcrum/fulcrum-crypto@1.0.8?type=jar</purl>
      <externalReferences><reference type="website"><url>http://turbine.apache.org/fulcrum/fulcrum-crypto</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/TRB</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/turbine-dev/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/turbine/fulcrum/tags/fulcrum-crypto-1.0.8</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.11</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">567159b1ae257a43e1391a8f59d24cfe</hash>
        <hash alg="SHA-1">3acb4705652e16236558f0f4f2192cc33c3bd189</hash>
        <hash alg="SHA-256">e599d5318e97aa48f42136a2927e6dfa4e8881dff0e6c8e3109ddbbff51d7b7d</hash>
        <hash alg="SHA-512">d9586162b257386b5871e7e9ae255a38014a9efaeef5148de5e40a3b0200364dad8516bddd554352aa2e5337bec2cc11df88c76c4fdde96a40f3421aa60650d7</hash>
        <hash alg="SHA-384">9ae3d8fd4c38f3af52c76c5f98039109901cb0f70700e6d9999b27cc4b30b188e2688aa4adcf6b846376bc3ca125907a</hash>
        <hash alg="SHA3-384">bd272e22540371e7d834cd897bce9be657293ba9c5584e0d47a4073711dacb524cc59e294e942ffc01613d17ac7d6ac1</hash>
        <hash alg="SHA3-256">90ec34f9701a8b212c65e6167c505ea6417289f910deedcac8517075b8349728</hash>
        <hash alg="SHA3-512">101bc04efae2bd16d7923e61bca922c4a006b0e4b34909e0f8865196cb4df4f4f6269737c17880b4dfd0309cb487b806e88d09c6e1a7dc70237563b3f4312f7f</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.11?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/codec/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.torque/torque-runtime@6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.torque</group>
      <name>torque-runtime</name>
      <version>6.0</version>
      <description>Torque parent project</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">efbf53ef3ba883447d7cf6d4e57f3d16</hash>
        <hash alg="SHA-1">f5637cd2981236da0bb7a04fa976dfd38edb2422</hash>
        <hash alg="SHA-256">d1da8d2973bfc8ddac8c3d6e5cc3e35857d690d9fdb343c3f35f4ee31de1a005</hash>
        <hash alg="SHA-512">787d8283adc76994a351a6ee287bd842d6f416722c64106406d82d8630a3a2ca73ec8e7414dd5f54b677d9a7704ac7044cc4a261ecc7299501f6b6e33bd13a19</hash>
        <hash alg="SHA-384">35a912f78d6f3e9cd6d71df9efeba34883f7bf808c727a56a7319809618fe614a5d69d11aa4e7dd1fce54fd0b22ff49b</hash>
        <hash alg="SHA3-384">f37031f1d652304ea853ff1878de36aa39af591e1a57af43f898870f8124be23538d0c8d447be4a88119fa8fe88cb01e</hash>
        <hash alg="SHA3-256">843e9b01de8bf3c1c24f683beced06efb0b5dd9859f8b0bd8fb9f98f7c0c5211</hash>
        <hash alg="SHA3-512">987ee78bda8dd49882b4f646f26279602062d284f7f676d541af0b3f5a15443b4cf681e7f2ac0963c93c423332f5ae10a9a639a504d67cf1c910b2f22f58331c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.torque/torque-runtime@6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://db.apache.org/torque/torque-runtime/</url></reference><reference type="build-system"><url>https://ci-builds.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/TORQUE</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/db-torque-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/db/torque/tags/torque-6.0/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-configuration2@2.10.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-configuration2</name>
      <version>2.10.1</version>
      <description>Tools to assist in the reading of configuration/preferences files in various formats; requires Java 8.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">498c46d864b060515ae497e3af9c34fe</hash>
        <hash alg="SHA-1">2b681b3bcddeaa5bf5c2a2939cd77e2f9ad6efda</hash>
        <hash alg="SHA-256">d5642131fbd7d85e9a4b824c52711528a1dde0a7866dfbd22a8711dbabd9eabc</hash>
        <hash alg="SHA-512">7a65df0e624d04415985030398431d022da562ff2a60237cee685ee81b3f2987c3fc89ee2dbf2596ca3985cf43dba221484420741493a72116b6e6aa8404f78b</hash>
        <hash alg="SHA-384">34617446cd39a51657c1f3a1e36c1a9fdd743c34935f459282bcd5b504e8fce6edc4b3f6a048bee7dc07ead45ba30191</hash>
        <hash alg="SHA3-384">3e7dafb1aa20bdac454cac69d1f397dd7e456a038c3eecdda45caf5cc6586a8fbb3f0ec77197f21469f9f864591708f8</hash>
        <hash alg="SHA3-256">56b87a5f163f0227dc011d24bf53002d75e6a19014f3ab4701144f274b2174de</hash>
        <hash alg="SHA3-512">fa3a6e9b470b7eeed52a99bfd1c33d66cc291d2209daa1982a5cd313f976535e8fa66cfb1308fcbeed925cc0734877504ba527ad88005b9821ad12b76399d01c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-configuration2@2.10.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-configuration/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-configuration/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CONFIGURATION</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-configuration.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-beanutils</group>
      <name>commons-beanutils</name>
      <version>1.9.4</version>
      <description>Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">07dc532ee316fe1f2f0323e9bd2f8df4</hash>
        <hash alg="SHA-1">d52b9abcd97f38c81342bb7e7ae1eee9b73cba51</hash>
        <hash alg="SHA-256">7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a</hash>
        <hash alg="SHA-512">7762b348caecead49038a38a89754ff7d9be6199324315495ba47cf24f52c06faadf9306d925c8fe47c587589a939c82e491e1c730267fdf354243a68c0f96ff</hash>
        <hash alg="SHA-384">dcd3845917b8fb189cf4034b0d7c6d266ec7110f85ffbd2711cdea9eb94b4fa3e1cee9120b484c6a120b82769230ed3a</hash>
        <hash alg="SHA3-384">dfdb8845989be083de807184910124ad7e7e372959b34686cd5f5020f193a2997831ead497b0a5a0233f031aecdf55f6</hash>
        <hash alg="SHA3-256">127a81068335d6ca47f5f5e12d849dc1bc5300b2ad8d3f9b64ca30ff2a76d479</hash>
        <hash alg="SHA3-512">f67405d0a7667adf7cd35cd7416c54e1759380cdb9c8f179a10175058e40292808e17e69d48df4d4d6b5e268c314127cf3ab87af6920a271bb2e6e0df963940d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-beanutils/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/BEANUTILS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/beanutils/tags/BEANUTILS_1_9_3_RC3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-collections</group>
      <name>commons-collections</name>
      <version>3.2.2</version>
      <description>Types that extend and augment the Java Collections Framework.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">f54a8510f834a1a57166970bfc982e94</hash>
        <hash alg="SHA-1">8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5</hash>
        <hash alg="SHA-256">eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8</hash>
        <hash alg="SHA-512">51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16</hash>
        <hash alg="SHA-384">dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073</hash>
        <hash alg="SHA3-384">8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40</hash>
        <hash alg="SHA3-256">fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e</hash>
        <hash alg="SHA3-512">c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-collections/commons-collections@3.2.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/collections/</url></reference><reference type="build-system"><url>https://continuum-ci.apache.org/</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/COLLECTIONS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/commons/proper/collections/trunk</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-jcs3-core</name>
      <version>3.2</version>
      <description>Apache Commons JCS is a distributed, versatile caching system.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7724af7d1a5a85336ec10841962faebb</hash>
        <hash alg="SHA-1">b0fb7d549ab353e14fb20afb699e0b544b40ea2d</hash>
        <hash alg="SHA-256">747f3df6d92c45d6409dd9d54f4f2898ecaf1a48295c38f876c75429ab11c730</hash>
        <hash alg="SHA-512">d0cb062661dd869a6ccb3ca74c48bfbae6004a8441d34fd0fba5db751e6366851a181f7c332332141d247edabef66b0ae347070037db2ef4b4ffadc2abb5ea4f</hash>
        <hash alg="SHA-384">531abaa0a0abdc71983eff75b63778855d9e0a24effdeb682b9f7acf789c558fa6ab0a72a3b4828f0e35a9f39ac1ac33</hash>
        <hash alg="SHA3-384">ab80621e038f9bba5ec62a4e936783b85a58d3c83533feff28fe2ac39073f7568a1968db282a61e1f9f6a42d9ed2471b</hash>
        <hash alg="SHA3-256">cf1debe81bcedebc4cfd760b01edc9f90226d363c519bafabc2269c50bb36b19</hash>
        <hash alg="SHA3-512">c69dbd95ea343995e391197a5ed85819e6279af9deb7fdf767cb110c0381cb578275a6bf03c9ed1ebcc4467e19832b76eab736d805152bf4ced95348a8ed56b5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://commons.apache.org/proper/commons-jcs/commons-jcs3-core/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://issues.apache.org/jira/browse/JCS</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/jakarta-jcs-users/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-jcs.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.avalon.framework</group>
      <name>avalon-framework-api</name>
      <version>4.3.1</version>
      <description>Avalon Framework API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">7c543869a7eb2bad323a54e873973acf</hash>
        <hash alg="SHA-1">2dacadeb49bc14420990b1f28897d46f96e2181d</hash>
        <hash alg="SHA-256">bca4c94b5e53acee3c97fe11cce0749d682d5591bf4a217cd45273adeb08c60f</hash>
        <hash alg="SHA-512">cfb68cb59fd86a4dd1352bef5c1e538dccb7525d1ab81c89ad1aa50e6885966c28e01fc2d8a4d7c7f519bb8239a5de2207e54f665bdb3a34103f0c7a16e1e8be</hash>
        <hash alg="SHA-384">61d2e9079de88eb1908cf711f27ca3242511acf619950ec2adc9bf70a4d2f474ff1e0c4bca940500f770d9d1a76c11f5</hash>
        <hash alg="SHA3-384">a74ab0deabe4d0d12e851a5e51ebf5e55ddbf6acaebcb1faeea4d006cc9caeb37c820528ed2d331858fe55d6eeac8888</hash>
        <hash alg="SHA3-256">740958726cea095c0143215db074cbf0a7974fb49d4cff8e111de88820d8eabb</hash>
        <hash alg="SHA3-512">8e7f42d535e29550050223c9ebb6262b104e864afdd3bdd23b7874968b2152c78a9a834bda7fb884130aa1434d476046db2901b2af89f412e18040e360d72cf1</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.apache.org/excalibur/avalon-framework/avalon-framework-api/</url></reference><reference type="distribution-intake"><url>file:///Users/jheymans/tmp/stagingrepo</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://svn.apache.org/repos/asf/excalibur/tags/excalibur-first-maven2-release</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-text</name>
      <version>1.12.0</version>
      <description>Apache Commons Text is a set of utility functions and reusable components for the purpose of processing
    and manipulating text that should be of use in a Java environment.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">544add6fbc8d4b100b07c3692d08099e</hash>
        <hash alg="SHA-1">66aa90dc099701c4d3b14bd256c328f592ccf0d6</hash>
        <hash alg="SHA-256">de023257ff166044a56bd1aa9124e843cd05dac5806cc705a9311f3556d5a15f</hash>
        <hash alg="SHA-512">7d198cc288e4d515f37c81d0dcd1210bce3594d2a06a11f6a78566d33c33acdb4f292b0b42c87281b69fe3af891966bca708e25fa29b1b3536e9f951f5b57d7c</hash>
        <hash alg="SHA-384">4f471c41486a396f25e6956750440aa05c294778ae1ffaafba1f8596f0d49da45b56ad829d59343900fca7c0db461bbe</hash>
        <hash alg="SHA3-384">685ab7392554fd43e5ec7fcd1f6faab19a74d0541927e947334ac9ae1e97e6d12590998f091ef4293738e3763999a6cc</hash>
        <hash alg="SHA3-256">ed3e3bb796583c58c587be9c692cef80f6e7496120963d9b47cef453d2b6f20d</hash>
        <hash alg="SHA3-512">f5fcacd33f37676d354c836329c41347a4023f851ec0b24785c64c46c72c609dc64599413f2a6a3ecab4e45fcdbb3b487ca36a9b67fcd1c457bd09e1b5530137</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-text</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/TEXT</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-text.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-dbcp2</name>
      <version>2.12.0</version>
      <description>Apache Commons DBCP software implements Database Connection Pooling</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cb9f32fd70bcd816f68ebc611dbfed35</hash>
        <hash alg="SHA-1">45698ece9fda230d0b1c96282c03ce1ebbd6c3ce</hash>
        <hash alg="SHA-256">9b81ea663b9db255bcec6b08a9245edd05bddb155c49343eef09b6d81558ed3e</hash>
        <hash alg="SHA-512">f0a30c8115f9e497eda15c66c5b2e87e97ed9196100d6afd4513640c62727d014821ad55fb26c063465e710c94aefa08507ed0c4054fbca11aa8ba1234e2ff2b</hash>
        <hash alg="SHA-384">1dd2e4550fc0b936c281c0b4dc717eca4d8eb91e8132ac565fdf68561e06b289d957fe31888204a66990222e96758990</hash>
        <hash alg="SHA3-384">ed8e1cf5246193c8b14f3aee842ac3316c0ea17b549956d80b461c920d6d25a13934f44270ec9a5121cdccb659445d88</hash>
        <hash alg="SHA3-256">c3db03c98559cdf104ee152ff3daaf0e51f506556d1eae9171f029ff51a04581</hash>
        <hash alg="SHA3-512">7142d1df8c092a80a6f9981495fee0daabe6336d8caeb6a2ade99b99e84b46efd3b80a482b1b94f09169fee0ebf66f0f201454496107d1e6954d51f670aa97aa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-dbcp/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/DBCP</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-dbcp.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.commons</group>
      <name>commons-pool2</name>
      <version>2.12.0</version>
      <description>The Apache Commons Object Pooling Library.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">0516bf5ac1549e8ba78f6b7c49d09ed2</hash>
        <hash alg="SHA-1">458563f69fbdaebf7daadfe10dc3a22e42a7de50</hash>
        <hash alg="SHA-256">6d3bd18df8410f3e31b031aca582cc109342358a62a2759ebd0c4cdf30d06f8b</hash>
        <hash alg="SHA-512">08fb9fda3eddfb9c2ba85df3ae882225f9974fc43c18f4cb45de0483fde8a99b59683dbc8e4696eea1db671cb0686dcf0fce66f58aa45d63786f8362ec3c5ac2</hash>
        <hash alg="SHA-384">5319c1fa371d7a0cf8b433f17d2ed7c839d0144d0d56f6fc95cf30bfb27def98d2c5ad394e97a237e4c8bbcccc1d2d48</hash>
        <hash alg="SHA3-384">a0ed1cbad968837ca37f5ef821526aabd12a2ca5cb4c1296f5d1b7bca02157df17668d4610258581f9a9b8e588a329b6</hash>
        <hash alg="SHA3-256">36bdcea6a7dd8d6470944bfec9161eb486bffe6ace0e583246c1a75590897a2f</hash>
        <hash alg="SHA3-512">8bf326f7939801963655a61b13caa36f5983abfd0604d6dd6cfb5c9ea076f044335849de3e46687208c8a5c95387dc11ded5d597927456ae2da3c1ee607adbd4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-pool/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-pool/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/POOL</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-pool.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-logging</group>
      <name>commons-logging</name>
      <version>1.3.0</version>
      <description>Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">522cc4b1f42b7db1554474cb989adfb2</hash>
        <hash alg="SHA-1">f5e064b541f5c5fbc5e4fb49c4e8cd4eabb3afd6</hash>
        <hash alg="SHA-256">66d3c980470b99b0c511dad3dfc0ae7b265ec1fb144e96bc0253a8a175fd34d9</hash>
        <hash alg="SHA-512">481c3bf16acceb349d2da7db5b66ea367c4093f795247bf53f5206f77260a0ae6ad636996cac4d074aaaf9788ba39d1428ced7f4348d1d56439bdb257196ee23</hash>
        <hash alg="SHA-384">0ee61469e506f8557b76088c6445b6a36e1abe909488f4f116f7b2ba6d8148078b21917c62fbf404df569d4d39c567ee</hash>
        <hash alg="SHA3-384">be252f5fd75d9fa70c03c807fe8197c724587ebede2022e944ee32a7eea5a99d45a952b3602237e39ff27235efec34e5</hash>
        <hash alg="SHA3-256">fdd14cd684ef70bc13a0b6ddc021bcdf4be220c41d41de5c1198263de617213a</hash>
        <hash alg="SHA3-512">e2f077b481eed92b09c1f076f407d5ff4e3c0b863a9daa9faff1d3fd2ee6dbb1c5c4178101cd511c2977887396679f38b09d096e81c614185f2c05b626a3f7fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/commons-logging/commons-logging@1.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-logging/</url></reference><reference type="build-system"><url>https://github.com/apache/commons-parent/actions</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/LOGGING</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf/commons-logging</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar">
      <publisher>EE4J Community</publisher>
      <group>jakarta.transaction</group>
      <name>jakarta.transaction-api</name>
      <version>1.3.3</version>
      <description>Jakarta Transactions</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cc45726045cc9a0728f803f9db4c90c4</hash>
        <hash alg="SHA-1">c4179d48720a1e87202115fbed6089bdc4195405</hash>
        <hash alg="SHA-256">0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab</hash>
        <hash alg="SHA-512">764ade8ba807682dcd1ec7382c35275f3d8ab09a03d5b45c48e732501190e2738269080aaf28aa8dd656c11ee84bfb7dae6953dd2768f2acecd3a8cf0ca4961e</hash>
        <hash alg="SHA-384">63adeb3c5eb24ad0147377436b6e3208d5e97c0e800e0e1e4cb3ba92699f1b06034c2ba00e3689aa8f909ee96c432db0</hash>
        <hash alg="SHA3-384">dd0a253f45dac003d40ebeed7f38b0850ff4b08941d55db5b3bbf4c936f94062d23799729ff718c54a565de2482bfd3d</hash>
        <hash alg="SHA3-256">d47afbaf1daba46c7aa107bf1b476857523738370309394958f96a2105686684</hash>
        <hash alg="SHA3-512">1b744b2d939a8d0a2bbd0be29c717af4a5e2374ca26fbb95a16df03aa55d2aa092e9314f20d5b080f02030ae1b70e4904ef0f8e1509680b9001153cdb7bc1934</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-2.0</id>
        </license>
        <license>
          <id>GPL-2.0-with-classpath-exception</id>
        </license>
      </licenses>
      <purl>pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar</purl>
      <externalReferences><reference type="website"><url>https://projects.eclipse.org/projects/ee4j.jta</url></reference><reference type="distribution-intake"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/eclipse-ee4j/jta-api/issues</url></reference><reference type="mailing-list"><url>https://dev.eclipse.org/mhonarc/lists/jta-dev/</url></reference><reference type="vcs"><url>https://github.com/eclipse-ee4j/jta-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-jcl@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-jcl</name>
      <version>2.23.1</version>
      <description>The Apache Log4j Commons Logging Adapter</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">86ad9c896f7f6f534e0e7c180f947abd</hash>
        <hash alg="SHA-1">293ddcca7baf5719e3e0e882c85de18bda8c86c3</hash>
        <hash alg="SHA-256">e14c9fb75eddb0afebe37d7a2d472494aadfd1b092874f18c8b4aaee671b12fa</hash>
        <hash alg="SHA-512">7f487e2e6d1da98e59cbbfd32ca8f730736d80439bcdc59807f174ba5054ca086a6bd0e418c9a2591e14cae0c258613fe34edd82adfbecaca0d8755b897b5330</hash>
        <hash alg="SHA-384">2f13356f1f11a51ed478e55acaeb6c117cfb8704bbb4ba58dc25b1d8f43365f0bcb078d7bdb915046a89ccac2a098d23</hash>
        <hash alg="SHA3-384">21514a0bcb886c99f40cd25f95d02501817e2bc1c60c3485d49e61f39ace7d5c0706c8c8bac0d068d0ec1fe768e20d7c</hash>
        <hash alg="SHA3-256">012e81cc038d0aa9bde0a2d17e3d20c51121d5a54c4136e4ad0a7c7204816a30</hash>
        <hash alg="SHA3-512">75aa734d06aaf399032e75bd4bf82acc35500122eba219f2ee8354011f6f43b8589faa67a2ddedc5b92dd849ea4ea2bf4a5574292e31e0f1ebd41c30158958b3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-jcl@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-jcl/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.logging.log4j</group>
      <name>log4j-1.2-api</name>
      <version>2.23.1</version>
      <description>The Apache Log4j 1.x Compatibility API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">1f411f575f9a78d132bdc595a581bff9</hash>
        <hash alg="SHA-1">f733b3c818352b0735cb59ca7987e2ce7848ee15</hash>
        <hash alg="SHA-256">4d0433042361e962656250e1568f0008c9fac2e48c74f53ca51563a14363b927</hash>
        <hash alg="SHA-512">609c87f770456b895646820d4ec5345b8d60c696a75228cb60b04d3875e6f3df6fba92f508e44a64f8d490fb1cae8fae28ba799e04a2e8ec6306ab52914d063d</hash>
        <hash alg="SHA-384">dc380d513bdcb460338627f875d97622d700d24967f6548f8bcb4fc52d59c5819bb84237fcce37bc377d426407f8df8b</hash>
        <hash alg="SHA3-384">fc935952e6741eee24ba2a511db25527d017cdfde58102b16731579fd711a21f45035d8c5873849c7ca12037b324f4bd</hash>
        <hash alg="SHA3-256">8bd798f25b6bcdeec046e5a698c09c7ac409d91f9cf3a22911e1a05d678bb870</hash>
        <hash alg="SHA3-512">ad295be02ebed11401b39deccc23951925cfa49d8dd0e6ff6c20490f9a7290002326a0bdee6b42ae10f79e9667c10aeddb0225faaa5091c7f16f3de7a1273b06</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/</url></reference><reference type="build-system"><url>https://github.com/apache/logging-log4j2/actions</url></reference><reference type="distribution"><url>https://logging.apache.org/logging-parent/latest/#distribution</url></reference><reference type="distribution-intake"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/apache/logging-log4j2/issues</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?log4j-user@logging.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/logging-log4j2</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-security-torque@4.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-security-api@4.0.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.torque/torque-runtime@6.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-jcl@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-security-api@4.0.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-crypto@1.0.8?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.fulcrum/fulcrum-crypto@1.0.8?type=jar">
      <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.11?type=jar"/>
    <dependency ref="pkg:maven/org.apache.torque/torque-runtime@6.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.10.1?type=jar"/>
      <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar"/>
      <dependency ref="pkg:maven/org.apache.avalon.framework/avalon-framework-api@4.3.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-jcl@2.23.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-configuration2@2.10.1?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-text@1.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-lang3@3.14.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"/>
    <dependency ref="pkg:maven/commons-beanutils/commons-beanutils@1.9.4?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-dbcp2@2.12.0?type=jar">
      <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"/>
      <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.commons/commons-pool2@2.12.0?type=jar"/>
    <dependency ref="pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3?type=jar"/>
    <dependency ref="pkg:maven/org.apache.commons/commons-jcs3-core@3.2?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-1.2-api@2.23.1?type=jar"/>
    <dependency ref="pkg:maven/org.apache.logging.log4j/log4j-jcl@2.23.1?type=jar">
      <dependency ref="pkg:maven/commons-logging/commons-logging@1.3.0?type=jar"/>
    </dependency>
  </dependencies>
</bom>
