<?xml version="1.0" encoding="UTF-8"?>
<bom serialNumber="urn:uuid:a944288c-028a-49cb-b11a-25cd7e17f31f" version="1" xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <timestamp>2023-06-18T08:18:20Z</timestamp>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin makeBom compile+provided+runtime+system</name>
        <version>2.7.6</version>
        <hashes>
          <hash alg="MD5">639c35c7f79c5514f3abe11247999b70</hash>
          <hash alg="SHA-1">649239e622d8d454bb9ab6fafd6746c85cd11b7d</hash>
          <hash alg="SHA-256">1e3bc10146c370fe8b8f0a2edcb64329907d61dbc2f445db6ac1034cd3221ce3</hash>
          <hash alg="SHA-512">894a4b5762d32c88cc58ae1a35a3cc3d45a3c494accadb31b55b5832af65f60c0f8164623521a81de73e3ed6a4c994cca0f1951c8368b9d07fb41c82eaa84bbd</hash>
          <hash alg="SHA-384">3c385acc773a41056fb58ea27096c8ec86d46d8bd74a2eee9cf0913051981611afc68cf13a88d31af16590a489a97c0e</hash>
        </hashes>
      </tool>
    </tools>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop/hadoop-maven-plugins@3.3.6?type=maven-plugin">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop</group>
      <name>hadoop-maven-plugins</name>
      <version>3.3.6</version>
      <description>Apache Hadoop Project POM</description>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop/hadoop-maven-plugins@3.3.6?type=maven-plugin</purl>
      <externalReferences><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference></externalReferences>
    </component>
  </metadata>
  <components>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-plugin-api@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-plugin-api</name>
      <version>3.0.5</version>
      <description>The API for plugins - Mojos - development.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">cbe2f575d378fc6163c157a0e6af42a3</hash>
        <hash alg="SHA-1">958b87b581d46e7958b39733b0cc600927e8521e</hash>
        <hash alg="SHA-256">469505f75b8526a338cfd7e0ec841655ae52ddbcc1b36482e97d72f52ce7d890</hash>
        <hash alg="SHA-512">ea51e1348ce70d979533a23826a7f55a59a34621d676ed266bc2c1e04f7cd69194c92139863f61e006d232be6a97a1a7f38cd18187c0a0a0f04ef9c24638c4f3</hash>
        <hash alg="SHA-384">6c527b70d9e30b0960194cae10549606b190f27989b54e2b73a4d7bc8e2ae7b420fe349a5d40dfe0b7457d7344216865</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-plugin-api@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-plugin-api</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-plugin-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model</name>
      <version>3.0.5</version>
      <description>Model for Maven POM (Project Object Model)</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">40a2c5b201caf14b90faa27fd55f9515</hash>
        <hash alg="SHA-1">490d7489dd73137f6afef52c5a3e465201c533bf</hash>
        <hash alg="SHA-256">876a76b663db6c7326ad234afe430c473d3261a06b3284f31d5eb4889d1c3084</hash>
        <hash alg="SHA-512">99dc3ee42d8eb18bb73c57975cdae3fd583a1d68c220458f8dad24618d809d234873cdb6d5f90923148637f801130109b17a593e32b0882adfcb23810a0865d3</hash>
        <hash alg="SHA-384">dbc9ef4622dc4c969dc5dc5be2b4ed5da7c6fc1cc342820bd27ae2613c91d4439b9bed95362c66187a7ac7421e17f405</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-model</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-model</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-artifact@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-artifact</name>
      <version>3.0.5</version>
      <description>Maven is a project development management and
    comprehension tool. Based on the concept of a project object model:
    builds, dependency management, documentation creation, site
    publication, and distribution publication are all controlled from
    the declarative file. Maven can be extended by plugins to utilise a
    number of other development tools for reporting or the build
    process.</description>
      <hashes>
        <hash alg="MD5">37818c6f0ef84b6338fdd1520e9831db</hash>
        <hash alg="SHA-1">7cd9aa7425c4a967bd39c2f6f61ab9535570fcb4</hash>
        <hash alg="SHA-256">c6d5e244dd2329971f91b8df666ffe9e0b00a7dd014d6ee073b6f6cb82877f5c</hash>
        <hash alg="SHA-512">bba5a0c4b3c6168e4e44c5220ed1c6c9e5c557d6e5a083fcfb791cf5ff45047804368f9e1c23a23bc1e77de66544e4e5052cf9498f98dcbcaa38cd3da28bec9c</hash>
        <hash alg="SHA-384">2ed0da133e333670f47fc7bcca9638b3c68a74b1bf02ff0c58be2621607b4c804ad79668ff43856e13860c62a769d348</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-artifact@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-artifact</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-artifact</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-inject-plexus@2.3.0?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-inject-plexus</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">5c35e512b479cc0d1c830c0cc9452504</hash>
        <hash alg="SHA-1">7d8ecdce497bf361b83cfbc890670ca50d6ec299</hash>
        <hash alg="SHA-256">bf9083fb846993689409b2bdbc735048e53bac6cc32707cde7ef84817b6e9365</hash>
        <hash alg="SHA-512">567989f567eebee14cc2aa6dc93923aa9c79896c7b123c49c054ad7cbcb31c0bea166b4aed2df7af485f9b967f506a1811ce91ac9fd2c9a0bca80df5bea8d588</hash>
        <hash alg="SHA-384">91333886d9308e3960ab714d55b7f205259db6eb6674bf9928632e1fcaa932ff43dd1c0e2974e71865dd724ae4a720a6</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-inject-plexus@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sisu.sonatype.org/sisu-inject/containers/guice-bean/guice-plexus/sisu-inject-plexus/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/sisu/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SISU</url></reference><reference type="mailing-list"><url>sisu-dev-subscribe@sonatype.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-inject-bean@2.3.0?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-inject-bean</name>
      <version>2.3.0</version>
      <hashes>
        <hash alg="MD5">27a128e32326472ebfec3a7b8cb2cdf9</hash>
        <hash alg="SHA-1">4767ee22f0b84fc0fe3af2095c30bfbdafba9459</hash>
        <hash alg="SHA-256">75819b29737c2bee1bfbda1011d455c7036738e0ef32ffbf85ba1d8fa157ceb2</hash>
        <hash alg="SHA-512">2543b09ee4a1fb2bf4ad93f819bbed5bad6e019812ad05e73f6557f0266dd14d73632134127f22552f348cc0e0e5100719f95c04085cb7df94e3186a1ddd9314</hash>
        <hash alg="SHA-384">8b943a15446f7ed534aad65e7b6dba860954fc0a60bcc2dafb2b3b55d53c5bf080dc9bc59be4bb67a4911f04f8cf377e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-inject-bean@2.3.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://sisu.sonatype.org/sisu-inject/containers/guice-bean/sisu-inject-bean/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/sisu/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SISU</url></reference><reference type="mailing-list"><url>sisu-dev-subscribe@sonatype.org</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.1.0?classifier=no_aop&amp;type=jar">
      <publisher>Google, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-guice</name>
      <version>3.1.0</version>
      <description>Patched build of Guice: a lightweight dependency injection framework for Java 5 and above</description>
      <hashes>
        <hash alg="MD5">19f877ae736fa153a545d0cf801dcec9</hash>
        <hash alg="SHA-1">97c87d15d749c86b2be1b9809b28321a1d926c7f</hash>
        <hash alg="SHA-256">4b76079f35407e5682aac1ecbe67afd5f430ae619044a9d6a413666a45750c25</hash>
        <hash alg="SHA-512">5d71d57203ce8b6ca76f502f79396691833bd28f7ed7315ba68736f7f35c037af054c9dba60eb914bfc0f76e27a7a273d0d75d0ce127ef753e13f299f21c4e8b</hash>
        <hash alg="SHA-384">375c7ca393ebd402e304578f2c3f27a329f091d77f6a30f8908ff3302d9331b91538cf3e02d326c3e9d615d57d2dc287</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-guice@3.1.0?classifier=no_aop&amp;type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/google-guice/sisu-guice/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/sisu-guice/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/google-guice/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/google-guice/topics</url></reference><reference type="vcs"><url>http://github.com/sonatype/sisu-guice/sisu-guice</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.sisu/sisu-guava@0.9.9?type=jar">
      <publisher>Google, Inc.</publisher>
      <group>org.sonatype.sisu</group>
      <name>sisu-guava</name>
      <version>0.9.9</version>
      <description>Patched build of Guava: Google Core Libraries for Java 1.5+</description>
      <hashes>
        <hash alg="MD5">36484b30beda10de99c56801db4657e0</hash>
        <hash alg="SHA-1">91395a7816ad64c5ef68e1a1b5b861463f0eb3e2</hash>
        <hash alg="SHA-256">9897e80ff6c08fc45b5b5ebd81d9e943a1087bdf0ad50cda457d616abbdaacd9</hash>
        <hash alg="SHA-512">c4962c3f3f430acf0f35578bacef16e57227724cb568a308b53442bb4fb6d143111f6fc0036b95e0bf929a7cebc19176e91294aca128ef2d4c7bd9141acb99e5</hash>
        <hash alg="SHA-384">ca900a30b554ea21477b048c17c49c3083c348fb7e0b33b847b3dfc5387aae8a37a47558ab9208e2ebf273e7b74817f6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.sisu/sisu-guava@0.9.9?type=jar</purl>
      <externalReferences><reference type="website"><url>http://code.google.com/p/guava-libraries/sisu-guava/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/sisu-guava/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://code.google.com/p/guava-libraries/issues/</url></reference><reference type="mailing-list"><url>http://groups.google.com/group/guava-discuss/topics</url></reference><reference type="vcs"><url>http://github.com/sonatype/sisu-guava/sisu-guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-core@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-core</name>
      <version>3.0.5</version>
      <description>Maven Core classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">ee0bd82403231f5e268fd85044027221</hash>
        <hash alg="SHA-1">27659b27346aff66d36e8ab16c7050220d875bca</hash>
        <hash alg="SHA-256">ac8e617f951ecde3c4f6bca4922fdd7861500fe7d58289f26ad5adac443075bc</hash>
        <hash alg="SHA-512">83b49b87ef49c96213c281f315e12ca0913b1da3436e1e92ffc6feb7e6fcb9e3f5eb0e9fdcdfc870ce4235dcecfc633da7eb18cb0403ee7876a13c4a60246a02</hash>
        <hash alg="SHA-384">c3650d44dd90309d86361f1abb5ab6fcb6a0c711f49d24534d90c46471643c7719746f495c649b992da66a589b50c733</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-core@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-core</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings</name>
      <version>3.0.5</version>
      <description>Maven Settings model.</description>
      <hashes>
        <hash alg="MD5">a608e0ce2bffaf9f89418e657746c894</hash>
        <hash alg="SHA-1">8e98d918ba2b41175d72307853f792e3bded4fc7</hash>
        <hash alg="SHA-256">d8f9f237afc21d8202eedffa29cbf6e9d46c78b3c22b217d16267216988221b9</hash>
        <hash alg="SHA-512">60dce85d270618f1f1d3398bda0b94731e1ac4ca785b1e45211d492d1a46472d28550327fe93819f726eab8750120c8317bdd3a544b80b25af2618f6aec80886</hash>
        <hash alg="SHA-384">9918f65e23239e7197ff3734404b375446aea452f514d58890ae6036482ee5b48ee1a8e707f7bfbfecb69c62070a6cf3</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-settings</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-settings</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-settings-builder@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-settings-builder</name>
      <version>3.0.5</version>
      <description>The effective settings builder, with inheritance and password decryption.</description>
      <hashes>
        <hash alg="MD5">9446d7885d57cd95170f1c2cccd89564</hash>
        <hash alg="SHA-1">7b87eb83abd6efa77e51882bbebc1b316739c681</hash>
        <hash alg="SHA-256">ac0e62e26b7f690e265ba75667531973b8a2da12b3b0ff102a612f05b42b6faf</hash>
        <hash alg="SHA-512">e2ee3c0548cd087e08e5dfdd29b5d0b72c3fd83b0d9f547b85eca7ee350563c827d6d8765670c5ac3c586ec37b070981c582243b233ac1f341471b39d6cb8f81</hash>
        <hash alg="SHA-384">b1311dc483a5a6429bae29e002c4434ce8d28bad96113069ee57519a77f8325d9de7efd7ad50de6696d7fffb6ab104dd</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-settings-builder@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-settings-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-settings-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-repository-metadata</name>
      <version>3.0.5</version>
      <description>Per-directory local and remote repository metadata.</description>
      <hashes>
        <hash alg="MD5">2b5e8628b7d1d32829437dd1dc66f97a</hash>
        <hash alg="SHA-1">94475fff77103ae46a1b02284a0950ed74497fc3</hash>
        <hash alg="SHA-256">c867b4e075a4548bf27422542f96b159f94c4e7ffaaf6427b10433afd6a3a38c</hash>
        <hash alg="SHA-512">9f806ca9eaf1ca375200fc3a70c4893a0300408f95a0131d2a0a050c811e5e1a52948ed96a9e49333369a9153c89df9245ed03fb732cc1557861715eecf78d44</hash>
        <hash alg="SHA-384">0581013fcdc88f2288e165541c5a31617cd1bd953ea0a7b5f6c0fa0cd88e887f98b826981510bd991af1cbb6adf71ee4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-repository-metadata@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-repository-metadata</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-repository-metadata</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-model-builder@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-model-builder</name>
      <version>3.0.5</version>
      <description>The effective model builder, with inheritance, profile activation, interpolation, ...</description>
      <hashes>
        <hash alg="MD5">98198ff5698781c9bf48b081bad49e62</hash>
        <hash alg="SHA-1">f1e0b49ebe74335c11c93eec7549c65291053bc9</hash>
        <hash alg="SHA-256">45a2c6ff76e12678eaf576bd7a68d028c5a5ba85fdc216a381ea86e9187e1b51</hash>
        <hash alg="SHA-512">aa90bb839656faf7742ffc6b1f505cb2e3e6645847d7d7f1b0405972b3d2effb56206ef7110a0e012fe98fd634554f53b9551355163157e4490f9f3bcae0de8f</hash>
        <hash alg="SHA-384">4d20d1f73b5dc4f914378f38165bcb17d816666394a2fc960345d5f11cb82c0582e19d41f19e804720d23bfca200229a</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-model-builder@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-model-builder</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-model-builder</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven/maven-aether-provider@3.0.5?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven</group>
      <name>maven-aether-provider</name>
      <version>3.0.5</version>
      <description>This module provides extensions to Aether for utilizing the Maven POM and Maven repository metadata for artifacts resolution
    and download.</description>
      <hashes>
        <hash alg="MD5">aad430d4111400e0d78c4e79eb0f9797</hash>
        <hash alg="SHA-1">e0716af7536efeb1da5d90b12464fea2a6fb40ef</hash>
        <hash alg="SHA-256">c74327cd5d7b137c8be3591c766271ac8ace1a617518f0410b8a95579f9839b0</hash>
        <hash alg="SHA-512">da020c74fde8e8a26fa63a42fc3b9ae1d5a3d010a7bccd8c3e3d0226ec022cb7ed42c6c64dd856ab2066651d43a8267f9de474764eca28d35034a548fff53440</hash>
        <hash alg="SHA-384">bc6880393e2cf779bf7e67dbb4351960414fdd7787163b0a869e2f3c7552af9568af35704c3380ed7a4b14ca2cf69d3c</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven/maven-aether-provider@3.0.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://maven.apache.org/ref/3.0.5//maven-aether-provider</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-3.0.x/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/MNG</url></reference><reference type="mailing-list"><url>http://mail-archives.apache.org/mod_mbox/maven-dev</url></reference><reference type="vcs"><url>https://git-wip-us.apache.org/repos/asf?p=maven.git/maven-aether-provider</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.aether/aether-spi@1.13.1?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.aether</group>
      <name>aether-spi</name>
      <version>1.13.1</version>
      <description>The service provider interface for repository system implementations and repository connectors.</description>
      <hashes>
        <hash alg="MD5">3f1881f890062e779fa27aa9a6789ceb</hash>
        <hash alg="SHA-1">c62b02d2a5a3939fded72039dd83e5b8ed42d45e</hash>
        <hash alg="SHA-256">d5de4e299be5a79feb1dbe8ff3814034c6e44314b4c00b92ffa8d97576ded5b3</hash>
        <hash alg="SHA-512">96e427eba771424d78f52f1d48d0ef6a449ae34528bf92ed67ccc98a54cbeb73770fc13cf57523185b340cf759b1c0b54f24d61878845e6012bf4e67229b9989</hash>
        <hash alg="SHA-384">fe6b6981fe768c195597c1a543af4e2e6e5d591511c7c737820901d4ea24f446842af02870be04b38d570688c09ec5fa</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.aether/aether-spi@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aether.sonatype.org/aether-spi/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/aether/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AETHER</url></reference><reference type="mailing-list"><url>aether-dev-subscribe@sonatype.org</url></reference><reference type="vcs"><url>http://github.com/sonatype/sonatype-aether/aether-spi</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.aether/aether-impl@1.13.1?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.aether</group>
      <name>aether-impl</name>
      <version>1.13.1</version>
      <description>An implementation of the repository system.</description>
      <hashes>
        <hash alg="MD5">4236e1586cfdd28f032bcf71293f6bb1</hash>
        <hash alg="SHA-1">ba2656934fa7c0f20c0c3882873dc705e16ae201</hash>
        <hash alg="SHA-256">865511994805827e88f327944a089142bb7f3d88cde271ba3dceb732cb137a93</hash>
        <hash alg="SHA-512">65a7cf4c8f33c93fa5488ce1db21a17c463a83b04781e39149f6a5e697d942b479abaea6c005fc90f3e07c73648452a134d105e11698911ea7eb6e49f330f84e</hash>
        <hash alg="SHA-384">2cfc5eec903e28313155f663881ddcb633ded63021f7c86671e113fcccd68c5c0b9dc0e91528965b5eadc4de6108c904</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.aether/aether-impl@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aether.sonatype.org/aether-impl/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/aether/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AETHER</url></reference><reference type="mailing-list"><url>aether-dev-subscribe@sonatype.org</url></reference><reference type="vcs"><url>http://github.com/sonatype/sonatype-aether/aether-impl</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.aether</group>
      <name>aether-api</name>
      <version>1.13.1</version>
      <description>The application programming interface for the repository system.</description>
      <hashes>
        <hash alg="MD5">6438f4b31d3f3220d88edc16abdc3721</hash>
        <hash alg="SHA-1">e48292eae5e14ec44978aa53debb1af7ddd6df93</hash>
        <hash alg="SHA-256">ae8dc80232771f8913febfa410c5719e9ba8ded81fb99788e214fd676dbbe13f</hash>
        <hash alg="SHA-512">334f3c43b4357a25d402442847cdf4a5e9142a29cbe533818dd06bbee3b20e781b210159982b650319f29e3dfb3d9eca7cd21a6445988355e91b4f81021f0954</hash>
        <hash alg="SHA-384">140c7848c1ec916e1118c659a26793f64746399741a092017ed15f726e72718ca2f5ccfe9a60c8aa7b30bb77bdebd6eb</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aether.sonatype.org/aether-api/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/aether/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AETHER</url></reference><reference type="mailing-list"><url>aether-dev-subscribe@sonatype.org</url></reference><reference type="vcs"><url>http://github.com/sonatype/sonatype-aether/aether-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar">
      <publisher>Sonatype, Inc.</publisher>
      <group>org.sonatype.aether</group>
      <name>aether-util</name>
      <version>1.13.1</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <hashes>
        <hash alg="MD5">119757ef761de4a43c763622dcb1f56e</hash>
        <hash alg="SHA-1">c8487ceb499b9ced96694731810acd1a70e13aca</hash>
        <hash alg="SHA-256">687799a0ce988bee9e8eb9ae0ba870300adc0114248ad4a4327bdb625d27e010</hash>
        <hash alg="SHA-512">8c6162244bfb17e9f319a1e8f071cebef0484f39e2d0329f87ec05ec994c388a77d74031ff76c735d7c9d0b681860c032d2720a423c6547de010954639dea1e2</hash>
        <hash alg="SHA-384">2a3d55e09aa07ba4b0168400b0de76dbd214aebfbc87cffe0e8d60882731aa65e661e10546e3335a9403801c15d79a8f</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://aether.sonatype.org/aether-util/</url></reference><reference type="build-system"><url>https://builds.sonatype.org/job/aether/</url></reference><reference type="distribution"><url>https://repository.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/AETHER</url></reference><reference type="mailing-list"><url>aether-dev-subscribe@sonatype.org</url></reference><reference type="vcs"><url>http://github.com/sonatype/sonatype-aether/aether-util</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-interpolation</name>
      <version>1.14</version>
      <description>The Plexus project provides a full software stack for creating and executing software projects.</description>
      <hashes>
        <hash alg="MD5">f92db8b194fc417d72cc74c428afacf8</hash>
        <hash alg="SHA-1">c88dd864fe8b8256c25558ce7cd63be66ba07693</hash>
        <hash alg="SHA-256">7fc63378d3e84663619b9bedace9f9fe78b276c2be3c62ca2245449294c84176</hash>
        <hash alg="SHA-512">d83880dc325fb8443571a6342f5d749000b9d9a276e2e6e30f1a5d136d8e5522bc4c3a4e876ce8e72a5705dfc06acc8dc84a8887442b592e850229b31cfcfbe7</hash>
        <hash alg="SHA-384">d75d53812987880603042b486c9aed2043a24a603afd70173f8847047152d57619a3657f73ba175a7f395e990bb6f0af</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-components/plexus-interpolation</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLXCOMP</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-components/tags/plexus-interpolation-1.14</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar">
      <publisher>Codehaus Plexus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-utils</name>
      <version>3.1.0</version>
      <description>A collection of various utility classes to ease working with strings, files, command lines, XML and
    more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">bfec331a62402081dd4143e3a8d193e4</hash>
        <hash alg="SHA-1">60eecb6f15abdb1c653ad80abaac6fe188b3feaa</hash>
        <hash alg="SHA-256">0ffa0ad084ebff5712540a7b7ea0abda487c53d3a18f78c98d1a3675dab9bf61</hash>
        <hash alg="SHA-512">3805c57b7297459c5e2754d0fd56abd454eee08691974fb930ebb9b79a529fd874f16d40cec66e7fd90d4146c9d1fef45cdb59f9e359fce0c48ac77526fc320d</hash>
        <hash alg="SHA-384">2f2b5f791adacf36428671ba92fff6fb0a6a009f92c8a4b1cc0e3a700edf725152a76b805c77551b24a62e62adc59561</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://codehaus-plexus.github.io/plexus-utils/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://github.com/codehaus-plexus/plexus-utils/issues</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/codehaus-plexus/plexus-utils</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.4?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-classworlds</name>
      <version>2.4</version>
      <description>A class loader framework</description>
      <hashes>
        <hash alg="MD5">4b6ec19d96af7d901c1aad7d2415d498</hash>
        <hash alg="SHA-1">ef38ff5c25f83a4a02fcd9843d85f3e47012873e</hash>
        <hash alg="SHA-256">259d528a29722cab6349d7e7d432e3fd4877c087ffcb04985a6612e97023bba8</hash>
        <hash alg="SHA-512">f8bec409f9ef75a591351c36c647eefbc47f966828dc84d4d198a7e986b2776665c7eadfbf9398f88937d4d37139a5b922376784c5180744a57f8171f9e19444</hash>
        <hash alg="SHA-384">75eba7b24d912a6b6de67613f7a4f5dc9cfc6c910d72243ab078b46bc8e2d7b8397491314435dc2b4ad0b53722c98d7e</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-classworlds@2.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-classworlds/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://github.com/sonatype/plexus-classworlds</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar">
      <publisher>Codehaus</publisher>
      <group>org.codehaus.plexus</group>
      <name>plexus-component-annotations</name>
      <version>1.5.5</version>
      <description>Plexus Component "Java 5" Annotations, to describe plexus components properties in java sources with
    standard annotations instead of javadoc annotations.</description>
      <hashes>
        <hash alg="MD5">ef37dcdb84030422db428b63c4354e5b</hash>
        <hash alg="SHA-1">c72f2660d0cbed24246ddb55d7fdc4f7374d2078</hash>
        <hash alg="SHA-256">4df7a6a7be64b35bbccf60b5c115697f9ea3421d22674ae67135dde375fcca1f</hash>
        <hash alg="SHA-512">2ea4afb8888f157483c6a8e99852fa8a80e90a3cf0756b3b22c73a8bc59a4aa3d7b50b975a1d810f28a090023b268dab49af14e8f8e33c7553fa61315afe06b2</hash>
        <hash alg="SHA-384">94193ec354f65fa8427b4b5115d1f47cb3bd70b0589c612cb5c604d8a2ddf0cce1d8683bf70c5576c27fc3dad33f0ac0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar</purl>
      <externalReferences><reference type="website"><url>http://plexus.codehaus.org/plexus-containers/plexus-component-annotations/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>http://jira.codehaus.org/browse/PLX</url></reference><reference type="mailing-list"><url>http://archive.plexus.codehaus.org/user</url></reference><reference type="vcs"><url>http://fisheye.codehaus.org/browse/plexus/plexus-containers/tags/plexus-containers-1.5.5/plexus-component-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-sec-dispatcher</name>
      <version>1.3</version>
      <hashes>
        <hash alg="MD5">53160199f5667de3fca69b723173639b</hash>
        <hash alg="SHA-1">dedc02034fb8fcd7615d66593228cb71709134b4</hash>
        <hash alg="SHA-256">3b0559bb8432f28937efe6ca193ef54a8506d0075d73fd7406b9b116c6a11063</hash>
        <hash alg="SHA-512">8b609608e4ce1346fdd3a0793d66dbdb893d6af046594ccc456eaceabca3f7a251cc8a6f1cad22fc17688911d0842cc84fa2303027fdf241c77f4078905aaacd</hash>
        <hash alg="SHA-384">539392b84ed3dfeeaa97c42a4befa559a05d18baabcadda2537b18fe8f340e11823ce0646e8931b92a4cfb24cd39d981</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-sec-dispatcher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-sec-dispatcher-1.3</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar">
      <group>org.sonatype.plexus</group>
      <name>plexus-cipher</name>
      <version>1.4</version>
      <hashes>
        <hash alg="MD5">7b2d6fcf0d5800d5b1ce09d98d98dcaf</hash>
        <hash alg="SHA-1">50ade46f23bb38cd984b4ec560c46223432aac38</hash>
        <hash alg="SHA-256">5a15fdba22669e0fdd06e10dcce6320879e1f7398fbc910cd0677b50672a78c4</hash>
        <hash alg="SHA-512">deb948be3a9f6a2fa74adca17e54b1074948267b3a35dd4000d92c559d0387650770ccee096ad8f01dd51c36caf63878dc0bcf57dfb1f2e3e1a9d51204096617</hash>
        <hash alg="SHA-384">29d6722d6d4c412a98ed95f1fd6620047b22ce8d7e3160bcc49ca616a016b57be0c4d35daa8896ef93a80bcff77725ec</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://spice.sonatype.org/plexus-cipher</url></reference><reference type="build-system"><url>https://grid.sonatype.org/ci/view/Spice/</url></reference><reference type="distribution"><url>http://repository.sonatype.org/content/repositories/releases</url></reference><reference type="issue-tracker"><url>https://issues.sonatype.org/browse/SPICE</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/plexus-cipher-1.4</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugin-tools</group>
      <name>maven-plugin-annotations</name>
      <version>3.6.0</version>
      <description>Java annotations to use in Mojos</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">c26580fde2323b86d67de4ec22baf2ae</hash>
        <hash alg="SHA-1">e3ce624bc4af77c9dbe2d609851c4082a4da7bc4</hash>
        <hash alg="SHA-256">9e2434820dd2ba44ad70a66e5b2a9993a2a8b047ceabc3e850e4858cbf3f91c3</hash>
        <hash alg="SHA-512">d89c289195a992f566d44ee277600eee8269bbe19d5e0c7df9c7290279bf6845e522c44a82d9a9fb2d806cbbca5a458343194a3580ea5b8c18acc87ac4e813b0</hash>
        <hash alg="SHA-384">f41bd9357cfdf539c7c46e92d9cd3c1a8d88f8742c501d138d35a19b3839d9e28a8c4cef4139f3e6171e74270d55be71</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugin-tools/maven-plugin-annotations</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-plugin-tools/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MPLUGIN</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-plugin-tools/tree/maven-plugin-tools-3.6.0/maven-plugin-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-io</group>
      <name>commons-io</name>
      <version>2.8.0</version>
      <description>The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">21ba575792e2694c39af13918a80550b</hash>
        <hash alg="SHA-1">92999e26e6534606b5678014e66948286298a35c</hash>
        <hash alg="SHA-256">02f291e5d1243dc143496e3cbbb40a1ced47aa58f2d633d3e38780cd068d5074</hash>
        <hash alg="SHA-512">72040ed293a083f979c3f23b00c359195cf0e4c227a9cb962d99804cbe07d86e24d2864aa8c533bb79e4ad1f83d3d17f290c8c24630410eb80734d6d1266e7ec</hash>
        <hash alg="SHA-384">13cb963b3b8bd821f3d3c0e7bea787f9b0e78b35073a4132e6d865c289e3293978096a4fe51a5deb04e297ba4db644a5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-io/commons-io@2.8.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-io/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/IO</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://gitbox.apache.org/repos/asf?p=commons-io.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.7.1?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-databind</name>
      <version>2.12.7.1</version>
      <description>General data-binding functionality for Jackson: works on core streaming API</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">5c2dab5ceb80bddf3350ecc90bd99314</hash>
        <hash alg="SHA-1">48d6674adb5a077f2c04b42795e2e7624997b8b9</hash>
        <hash alg="SHA-256">3f504cac405ce066d5665ff69541484d5322f35ac7a7ec6104cf86a01008e02d</hash>
        <hash alg="SHA-512">16e718c25929fd608e9d4f59bbd345f8c5269b8f907e926d3312c8ce04298e7e5ee756a7e0ac214f9b181369af78047ff28d10c5ae6541480ff6ac288db92f22</hash>
        <hash alg="SHA-384">f008ce8248d957dbd249a4add4e4cf30290760915ddb289846779c63e5cd0eed76aaf70ebbcc6df8f2d946bd1063e575</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.7.1?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-databind/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-databind</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.7?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-annotations</name>
      <version>2.12.7</version>
      <description>Core annotations used for value types, used by Jackson data binding package.</description>
      <hashes>
        <hash alg="MD5">a9f4e4700f6670614028753302a995ed</hash>
        <hash alg="SHA-1">2042461b754cd65ab2dd74a9f19f442b54625f19</hash>
        <hash alg="SHA-256">3cacef714a89f3d68b69fa11263afa55a6aa2fdef1fff93ded22caa16b54687c</hash>
        <hash alg="SHA-512">732e3b150cbbaf8b898776b5d6213247be30814f2fb587861caf6ae9460896d67522882e414a93b6c2b7390959878608bc7376962460cb8f15ef5fdb5ab086f7</hash>
        <hash alg="SHA-384">906f1f74d43e3a60f43ee957bafb5bc5750e933b6b71dac0c7125a56f5727a849062bb62f1c6ba789bef20fc5e68b7cb</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.7?type=jar</purl>
      <externalReferences><reference type="website"><url>http://github.com/FasterXML/jackson</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-annotations/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.7?type=jar">
      <publisher>FasterXML</publisher>
      <group>com.fasterxml.jackson.core</group>
      <name>jackson-core</name>
      <version>2.12.7</version>
      <description>Core Jackson processing abstractions (aka Streaming API), implementation for JSON</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">e90114f7c87c241568606cc9e2c61cb1</hash>
        <hash alg="SHA-1">04669a54b799c105572aa8de2a1ae0fe64a17745</hash>
        <hash alg="SHA-256">3987a6a335046e226e56b81d69668fb5a91b155ea7fd96b0851adbb7d4ac1ca6</hash>
        <hash alg="SHA-512">cd40c6bd75e8901a0bd94a7f7334468addc0622e0ad6ecd93ff0b17acbf8e1e9644a8d065cc5716016aefa97244bc2cdd3c119828d3b55d12a87b375063ce04c</hash>
        <hash alg="SHA-384">1ae6da6fa9afe18b99c0a14e885e532b68c2666f9dbadb2e24972660a5e020d26b5f0aa40b5099a50e70191e66dfd7d6</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.7?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/FasterXML/jackson-core</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/FasterXML/jackson-core/issues</url></reference><reference type="vcs"><url>http://github.com/FasterXML/jackson-core</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.plugins/maven-shade-plugin@3.2.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.plugins</group>
      <name>maven-shade-plugin</name>
      <version>3.2.1</version>
      <description>Repackages the project classes together with their dependencies into a single uber-jar, optionally renaming classes
    or removing unused classes.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">6edc58e5b733a26ef3c554fac40703b3</hash>
        <hash alg="SHA-1">fde20989f12e9b736ff3e556e21bf6d6f222505f</hash>
        <hash alg="SHA-256">51073f8bb6d0b66dc09ba83c958a9a36a99c32ed9b3b8328bd7803788b9a8662</hash>
        <hash alg="SHA-512">6aa09271cccd2f1f1a36a294d74bdbe262ee22747f6aed9007b6b222d815c4dad973ae61709d63025fdaa12b747bf0f868cee5ce9448f6b47067a998332fde3b</hash>
        <hash alg="SHA-384">98936aefb4f36ea1b3c476efeb7e77bba4a22e0b89ccde3014d9308273521d01f3a26952ae98ed5421d9ab9d5233a514</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.plugins/maven-shade-plugin@3.2.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/plugins/maven-shade-plugin/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven-shade-plugin/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHADE</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-shade-plugin/tree/maven-shade-plugin-3.2.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.10.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-artifact-transfer</name>
      <version>0.10.0</version>
      <description>An API to install, deploy and resolving artifacts with Maven 3</description>
      <hashes>
        <hash alg="MD5">d51208696e8a0ca6da6abddc482c72df</hash>
        <hash alg="SHA-1">cb0bc696b1c2380efe81ed2bd628b50d56a3a09b</hash>
        <hash alg="SHA-256">6f919f97c9272263fa910cfe7fa88595982a0451e7d7b121cca8ac85f6162882</hash>
        <hash alg="SHA-512">75dadb4d3b771f963e874f9ffa5fbf003af646a19c9dfe02f2780c83ce91580448f5e4b1962b04a97bd7420c2704740b3d47e54c112cf1add2f6006f36611fcc</hash>
        <hash alg="SHA-384">347081603e4c3858c8c8666ced2e82a7e9fbc9c48dcb4f073c4806ba96bfb80a4052d2d4bf6e925072fd546b69d6cd73</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.10.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-artifact-transfer/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-box/job/maven-artifact-transfer/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/component/12327114</url></reference><reference type="mailing-list"><url>https://lists.apache.org/list.html?users@maven.apache.org</url></reference><reference type="vcs"><url>https://github.com/apache/maven-artifact-transfer/tree/maven-artifact-transfer-0.10.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-common-artifact-filters</name>
      <version>3.0.1</version>
      <description>A collection of ready-made filters to control inclusion/exclusion of artifacts during dependency resolution.</description>
      <hashes>
        <hash alg="MD5">2a31f16b223195ce9a6dd7d7a6777b3b</hash>
        <hash alg="SHA-1">1a98d8e3d5610bb0abf09a7756195e8b2ed215e5</hash>
        <hash alg="SHA-256">b291bd2d46ecd42ba26938a78ec053eedb240e5a3eef3ffc82c46ecafa95c306</hash>
        <hash alg="SHA-512">e213ec789f11876cc62a04befbf83e3ed7cdd2de25541b22593645b65f0ac74c1b3d768960feaf50ad39bc606c3c17ff741c1a9b85c855317a438008ca884392</hash>
        <hash alg="SHA-384">fb8c59b674a1899ea82755977469757dc2b6a002cfa595dfd034376e38d5a957a5cee70ba2882874e422671932ea287b</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-common-artifact-filters/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/component/12326431</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-common-artifact-filters-3.0.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.1.0?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-shared-utils</name>
      <version>3.1.0</version>
      <description>Shared utils without any further dependencies</description>
      <hashes>
        <hash alg="MD5">fae66822468c5f3e7853d1193f98b849</hash>
        <hash alg="SHA-1">78d8798fe84d5e095577221d299e9a3c8e696bca</hash>
        <hash alg="SHA-256">88e5334c4c29a6e81c74a1d814c54a9a3b1e4fc6560a95da196fe16928095471</hash>
        <hash alg="SHA-512">e6de41cf0f1e76684d2cdc06276efb5c95d83ef054792635477ca0e429dcb8c3b0d4c25a9e2e7e417363052e79348c15df232983013828df916d63ce5e9f528d</hash>
        <hash alg="SHA-384">9aba1144f9742ce93c478c8391e18085b40cdb353d266572c52c11ae1164471bd4ac99a71410eacae686018d12ee8e79</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-shared-utils@3.1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-shared-utils/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/component/12326452</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-shared-utils-3.1.0</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>commons-codec</group>
      <name>commons-codec</name>
      <version>1.15</version>
      <description>The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.</description>
      <hashes>
        <hash alg="MD5">303baf002ce6d382198090aedd9d79a2</hash>
        <hash alg="SHA-1">49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d</hash>
        <hash alg="SHA-256">b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63</hash>
        <hash alg="SHA-512">da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787</hash>
        <hash alg="SHA-384">05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/commons-codec/commons-codec@1.15?type=jar</purl>
      <externalReferences><reference type="website"><url>https://commons.apache.org/proper/commons-codec/</url></reference><reference type="build-system"><url>https://builds.apache.org/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/CODEC</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/commons-user/</url></reference><reference type="vcs"><url>https://github.com/apache/commons-codec</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar">
      <publisher>QOS.ch</publisher>
      <group>org.slf4j</group>
      <name>slf4j-api</name>
      <version>1.7.36</version>
      <description>The slf4j API</description>
      <hashes>
        <hash alg="MD5">872da51f5de7f3923da4de871d57fd85</hash>
        <hash alg="SHA-1">6c62681a2f655b49963a5983b8b0950a6120ae14</hash>
        <hash alg="SHA-256">d3ef575e3e4979678dc01bf1dcce51021493b4d11fb7f1be8ad982877c16a1c0</hash>
        <hash alg="SHA-512">f9b033fc019a44f98b16048da7e2b59edd4a6a527ba60e358f65ab88e0afae03a9340f1b3e8a543d49fa542290f499c5594259affa1ff3e6e7bf3b428d4c610b</hash>
        <hash alg="SHA-384">2b14ad035877087157e379d3277dcdcd79e58d6bdb147c47d29e377d75ce53ad42cafbf22f5fb7827c7e946ff4876b9a</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.slf4j.org</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://github.com/qos-ch/slf4j/slf4j-api</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar">
      <publisher>ObjectWeb</publisher>
      <group>org.ow2.asm</group>
      <name>asm</name>
      <version>5.0.4</version>
      <description>A very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">c8a73cdfdf802ab0220c860d590d0f84</hash>
        <hash alg="SHA-1">0da08b8cce7bbf903602a25a3a163ae252435795</hash>
        <hash alg="SHA-256">896618ed8ae62702521a78bc7be42b7c491a08e6920a15f89a3ecdec31e9a220</hash>
        <hash alg="SHA-512">afee8f98ee21771f104318d95b839d9ea6ea083157bd62d8bc3462d9302dc20ea939d1b4ae2222f92f09b92bc9ab1317aff02734007f716cc805fe49b92a8a5a</hash>
        <hash alg="SHA-384">84f68859e74fc5a1bbb32bad682b3554ba0b4177f1e152991defe37151bdc31c1378da2876fe995c19445ca793260170</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm@5.0.4?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.objectweb.org/asm/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>http://forge.objectweb.org/tracker/?group_id=23</url></reference><reference type="mailing-list"><url>http://www.objectweb.org/wws/arc/asm</url></reference><reference type="vcs"><url>http://svn.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/trunk/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-commons</name>
      <version>7.0</version>
      <description>Usefull class adapters based on ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">770446a3d6e7f26ded138b5f04eae84f</hash>
        <hash alg="SHA-1">478006d07b7c561ae3a92ddc1829bca81ae0cdd1</hash>
        <hash alg="SHA-256">fed348ef05958e3e846a3ac074a12af5f7936ef3d21ce44a62c4fa08a771927d</hash>
        <hash alg="SHA-512">ca97b49eece30da774055b58a63c6e4f65a6bc4c0f40a829dcaf7164fbffdec10c6b2d9a22df0a0918fdc83a47ea9906294aa99d3f170b35fd9e0632578c80b2</hash>
        <hash alg="SHA-384">5096769c920a15959e64671e1b2191f4df6ea4a5b4b1e5655534818f57d6fe8cf4217683e845d214b863af8308a54fb2</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.org/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-tree</name>
      <version>7.0</version>
      <description>Tree API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">1879361985d6ccae30837cc3a4ce4d59</hash>
        <hash alg="SHA-1">29bc62dcb85573af6e62e5b2d735ef65966c4180</hash>
        <hash alg="SHA-256">cfd7a0874f9de36a999c127feeadfbfe6e04d4a71ee954d7af3d853f0be48a6c</hash>
        <hash alg="SHA-512">81a223620dd16340d18ecba20ab15cfe078f61ab0ec1aef091afcd282e3f6047b9800200412116289ec14917b5ece9414c8009e92cc9a3333c677b5bfec13bcf</hash>
        <hash alg="SHA-384">45542c2405b9c4e63d20cad99f73552e2f7a4c439f49b233f03c7d6c0dddc125ed4b837492eca431ca679c5d74c8f39d</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.org/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar">
      <publisher>OW2</publisher>
      <group>org.ow2.asm</group>
      <name>asm-analysis</name>
      <version>7.0</version>
      <description>Static code analysis API of ASM, a very small and fast Java bytecode manipulation framework</description>
      <hashes>
        <hash alg="MD5">eb378b389aef721ccd1486c1701e8454</hash>
        <hash alg="SHA-1">4b310d20d6f1c6b7197a75f1b5d69f169bc8ac1f</hash>
        <hash alg="SHA-256">e981f8f650c4d900bb033650b18e122fa6b161eadd5f88978d08751f72ee8474</hash>
        <hash alg="SHA-512">1a6ca169e9e2d29256f9c45570d89e5b039eaf7d405ccb3f7f79926552f2a0818975ce2c6adce3f1f59e28172e4303a1c790c52ab06263c61c9c8181ff279cee</hash>
        <hash alg="SHA-384">bdf9db7f450616fe8abe758198f198776e648f19900e9cfa159308529b963244562a825264c4859fbe89cb8f348c6ca4</hash>
      </hashes>
      <licenses>
        <license>
          <id>BSD-4-Clause</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar</purl>
      <externalReferences><reference type="website"><url>http://asm.ow2.org/</url></reference><reference type="distribution"><url>http://repository.ow2.org/nexus/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://gitlab.ow2.org/asm/asm/issues</url></reference><reference type="mailing-list"><url>https://mail.ow2.org/wws/arc/asm/</url></reference><reference type="vcs"><url>https://gitlab.ow2.org/asm/asm/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar">
      <publisher>JDOM</publisher>
      <group>org.jdom</group>
      <name>jdom2</name>
      <version>2.0.6</version>
      <description>A complete, Java-based solution for accessing, manipulating, 
		and outputting XML data</description>
      <hashes>
        <hash alg="MD5">86a30c9b1ddc08ca155747890db423b7</hash>
        <hash alg="SHA-1">6f14738ec2e9dd0011e343717fa624a10f8aab64</hash>
        <hash alg="SHA-256">1345f11ba606d15603d6740551a8c21947c0215640770ec67271fe78bea97cf5</hash>
        <hash alg="SHA-512">315791dc16bc6240d81da7fee9ae325102ff7db19a57805335d189bc747abc4d1c80144589ebf956613b93b2263c7565fdf171aca0c6c598616eb3f0bdf4cc58</hash>
        <hash alg="SHA-384">6240f6747c788c1d512aa1383ff5648dc1c528504010d1dea0667cfa7b291e5521ad70521a8753e52c057edbdc190d36</hash>
      </hashes>
      <licenses>
        <license>
          <name>Similar to Apache License but with the acknowledgment clause removed</name>
          <url>https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.jdom/jdom2@2.0.6?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.jdom.org</url></reference><reference type="mailing-list"><url>http://jdom.markmail.org/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1?type=jar">
      <publisher>The Apache Software Foundation</publisher>
      <group>org.apache.maven.shared</group>
      <name>maven-dependency-tree</name>
      <version>3.0.1</version>
      <description>A tree-based API for resolution of Maven project dependencies</description>
      <hashes>
        <hash alg="MD5">5c94d3d8b896f0e9f29295fd46cffaa0</hash>
        <hash alg="SHA-1">e9ae9966f1d3a238004c8b15ca4fd0e03d405424</hash>
        <hash alg="SHA-256">c7d0968a60678fcabd3f6e7ef32812c77f14bb964e66f4ae2b907d4efd675067</hash>
        <hash alg="SHA-512">ffb95b8d4722727bfefd95a66b928a13c51fbaa41849533c24591ac72037d0550cf5b54bb0221cd16e9d5a689e7e6efc62d1ecd3e1a8dbf503a4c8034b589fc4</hash>
        <hash alg="SHA-384">b7900f36f4e74884d8909a4a08dd4d4ceb033f039a84c7a828108b4e4e5548633ed21061717e4100b07958813aeed640</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://maven.apache.org/shared/maven-dependency-tree/</url></reference><reference type="build-system"><url>https://builds.apache.org/job/maven-shared/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://issues.apache.org/jira/browse/MSHARED/component/12326427</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/maven-users</url></reference><reference type="vcs"><url>http://svn.apache.org/viewvc/maven/shared/tags/maven-dependency-tree-3.0.1</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2?type=jar">
      <publisher>The Eclipse Foundation</publisher>
      <group>org.eclipse.aether</group>
      <name>aether-util</name>
      <version>0.9.0.M2</version>
      <description>A collection of utility classes to ease usage of the repository system.</description>
      <hashes>
        <hash alg="MD5">fc6315129d2e2063e2f2725e6337587f</hash>
        <hash alg="SHA-1">b957089deb654647da320ad7507b0a4b5ce23813</hash>
        <hash alg="SHA-256">7d62b0fdef90196ec4b2947f5973d750bfd3935785244e77cc06780131c404e9</hash>
        <hash alg="SHA-512">c1b57333a2306ae18c773c7f0c5daa16ec8b4cb521e65e8174791789ab801a6b7153c4e8fb08834a82b0a3510b5c7770e1d46a6d5344f2593be7c670edef0171</hash>
        <hash alg="SHA-384">0ed94faa821b00a9865b73480a56e4a1e2d180f076ea6e7649a2179e95f845b2e9cdac81f3206fce3995696b4313ea6b</hash>
      </hashes>
      <licenses>
        <license>
          <id>EPL-1.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.eclipse.org/aether/aether-util/</url></reference><reference type="build-system"><url>https://hudson.eclipse.org/hudson/job/aether-core-nightly/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://bugs.eclipse.org/bugs/buglist.cgi?query_format=specific&amp;order=relevance+desc&amp;bug_status=__open__&amp;product=Aether</url></reference><reference type="mailing-list"><url>http://dev.eclipse.org/mhonarc/lists/aether-dev/</url></reference><reference type="vcs"><url>http://git.eclipse.org/c/aether/aether-core.git/tree/aether-util/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar">
      <group>com.google.guava</group>
      <name>guava</name>
      <version>27.0-jre</version>
      <description>Guava is a suite of core and expanded libraries that include
    utility classes, google's collections, io classes, and much
    much more.</description>
      <hashes>
        <hash alg="MD5">0dc595a4dfd1f0cf268203c5c3bed367</hash>
        <hash alg="SHA-1">c6ad87d2575af8ac8ec38e28e75aefa882cc3a1f</hash>
        <hash alg="SHA-256">63b09db6861011e7fb2481be7790c7fd4b03f0bb884b3de2ecba8823ad19bf3f</hash>
        <hash alg="SHA-512">44b4b7b7b988586e3ee133d38cff60e70ba4fae3c993fb47ecf2e0cb68910a6095b388c5a9f61b34b9da9425725ee731a3e3236b358d935112b7755e34cbd484</hash>
        <hash alg="SHA-384">9f0424d27ab3a0e29a29e4637325d7bfe8e841f2eb5ddbdaff9c657ab0a4b72f3053ce7dd3fb2b1672418fbb41dff8e7</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/guava@27.0-jre?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/guava</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/guava</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar">
      <group>com.google.guava</group>
      <name>failureaccess</name>
      <version>1.0</version>
      <description>Contains
    com.google.common.util.concurrent.internal.InternalFutureFailureAccess and
    InternalFutures. Most users will never need to use this artifact. Its
    classes is conceptually a part of Guava, but they're in this separate
    artifact so that Android libraries can use them without pulling in all of
    Guava (just as they can use ListenableFuture by depending on the
    listenablefuture artifact).</description>
      <hashes>
        <hash alg="MD5">5649f9c63537d7dd13bed8073624e37a</hash>
        <hash alg="SHA-1">50bacb0bdbbeeda25142aff57e2214c402e1193c</hash>
        <hash alg="SHA-256">d084bef9cd07a8537a1753e4850a69b7e8bab1d1e22e9f3a1e4826309a7a2336</hash>
        <hash alg="SHA-512">dcb0c05ba42eff6dcb0fbc51782a9369017c00a243d7afed2355fd69bdfe0464d746f780bacfd4cc232fcb325f5f246f540986882d44d1b33d1e79a4e0308a94</hash>
        <hash alg="SHA-384">b8cfc3267b72aa6aeb686287793440b2cb514a283107b31bda11d9d191bffa8f63419267fb851b4b9763f2d657ff800d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/failureaccess@1.0?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/failureaccess</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/failureaccess</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar">
      <group>com.google.guava</group>
      <name>listenablefuture</name>
      <version>9999.0-empty-to-avoid-conflict-with-guava</version>
      <description>An empty artifact that Guava depends on to signal that it is providing
    ListenableFuture -- but is also available in a second "version" that
    contains com.google.common.util.concurrent.ListenableFuture class, without
    any other Guava classes. The idea is:

    - If users want only ListenableFuture, they depend on listenablefuture-1.0.

    - If users want all of Guava, they depend on guava, which, as of Guava
    27.0, depends on
    listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
    version number is enough for some build systems (notably, Gradle) to select
    that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
    conflict with the copy of ListenableFuture in guava itself. If users are
    using an older version of Guava or a build system other than Gradle, they
    may see class conflicts. If so, they can solve them by manually excluding
    the listenablefuture artifact or manually forcing their build systems to
    use 9999.0-....</description>
      <hashes>
        <hash alg="MD5">d094c22570d65e132c19cea5d352e381</hash>
        <hash alg="SHA-1">b421526c5f297295adef1c886e5246c39d4ac629</hash>
        <hash alg="SHA-256">b372a037d4230aa57fbeffdef30fd6123f9c0c2db85d0aced00c91b974f33f99</hash>
        <hash alg="SHA-512">c5987a979174cbacae2e78b319f080420cc71bcdbcf7893745731eeb93c23ed13bff8d4599441f373f3a246023d33df03e882de3015ee932a74a774afdd0782f</hash>
        <hash alg="SHA-384">caff9b74079f95832ca7f6029346b34b606051cc8c5a4389fac263511d277ada0c55f28b0d43011055b268c6eb7184d5</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/guava/listenablefuture</url></reference><reference type="build-system"><url>https://travis-ci.org/google/guava</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="issue-tracker"><url>https://github.com/google/guava/issues</url></reference><reference type="vcs"><url>https://github.com/google/guava/listenablefuture</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar">
      <group>com.google.code.findbugs</group>
      <name>jsr305</name>
      <version>3.0.2</version>
      <description>JSR305 Annotations for Findbugs</description>
      <hashes>
        <hash alg="MD5">dd83accb899363c32b07d7a1b2e4ce40</hash>
        <hash alg="SHA-1">25ea2e8b0c338a877313bd4672d3fe056ea78f0d</hash>
        <hash alg="SHA-256">766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7</hash>
        <hash alg="SHA-512">bb09db62919a50fa5b55906013be6ca4fc7acb2e87455fac5eaf9ede2e41ce8bbafc0e5a385a561264ea4cd71bbbd3ef5a45e02d63277a201d06a0ae1636f804</hash>
        <hash alg="SHA-384">ca0b169d3eb2d0922dc031133a021f861a043bb3e405a88728215fd6ff00fa52fdc7347842dcc2031472e3726164bdc4</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar</purl>
      <externalReferences><reference type="website"><url>http://findbugs.sourceforge.net/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>https://code.google.com/p/jsr-305/</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar">
      <group>org.checkerframework</group>
      <name>checker-qual</name>
      <version>2.5.2</version>
      <description>Checker Qual is the set of annotations (qualifiers) and supporting classes
        used by the Checker Framework to type check Java source code.  Please
        see artifact:
        org.checkerframework:checker</description>
      <hashes>
        <hash alg="MD5">04acc78b24bbd365423da357da003cf0</hash>
        <hash alg="SHA-1">cea74543d5904a30861a61b4643a5f2bb372efc4</hash>
        <hash alg="SHA-256">64b02691c8b9d4e7700f8ee2e742dce7ea2c6e81e662b7522c9ee3bf568c040a</hash>
        <hash alg="SHA-512">fb32e3893f9ebc956ef99066b219a8fc8049b47b80a7253cd89b7faadf0a2fa14d60b52dd5c2f4aaeb1db0359f49fec9e29d3616bd314ec8c82db1c657be8cd2</hash>
        <hash alg="SHA-384">62f90d15efb90c3691a577ca58c4b48209e294fda2cb9cf0873af5beb4f79dc4b33958474189d824853b768d2a19add9</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar</purl>
      <externalReferences><reference type="website"><url>https://checkerframework.org</url></reference><reference type="vcs"><url>https://github.com/typetools/checker-framework.git</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar">
      <group>com.google.j2objc</group>
      <name>j2objc-annotations</name>
      <version>1.1</version>
      <description>A set of annotations that provide additional information to the J2ObjC
    translator to modify the result of translation.</description>
      <hashes>
        <hash alg="MD5">49ae3204bb0bb9b2ac77062641f4a6d7</hash>
        <hash alg="SHA-1">ed28ded51a8b1c6b112568def5f4b455e6809019</hash>
        <hash alg="SHA-256">2994a7eb78f2710bd3d3bfb639b2c94e219cedac0d4d084d516e78c16dddecf6</hash>
        <hash alg="SHA-512">a4a0b58ffc2d9f9b516f571bcd0ac14e4d3eec15aacd6320a4a1a12045acce8c6081e8ce922c4e882221cedb2cc266399ab468487ae9a08124d65edc07ae30f0</hash>
        <hash alg="SHA-384">8942363710e7473635a2c77ff82db8af1915cb6ac8429851b4acfa04f059183f8e3444dedff75a7da02698f2ee22a181</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://github.com/google/j2objc/</url></reference><reference type="distribution"><url>https://oss.sonatype.org/service/local/staging/deploy/maven2/</url></reference><reference type="vcs"><url>http://svn.sonatype.org/spice/tags/oss-parent-7/j2objc-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar">
      <publisher>MojoHaus</publisher>
      <group>org.codehaus.mojo</group>
      <name>animal-sniffer-annotations</name>
      <version>1.17</version>
      <description>Animal Sniffer Parent POM.</description>
      <hashes>
        <hash alg="MD5">7ca108b790cf6ab5dbf5422cc79f0d89</hash>
        <hash alg="SHA-1">f97ce6decaea32b36101e37979f8b647f00681fb</hash>
        <hash alg="SHA-256">92654f493ecfec52082e76354f0ebf87648dc3d5cec2e3c3cdb947c016747a53</hash>
        <hash alg="SHA-512">94d0335cdf94aa547ad6c0c7e44b8e3bda736ce19d941dd0faa3a45390e5ab2d122022ff4e07bb9aaedd41ffbd9500f324e0a9e42f4c5441bce0774f44872f45</hash>
        <hash alg="SHA-384">58c3caa2ed13416384c519aa52b26c8b93cb43ca6921027c8ac9f321d77979a01634e42de4dd645edc687c266ac58748</hash>
      </hashes>
      <licenses>
        <license>
          <id>MIT</id>
          <url>https://opensource.org/licenses/MIT</url>
        </license>
      </licenses>
      <purl>pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar</purl>
      <externalReferences><reference type="website"><url>http://www.mojohaus.org/animal-sniffer/animal-sniffer-annotations</url></reference><reference type="build-system"><url>https://travis-ci.org/mojohaus/animal-sniffer</url></reference><reference type="distribution"><url>http://oss.sonatype.org/service/local/staging/deploy/maven2</url></reference><reference type="issue-tracker"><url>https://github.com/mojohaus/animal-sniffer/issues</url></reference><reference type="mailing-list"><url>https://groups.google.com/forum/#!forum/mojohaus-dev</url></reference><reference type="vcs"><url>https://github.com/mojohaus/animal-sniffer/animal-sniffer-annotations</url></reference></externalReferences>
    </component>
    <component type="library" bom-ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar">
      <publisher>Apache Software Foundation</publisher>
      <group>org.apache.hadoop.thirdparty</group>
      <name>hadoop-shaded-guava</name>
      <version>1.1.1</version>
      <description>Packaging of relocated (renamed, shaded) third-party libraries used by Hadoop.</description>
      <scope>required</scope>
      <hashes>
        <hash alg="MD5">50e10b8500468cc0360cd406fd600bbc</hash>
        <hash alg="SHA-1">02419d851c01139edf9e19b81056382163d9bfab</hash>
        <hash alg="SHA-256">66711253edbb9a172efbf12e8b4511cd413627d069e0f5a62ea475b4e14093f8</hash>
        <hash alg="SHA-512">84c17f77f4d49c473996c6c447f170cc470d363c705f73dc75dee7f7be5d5b68dfbba5aa5df5d27d6137eb37d53c95536b020d2f8eb3fca8a4fe3553ba5b34e0</hash>
        <hash alg="SHA-384">cf32597b1537704ebcb10463f2c9186a6dff6ca246fa7c51c13399f7e31de366879958e3eb877236444820037afc810d</hash>
      </hashes>
      <licenses>
        <license>
          <id>Apache-2.0</id>
        </license>
      </licenses>
      <purl>pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar</purl>
      <externalReferences><reference type="website"><url>https://www.apache.org/hadoop-thirdparty/hadoop-shaded-guava/</url></reference><reference type="distribution"><url>https://repository.apache.org/service/local/staging/deploy/maven2</url></reference><reference type="mailing-list"><url>https://mail-archives.apache.org/mod_mbox/www-announce/</url></reference><reference type="vcs"><url>https://github.com/apache/maven-apache-parent/tree/apache-21/hadoop-thirdparty/hadoop-shaded-guava</url></reference></externalReferences>
    </component>
  </components>
  <dependencies>
    <dependency ref="pkg:maven/org.apache.hadoop/hadoop-maven-plugins@3.3.6?type=maven-plugin">
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-core@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.0?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.7.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.plugins/maven-shade-plugin@3.2.1?type=jar"/>
      <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-inject-plexus@2.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-inject-plexus@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-inject-bean@2.3.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.4?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-inject-bean@2.3.0?type=jar">
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.1.0?classifier=no_aop&amp;type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guice@3.1.0?classifier=no_aop&amp;type=jar">
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guava@0.9.9?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.sisu/sisu-guava@0.9.9?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-core@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-artifact@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-plugin-api@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-impl@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.sisu/sisu-inject-plexus@2.3.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-classworlds@2.4?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-settings-builder@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-settings@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-sec-dispatcher@1.3?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.plexus/plexus-cipher@1.4?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-interpolation@1.14?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven/maven-aether-provider@3.0.5?type=jar">
      <dependency ref="pkg:maven/org.apache.maven/maven-model@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-model-builder@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven/maven-repository-metadata@3.0.5?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-spi@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-impl@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
    <dependency ref="pkg:maven/org.sonatype.aether/aether-spi@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.sonatype.aether/aether-impl@1.13.1?type=jar">
      <dependency ref="pkg:maven/org.sonatype.aether/aether-api@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-spi@1.13.1?type=jar"/>
      <dependency ref="pkg:maven/org.sonatype.aether/aether-util@1.13.1?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.plugin-tools/maven-plugin-annotations@3.6.0?type=jar"/>
    <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.12.7.1?type=jar">
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.7?type=jar"/>
      <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.7?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.7?type=jar"/>
    <dependency ref="pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.7?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.plugins/maven-shade-plugin@3.2.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.10.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-artifact-transfer@0.10.0?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-utils@3.1.0?type=jar"/>
      <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
      <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-common-artifact-filters@3.0.1?type=jar">
      <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.1.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-shared-utils@3.1.0?type=jar">
      <dependency ref="pkg:maven/commons-io/commons-io@2.8.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/commons-codec/commons-codec@1.15?type=jar"/>
    <dependency ref="pkg:maven/org.slf4j/slf4j-api@1.7.36?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
    <dependency ref="pkg:maven/org.ow2.asm/asm-commons@7.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar"/>
      <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm@5.0.4?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.ow2.asm/asm-analysis@7.0?type=jar">
      <dependency ref="pkg:maven/org.ow2.asm/asm-tree@7.0?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.jdom/jdom2@2.0.6?type=jar"/>
    <dependency ref="pkg:maven/org.apache.maven.shared/maven-dependency-tree@3.0.1?type=jar">
      <dependency ref="pkg:maven/org.codehaus.plexus/plexus-component-annotations@1.5.5?type=jar"/>
      <dependency ref="pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/org.eclipse.aether/aether-util@0.9.0.M2?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/guava@27.0-jre?type=jar">
      <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar"/>
      <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
      <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
      <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
      <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
      <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    </dependency>
    <dependency ref="pkg:maven/com.google.guava/failureaccess@1.0?type=jar"/>
    <dependency ref="pkg:maven/com.google.guava/listenablefuture@9999.0-empty-to-avoid-conflict-with-guava?type=jar"/>
    <dependency ref="pkg:maven/com.google.code.findbugs/jsr305@3.0.2?type=jar"/>
    <dependency ref="pkg:maven/org.checkerframework/checker-qual@2.5.2?type=jar"/>
    <dependency ref="pkg:maven/com.google.j2objc/j2objc-annotations@1.1?type=jar"/>
    <dependency ref="pkg:maven/org.codehaus.mojo/animal-sniffer-annotations@1.17?type=jar"/>
    <dependency ref="pkg:maven/org.apache.hadoop.thirdparty/hadoop-shaded-guava@1.1.1?type=jar"/>
  </dependencies>
</bom>
