{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.4",
  "version" : 1,
  "metadata" : {
    "tools" : [
      {
        "vendor" : "OWASP Foundation",
        "name" : "CycloneDX Maven plugin",
        "version" : "2.7.10",
        "hashes" : [
          {
            "alg" : "MD5",
            "content" : "1cc7f6a0382f8bb2f758d6a6ea401d1b"
          },
          {
            "alg" : "SHA-1",
            "content" : "a4297947a1f2d7d453105db542651614bbd37f38"
          },
          {
            "alg" : "SHA-256",
            "content" : "bd0fdd8f2f2116eee5e715aeac1580f19eb7a10ec2b6f805b53567067658e872"
          },
          {
            "alg" : "SHA-512",
            "content" : "9cde8352a427e10b96cae01348fc7cfe5d4aa9cd0a5e5dd93b414ce3bb7d112993c3b3004e53af52567fbfa16de0704ec59a5556a635ad70571fd124ae389f39"
          },
          {
            "alg" : "SHA-384",
            "content" : "93d7bf5b5c735347edfbfbd66810273ca840f9a322b816d22d44c3d8e8255c09e86570bb23712aeb0cade0f478be5aeb"
          },
          {
            "alg" : "SHA3-384",
            "content" : "4467f16e9ca32190a6e49c65339eb28ee5e8c78f4e918fcf95128a4b7648898de56ccb43eacfad0c9391ef8cdb7d629a"
          },
          {
            "alg" : "SHA3-256",
            "content" : "ed2996c99b483e969221d5e9a40f562ea2ab85442d361d72a90e85266a3ed781"
          },
          {
            "alg" : "SHA3-512",
            "content" : "c8e6ea9ddc38edc77e284b3bf541663e84752bdc59ed1935799847a48a14ea2fa531b61008fefcba37d732a56702a11ac112437b9b80d18f4ecc8ef0ecfb32cf"
          }
        ]
      }
    ],
    "component" : {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase",
      "name" : "hbase-common",
      "version" : "2.5.7",
      "description" : "Common functionality for HBase",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase/hbase-common@2.5.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-build-configuration/hbase-common"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase/hbase-common@2.5.7?type=jar"
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase",
      "name" : "hbase-logging",
      "version" : "2.5.7",
      "description" : "Logging Support for HBase",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "30c4a45beac51f2d8060ec1cf3d9ffcb"
        },
        {
          "alg" : "SHA-1",
          "content" : "df09f6a08be7f659933184fccc61d7528a156cd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "5ebca1f1928b013b3b7e4212544b09c4df61b2d98fee6ca5ca81c8899725d88d"
        },
        {
          "alg" : "SHA-512",
          "content" : "bedf1dd15e9def11dcdc28337687eb6615bbc412ac03b02ea7e1a7819c8756cee7fceb5af6abf481892c9e46b48f2a9c3655b9bba57144e172c1884086061012"
        },
        {
          "alg" : "SHA-384",
          "content" : "50d191a53ebc5482fa273394a0024e7fe92ff94c147e92a45c585635edc6ff999133bc7e3d4d15292b0027b3699fd7cc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "70041764238b1161b6840157f38cea5b4cdf230e92c34cce77ed34ae6d0afff1aa516144c57cff6acdb4e1df787f5be8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e6854946cee08aa94e9098ddf317cedb80bc5dcf50d020216f6d2417d3172249"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1e175f2a174a8f25ca3dfd6520c28ff94344023eb775cdc9b48b6df1bd1638afcff3f06e8bb56fb2c3171d3d498613904764d3878ebba3d8d537c3c6a0cc1e7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase/hbase-logging@2.5.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-build-configuration/hbase-logging"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=hbase.git/hbase-build-configuration/hbase-logging"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase/hbase-logging@2.5.7?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase.thirdparty",
      "name" : "hbase-shaded-miscellaneous",
      "version" : "4.1.5",
      "description" : "Pulls down a set of libs, relocates them and then makes a fat new jar with them all in it. See below for what this miscellaney includes.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfe2359ed6fa5aa559bdffcdebf4899a"
        },
        {
          "alg" : "SHA-1",
          "content" : "8eb081d2529d88dfc2ab8146c09f3d722545fc21"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c9ebb40e13480aae300dcc8d825511ea5b7c5653f324a0109bca0c17b5242ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "eea40d8e7827345810004c8b7ca03aac6431facd88c17d1c688e5f150c6059419285c93d327d3229616d763bc2d9276dfdfd29b6122e32e557c2d1dd59c7a01f"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e18dde146f5b2d4109547411c203f4536b5be6c9ec88dabfda348bf55d5b4a5c54d172b340f92b5daa3d32c5ce747ab"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5ce11566571c2cdd5308a0e681d5e2805fda7a438fa7458260ea0f8ecbf9c5edb7644de403c4382e555c455497a10416"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f249e5086792ab5a1cbbd79ed62f81bbdd377122f164a0843f5e2505d124845e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1bc75cdd1c10ed5fae0d6de5414148d4e5d30fb4ba648e992b95910ea5f6ee7465196dac8561c13502909baae1dfafe564e67211a06fcafd86f21a0da89341e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-miscellaneous@4.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-shaded-miscellaneous"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.zones.apache.org/hudson/view/HBase/job/HBase-TRUNK/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=hbase-thirdparty.git/hbase-shaded-miscellaneous"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-miscellaneous@4.1.5?type=jar"
    },
    {
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.21.1",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "75fe4fe33d308dd6cee3b601de902d27"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d9b10773b5237df178a7b3c1b4208df7d0e7f94"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1f3c66aa91ac52549e00ae3b208ba4b9af7d72d68f230643553beb38e6118ac"
        },
        {
          "alg" : "SHA-512",
          "content" : "530318bcdf1ed8eeee408fc5a0775f1792cbf012b4ec55217a4498c8d2983b230a4d071b9e115565b0411faa51dd938823d9b619beb6786212c375ad3d1ebd8a"
        },
        {
          "alg" : "SHA-384",
          "content" : "88e628431966a9b5cc19f96159874cefde1558e51d2ce233a0c2d47914eb9c6256f95882605a87cc6629a21ff70b72b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ebc750b211532fef9a84c3682d47f00b877e4082716ead1f4f883f02ab35bda8d5acfc475722215c4fe6ed9cfd54f43a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b4f193bf2f541844c6b1b5cf2d1c7f6e9465b97804d155f34530b203184e1ae"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1d76781cef387a185fd4fb69960394556062969bbbe0be74d0fb11f7c73758e5d35ff546ab04f6382c21c63705a1ffb975a549bf4d846fde54e412ecd4641485"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase.thirdparty",
      "name" : "hbase-shaded-gson",
      "version" : "4.1.5",
      "description" : "Pulls down GSON, relocates it and makes a far jar.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "21a7455c3d2a2dab5ceb04ee4c10b7d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "0c6d8ba02e2d204c83683f1438f8cc535a5db4cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba5228b565a2cca18d6c832bd4d18d016298b4cd77f635a5618f15f23cf173e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "103e5e86f145fe6264fb23f312fe6d33558c984be9b90facd64d6990f074378c8bcd57dfc47bdd8d92a788a7d042c4667367e9045ba46d1bba373982764634ed"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f0385cd60a67775b86a81942cf3c31c29cf269c05cd67423e519d10dfb2dc915b1d2d397e878cbfaed266463b741323"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b9a64b38f7cd7c1d4108eed1a25cfa80feae54ed30fbbdfd2a7d3096b453c42a31b59758e1c43ae69c45f058a944b19"
        },
        {
          "alg" : "SHA3-256",
          "content" : "230e3d580269a5f7b12cc5ae2929df8ca3c1b214413b56cc860f1a0a2d294435"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9e72dabab0d623b83b2882f70d87361fbb529c6fc6f710a426b1b5f54065a53642a88f7edc0ac634d6659cd89f4d03c1342a8911f9ce70ae17c37a5d33c31def"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-gson@4.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-shaded-gson"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.zones.apache.org/hudson/view/HBase/job/HBase-TRUNK/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=hbase-thirdparty.git/hbase-shaded-gson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-gson@4.1.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase.thirdparty",
      "name" : "hbase-shaded-netty",
      "version" : "4.1.5",
      "description" : "Pulls down netty.io, relocates nd then makes a fat new jar with them all in it.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1e1c1ef2b5c6c63de7779f06bc5ec74b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7dc1916fd2ec0429bf9a23aed615279d68c764e"
        },
        {
          "alg" : "SHA-256",
          "content" : "0ac0ce27d87061964d8db2000f575b1e8be435d62a810fa2173c09a45d18910b"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f7754d46eb9b5bb813001fcc5ed966acb213c89adb834a6a498c15cc0a4df0f98d6c5ba8eba0ef3bb441be695f8d8ecd24c31cadc48636daa48546da640b1f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "61590f5ffafa07992b1a9964e852be9733349d08f494efb602a5446912c3145d169fdba9838f0860522f8b94e61de220"
        },
        {
          "alg" : "SHA3-384",
          "content" : "81423dc982f2c516463fab317ff402abdae6f0d6795be1bb32265c75af3320e129e8c0abbd428cff7b508a58544c955b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "12717ba54f58c56c531438776d8ce19398b006c29c1113fb7d20068ba11a4ce9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "50a2d557ad97aa2020df18d595309c321397e0a54a3177dbea9ca7b1bd24e0c1e910372ef16e5f62e4ec29bbf556d988456e4f9ef5ea79fe13bcb4955c7dbfca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-netty@4.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-shaded-netty"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.zones.apache.org/hudson/view/HBase/job/HBase-TRUNK/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=hbase-thirdparty.git/hbase-shaded-netty"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-netty@4.1.5?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.hbase.thirdparty",
      "name" : "hbase-unsafe",
      "version" : "4.1.5",
      "description" : "Wrap sun.misc.Unsafe to avoid referencing it in the main code base",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fd52b62e9cb21ff6d94c26ccb9aeaf1f"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f31de761a4c18a2a023e3046d0833ecc47fa125"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d2e0912a3b912557a9c5580c0e393d361256791ae6dd5fa2db0badd52ea76b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "7ba14d207ac1ed3dabde8136d3d7e45c196d1567ec37064960452ac19725c5ad6ec712142099634265b576cbf8b1c6538b5bc38403ecf330493c8fd3a99b52b3"
        },
        {
          "alg" : "SHA-384",
          "content" : "54501e7c513c1bc9b123d0c2466564807eb14672a6326f054d2d6be86dc6e5e2ece149010b57a94eb87efaf39a931628"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2990b4f4e60424d79b687d7f23af8a4fb52750f84065eeddec23e1e46af0c461f032dc3845b9ba39dcb8b53a7d48ca1e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc3f6ea192b5d53f2f08067b3dc8e4eb311fb4b05d51661f73c83bd9e354fb8a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4d3eb7e640b1fe6a77715f8d150b06a61e41588ce8ef7afc936be98a624a0c11505969b13e9a6349e53ff32b700936e82f322748608c410f1c5022ce63a36cbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hbase.thirdparty/hbase-unsafe@4.1.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://hbase.apache.org/hbase-unsafe"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.zones.apache.org/hudson/view/HBase/job/HBase-TRUNK/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HBASE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hbase-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=hbase-thirdparty.git/hbase-unsafe"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-unsafe@4.1.5?type=jar"
    },
    {
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "1.7.33",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "de8684fca5e9042d0120cb3306e8278f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d375aa1b98d34d5ddf73a3f19eaad66e98975b12"
        },
        {
          "alg" : "SHA-256",
          "content" : "336811855ee97fcd8413343dc42f4d26362502860e8a9193e4db305e3e8ef80a"
        },
        {
          "alg" : "SHA-512",
          "content" : "ccde4a938e90d683288f84375224ecd9b46aca20de7544c6300c82ef07780d25306239ea9c5565c3ff58038c9d5becc85c846df3c1809585ae33b20a32e6b8d9"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd31ce1f4fa4c7a892388422b4694d8a51bac05e4f2789eb7be734cdb2738f9f796eb951cfe989834ec78a65d5d762b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75d1aa5e386f2c71c598cda5b995ff5fd496e4003489d58d217be1951d24f5444c8de2fe7bf7a7ce9c40d6cfc0ee01b2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ef2ec74302de597f6eec560b04a8de12a331302cbd5b9c178c237c3b683426a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4528a2981a1107261f6798c628075e9ac724060a72338e0ca8786b27162b17e358a96711b3d0cc673dff85d36fa9eb6eba907e15697b4c40a5236f140fb6a6f2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.15",
      "description" : "The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "303baf002ce6d382198090aedd9d79a2"
        },
        {
          "alg" : "SHA-1",
          "content" : "49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63"
        },
        {
          "alg" : "SHA-512",
          "content" : "da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787"
        },
        {
          "alg" : "SHA-384",
          "content" : "05d0506283716472175d44c2a4766523397bf8a007c18848f9c9a61718cc8aa437f9cb4b91771037ab29a960860b62a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "12fad4ef78274b06f97b1243cea6f970088abde082d2de9377d915a34b44f7d7d67807c03e59c849b69f1544e2a9a1be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "87be248f33f241121f54aad61a9a460a79eabefbf1b5b0dd22aeb95b581f727e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8c992c9c569ebaa0bf956a4c5b34fbf5e1ed1c212c2dd896fa216183ee0bcd341e96698af4b9cec7e8880762faa081a3d3a27f51349aa457cb8e373e4f57c788"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.9",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fa752c3cb5474b05e14bf2ed7e242020"
        },
        {
          "alg" : "SHA-1",
          "content" : "0122c7cee69b53ed4a7681c03d4ee4c0e2765da5"
        },
        {
          "alg" : "SHA-256",
          "content" : "de2e1dcdcf3ef917a8ce858661a06726a9a944f28e33ad7f9e08bea44dc3c230"
        },
        {
          "alg" : "SHA-512",
          "content" : "c6516ebaa0d83d3dfc421061a57d0f7eb30d0cf9ea05a0d5fa1c94b4d42bca211444ea9023de1a812533b88112be95cd5d9638e160afcb31c31d6570f95a9610"
        },
        {
          "alg" : "SHA-384",
          "content" : "6bee823962a2d92e9f5eae0d442e4ce5cd39ea1c2f89259e3aeb5ad94bb6321744955e6a412f9e1b9ad14b87a39a6512"
        },
        {
          "alg" : "SHA3-384",
          "content" : "56c40427def27716d2e5c025ccb838512f902dbe17ff0812f34dca0e1c3db02b1fb48e903c23c830e2c24f9d32acae4e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "762c8d6c6f05ed7ee1dcaa30600e181f4c570726963fff43fab04a23795ec501"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2dd5b60623f76e9565151e0cc27846086d5f810b3f6323d473cebc1aaf87f529c6a834b94ebc3f09a9c23d3597c892fc08d8bcb9d0a491b8be9a047bacb59be8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-lang.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.9?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.11.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b4b7ccfaeceeac240b804839ee1a1ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "a2503f302b11ebde7ebc3df41daebe0e4eea3689"
        },
        {
          "alg" : "SHA-256",
          "content" : "961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10"
        },
        {
          "alg" : "SHA-384",
          "content" : "114f1e324d90ad887c177876d410f5787a8e8da6c48d4b2862d365802c0efded3a88cb24046976bf6276cadad3712f0f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80288c03ad4d80d69f91d056ffc5570d49a9c76bf54ad2dff0121ecde26a560df76d05156f281f5c6db2a38ff07a873d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5adfb5ccaf5f21a549422f426118a9542673926fcd18c68390cf813e791dcf6c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7573f47f0babb53cefdc7c2309a0b982d800139064537b0797da442853d081010ad7c3c74a500598a0f800639a5d540eca21963ea652c68613907059bd4278c2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
    },
    {
      "publisher" : "Google",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "2.5.0",
      "description" : "Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a44473b98947e2a54c54e0db1387d137"
        },
        {
          "alg" : "SHA-1",
          "content" : "a10732c76bfacdbd633a7eb0f7968b1059a65dfa"
        },
        {
          "alg" : "SHA-256",
          "content" : "e0c1c64575c005601725e7c6a02cebf9e1285e888f756b2a1d73ffa8d725cc74"
        },
        {
          "alg" : "SHA-512",
          "content" : "10ea0baf440c78598eee2bff3742bc2f41b7e67847f8bb43a1f154d7649853ebd9eb86288aab65f4d1a196f4586bab16b656ec7940ec92a57b1c117b8f59abac"
        },
        {
          "alg" : "SHA-384",
          "content" : "33ad6e25b942b4076c8b9dfcc0aae8ca802b9028aa9939f86e4752b4847b35fb486f6d3efa81d38ad1edcbec6e614494"
        },
        {
          "alg" : "SHA3-384",
          "content" : "168deff9cc400e301fb783ec5f483237edf9b62eacb11df4e36c2660b1fc42f639df6f5fa155f468873fb899197c9fe8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "73ec3c6d31eea7e1e5e4cc214b822c14887dcf908b5e700e206906a7555c571b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a394427ca09c2807a376f982176984cfc2c4610e752ddee50d878091291cf4ef37de90c945c6b13e3c8c4db3397c296696ca68d3a7323388c863b8b69272bc8c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/protobuf"
        },
        {
          "type" : "distribution",
          "url" : "dav:https://google-maven-repository.googlecode.com/svn/repository/"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/protobuf/source/browse"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar"
    },
    {
      "group" : "io.opentelemetry",
      "name" : "opentelemetry-api",
      "version" : "1.15.0",
      "description" : "OpenTelemetry API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1aea20bff65bf6ac57a070f1245b5bab"
        },
        {
          "alg" : "SHA-1",
          "content" : "549bf64119e092bb9917e73601e9ebb508b5a2e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "765999a64656f71c5ae22ba5942993f117af0ee277ef3f08d6e90dc765a3ed57"
        },
        {
          "alg" : "SHA-512",
          "content" : "d3053a8967be564e9ce3baec664b5b09d10fba37f8e71731fa7b6895800d18acbd9c7dd9c2e6ba2619c96d99565566fb93dc786afab0818c895ebfd3762b106f"
        },
        {
          "alg" : "SHA-384",
          "content" : "d218e09901519e6a3c0ba634ef35f90365c879230efe7ee5afcece26bf2be6d1c8667e90f2e80b953e21db27a9881d9d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d0b976141bdbe81a01a0f01cfd21cf25437f1853b750930db1e451d791056c832812703ab71729cc0d91550cdc042be"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4968bcb71a77868244ca36af077013d693e9ab7f5b451f6ae0fa9caa772cde7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "04bef411744e7e312c247f705b8c9d1ae331e17e9fe1339bd0ccd8b1714b3dd7743f17affe8c047cb61b1ede800016da567a7d44fc0fa0e85755c5f232321f62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.opentelemetry/opentelemetry-api@1.15.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/open-telemetry/opentelemetry-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.opentelemetry/opentelemetry-api@1.15.0?type=jar"
    },
    {
      "group" : "io.opentelemetry",
      "name" : "opentelemetry-context",
      "version" : "1.15.0",
      "description" : "OpenTelemetry Context (Incubator)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b88f1aae2566bde518fcd617c9536acb"
        },
        {
          "alg" : "SHA-1",
          "content" : "4401a67f7aef7af786012965408ecb5172f19e2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa47bc74477de40b6654454f33819fc619389d1b9bdb914bf78eea36d13998c9"
        },
        {
          "alg" : "SHA-512",
          "content" : "60b1db0eb86406c119eb36b20fdaaebd22e1a2b2870393efe4a85cc4248b4e87b0fce4bcee61ea59922a43bf7299834a163d2cbc3bb8b411c557886c176294e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "3e9fc7012921019e48d6373916d2c799986d575c8f1619885770049019d109cbead2a91491cc48d5a5fa8993fbb05b8e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d8fb2b7dbb9b2ce2da3ff9c09398a154c7674a769ec81bc21d9a92898b2a9797d6fb111d23b870c3db0e4dbb6f9d1041"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c2ec54a0867747cd8fad945a6cd0c71d1b12d5f27bf5cb4cb3c59c2c4b48bf1e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "91311137bed12e362cf9e0a52760db401e0d267e5a16d79d225967b46b68d200f7aa7758cd2c0364f1d25b908c78fa9b534620b56a42ca2ceb4b01b8284bc2ad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.opentelemetry/opentelemetry-context@1.15.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/open-telemetry/opentelemetry-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.opentelemetry/opentelemetry-context@1.15.0?type=jar"
    },
    {
      "group" : "io.opentelemetry",
      "name" : "opentelemetry-semconv",
      "version" : "1.15.0-alpha",
      "description" : "OpenTelemetry Semantic Conventions",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "95ffa50074738fbc2b587f27cee59d33"
        },
        {
          "alg" : "SHA-1",
          "content" : "ffbb3697b70da736b72bd55ed45005049dc8df54"
        },
        {
          "alg" : "SHA-256",
          "content" : "a9c5d6178299f82325da14334e08b7926e9525ed9aaca6323ce83786913ba369"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a157d8da4e14abbf4c89992df5a656743b62d02231f1b8b8351bcc8f28a0b71e3ac62cac5fec52bbabf176bf00da373efb34ed60bfbb3487d84ad85d7cdf5db"
        },
        {
          "alg" : "SHA-384",
          "content" : "c03808d75be7aaf49b4257a22ae834f6b3e188cce821e5bd9341ae27dc0bd258ea88d90ad63a19d2bcce993236f94a5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8f758e7e1d87d9653e65f69f789ee755130fb32a91ee6f8619a98411b93761e217b10f730e3ec67328d1e12b2a0359fd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a4d2342dec77b6c667ef7b93c09e8f014066cf599f1876e87025fb1127a34c0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fd4534c3a6891f2111d9627ac16d422134ae0691772b2649d865da35e4184bf18c2e60ff1fe4e0de4526c75d2b6bb313bca3451f9132b4a69e8da20898dfb7ae"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.15.0-alpha?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/open-telemetry/opentelemetry-java"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.15.0-alpha?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-crypto",
      "version" : "1.1.0",
      "description" : "Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encryption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C/C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See <http://www.wassenaar.org/> for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c71451f3c4737ba6d84f9bd9e8f2400d"
        },
        {
          "alg" : "SHA-1",
          "content" : "4a8b4caa84032a0f1f1dad16875820a4f37524b7"
        },
        {
          "alg" : "SHA-256",
          "content" : "44dc28551cdba731658090d9b10d2eead9839c269d70cdcd7d56c0423df5227f"
        },
        {
          "alg" : "SHA-512",
          "content" : "62acf1d90ad667c8f3f9b267c6f4fefa57eb914ef57a24e10a7dc6ea7bf1f2a6933db831f836dc2ca0fe86aff84a6d1a0fb3c8bb34c7c24e3e1190778efb241d"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d7c20964ab9cbde60d3d03ca92b481e30f969b30adc336b77ec8b8dcb660e327bfff8c98cb9c30163e7bdf5ffbae486"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a86cd2c434475336d6258dbccae98575888b910a935517ddb832bbefd944b0427ebb7742e5ef65e5e7e2046f94a4fc27"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aea2f3e041185d2f7ede524ebdc76f76708db74da5023dc34d2d75c0fe2ec6c2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "313cd4870c67daf90157f6567e969cfe8845f0cf4b90f7667dfbadd4cb35a526109a59b60e1bb677a9938471c15ebdfe973038e0cdfba2f06db98fdbf88e8710"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-crypto/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/search/?q=Commons-CRYPTO"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CRYPTO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-crypto.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar"
    },
    {
      "group" : "com.github.stephenc.findbugs",
      "name" : "findbugs-annotations",
      "version" : "1.3.9-1",
      "description" : "A clean room implementation of the Findbugs Annotations based entirely on the specification provided by the javadocs and at http://findbugs.sourceforge.net/manual/annotations.html.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "70fda5202eb9d9ce4f250f2c2ba71152"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6b11447635d80757d64b355bed3c00786d86801"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e651066ed9ae35d7e3001d635d1dbba1c2965db0e4e33e2c14ad610543f225c"
        },
        {
          "alg" : "SHA-512",
          "content" : "34db789f9efcd342438d08699043d4bcc9da63d870b65b2d3f39b0f5de8f9db164869e7d7abae4046f56fbfea0aba7353811a04dc5ab4ca1f14af15d62b59407"
        },
        {
          "alg" : "SHA-384",
          "content" : "ef67d91fc78186eef839ea4a38e139b54cd54c192702343596923d28dbc918735b2519a5c59d7499087c45b09e469bde"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0779c363b98fa092ce6677a17f7b6595d49eb9722b761f474a62287ccf3f10d899c7101a6a440dece05d41d16a13c558"
        },
        {
          "alg" : "SHA3-256",
          "content" : "01f631315b1a3b74b97f4f22767916108fb9e1a203147ade9f0a0dc34d41ed26"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9c90eee54eb341c95b867eb1aaf8edaf78eb14f8faf77bcef4368486e0a46275e019960b1fc9b376a6502f7f2b9ef7a554f7400bb9b9f34f044a4fbb1d62d542"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.stephenc.findbugs/findbugs-annotations@1.3.9-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://stephenc.github.com/findbugs-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/stephenc/findbugs-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/stephenc/findbugs-annotations/tree/master/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.stephenc.findbugs/findbugs-annotations@1.3.9-1?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-common",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Common",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0e701d9a254fa21128f4a5a33aff13de"
        },
        {
          "alg" : "SHA-1",
          "content" : "fd5786fcd0228073e7c9c4ba5739519eceb55ddb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fe93812dc299e17ebcfc12921bd3162c79ecfab84d120d51d4ddc275c7414ff9"
        },
        {
          "alg" : "SHA-512",
          "content" : "abce060bc87b2ed21b8b19c16db1dc5927c35e810189109bff58eaa5adfd048892af809ebd78913bf5c6b01d28f6809bade08f3b2042e1beb247b9eedeae64ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "54ad68c163b4383bf10b88e7aee2e9bba5c36d42416812a675679eb5f030a22a5f651b8d2a5e9b8923833d88861be9f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f75759ad4a8d5816ab7eae09ce076e29b1ed34283f1369e68a2d042e6f68216246cfd9b1e019ed3467058ffd7e94a3c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec5b93b393baa94f120a8518eb050e7e0f4138fea29cd12f31695a3220fa465c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "da68a37c26b8a2bd47531b77b67412b12b98a657540512e9d31f4f78a91297b0694be5183bb82441b248cc71302682dcf6385ff352585e11355f95ccb57e6638"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-annotations",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Annotations",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a3ff551c2ea8a5e17c3042ee46f1f763"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b406750215dcbd8d322d57696cd52fdb796e528"
        },
        {
          "alg" : "SHA-256",
          "content" : "c47d615be08cb6631985188489ba17d376577b67e3690d6de1eb9d0d611f35e3"
        },
        {
          "alg" : "SHA-512",
          "content" : "a139640e5f7077610e72b939494825ff95c3d6d18c7c121d5d198bd0ba99bb399116633ee25149d915c3474d0afb9ebe101b48cce28d6f5903a233ceebd7cc6b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6dbe2290de667a3f3dab7e3f4a4327010329bd36e0c50a709f01a41b2c9252475237255318f8b174a625cea17f860d7a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d92bbeb8a79018ca44309cd45b57a0e92933c95eb4de6ed58522d8bd74a4c5232e8c2366d27094c06c83d3551486e6d3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "66deb54a0b53acbecfe453b97699a527dd4378a69ed0112e2e0ed18c60d4a927"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b0f0bbb9e90a8e22947ccb706525314b3a13e6115b0e3b10785f55289b7e80f5bb14e167be0b62d74de365ea01d3a5ec09b6b3615718acb5dea486d664c761b7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar"
    },
    {
      "group" : "jdk.tools",
      "name" : "jdk.tools",
      "version" : "1.8",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b1cfaba2d5f331f9e7f673f80322984e"
        },
        {
          "alg" : "SHA-1",
          "content" : "9167f8e529631a90a1da899e4b452f7d5698c9a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "10ac0e645fece4829121e6552ec58eb35a7d6a78c5fd0cef1e17c6fec5647383"
        },
        {
          "alg" : "SHA-512",
          "content" : "d37f3a26417f881e540749e87e150c0fcd39bfe23734b8c52eb171fe70b5117def7cf460232f788f7f1de130508d5415611302ad1d5437b9b9a10036813d03ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "45e5342522833023c551d305ba7bf35dc7f8dd22e2daea392b9c6f31babe16a0e06c4fd00f0a52e99cf0ce93215af259"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc407cb533885c8c04a1a7e1905df0e372bef86c7770e11049b8753d26582cc8ff27558a542ebc6be10832f75a94e4f7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7794cc4b010ed89c901a97d0f99e10b1b69d7b42dabb5ed2573ac141de31d1d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9fdfcd6fff9e684c31cc171c3b3348e9ba8b187812250e08c19d8dbec4971085670c933bd2f869f3f45abe87b32e378f57e489c59a00d8879159f6b7cdd6ab22"
        }
      ],
      "purl" : "pkg:maven/jdk.tools/jdk.tools@1.8?type=jar",
      "type" : "library",
      "bom-ref" : "pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"
    },
    {
      "group" : "com.google.guava",
      "name" : "guava",
      "version" : "11.0.2",
      "description" : "Guava is a suite of core and expanded libraries that include utility classes, google's collections, io classes, and much much more. This project is a complete packaging of all the Guava libraries into a single jar. Individual portions of Guava can be used by downloading the appropriate module and its dependencies. Guava (complete) has only one code dependency - javax.annotation, per the JSR-305 spec.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bed5977336ea1279d2bad3bb258dc8c3"
        },
        {
          "alg" : "SHA-1",
          "content" : "35a3c69e19d72743cac83778aecbee68680f63eb"
        },
        {
          "alg" : "SHA-256",
          "content" : "e144a0ec7f5139c58d4f3729ccfb4240f9c576a1aa43790e4090e09316129ee1"
        },
        {
          "alg" : "SHA-512",
          "content" : "392ae7e0c1b0da2ae91f0e5e022dbcd4bca3861242d57599f563e3a6561592df7baca18fe62000fcd701e1b81cb4ae6987698a5695358127fe4f74ff39776eb5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e9f119ad115dddc4fe076dde2fe5c2fffec092ed4766b24055c234098096c8ccfabcfd351df7a0c382f0a6c62cd9a099"
        },
        {
          "alg" : "SHA3-384",
          "content" : "97804434e2d69e1c3d5df7bf41ee140a7b1babb745684d8d1aed08dae1921a92c8ddca0bf100d2500e91d52688cbd56f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9d0e45ab59ea2f9acc03b9ac9ffceab88108792ada54b9fc702a8bed0dd5f6f8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ca7990560ff45358c7136be421cd4b8fadeb2dda19b3a634c31537351d781f46af77a1cdbed64d95c0f82f3d076ea1370845e4ee24675cecf5403c17f2e1cd46"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/guava-libraries/guava"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/guava-libraries/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://code.google.com/p/guava-libraries/source/browse/guava"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.5.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c3b2052160144196118b1f019504388"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc98be5d5390230684a092589d70ea76a147925c"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc8bb01fc0fad250385706e20f927ddcff6173f6339b387dc879237752567ac6"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78ac2b418e9e9e7d0bc866664577199d320408a6f03151b3789bac365c986dd526df853599e633d7e50fe136cbf3eb9ce50c9cfa0ad38c3cc8d8ee416f61c40"
        },
        {
          "alg" : "SHA-384",
          "content" : "a7a2daa807c4007c506b5100f0a9b526c0052c4e1f6b699904ef9d2aba8195b6003dc4d47ca133b15e2f3e830bdbe6c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "44ca97514a2e34b5bf3de9b5d45c8e871f6eee517db7f3c4b4476eb3e8dfe9a9d8760f3181114708288c373727b42475"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0a47001d3a293f129ffc21f17f575a9d23ce5b88b440e651e4cd01edd0cc421"
        },
        {
          "alg" : "SHA3-512",
          "content" : "483dae23d6827a105d17847c8c813527f19042b65c4d09635dfc4bfd25990fe3ba2a997540460fd5b1d72ca3add9a38ca8b32004680764db972a9bb62f7f68d8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-math3",
      "version" : "3.6.1",
      "description" : "The Apache Commons Math project is a library of lightweight, self-contained mathematics and statistics components addressing the most common practical problems not immediately available in the Java programming language or commons-lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5b730d97e4e6368069de1983937c508e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4ba98f1d4b3c80ec46392f25e094a6a2e58fcbf"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e56d7b058d28b65abd256b8458e3885b674c1d588fa43cd7d1cbb9c7ef2b308"
        },
        {
          "alg" : "SHA-512",
          "content" : "8bc2438b3b4d9a6be4a47a58410b2d4d0e56e05787ab24badab8cbc9075d61857e8d2f0bffedad33f18f8a356541d00f80a8597b5dedb995be8480d693d03226"
        },
        {
          "alg" : "SHA-384",
          "content" : "95d1186d9ca06a3ea2e6437ddec3a55698e2493d3e72f6f554746b74fa929892bd71a2ab501a4e7b1ce56b7cd64e7ab4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f85bb3e46a00fc4940a3be1331301302b0eb728e2d1fe2c1842d4761e5a0bc7a420c0c705ae60250ca1c7b03d3694b9e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "919c15ae4b1aef2a58aa6ea4b700bc5562e78dbc382f3393169425ca91ad368c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "dbe54d586c898cdbd7df6c31c131ca3525db17fcea5c7f5da8cbfe617e2afc667289290c76771ec5c9567a56fb2b177b0a31d67abcc656410c90287da4d88999"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-math/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/MATH"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-math.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar"
    },
    {
      "group" : "xmlenc",
      "name" : "xmlenc",
      "version" : "0.52",
      "description" : "xmlenc Library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c962b6bc3c8de46795b0ed94851fa9c7"
        },
        {
          "alg" : "SHA-1",
          "content" : "d82554efbe65906d83b3d97bd7509289e9db561a"
        },
        {
          "alg" : "SHA-256",
          "content" : "282ae185fc2ff27da7714af9962897c09cfefafb88072219c4a2f9c73616c026"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a1f30f2bcebca32fce505185cfda1cd90fc2dc8c60fe41584f764fc2b4004422462b32ec88b70c93165ecc45201f8834fc16feb067812daa0759d2096b4a63f"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ed1606ddd4995ffb15ef504195fa4ee73f536b1a232d18532cb53f10f9f8e418fc5e91bf47834bc98a4331981301755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3fd4abcd6d7a65dec35629144d7205789144cad016b398d96eb972982736bc5926fd28b4ad1d8edea4c55f573469d4cc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0afd3a376b7817f752a3c85db94337ec3f8249aa09a8dfddb72862c39642ce9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "562a1d61fdddaf4121c2af27ab065bd558429d307af2c51c8b813ca028cff8edc63b641d2998fc9e2b530b64652533faccb5c4544f0f76dfa254dd4e209155cf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://xmlenc.sourceforge.net"
        },
        {
          "type" : "vcs",
          "url" : "http://xmlenc.cvs.sourceforge.net/xmlenc/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpclient",
      "version" : "4.5.13",
      "description" : "Apache HttpComponents Client",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "40d6b9075fbd28fa10292a45a0db9457"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada"
        },
        {
          "alg" : "SHA-256",
          "content" : "6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743"
        },
        {
          "alg" : "SHA-512",
          "content" : "3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089"
        },
        {
          "alg" : "SHA-384",
          "content" : "093ac3e2dde58e34aa70309c7305eb3c9b5be2509a9293f1672494da55479a86bd112e83326746dc7a32855472952b99"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cd6882e7868624164e460f2f3ea01466f863c0dcb902b031c656b57356f563be83b29530df41d88d634ed3d01fc9964d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "710b1d8d7dae0b8e4270756694ca9c83d64965f42d3b4170c609b14d47c2762c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "276fa6a6599dc89382d658115695cf4da6b0d39b34e9c349c17a5dbd64122eaee553bb9ed75c0378ec4a83be157c8aa39370662de3c9b8fd55ebc1dd608383e6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-client"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCLIENT"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-client/tree/4.5.13/httpclient"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.httpcomponents",
      "name" : "httpcore",
      "version" : "4.4.13",
      "description" : "Apache HttpComponents Core (blocking I/O)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e07a248f61c52776a2366c075dcd4963"
        },
        {
          "alg" : "SHA-1",
          "content" : "853b96d3afbb7bf8cc303fe27ee96836a10c1834"
        },
        {
          "alg" : "SHA-256",
          "content" : "e06e89d40943245fcfa39ec537cdbfce3762aecde8f9c597780d2b00c2b43424"
        },
        {
          "alg" : "SHA-512",
          "content" : "23430cde8b9bed33c91474ba49f1143284135df1b25fdcbc37bc3bb7e9549e77b3918eb40250093db652ae200367e87316129b23b4f6987e94939d60f467498d"
        },
        {
          "alg" : "SHA-384",
          "content" : "b776d57492478c162d428bdd3139be0fa6c3cf4503355c3a04710ca7bc3ee74d66627f49eb42814fd8f8364dbd17aa91"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f6f9e70b76717b705d040f0b33857f0dde89736f2e6d55ea56585235eb1b6d0ce4d5aa18c82050391ac968dcb5ec29e2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "721a9fc1bb353ddf3e438bed4306a3fa5b55ffafb474be5dc8715bd23d7a5afa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c78f9d464e4b840e28266658512b1cab0ece1470bef2764deb2dc20ba69b73d526d92a19494ccb87b4408f9235c4294417f2e10ba709469f4bd62d017b9e3cbe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hc.apache.org/httpcomponents-core-ga"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTTPCORE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/hc-httpclient-users/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/httpcomponents-core/tree/4.4.13/httpcore"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-net",
      "name" : "commons-net",
      "version" : "3.1",
      "description" : "Apache Commons Net library contains a collection of network utilities and protocol implementations. Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "23c94d51e72f341fb412d6a015e16313"
        },
        {
          "alg" : "SHA-1",
          "content" : "2298164a7c2484406f2aa5ac85b205d39019896f"
        },
        {
          "alg" : "SHA-256",
          "content" : "34a58d6d80a50748307e674ec27b4411e6536fd12e78bec428eb2ee49a123007"
        },
        {
          "alg" : "SHA-512",
          "content" : "66887e7c5077dc6aed5dc85c172e7d80ae13503ab1e000dd76e87626cddb0427f3f9251941af94744d53f6b771e031785ce1362b01595d9723330554213bdfe8"
        },
        {
          "alg" : "SHA-384",
          "content" : "444a0ffddba21cb56369700b5b89641a453adfaffb948e22329011c8eb02ee40b70f57f88c3d10239d49eaf4069c1e25"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c1a19ff6d35406b9363473484f847e995d995d9b6df03fa6e6e6f37b1cb3129baf58975037674c7bdbab79e1d2776246"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2b750264c332b902556ff672997f23c56500eb815c41fc067f1773ba2aecdbd9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d798769ab7d6950ad16c9d4855de89414b10d8e53356c1c857dc06c408a8fab91c8db1f0529909aa7fa1bca76c38128d9b0b0734dc5f55e0ed6bfaf069ab3e42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/net/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/NET"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/net/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty",
      "version" : "6.1.26",
      "description" : "Jetty server core",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "12b65438bbaf225102d0396c21236052"
        },
        {
          "alg" : "SHA-1",
          "content" : "2f546e289fddd5b1fab1d4199fbb6e9ef43ee4b0"
        },
        {
          "alg" : "SHA-256",
          "content" : "21091d3a9c1349f640fdc421504a604c040ed89087ecc12afbe32353326ed4e5"
        },
        {
          "alg" : "SHA-512",
          "content" : "4646b044a05424f1df113c5fddfc066c1fef47933b631efe63701170acc197e531330e583ae0e5000cf8ad38151c91a9e61b2864876de05cfd3ba710481ed484"
        },
        {
          "alg" : "SHA-384",
          "content" : "670285f35903def2e22a3e2430f36d47599e22d8cd96f8aad6c67704076d3648f1b4b790ef13cb0a5bbfbb3cc02e0d3e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edd96ee76c3821720879c8b8e2ee4a8174fa6b75b54413a9bccbf05223cddfedbbf0693ef6d1e9831e1b3fc44dfb17f8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b7c499beb391e8b09b9b24097638ca1f347a0a65b6624899bb8c0272ac59342"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e3dd9a54c0a37bb9e9eb52d0c9de3b957c8fb7649394d8c547e2fe2099ac892b6145bf630165358a2b83d6ba2f25802a9395615b7c519ff0b84a7cbfa36d3f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/modules/jetty"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/modules/jetty/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-util",
      "version" : "6.1.26",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "450fedce4f7f8ad3761577b10a664200"
        },
        {
          "alg" : "SHA-1",
          "content" : "e5642fe0399814e1687d55a3862aa5a3417226a9"
        },
        {
          "alg" : "SHA-256",
          "content" : "9b974ce2b99f48254b76126337dc45b21226f383aaed616f59780adaf167c047"
        },
        {
          "alg" : "SHA-512",
          "content" : "695bfbfc0ecd8f410fea7c44451f1765a610ccfe427d91e2cf900cab18068e89ad98b75dc37d0fec9b83255e698fb7e26d7089c91dd1d85085e99ca7a9af0ec5"
        },
        {
          "alg" : "SHA-384",
          "content" : "056ad2d0482a77607ed1b135a745ad443eb2a66b0b0bd9786f648a620e40712cdca6dbf3db503bb7e9974269a48f0113"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3d7f0ba19c8439b0357bc1e3101c607ea9a04d91dc3388c26da096ded31edbc4450ab738a76a5fab5025079a2df61ae0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f39d7eca8fc8984ec5136b8bbb5dbf120191cd4a42ea4ee17da0a73f73db9a4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "15d9bbf0ea9dc9e6d3aee5c0ad2aed75b436a4dd15f6a8726d8b7a6d4e9a935b109981d4ea284fc098a843553716fbbf9531c94d8f411f69b74853a6300b2a0e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        },
        {
          "license" : {
            "id" : "EPL-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.eclipse.org/jetty/jetty-parent/project/jetty-util"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-util/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
    },
    {
      "publisher" : "Mort Bay Consulting",
      "group" : "org.mortbay.jetty",
      "name" : "jetty-sslengine",
      "version" : "6.1.26",
      "description" : "Parent pom for Jetty at Codehaus",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3bea45d6939e57fccf450a914fe4e1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "60367999cee49a3b09fa86bdcb52310b6c896014"
        },
        {
          "alg" : "SHA-256",
          "content" : "9c5f6bb168ba01b95d250b57f061c8094e1ce9c89ae4e773492bacb17192ea87"
        },
        {
          "alg" : "SHA-512",
          "content" : "799b56fabb7f1dd299efe33be881a1253fd38f24764d2c478f08d00771f8176b3fe0839b71da7e67d5d6e32bfe10378284dd8701ec57233eb354cca88639ce44"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c2a3838948b3d10eb6f9b72d2dd0b58ab52b3c392d4f0bdf76397c643112bc7a6a35571167d3b6de05df90e9120a6d7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a332e74cad375e90dfdece5e3fdd919d44c9992423a37bd30ae2c38d3acb9d3ec622fa2a2c51f63635ab5ebe13723ecf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f9e1f9ef626efbcf1f8b17ead92a003b0f693905dd8ca39ed43cd2e6ac53d5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9522df250bb97b51d5051f72ee0d676febfe3512a3b6919d2e1a08242ef25d0cd6aa89a9f608df29bd185e9a2d93880ce42f3be51ad18a184cc461d359a3c6e1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jetty.mortbay.org"
        },
        {
          "type" : "distribution",
          "url" : "http://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://jira.codehaus.org/browse/JETTY"
        },
        {
          "type" : "mailing-list",
          "url" : "http://dev.eclipse.org/mhonarc/lists/jetty-dev/maillist.html"
        },
        {
          "type" : "vcs",
          "url" : "http://fisheye.codehaus.org/viewrep/jetty/jetty-sslengine/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-json",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17ca6b0d49ed8db159b7827b6defa6b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "1aa73e1896bcc7013fed247157d7f676226eb432"
        },
        {
          "alg" : "SHA-256",
          "content" : "cc5d535f43cef0d1c467240961aae35801a837ab010319e741b2c7a6658f3fd6"
        },
        {
          "alg" : "SHA-512",
          "content" : "266e6ed47218316f4dd3bb9122d291d077fb5af0f0b649340c9e3724e0b8bc02e6410207a154c8dffac891ad817a241caaf80ff66604200993dbbe5ca9a79b9a"
        },
        {
          "alg" : "SHA-384",
          "content" : "6f05b0ce1da3122567a9c468e3720d54eade2860c61c0793928ec83850ffc1129093e5d6ce97e5804d2b8246045f5b71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5edc6c6ebd5d2376e6be0623c76a7bf86991b7e862fecb7deb0b6807756e5af2605fe8c4d06fc0ef10dc6465ae5b8b7a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "146f85e2c521aec2a5ba77bc011475ae6693c5238ecf8d090d05f4706417fde5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1a0bb9d2678ef74c30859cc2b1a9197770fbd5904a0186619b3916f01d539c8dbab887f4d4a9ef8b049a8d84922e53696ea523b9e6c921ee4f847199d07a563f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-json/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-json"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar"
    },
    {
      "group" : "org.codehaus.jettison",
      "name" : "jettison",
      "version" : "1.5.4",
      "description" : "A StAX implementation for JSON.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6c3eeb572f5830303059fec2812821f"
        },
        {
          "alg" : "SHA-1",
          "content" : "174ca56c411b05aec323d8f53e66709c0d28b337"
        },
        {
          "alg" : "SHA-256",
          "content" : "fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda"
        },
        {
          "alg" : "SHA-512",
          "content" : "afde3c34e3229c1999dc847b5e2bbd243c48feff9659ba043ccc677d34d9d8d62f4e02c3cfec8d4641b7a3ea7f462b0993fcba2319096a432526c5ca17fab49a"
        },
        {
          "alg" : "SHA-384",
          "content" : "1a8b00e147bf8fc12b8ec8176bdccad3fa9703462a915be5b6700334fd6f28a6aaed4ed863199b7257032e005a819f5a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdf8be1abecf10eaae7af476a60914d28c7b0a2bdd3b7321f1810dd95f3b9d4b32dd298f74a7a7c8de3780cc7eef8e28"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2a3de2fb5cb628021a96faad03cb9e66e74ba37ffc8bf6876df554b74b145086"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de76fa3f7d6465479d2266a2e489e773276cbdbedd2a4903f219a9fc4e6d29f0c03f773b281793e2ed039669befe784727f2ca79f2db5ec7efa9fed614d45e5e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jettison-json/jettison"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jettison-json/jettison"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.xml.bind",
      "name" : "jaxb-impl",
      "version" : "2.2.3-1",
      "description" : "JAXB (JSR 222) reference implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1b689e7f87caf2615c0f6a47831d0342"
        },
        {
          "alg" : "SHA-1",
          "content" : "56baae106392040a45a06d4a41099173425da1e6"
        },
        {
          "alg" : "SHA-256",
          "content" : "fa3e1499b192c310312bf02881274b68394aaea4c9563e6c554cc406ae644ff8"
        },
        {
          "alg" : "SHA-512",
          "content" : "6f08a9d34bd66ceb0e4cc6cdd782423a8a7ab775808e90b6c872977c653cd3e2c539a78554a5c8ef9402092ac4fdceac56b77e76b3c2d800d5ee97db0301a683"
        },
        {
          "alg" : "SHA-384",
          "content" : "223367a9c31cfbd1a407718ad30b176e32874cb6cd6a63e1c4df78ac74ccf027179f0e98639dc595a4ae408b40db99e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1c0e7be9683e61b8626065910045eedcffa85439545a2d73c0c53c5c80ddff0d5b56f6ed569c64db25d6817c8804d7ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c9896a8b3078515bfa5cec60e9bd90ad6fb5c39678353bd31d9e6055b1241943"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5d44345d5ffb7be42f0785accf35f20fcf3fe09277bb0b2ea5dd27f1d7da2590d0df53286043f40343cf098544d5592c4acf875de703c66fe4dfb7815bddfd62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jaxb.java.net/"
        },
        {
          "type" : "distribution",
          "url" : "svn:https://svn.java.net/svn/maven2-repository~svn/trunk/repository"
        },
        {
          "type" : "vcs",
          "url" : "https://svn.java.net/svn/jaxb~version2/jaxb-ri"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
    },
    {
      "publisher" : "Oracle Corporation",
      "group" : "com.sun.jersey",
      "name" : "jersey-server",
      "version" : "1.9",
      "description" : "Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c98f6cca5df8197b310a0d1d89bb34a"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a6ea7cc5e15c824953f9f3ece2201b634d90d18"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ded91b198077561bd51f6c0442c9cd70b754d8b31b61afaf448bda9d01848f0"
        },
        {
          "alg" : "SHA-512",
          "content" : "9354a94b5044519e6f8f08c89c5d7c57e1041555bc333f401dc18ea51c21c0db03838a55bdb43bbbc0e37a8c3f1f0bcaf4164c5284a5f096af61b549dfe3eec8"
        },
        {
          "alg" : "SHA-384",
          "content" : "231ac671ba61b142d940a3d88919650c701c9cf0cacf91d2f29c450349f486d8e0eab76dbdc73baa98ccda3acaa77101"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5792bafb84a124b86625cae09072ef0958da59a4ea418ddd57e24dfb91d08d6a1b43ec29ab5586ae437284bf3c85447"
        },
        {
          "alg" : "SHA3-256",
          "content" : "495463f7c0874f77b54bd492889e2c2df0476fec28eb2e9d3b31c8d6619857a5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c065a652d816f93d5c8fa8eebae4298574898e7f31ae889ca024e8a284df6d630f64ec2313fc73db3b017946ce5fff271a0e0a802e900b71bcf15614521d2315"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jersey.java.net/jersey-server/"
        },
        {
          "type" : "build-system",
          "url" : "http://hudson.glassfish.org/job/Jersey-trunk-multiplatform/"
        },
        {
          "type" : "distribution",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://java.net/jira/browse/JERSEY/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://java.net/projects/jersey/lists/users/archive"
        },
        {
          "type" : "vcs",
          "url" : "http://java.net/projects/jersey/sources/svn/show/trunk/jersey/jersey-server"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar"
    },
    {
      "publisher" : "ObjectWeb",
      "group" : "asm",
      "name" : "asm",
      "version" : "3.1",
      "description" : "A very small and fast Java bytecode manipulation framework",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b9b8d2d556f9458aac8c463fd511f86d"
        },
        {
          "alg" : "SHA-1",
          "content" : "c157def142714c544bdea2e6144645702adf7097"
        },
        {
          "alg" : "SHA-256",
          "content" : "333ff5369043975b7e031b8b27206937441854738e038c1f47f98d072a20437a"
        },
        {
          "alg" : "SHA-512",
          "content" : "074612f145765d33c449887a29dd0791205881ba42d613e52b360ca53bd47c5f9835049de8fc6a384041de2e73bd271b6177c2225e2f72853a88359f6c10b14d"
        },
        {
          "alg" : "SHA-384",
          "content" : "c4ae90a52b7a23cbca12a01777e140e3f3f7943634611c23166a60d69a90f1edfeac8b210979f055fab6d1526d287ba4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "04cc814a6d1d69266aba09985cd6ac04c5bc99964b099c88d89690ab656d53044a6a6bea6b79a37dc41c3202364888b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0d52b7d9c8c5e047e79df73f4a4883e84eb324739748f1aac584e2e76b3968e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5e0956cb7cd39ac3d6dd773d64a1a40f8a5b83c95306c627214572b996fd37188d9382e2b7c6579c3b93d04a9179ea3b479664de3d54ae9f0bf254de808d8c9c"
        }
      ],
      "licenses" : [ ],
      "purl" : "pkg:maven/asm/asm@3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://asm.objectweb.org/asm/"
        },
        {
          "type" : "distribution",
          "url" : "http://mojo.codehaus.org/my-project"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://forge.objectweb.org/tracker/?group_id=23"
        },
        {
          "type" : "mailing-list",
          "url" : "http://www.ow2.org/wws/arc/asm"
        },
        {
          "type" : "vcs",
          "url" : "http://cvs.forge.objectweb.org/cgi-bin/viewcvs.cgi/asm/asm/asm/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/asm/asm@3.1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-logging",
      "name" : "commons-logging",
      "version" : "1.2",
      "description" : "Apache Commons Logging is a thin adapter allowing configurable bridging to other, well known logging systems.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "040b4b4d8eac886f6b4a2a3bd2f31b00"
        },
        {
          "alg" : "SHA-1",
          "content" : "4bfc12adfe4842bf07b657f0369c4cb522955686"
        },
        {
          "alg" : "SHA-256",
          "content" : "daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636"
        },
        {
          "alg" : "SHA-512",
          "content" : "ed00dbfabd9ae00efa26dd400983601d076fe36408b7d6520084b447e5d1fa527ce65bd6afdcb58506c3a808323d28e88f26cb99c6f5db9ff64f6525ecdfa557"
        },
        {
          "alg" : "SHA-384",
          "content" : "ac20720d7156131478205f1b454395abf84cfc8da2f163301af32f63bd3c4764bd26cb54ed53800f33193ae591f3ce9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "628eb4407e95dca84da1a06b08a6d9b832a49de8472b1b217e8607f08efeeed18b996232d64dd07f03e78e0e3bb4b078"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9aab62deccf156ee6e324c925dfc30ecb53e8465802863a551901a461424e807"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3fd76857f6d20c03799537cc961c1c4ddf1c375c6c192fb982363e3b9397ba138b77f24ef38b4202f44e37586789c0320e4de18fdadd2772304fd14a9b26d552"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/proper/commons-logging/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LOGGING"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/commons/proper/logging/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
    },
    {
      "group" : "net.java.dev.jets3t",
      "name" : "jets3t",
      "version" : "0.9.0",
      "description" : "JetS3t is a free, open-source Java toolkit and application suite for Amazon Simple Storage Service (Amazon S3), Amazon CloudFront content delivery network, and Google Storage for Developers.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "22559a7c686b19534707228decc3c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "792bc96ee7e57b89f472aa0cb5a31015b9f59c96"
        },
        {
          "alg" : "SHA-256",
          "content" : "e89893fc754b252af717d7d14accda946f7dfcfc1e293fd3e04725163d661bd7"
        },
        {
          "alg" : "SHA-512",
          "content" : "79fcaa8be8980b2fc9d8463854130eb7a7d6110fa795e73ac01d9abad23ec1588178e9d557d84f05b8e0b4ac909ae65eed1ff92e35c889208af003e195ff23c4"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6e4516169d4d1c2241c3df7dd57e159cbe603cd746a125fff201cd097a351d82d6ca30e93aeee19a73bca0a009e94e0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f5c6938b1c058addb30e83f29d2fd5caa1c85fa388a6e973fb323a769d409865fca658bd5e5657c2c5c12391165e59f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a796b73cd29be0501cd93cd9aa4472fd1636fec60373648b958d48393ddf5b82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6aacb4e00e35fe9891313287be52a0d490a22726508ad1e539e01868f2b5f730020301c9cee77386851854ee5adc4c2568f7fe15056ba5a8911f2f6c3d84d744"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jets3t.org"
        },
        {
          "type" : "vcs",
          "url" : "http://bitbucket.org/jmurty/jets3t/src"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar"
    },
    {
      "group" : "com.jamesmurty.utils",
      "name" : "java-xmlbuilder",
      "version" : "0.4",
      "description" : "XML Builder is a utility that creates simple XML documents using relatively sparse Java code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0fa474213a6a0282cd9264f6e0dd3658"
        },
        {
          "alg" : "SHA-1",
          "content" : "ac5962e48cdee3a0a6e1f8e00fcb594747ac5aaf"
        },
        {
          "alg" : "SHA-256",
          "content" : "681e53c4ffd59fa12068803b259e3a83d43f07a47c112e748a187dee179eb31f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4cbbf37807c05f714f554d0b340ebe78007c619a233ad243825e37e89403f550bd272e19733ad94bdfc48707cf8b5dd20d3e8552da9d40faa4cf549fdf0cddf5"
        },
        {
          "alg" : "SHA-384",
          "content" : "a9760f16e6bbe7155184e115f641a30341d6021a9f89e63c1d920403d1285059f10246df23a91e2749bf3cda3727a335"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9cf23c5cc08d2e5afc69efceff8d633cc8cb53d5360909c4247b783374ef44d99ecbfd61652f13472a5e12bc4a1a76a6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3631ca9b35188d611c32d0117fd2caca530f139d9417aa74cd15b2195e4c56fa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a3de577e20c4ef1de04c4be9bfb2bd273e2c7b221decd285c631b8dca475084d2d498834e258853de6fd0e5049acdfe5e8058a3e342e128fd17803e188c95aa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/java-xmlbuilder/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://java-xmlbuilder.googlecode.com/svn/tags/java-xmlbuilder-0.4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-lang",
      "name" : "commons-lang",
      "version" : "2.6",
      "description" : "Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4d5c1693079575b362edf41500630bbd"
        },
        {
          "alg" : "SHA-1",
          "content" : "0ce1edb914c94ebc388f086c6827e8bdeec71ac2"
        },
        {
          "alg" : "SHA-256",
          "content" : "50f11b09f877c294d56f24463f47d28f929cf5044f648661c0f0cfbae9a2f49c"
        },
        {
          "alg" : "SHA-512",
          "content" : "4a5a3dbe4941c645e2cca068cca5c1882cfe988b02e7cd981d1e51784900767d1deab0e0e0566f559c9fcabb4a180e436d5bb948902d4f4106f37360466afb42"
        },
        {
          "alg" : "SHA-384",
          "content" : "9725bc421adc1dbcd6f937eca0f3075d186a2b353ece4cef66b0fe81bb8d3f7d7641c43e86d657ef526c719f0c2a8c90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4bc4eaaf2580ded6d552b96ae5261c936de95f69a1d137c47279c51bf2aa1406ae44f69ccc94486267b8441e53c4bd74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b68d49ef037d428ea0c3e67a7a20f3d68a134bef30a1639ec08d28886b9f5629"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2e9ffc0608827cffc0b48b7a0f35d371c66586c99fea2910f7c2a237c7c57d9ae4d65de7c8e018362c2e4f963c2f70a9196cebf35457f1dd0cea6c65c256f673"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/lang/"
        },
        {
          "type" : "build-system",
          "url" : "http://vmbuild.apache.org/continuum/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/lang/branches/LANG_2_X"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-configuration",
      "name" : "commons-configuration",
      "version" : "1.6",
      "description" : "Tools to assist in the reading of configuration/preferences files in various formats",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b099d9f9b4b99071cc52b259308df69a"
        },
        {
          "alg" : "SHA-1",
          "content" : "32cadde23955d7681b0d94a2715846d20b425235"
        },
        {
          "alg" : "SHA-256",
          "content" : "46b71b9656154f6a16ea4b1dc84026b52a9305f8eff046a2b4655fa1738e5eee"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5d184175a93d3008300ae5230e43776d7fd13f3d5958bc1b8e32d84ddcdc2c51a95af2ff0e4636dece1cc398b49ac43ca47db841c9162fd38afc17b07b381a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ea0ab67fffa9741800bd4a0944084860bbe4ed6652edf1135cc5cd2ed2bac684dc75d71f2b4620468351c0dbc31042a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ddd9cb7aa61cdc50fd54ce55911dec6895acfc562a3a5db29fbc42ca72d2b427840337e3f8a08b9fa379ae95947527c6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa48acac5d035263eef457c8b9b2041026010c03448aff4066ac0c9f044a8a54"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9b7bbfa72dc3d8a786e7cedd881d35a59a21a40be7acdcbec0cee3b87b78430ac2b2c7f5ba2514b819077555fed511ed5d5f42f524334f8696e710e694bca098"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "www.apache.org//www/www.apache.org/dist/java-repository/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CONFIGURATION"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-dev/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-digester",
      "name" : "commons-digester",
      "version" : "1.8",
      "description" : "The Digester package lets you configure an XML->Java object mapping module which triggers certain actions called rules whenever a particular pattern of nested XML elements is recognized.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf89c593f0378e9509a06fce7030aeba"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc6a73fdbd1fa3f0944e8497c6c872fa21dca37e"
        },
        {
          "alg" : "SHA-256",
          "content" : "05662373044f3dff112567b7bb5dfa1174e91e074c0c727b4412788013f49d56"
        },
        {
          "alg" : "SHA-512",
          "content" : "138aaadde6b134eeb39574fde80f8eed1dee4a7049fccdd8c462c0a0dfab5419bafd259e77b99d85094b4e7c864673f07249c39c3b18aff87ef39b3663f537a2"
        },
        {
          "alg" : "SHA-384",
          "content" : "9dcfb1988fb8de4fb7482ce419bd99ea780795403228cc51454e9dd7fec3cb3af889178fbc6b906ec6f991aa77124cb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "40f4faa08d895e7aed56f62b5e793cb99c91819629ed1f6a82a8decfe12fd08077dfa6d61f7974bf1069a1684dcca273"
        },
        {
          "alg" : "SHA3-256",
          "content" : "473187f8a52324feaf965f6ea1a8d578c15e57b68f1336799ff432521ab2df27"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e7a95ea8e864301db31754797d164f37cbc53f61598fdfac9cfdce04f4538f56a10a638a193c60ee176f2cf24e9785c682ccde3b6c13562638b4d5a3a81a0389"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jakarta.apache.org/commons/digester/"
        },
        {
          "type" : "distribution",
          "url" : "file:///www/jakarta.apache.org/builds/jakarta-commons/digester/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/jakarta-commons-dev/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/repos/asf/jakarta/commons/proper/digester/trunk"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.avro",
      "name" : "avro",
      "version" : "1.11.3",
      "description" : "Avro core components",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ce474e395d0aad56c11293fd68ccb52"
        },
        {
          "alg" : "SHA-1",
          "content" : "02b463409b373bff9ece09f54a43d42da5cea55a"
        },
        {
          "alg" : "SHA-256",
          "content" : "4554aa8f8175f999fc56e35d8d294d634480992ce02406a52c650f521997e436"
        },
        {
          "alg" : "SHA-512",
          "content" : "06829cf06127621042d024668c1c4c7b68b19e9a54e51495c03ead0ce600291e675da6f081307b8a949be45a6f6e6fe55ee1af1a69990ae47dc300277ab3493d"
        },
        {
          "alg" : "SHA-384",
          "content" : "991cab21cebff4d891c2d8f9c1c09761f06bc438f71ca811b482a35536e379da4e84d84645a9527330ff725dc2ff1da8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e45b18b7c17bd057f1ce019e16f79981adf7a6bf679d99dfe698cd4dea33d5b08b34423c7543afd461d5ba59d60cfac6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "331a066d124e3bbfb056c535cd93839363a91f983bd4b37dbddc6394ecd47f23"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54aac1cfe1db9d7fc3476452d91542d56f0b4105c3a1c782d946c1140b19ecb1856771d0af9c1c1b6aecc5087e47d8c377aa63fd86baa3ee2050b9f740f3eebe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.avro/avro@1.11.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://avro.apache.org"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/AVRO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/avro-dev/"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:https://github.com/apache/avro/avro-parent/avro"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.avro/avro@1.11.3?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-core",
      "version" : "2.15.2",
      "description" : "Core Jackson processing abstractions (aka Streaming API), implementation for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e51fdee85b48e6637ad9e85ee76b58df"
        },
        {
          "alg" : "SHA-1",
          "content" : "a6fe1836469a69b3ff66037c324d75fc66ef137c"
        },
        {
          "alg" : "SHA-256",
          "content" : "303c99e82b1faa91a0bae5d8fbeb56f7e2adf9b526a900dd723bf140d62bd4b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8a3ddf5c8a732fc3810f9c113d88fd59bf613d15dbf9d3e24dd196b2b8c2195f4088375e3d03906f2629e62983fef3267b5478abd5ab1df733ec58cd00efae6"
        },
        {
          "alg" : "SHA-384",
          "content" : "22f4b71de5860b9c54dd85091d5b1312f7f5097a376f68f5a35b32a342858bf2e24ed394d76be0648545a6137d78b82e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bf7f6d6d6898978d2ca11e924f0268a90adbb6f6f88b1402e7c96b6fba76ff4e7d83ba163d10b1c551443c3b3cdef9d2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fa5ecb4b5ab9884403d5001dd368be876e10daf90e91fccfdf6fb21f14563c15"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e8648a4c8aac64f0f71787ec6dd4693a30fe0e3c1fb78ce12b2a1865d17d7f9788c085ed1ac1216e45c05f582a0764d8fee44cf18cc90403846d255fe778c7b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson-core"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-core/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-core"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-databind",
      "version" : "2.15.2",
      "description" : "General data-binding functionality for Jackson: works on core streaming API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "20ac0d0526a456274409fa852eb74087"
        },
        {
          "alg" : "SHA-1",
          "content" : "9353b021f10c307c00328f52090de2bdb4b6ff9c"
        },
        {
          "alg" : "SHA-256",
          "content" : "0eb2fdad6e40ab8832a78c9b22f58196dd970594e8d3d5a26ead87847c4f3a96"
        },
        {
          "alg" : "SHA-512",
          "content" : "edf622f3d2bb2cdf308875e467f28eafdd581c6ad47992a2b49a2c803b597c7fe4330c8f887687599c8a6a529d8b11054f8b354b7ddddd2bf904ef347d4f1cd2"
        },
        {
          "alg" : "SHA-384",
          "content" : "cced300ea06748cc30cdabf1a0a8e45749d3d2a52740975acd858bd13b83458d535a52fc4cc0eb8991ebd3638b9688ec"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c4a29f5075cc31b52aabfc8f656ee761b075954fe89469e76aef7a563d93ee71653310967b68f89ce25ed26241c0bda9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "400677b87f766708abe38aea66c8564cb422cd271208e926a0c2eac99b64cd92"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0a02353d0afa97f7cb85f1f81ee221cf4425fbde1e2d1b6b7bd8fe0d5d2fcb5dbba8b6fe9c79b500c71fdac8accb77eccebe0853fd8c37bd34aa578796b8a81a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-databind/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-databind"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.jackson.core",
      "name" : "jackson-annotations",
      "version" : "2.15.2",
      "description" : "Core annotations used for value types, used by Jackson data binding package.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71dabcaac955a8bd17b5bba6580aac5b"
        },
        {
          "alg" : "SHA-1",
          "content" : "4724a65ac8e8d156a24898d50fd5dbd3642870b8"
        },
        {
          "alg" : "SHA-256",
          "content" : "04e21f94dcfee4b078fa5a5f53047b785aaba69d19de392f616e7a7fe5d3882f"
        },
        {
          "alg" : "SHA-512",
          "content" : "c9ffb4cf3e409921bca1fa6126ca8746c611042ac3fcf0e4f991d23d12b20ef0946ef1421d991ae8ed86012059df4e08fb776d96db6d13147c2ec85e22254537"
        },
        {
          "alg" : "SHA-384",
          "content" : "78885119a700d5dd717fc83e58bf063e1fd07bc823846b6797af6a04a99e92e8fbcf28c3a1316079e6695c138c110deb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5b8fcedd6d34427bbe32b1c6082b49d9ded5a00b69549cd6722ffad7d87f3e90b48ddc74a8bd0dec1987ebac73df3a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b4e4df4be6fe975483027aef5d4df099d8bf6dd5974118d118a47775d5f75a88"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d10fdee33fe005f9941851117e7021fae066ca3ddf2ccbbd048dae103f3cb540e11116ba53fe48b34bbab6fcfe09a6cbc6c50d1bc74893509e8b93a6c6f2c517"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/jackson"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/jackson-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/jackson-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar"
    },
    {
      "publisher" : "Google, Inc.",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.2.4",
      "description" : "Google Gson library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2f54fc24807a4cad7297012dd8cebf3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "a60a5e993c98c864010053cb901b7eab25306568"
        },
        {
          "alg" : "SHA-256",
          "content" : "c0328cd07ca9e363a5acd00c1cf4afe8cf554bd6d373834981ba05cebec687fb"
        },
        {
          "alg" : "SHA-512",
          "content" : "d7aa9214cefb99b2f39bab6bf5718dafcb43742f8a881e5fb6cbc3a757491c0082a536ed1fef6c7168412b6e5bdec28e68a40b4d4d0b57b63a7bbc9a55f820cd"
        },
        {
          "alg" : "SHA-384",
          "content" : "2c5d7ed5310c1a1b45b7b46479361debd5e2e49737f167bff9c11dd989fa38b973ccd7b4655dbb5e34b0ff4ff1a8d755"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3cc62c086a1d97a2485921e3dd1c3cb5c91be299932b3a04a419b329b2491d2a405d62246249eb8ce20890f12dfdbca0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6bfd9ab58c5b5cde8cd1747690b02d4c2bdfeaa157f5f1c0421ee77c8c739f98"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c532e25f58ccc289d0c8233bbc9dc77dacdb92dbe6092fdc1f48a17288299a29352d12299517f61217ecd4793d218d025edecf396a326e11942bdda3a8e01610"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/google-gson/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://code.google.com/p/google-gson/issues/list"
        },
        {
          "type" : "vcs",
          "url" : "http://google-gson.googlecode.com/svn/trunk/gson"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar"
    },
    {
      "publisher" : "Apache Software Foundation",
      "group" : "org.apache.hadoop",
      "name" : "hadoop-auth",
      "version" : "2.10.2",
      "description" : "Apache Hadoop Auth - Java HTTP SPNEGO",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "befc7be7bc7aa4dc9b6324626913cda8"
        },
        {
          "alg" : "SHA-1",
          "content" : "29ab697d6b925ed3a52b782554d59e3312c94572"
        },
        {
          "alg" : "SHA-256",
          "content" : "0acffe01db6dbbdce9e6d46aa758f956af60cc8ef0fa405ca7f5b8747a53687b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b3aac5229209dc11ef20c1125c186fc4ae77e85679725c6a8364538e6026c35439f85ae37579130c6089ab899ba1da180f65a7cfdd0a9c3120fe1c7b0f2157cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "25e6927a991abef2a6c6b75859c6b23a7cbdc90dd9fec7b18ebc0a0d594911a27b2b35ddd5f618b5cc0dca2fd1807d34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45fcb77fd0d7b54983b74f51b479fcc8cab9f0112b4a7b099e32ec362d0682119d3608e1211e6943ec8eb641bbc64659"
        },
        {
          "alg" : "SHA3-256",
          "content" : "038f1a7d376ac8b57b6c4cd7cedb401217545057a27b100ce84cabbc79d77510"
        },
        {
          "alg" : "SHA3-512",
          "content" : "350d010fdaf42e07fb472735957b3a70038bb05409aaffae7782b6d0f58d7bab4297a3fd3ae73968544f6d6fc0c1f5a1e7a6990ab557ed4521fa26dfadc8d64e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "externalReferences" : [
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar"
    },
    {
      "publisher" : "Connect2id Ltd.",
      "group" : "com.nimbusds",
      "name" : "nimbus-jose-jwt",
      "version" : "7.9",
      "description" : "Java library for Javascript Object Signing and Encryption (JOSE) and JSON Web Tokens (JWT)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf76d6f5280e5bb138b23076719f7d80"
        },
        {
          "alg" : "SHA-1",
          "content" : "b608cd5e306d67bb58fe5bd687387aa0671687a6"
        },
        {
          "alg" : "SHA-256",
          "content" : "b4f58453e180a981eb744a19b4d56afb12f10c3dd35e7531cc58ee6cbf5bf286"
        },
        {
          "alg" : "SHA-512",
          "content" : "2126e64143a0c30b42051bfd710fa47e76208bde44498a25de734401870c8b55b8c992067b865c93092adefccd09ba4650918b8ab250dcf9a8f3176c481f13a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "3ce7bb4f4bc9c4ec4a73f0e41c976cd739e441a60f669f29df1402c69837cd1db1e705d5c6b1af4151172f666a99c2fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a4b005ac939e68bd26fbd90d99be5f9ad27a3fd2769227db1b0bea975ce0dc82ae41e2fba2209a3e02e6f6717d310371"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d727949d08d27541e7e6dcd97d166b3aa1e6f616a1d87bd873bcba105cf8924e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "28496f79727e3370fbe72d17b1a5274b5f5b78e310a4b60ac05ebf3658a3dd17db0cdfc2fdf7bd1397d8db245101699c39c068cc46ae027bb5afa5e881cb63a7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://bitbucket.org/connect2id/nimbus-jose-jwt"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar"
    },
    {
      "group" : "com.github.stephenc.jcip",
      "name" : "jcip-annotations",
      "version" : "1.0-1",
      "description" : "A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d62dbfa8789378457ada685e2f614846"
        },
        {
          "alg" : "SHA-1",
          "content" : "ef31541dd28ae2cefdd17c7ebf352d93e9058c63"
        },
        {
          "alg" : "SHA-256",
          "content" : "4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323"
        },
        {
          "alg" : "SHA-512",
          "content" : "02fcd16a30d0e68b3e9e4899731181c6abb7117baa15c096ca940e01dde08bb86101cbeae552c497f8a90d923b5fa2f2b6f3850baf8dc94dbd399887924a9069"
        },
        {
          "alg" : "SHA-384",
          "content" : "88b0ecfde391a3d8468349c70e1539569768dfac3233dfe0b4660904df04e6c6bf26ed9c0784b9b22c122c3448e2a6b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "487b53f48b55b98a61ae60abedc43543887944867aa6bcb78d5ed46e2d0d7c19510c5fcadc362d939313feafdcfc55e1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3e79c8f58865d2d58a5311a8bb45772007f07e7f3ed2780784d1e4382dc934d0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ff32665e1b6d8176ccc7e8c836ca7343c2603dab053e42d79b4258d51a14ff63933c67d24034169ac91e11ebda21cc2c84a2a540072e656d2a8e6fcea7808421"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://stephenc.github.com/jcip-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://github.com/stephenc/jcip-annotations/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/stephenc/jcip-annotations/tree/master/"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-kerberos-codec",
      "version" : "2.0.0-M15",
      "description" : "The Kerberos protocol encoder/decoder module",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3118e22eac44e150c383df1d417772f4"
        },
        {
          "alg" : "SHA-1",
          "content" : "1c16e4e477183641c5f0dd5cdecd27ec331bacb5"
        },
        {
          "alg" : "SHA-256",
          "content" : "4996f5b72497e94dd86d64a370158c4fb0049eea9b17ff8b27a4671d6c136ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "9e2ecd4f5d08af238ab32852fdf86f8165701b745ad93f3bc96eb3c0aff95a083773039adc3722123e8504971cd379929f9c4ad6d5c1ca3d112fa3d04e4a83f0"
        },
        {
          "alg" : "SHA-384",
          "content" : "c2e02333581bf5fef1a73c681afbefa13a03451e91bb36adeca90380679ecfa5a687e42073b9a7e6d60d71060d7e586d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8f61173cbdbe09e53bca5e2cca5bce141083455b72ba4d6ad624be4da81ce27afecc8c36c7058a36e0291b6672d29da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "161f828310334719481640ce1a82e6004c4b445ad090f6e18622be16042f71e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c94fce03575ce82631a361f945c8dbe48332c632f4d2b9386792064a8315fdc7ad7b1b17e63fbb4b6b9f638403be4b7e6255698852195a20e3d241b020a14119"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-kerberos-codec"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-kerberos-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.server",
      "name" : "apacheds-i18n",
      "version" : "2.0.0-M15",
      "description" : "Internationalization of errors and other messages",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f5877c02fd56ade67713560e589c81b9"
        },
        {
          "alg" : "SHA-1",
          "content" : "71c61c84683152ec2a6a65f3f96fe534e304fa22"
        },
        {
          "alg" : "SHA-256",
          "content" : "bd3b7cece7fc6364cbce32b9edd0e9628a3e889c6a93cdeff1b5e2131e2a007c"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ca2e5e475168e97c3e25d52dfd8fd342e5be2f1689842bed03db568538f8f9fd1cee28cde6e815c4706123716a266db6130ceaaac4eddbe9d597de7459d6632"
        },
        {
          "alg" : "SHA-384",
          "content" : "fda3e7e1e80becb69fe5997c75b8f89ecaa7004bfebc20e230dfb3580a3fd9c526757e775c35a53e5681da1c2a7edb3b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0fc218a9b93501998ab35252262373b7eda92a33d3688bc87694421e847bd4b4a11c3f79ad27a8c93fc000e085b6b28c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d9bda1adf202334aebea73021e3bbe180096e8165ecf6876b589c8bc58ec7fd0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1272d97252156e84b10b85ffa9f43837338ba381e392c3662e96ffaaaee8a1bf82b3b77553cbd7bb0183a969ad3967bc7198cbeffbbe028266aaee90cda4f1d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/apacheds/1.5/apacheds-i18n"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRSERVER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/apacheds/tags/2.0.0-M15/apacheds-i18n"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-asn1-api",
      "version" : "1.0.0-M20",
      "description" : "ASN.1 API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf4561832dab76e9f37461342ec18d17"
        },
        {
          "alg" : "SHA-1",
          "content" : "5e6486ffa3125ba44dc410ead166e1d6ba8ac76d"
        },
        {
          "alg" : "SHA-256",
          "content" : "484aaf4b888b0eb699d95bea265c2d5b6ebec951d70e5c5f7691cd52dd4c8298"
        },
        {
          "alg" : "SHA-512",
          "content" : "10b84880f0b866addba5137d7afd1fc35b6c5e3577a3c8d9d122fc91201f21381173aca49881465ced33fc34680da55ea6bc47e2f8848fb5dd0d988bc0cace97"
        },
        {
          "alg" : "SHA-384",
          "content" : "f0924bad02e083567f2c08fc565484c55e2f9de59abaa7a1fcafa36bc65a451cde6d1b2e78386e04dafba46e85c5e3d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ae5c73827f5ffdc09c7117cbfb7ee9efcf6daf7f8ea5377a96aa1e0ec245846d34d237ca35a57dbf4ab36a5f11c46c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "58dba2f147b58b85925b06ae53dced0025242998f215aafdbca5a6f24d01463a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35ef1eb9ebdc088c64adb05c7fc213185c15363f0c00afb96d2f19f25462052d30f8bad23aa466f173f06b51218c7c1a30ed2f50177a2b9830358a143fca1ba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-asn1-parent/api-asn1-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-asn1-parent/api-asn1-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.directory.api",
      "name" : "api-util",
      "version" : "1.0.0-M20",
      "description" : "Utilities shared across this top level project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2c5a6722666882024becdd64301be492"
        },
        {
          "alg" : "SHA-1",
          "content" : "a871abf060b3cf83fc6dc4d7e3d151fce50ac3cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd32fd047ccf143c58d093b58811aa81e539f8cf83c1187809f1a241a1df12d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "b1c206a420d5dc455f22a1f22980573101b9c74abac044e1b02b2925eaf7c8b188481797d9261cfbe1e2800e684ce88ed8cd18db1ef5909929bec33539a4c5f3"
        },
        {
          "alg" : "SHA-384",
          "content" : "1fed2deab6fe2e3d357bdeee48046861e53582f2404c34bc2bc35992e771e27e8d28b8df65a994f700159e5ca5311316"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0451ed59fec5907fed4e5b9688c0d0b4a682fbb56eecb38ac963670ec0bfbd04790325ce1e2f79022976f0344f9cdc74"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa8acd1abed952436313c6988941e63e0f33473f8df6e9ae39c8bdee334ae4b7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b6a0c7780bb76334438af34d098b15c9fdf1627a927f7c451ffb468acde7916e5ddf7fb4942d0800c53fda02f8d788f5c75999e546f1aac9439b9e524efd70fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://directory.apache.org/api-parent/api-util/"
        },
        {
          "type" : "build-system",
          "url" : "https://hudson.apache.org/hudson/view/A-F/view/Directory"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/DIRAPI"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/directory-dev"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/directory/shared/tags/1.0.0-M20/api-util"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-framework",
      "version" : "4.2.0",
      "description" : "High-level API that greatly simplifies using ZooKeeper.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2f367c709f86c66eff86f3f6bae75aa"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b1cc87e17b8fe4219b057f6025662a693538861"
        },
        {
          "alg" : "SHA-256",
          "content" : "a2fee0f69261bd1cd2428880395b272d5b4652311b706df9f35278558b1c0573"
        },
        {
          "alg" : "SHA-512",
          "content" : "66be718c33e5392f74e299f8e4ce278bd20c7e9b1f4316a68882bd56d8fedb571d937b2bc6d0bacb013062aae35d92565713f1dac9dfd2313696c9e7c2c1cca8"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e1023e1c9169d3767a32b5003e2385a5d31938577d26a020f2db3e02d54d692ec94fc4e1d6943b86f200dd20485a980"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be7987cfdaef8c9cb362aa3ea32ba3d74b1770e45ea71311a06aa5fed1aac0da7cc5c495b792c22d2ff9ca3a94047597"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c0941fcbf6e128a9d40b1d3c88ff80398628223771b78db68e879ea6db275e7c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8291f0aea0b2b649ad7fa8e18f0d29bb3c4565caaa755ee069bd6d37d504438e987a54950a9fb16b13fbc3ff40b1bfd1282a153c2404eb9daadd6058c5783437"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-framework@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-framework"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-framework"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-framework@4.2.0?type=jar"
    },
    {
      "publisher" : "JCraft,Inc.",
      "group" : "com.jcraft",
      "name" : "jsch",
      "version" : "0.1.55",
      "description" : "JSch is a pure Java implementation of SSH2",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c395ada0fc012d66f11bd30246f6c84d"
        },
        {
          "alg" : "SHA-1",
          "content" : "bbd40e5aa7aa3cfad5db34965456cee738a42a50"
        },
        {
          "alg" : "SHA-256",
          "content" : "d492b15a6d2ea3f1cc39c422c953c40c12289073dbe8360d98c0f6f9ec74fc44"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
        },
        {
          "alg" : "SHA-384",
          "content" : "6da3c9e2d72bd25991936dfe918ae7f235d03f386a8f797b65a154ae71b36292f873338ccbf5dd4fd3bc63619c806dbe"
        },
        {
          "alg" : "SHA3-384",
          "content" : "92676d161f4ebe078df11f9cda6dc0bed4c828830bb98340ac34fdb89dc76b019d4320f6fdd3db13cdd6e33582cb9272"
        },
        {
          "alg" : "SHA3-256",
          "content" : "99c7de83022da8f85fcef262e29051b8c33c81d492cf344a5d123b83b5a459f7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "33344b4ee79f0e7c8901b828f2bea13d25727361deeaa37d85dbaf3c44a31e8d0b4f3966ce2e4c3705bebd046cb7adba0486d02babdbc68e9819d059b5981559"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jcraft.com/jsch/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "http://git.jcraft.com/jsch.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-client",
      "version" : "4.2.0",
      "description" : "Low-level API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f506448a6bbd0f85e738811f9db387e5"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5d50930b8dd189f92c40258a6ba97675fea3e15"
        },
        {
          "alg" : "SHA-256",
          "content" : "67f238d8fb27f1aa271ffdf86aac2a16e0ef0898545fe3287adc6a29a05e604d"
        },
        {
          "alg" : "SHA-512",
          "content" : "a73eceaa1ad24cf65b7f990fc7db05c76b3dac9db1a13dc079058bf589a4d9e13d412e62efca4ad8174633e98a6fbc68aca6be103aaa31a19ea78242e688c77a"
        },
        {
          "alg" : "SHA-384",
          "content" : "fc989f54a81f7485f95f621ad927e36160d0b88ea49e156a8c53f94bc6c90479b11444017b8112ecbd361635e9ad3d1e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e0a2cf04457e1ba981445f4e64365b13fcf6ebe3220b64c041669bb24b6107357fb24cb5e26a1c4304b186d533b60847"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b45aac8389f10c360706a85c0ecde742ac71cde72ad27e84cafeb0e965fbdeaa"
        },
        {
          "alg" : "SHA3-512",
          "content" : "704d49170456e8cbb89bd92cfd838f96e5d7e1d2cc7cdde6bd31ba15ea51acc6d97cc238a6bdb875cd97885159d6c98dc6924698beb9d7a3942464c81594b69a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-client@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-client"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-client"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-client@4.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.curator",
      "name" : "curator-recipes",
      "version" : "4.2.0",
      "description" : "All of the recipes listed on the ZooKeeper recipes doc (except two phase commit).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dfe3f5194166786f7a1736813dea9952"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f775be5a7062c2477c51533b9d008f70411ba8e"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2c0f6cd57042d6aba7b8222df422edc59b62e25fa89c1305e59dc6cfd9e59d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "2d1ac37cf5629ee02a715ea34a95db4110504bd88390b6963a9ff6677afb8fccfb2f1d9ac076d9bbbef105570f5ca5a54463a37acfad110e6a4ac3deb83d5a55"
        },
        {
          "alg" : "SHA-384",
          "content" : "9f8a5d432fc873b65e7c4dca75e12b5aef543fe45b4bc84f0d79db60ae5a1943cb8150a4a0e8fa73e71720001263c594"
        },
        {
          "alg" : "SHA3-384",
          "content" : "56c49602221ff9b3015f6837d992d2adab2ead8147f61be6a2890b032110daed62301b899a6b0262a73165682546f809"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9d544c603149633f908671eb880dff84cb607bdaf57a4ff0c4adb1cbdee622ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2d34c70f32144ff22d4325592f3e31fb556d5f7bfa2d3529cb10e5794170e0bda35c5e9e1f29fa82ea168c838f44995e33f19771975d7baa049a25782c3cff4f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.curator/curator-recipes@4.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://curator.apache.org/curator-recipes"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Curator/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/CURATOR"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/curator-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/curator.git/curator-recipes"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.curator/curator-recipes@4.2.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.htrace",
      "name" : "htrace-core4",
      "version" : "4.1.0-incubating",
      "description" : "A distributed tracing framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "34f428e68910ea6555c79e733d433f1a"
        },
        {
          "alg" : "SHA-1",
          "content" : "12b3e2adda95e8c41d9d45d33db075137871d2e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d61c8cc145a6e43ef99221032abd2e6e519b00ec159bb8f1ecd94cc475dc35097639b35d476a746103dccd04f88c49c52c7d72a43f6c59501ef7cd02f637d85"
        },
        {
          "alg" : "SHA-384",
          "content" : "07a10701d902d6e1f606d977272f6fc9f946cc9f50a1b3efe30d132beb32a00b7b962344d6f76e217012fd61a6f9f996"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7344591e452d480c51380be5dcb7e5efd5bcfaaf3c7f8a27b504d83737aa2e036377cd260242fa5d48ba2fdddd039911"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a7e997922ff4e70bfe61e75b555f93a032aeae813c3eca36db5d606f4cb64db1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3d9abf6ff9c0a73b5484bf0710294bc083574aca96b13611ada5460170e8170022383a3f6ae1c4f2fa687251f0a8cb7dc6f3fc9510962b5f00edce0e67ea8409"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://incubator.apache.org/projects/htrace.html"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/view/H-L/view/HTrace/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/HTRACE"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/incubator-htrace-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=incubator-htrace.git/htrace-core4"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper",
      "version" : "3.8.3",
      "description" : "ZooKeeper server",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c2e5d668a574fce02913b5d7195fe29b"
        },
        {
          "alg" : "SHA-1",
          "content" : "97bb82af5b529ec14e9c2d44b96884544f0db743"
        },
        {
          "alg" : "SHA-256",
          "content" : "9666d62d4901b39feb12ec5c2bc95028c79512c277ef7f2def4ff135c33a37c1"
        },
        {
          "alg" : "SHA-512",
          "content" : "fce5b0c898143f486860f26ca11f557fa8672a86787d912b903f53b729ffb77ca5163878a3cea676909bc140fde3f8e45b758b67a8eb1e928a60709362f7ae32"
        },
        {
          "alg" : "SHA-384",
          "content" : "2aa88b0887d32fed45a78adde91a368b0e7bd6f3ab01c61c2d64f002d7f7da8044caefdbe2b32c9aac608c5a7abb71ba"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bbb695d0ca51f69b70593d77362d399dc0f7e800e1497e05b567045e12037e3fd06de4f86551b104fdb59418f917f79f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6a7f94d208f1a25c1035948c6981db02bd13db1e8263d77d545bb54b84c4983f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "933475b7549a0ed58e1d57cc777b7b74d312741866f855d9338d3ff95ec1491dce84b9fe49c47ed2f89a2730a1d8367e82a1b11531b7f1f8ba0eadd39db44131"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.3?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.zookeeper",
      "name" : "zookeeper-jute",
      "version" : "3.8.3",
      "description" : "ZooKeeper jute",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "588902dece17f36b9761864d8ee1f317"
        },
        {
          "alg" : "SHA-1",
          "content" : "35507db15c52a787127b0db4d915717774d3daf3"
        },
        {
          "alg" : "SHA-256",
          "content" : "52a86f04b3115b58856c515b7f346afd05ba0cbdb11da0195535c6a58ed9fd10"
        },
        {
          "alg" : "SHA-512",
          "content" : "6a81d32cba34ec5bf81c14505958a74295e0b90190c1db3ddd140e605d598e51f398618eb67aa911c52a0c308f5970943643a711ff60f172ba52150f4ed31893"
        },
        {
          "alg" : "SHA-384",
          "content" : "33b7f40f059806892f59d8027b1a01a060a6aa742024fe188a955c864d2563f4eb5497800e9df933efa0d944a3456008"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2b32261b5d7c8881395318faafcd5469297c1447719d7da1b6a393627859c3efbbc8ad38339f2aff229c97577750e44a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9c9b7b8c62d471b763cf3bc8315b9de0ad80b7899b70341c3089da557c633283"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e782c5f2fc29fdf26005450ba8f1766ff48580a1d8b5e0150ce785ff441b5fc6d4af42faa5e79303f47b4fe8f84a849be652ab23e0df2b347667e5735fa9dccf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://zookeeper.apache.org/zookeeper-jute"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-hadoop.apache.org/view/ZooKeeper/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/ZOOKEEPER"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/zookeeper-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/zookeeper.git/zookeeper-jute"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.3?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-handler",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71115ecf7b56ffa15469fc81c90d8fe5"
        },
        {
          "alg" : "SHA-1",
          "content" : "4c0acdb8bb73647ebb3847ac2d503d53d72c02b4"
        },
        {
          "alg" : "SHA-256",
          "content" : "0e10e584c2e7fdf7f4804e14760ed987003f1b62ab982f62eaf13a9892793d3a"
        },
        {
          "alg" : "SHA-512",
          "content" : "8a9dfc357670fbf06a5a83b90f79a9ea7dd25318a14a4f68599dd746f90f65b18ffa356ff0af01debd58f815c5ead562a5fb8eb9884422a7d751e1b12359ff0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "dbcd08b5f8bcf8672a3408351e6660d766c217f11aa848cb236bfa7b26b065f3c40e97af662b31687e9bbd264405b397"
        },
        {
          "alg" : "SHA3-384",
          "content" : "052f876da511392c8ed118a5f24bdb57e66a1de55c54441081fca7294309d35e3fe6ba0356031ff695fb5036500a8780"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5ba35f6b7d284c5de16d4a21e7dc999af1fd463e2fd5f6758b3e3e3abee3bbd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6d009c74bb0122fa3ffc3829bdc37b67fce2f0ca022242f5ca8cbc0d553b83a472d2157ee870dedd9218fd4604641a65ae53113f7b0bee70fa4ee0b514fc2519"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-handler/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-handler"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-common",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cf117aec3d80cca994b4818fb029b020"
        },
        {
          "alg" : "SHA-1",
          "content" : "847f942381145de23f21c836d05b0677474271d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "d2908301f1ac6f2910900742473c15d701765d3d4467acdb1eebb9df3aa82885"
        },
        {
          "alg" : "SHA-512",
          "content" : "5bf58c87bdba2d0715b6d60280217651e5243982abbe5b3858501d6d99b4365df3f42faae1d8680ee39e27de60bacc4e299eff8320c7a04634b4a686545c35ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "1683331e8ad6443e65c98bd374931fa9b40bc87dad7adb173cb0fdbd1202635095ef714edb6be3aeb44343a9b9e943a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2597d4845ac7d4bf846fcd50cd97ebc027f52065e51b2747e7a99d74dd7542d43cefc3d51b1eaa52301a5b76964d29a7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c0086526a097ca4ed2d755c94494341826249755a0e9d454bd72d929c8548b40"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5cf81c7eb3d768b835f9ce40375fe1e9dd1160a8f2a38a0a8947fe28448883379c5c06a965be17e819d1b58fe086fa563a739ad0f7ae31b0eefd301e6fa5529b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-resolver",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad29e0c4cab6b9b1d83d2dab9a260d3d"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe62f9ccd41b8660d07639dbbab8ae1edd6f2720"
        },
        {
          "alg" : "SHA-256",
          "content" : "c42c481c776e9d367a45cc3a67a06f65897d280334eb30b2362b8c55b7523f4f"
        },
        {
          "alg" : "SHA-512",
          "content" : "5cb91a055b933893a37175ba052527de70d7311a0385658ae913f8b4a67f4945a3e0547def8a9751230986250ebc7876bdbd14fb5c8989aa885f4aae4cc47be5"
        },
        {
          "alg" : "SHA-384",
          "content" : "333fa2b49cc522664493dfd6e7f92304317f27c5887e33d87e6b3bc2f3d5cabe6ef88e6ebc0aa476ec23a48a982814fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "712fed0f1cc5ebc0e4efdc559b565f2ddc0cf161186834c3a1f6e75123ed7f1fe558e2f8410584ccd54056665bb40957"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6b05ee599b5f915e17d8c11816a4fcac27d86dfd0d4bb750bc4905978ef8e5bd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6ab5c3f414ef7aa13da7e30f662117b56d1a8eb5f1302b3434ccc07f9c07cc497c39c10379a781d3656269067fcadffde4884599f059ee86be40b4fd0ceb5c4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-resolver/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-resolver"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-buffer",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "df124be7a8094ff5b6f3b4c056ef0515"
        },
        {
          "alg" : "SHA-1",
          "content" : "39b05d2d4027971bf99111a9be1d7035a116bb55"
        },
        {
          "alg" : "SHA-256",
          "content" : "462874b44ee782fbefec64078cda6eb8e7bf9f0e0af71a928ef4c1f2d564f7ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "9f0247da21f7607da1183e642583b72c03d863c528d80bd9f5e47a1a0fec222880a7fee99a54f455a84a7d0f9758dffd7d59d0825a3695f3da4a020743316716"
        },
        {
          "alg" : "SHA-384",
          "content" : "7976e0aa676803e0e59b258648283e487e965aa0d454cdd54116d7535f8f6e3294786a034371c4a32d0eb1959e1efe01"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2735abe7a765a41279e726d703bc7868f84322a0fbeb61610ccb65ff08aa16d37f581b8f92cf50a046123d12d3e32567"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7358b82b84028a31145244e823e25db3191a08ce917d59f10ba97cac4d0c488c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6dc905576da9ff3b9fda4d0a19ca8c43b32f9771a37ca4a952a8511107a4c4cde80675ce122de04bfaa1009902ad0dea2ee3e4eba05d13338322d59b559e60a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-buffer/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-buffer"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5c5833972c90aca30023ca7118d1c6d7"
        },
        {
          "alg" : "SHA-1",
          "content" : "6620fbfb47667a5eb6050e35c7b4c88000bcd77f"
        },
        {
          "alg" : "SHA-256",
          "content" : "b1deeceedab3734cdb959c55f4be5ab4a667a8aed59121ff93763f49470f5470"
        },
        {
          "alg" : "SHA-512",
          "content" : "61dd55ac6b87ee442b3db0d172ef9bb74543d6dfda7ea15da004a84a1a16baabf5ecd967f152973f14a579ec15df48a92e8146825b153165b826feac5d4c5e93"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c10cb72e028a143e7e856715b35f7b58db72bbed4536d9cb4329f6997abe95a541e6cd16162a9cd07db4a0c55a7af88"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b6d4ae07394f92add50dcd33f4bebd35206238287338441bc3caa2808275845b41562d5fe9cdc70affe9eb2433fe8fa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89941a6f28fd007c8f0592cae74b56f199853a822633a4401f09e5221068e5d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "54942221097d3d33383dba3c577e44d0c03cf5cc73c1c89e40228626afc5d569b53fba73fa4698c2b88baf72e5df78089dd6aa35dc081f2b1acdafe31d2941f9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-unix-common",
      "version" : "4.1.100.Final",
      "description" : "Static library which contains common unix utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f9e7c0c25233359ce26bcd4827159ed8"
        },
        {
          "alg" : "SHA-1",
          "content" : "648ff5571022dbfa6789122e3872477bbf67fa7b"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d888230a04c4a3e647c64e933cefb64fd49056f969bfb734c8a3fcedf0bea8a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91a89e3c59840f816671dcfc89edaa3af66caef5423398997517afe4fc40a94658079e16bdf4772896e6537bd30397aa2651f38bdffd399f677d838073acf78a"
        },
        {
          "alg" : "SHA-384",
          "content" : "e34b37280c22d90287cd14f49e144f3c539d06ee35ad7b1ca5e2cc436e1f071fe02602d6facadb738c39fc34be1b4071"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f900919bfb2f600d5b252b4917c2cf317a75f2a948c71d6a8f13875b8538417d5952287593ea982329f13d10d65730a3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ab5ddf4992929e79ec37f480372d22ae2cc3342e1ab2b13b192a3d85d1b3e278"
        },
        {
          "alg" : "SHA3-512",
          "content" : "108bd772384757a70ecf23b68367f6accf8e370552bfdf8950076eea5b5ff3ab18a02e4e3e8463a4cbad28f1ff754834ce758f5be08ec3973ffed228c0a2ebc0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-unix-common/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-unix-common"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-codec",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "341344475354a0c6ecd0132537e33900"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c3c71e7cf3b8ce3bfc9fa52a524b9ca7ddf259c"
        },
        {
          "alg" : "SHA-256",
          "content" : "180a01ed67af399602e24ff1c32864e7f57f57c4a0fa5e9ab3fe9b0e5e9cf051"
        },
        {
          "alg" : "SHA-512",
          "content" : "2de4b3030b69a5ea2de01f986d8e10312926c6ef8588abe76fc8301f758a2634d2daaeb56aac68c0e7eea4afe0f2402e07fe03d1bbda03f039ea089420b5f88c"
        },
        {
          "alg" : "SHA-384",
          "content" : "5c90c37b7046a0b96296549619dd48662dcea81dd769aff82cd29decc87ee26e9277bde55f7614608cb384eaf38668c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c508348f5c78c36da416aac69b0eee6963cc720f37f63c31b9e65e106466414eb4a53d0049a03628d387ecae2076d9f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0166a494851b6f459865a8ac93bb0b54d3704ae4d027b598231558ce9f1d43f1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb48b9d4d94c9f5dde6d91d788d2f91357a950badbb679b5446a1b58aa96c31c832fe81ad90bbc192ae533cc1979463c38655fc7d6b3941ef5edbb8ff6eaad88"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-codec/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-codec"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-native-epoll",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f84c963e1d5f4d13fecc327a610e5155"
        },
        {
          "alg" : "SHA-1",
          "content" : "cf3c3ef7cb7b30b58385d824dbaf85f5f72da221"
        },
        {
          "alg" : "SHA-256",
          "content" : "34868795228df31914b75b10e97bf4d980e78e263569852e3185ca8c2a0de3e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "0725805407a786965edc5763bb37f19207f737718c0ac0c92ab8dec56405a41d179ee9b79a4e739e4c43c80a6677227e64573cf270637dc7f32263d8abfaee29"
        },
        {
          "alg" : "SHA-384",
          "content" : "2058435061e4b605cf3865f0bf35c2eea58f82ca7359ba46543351739fb036531d13ca7b9315b28042f7ae19e3edcb37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "50ca2fcf2068c25d33f916119c6ce8b5dd4fa910542c2650bb029e1887e329c517e15481b3d995b73ab9abd3a06ca0b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8264cb17a22ae47dd1700ff68e7e61a296bd197c4ed2516e760f432452cc432f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7a180098cf3f7a1c762ae1cbc86879d4385d6b5d0c5954b8b3ef8a997fab4332ab923987ed1a8e8ee1e3e1d16a39750835ec57b399e1a1f5e094775e5252b920"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-native-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-native-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Netty Project",
      "group" : "io.netty",
      "name" : "netty-transport-classes-epoll",
      "version" : "4.1.100.Final",
      "description" : "Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "330b88f30039a09ea3cf96e4f27fcd95"
        },
        {
          "alg" : "SHA-1",
          "content" : "78489936ca1d91483e34a31d04a3b0812386eb39"
        },
        {
          "alg" : "SHA-256",
          "content" : "9abc4b17b1212b33666eae4e8013d0bb78a9a2bcd0a9a621b9bd06a7e5fc0050"
        },
        {
          "alg" : "SHA-512",
          "content" : "38aab4eb66341393e77f0684432d31e9af8242729290b17621e7e762ae59049bd11f35b612bf47b689392264fa40dd30c1e1a2ece43c9596c2625e3889abeb41"
        },
        {
          "alg" : "SHA-384",
          "content" : "fadabd9e9b461c11ee60cb25cddbab645640ea101fc3b4bfb44a219c5f3351ae8d6c08ffe46f6c6d4f9671884bd3ceeb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "07b24c51bf49193f04a842c3f1fe63758ac4c9ebf9cdbacf5b9ca41034d9c45c90cddc8352ba0bfbcbb0becf1ef73cdf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0d430d84a085ad57b0e2f5ec47fa87e95fb060eea67b3e9fa6971de664b0d96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f675aab53a41a2abf8a8e8f0218e61d66885b4534ec2ca83534ec462a08863e415b0a65bd6ab07b9ae8c2316b1e06b06529c088b28ca74999fa5432c2fb551d0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://netty.io/netty-transport-classes-epoll/"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/netty/netty/netty-transport-classes-epoll"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.21",
      "description" : "Apache Commons Compress software defines an API for working with compression and archive formats. These include: bzip2, gzip, pack200, lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2a713d10331bc4e13459a3dc0463f16f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4ec95b60d4e86b5c95a0e919cb172a0af98011ef"
        },
        {
          "alg" : "SHA-256",
          "content" : "6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a"
        },
        {
          "alg" : "SHA-512",
          "content" : "c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471"
        },
        {
          "alg" : "SHA-384",
          "content" : "da56f95d420cd7278cee646f4cd0e7a5ee12b6a2894efaec12f0ff7b56c3d43e5db736fe1ed66ff91118b16f2d64ebef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6d3dc0198dd523a49fa94e054841aece853577b5c3ea1029fc288ad9ff580ab1b65ea99ddbe58c42125054e8c43be461"
        },
        {
          "alg" : "SHA3-256",
          "content" : "37d4a014b50393793d35c70431bd8a1842c197d854c6f174dfa946b9edc2b841"
        },
        {
          "alg" : "SHA3-512",
          "content" : "61609f60746406a7cb1ef3f979488beca6674fde208c9025d3fdee115de4767e8a4a1ee38f5bf79ac0104505ddb3558f1feeba5e318d6545647120ac60db6b89"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar"
    },
    {
      "publisher" : "fasterxml.com",
      "group" : "org.codehaus.woodstox",
      "name" : "stax2-api",
      "version" : "4.2.1",
      "description" : "tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "af8377bc7882332e22456616a9f164f6"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3f7325c52240418c2ba257b103c3c550e140c83"
        },
        {
          "alg" : "SHA-256",
          "content" : "678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579"
        },
        {
          "alg" : "SHA-512",
          "content" : "00efc5d4d17540fb180c5b20d456630a8b3262dff46676689ae916ba16f0fbd9b1a71c7badfb254faad6597f94fed1edb96f77c15f40178eaf4d8cd35cea5e8d"
        },
        {
          "alg" : "SHA-384",
          "content" : "97a6a9f0cc666776e4a4f08729c303d2a602ce5c25ee633cd6c54c72f12d11e9d43634ca6ca4ef7da5973a52030384da"
        },
        {
          "alg" : "SHA3-384",
          "content" : "683a1f110ab84333e7517dabe175b91d7ea2fbead2f9d02acf798c588a7508bc67580642afa8d57441bc56ce610d5b0f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5e8e54209fb6b580e928e703ef11645aff1a21dfd47cca2dc0e53d0befaef09c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d79338a481605c94e144c967cb7adbc6cfd06ee6a1182b5ebc8cd8ad3deedd707931e404aa197bc94d3b5a5d82a2e6dd6a2f6cc9dafc42ce3ad5061076b05199"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-4-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/FasterXML/stax2-api"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/stax2-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "http://github.com/FasterXML/stax2-api"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
    },
    {
      "publisher" : "FasterXML",
      "group" : "com.fasterxml.woodstox",
      "name" : "woodstox-core",
      "version" : "5.3.0",
      "description" : "Woodstox is a high-performance XML processor that implements Stax (JSR-173), SAX2 and Stax2 APIs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "89fb07387e448325eacc9c642e3d69af"
        },
        {
          "alg" : "SHA-1",
          "content" : "59a3a7fb46a364ee383ea7e8c67c152a224b3d99"
        },
        {
          "alg" : "SHA-256",
          "content" : "b2bd29c31fda49a9b28a22b9e5c2b26443bcfa99c1a28eab70ab9c7d349b5002"
        },
        {
          "alg" : "SHA-512",
          "content" : "a9e981b270cef762d2077522f158287141cc47a3d2705f7d03349390bfc12e2dc33641cab6278678e7225087d8e5a9a891f396e958ea1527628d7e8edf833ae2"
        },
        {
          "alg" : "SHA-384",
          "content" : "e653d5f0a2802aeb1e98e19d453850567c77fb31a3dfff41af953d2cd198d1a3fc374fb1c82f63a92bb5dd120b9f576a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e4608171de5487c5e33d11b46f72450f6773f650c89bead729ec0c87e34de27367b3fb739f0b8b6e476c2bfeed2bb2b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c95c04690fa6ea1614a08003e25a67cb184d4c983497ca9cd3171807e011515"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1769c8c0efcdf1d893ba717e448b697d0c64ad1474997184f55cd65ca613b255288345dbc3e9a6dc569f07556209d6afdc2689b76d9b1b584a2d3b489767cbff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/FasterXML/woodstox"
        },
        {
          "type" : "distribution",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/FasterXML/woodstox/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/FasterXML/woodstox"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"
    },
    {
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.yetus",
      "name" : "audience-annotations",
      "version" : "0.13.0",
      "description" : "Annotations for defining API boundaries and tools for managing javadocs",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e7b6aa8d8967f6f34a711d763d1b4816"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad1147dcd02196e3924013679c6bf4c25d8c351"
        },
        {
          "alg" : "SHA-256",
          "content" : "3bfbb397b06f63a2a0a361f62ed32cf199bd92ddd48ea99281f4987edec9777b"
        },
        {
          "alg" : "SHA-512",
          "content" : "9fdd60a366629a7ef7f934eea7d27d38e1614472e9090fd23c66032589fbfb9d90516c9cb13a44e4a3598e50d62daf851bb87e4dc8375b1da2cfe6392c448bd8"
        },
        {
          "alg" : "SHA-384",
          "content" : "bdd7d0a05faa80c56ab33e8f0c9b70a366f3bcc9cb36fcf88d4f6761feee36b46787baf42b1f62606935eb595279de7e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1a38fd63d6825a724bda4f2dd3dccd7c1d7cbdf7225236e4dc59f5f9642e8be8d1cf9863d723fa3f52d4e6f952eb99bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3cb50163f379a7eb642d4f6ceb0f4ab1d8a10414c656a101ca8027c2c4125c25"
        },
        {
          "alg" : "SHA3-512",
          "content" : "444f96bec24b7d28999c6830db42267ee0a007ffccdd2e48ae75c83ba22442fe5bed854280699e197e77b20ccf6fb19a562c0031b8911bca68a7e66dc7d80797"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://yetus.apache.org/audience-annotations"
        },
        {
          "type" : "distribution",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/YETUS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/yetus-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/yetus.git/audience-annotations"
        }
      ],
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.hbase/hbase-common@2.5.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hbase/hbase-logging@2.5.7?type=jar",
        "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-miscellaneous@4.1.5?type=jar",
        "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-gson@4.1.5?type=jar",
        "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-netty@4.1.5?type=jar",
        "pkg:maven/org.apache.hbase.thirdparty/hbase-unsafe@4.1.5?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.9?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-api@1.15.0?type=jar",
        "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.15.0-alpha?type=jar",
        "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
        "pkg:maven/com.github.stephenc.findbugs/findbugs-annotations@1.3.9-1?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hbase/hbase-logging@2.5.7?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-miscellaneous@4.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.21.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-gson@4.1.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-netty@4.1.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hbase.thirdparty/hbase-unsafe@4.1.5?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.9?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.opentelemetry/opentelemetry-api@1.15.0?type=jar",
      "dependsOn" : [
        "pkg:maven/io.opentelemetry/opentelemetry-context@1.15.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.opentelemetry/opentelemetry-context@1.15.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.opentelemetry/opentelemetry-semconv@1.15.0-alpha?type=jar",
      "dependsOn" : [
        "pkg:maven/io.opentelemetry/opentelemetry-api@1.15.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-crypto@1.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.stephenc.findbugs/findbugs-annotations@1.3.9-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-common@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
        "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
        "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
        "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar",
        "pkg:maven/commons-net/commons-net@3.1?type=jar",
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
        "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
        "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
        "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
        "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.9?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/org.apache.avro/avro@1.11.3?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@2.5.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
        "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
        "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
        "pkg:maven/org.apache.curator/curator-client@4.2.0?type=jar",
        "pkg:maven/org.apache.curator/curator-recipes@4.2.0?type=jar",
        "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.3?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
        "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-annotations@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/jdk.tools/jdk.tools@1.8?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jdk.tools/jdk.tools@1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.guava/guava@11.0.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.5.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-math3@3.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/xmlenc/xmlenc@0.52?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-net/commons-net@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-util@6.1.26?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.mortbay.jetty/jetty-sslengine@6.1.26?type=jar",
      "dependsOn" : [
        "pkg:maven/org.mortbay.jetty/jetty@6.1.26?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-json@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
        "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.jettison/jettison@1.5.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.xml.bind/jaxb-impl@2.2.3-1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.sun.jersey/jersey-server@1.9?type=jar",
      "dependsOn" : [
        "pkg:maven/asm/asm@3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/asm/asm@3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/net.java.dev.jets3t/jets3t@0.9.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpcore@4.4.13?type=jar",
        "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jamesmurty.utils/java-xmlbuilder@0.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-configuration/commons-configuration@1.6?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
        "pkg:maven/commons-lang/commons-lang@2.6?type=jar",
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-digester/commons-digester@1.8?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-logging/commons-logging@1.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.avro/avro@1.11.3?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.2?type=jar",
      "dependsOn" : [
        "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
        "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.21?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.2.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.hadoop/hadoop-auth@2.10.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.15?type=jar",
        "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
        "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
        "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.zookeeper/zookeeper@3.8.3?type=jar",
        "pkg:maven/org.apache.curator/curator-framework@4.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.nimbusds/nimbus-jose-jwt@7.9?type=jar",
      "dependsOn" : [
        "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-kerberos-codec@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
        "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
        "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.server/apacheds-i18n@2.0.0-M15?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-asn1-api@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.directory.api/api-util@1.0.0-M20?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper@3.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.3?type=jar",
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar",
        "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar",
        "pkg:maven/commons-io/commons-io@2.11.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.zookeeper/zookeeper-jute@3.8.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.yetus/audience-annotations@0.13.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-handler@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-resolver@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-codec@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-native-epoll@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.netty/netty-transport-classes-epoll@4.1.100.Final?type=jar",
      "dependsOn" : [
        "pkg:maven/io.netty/netty-common@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-buffer@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport@4.1.100.Final?type=jar",
        "pkg:maven/io.netty/netty-transport-native-unix-common@4.1.100.Final?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-framework@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-client@4.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-client@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@1.7.33?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.curator/curator-recipes@4.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.curator/curator-framework@4.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.htrace/htrace-core4@4.1.0-incubating?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.fasterxml.woodstox/woodstox-core@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.codehaus.woodstox/stax2-api@4.2.1?type=jar"
      ]
    }
  ]
}