{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:06e209fc-02a1-387e-9662-6507dea1ce99",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-geosparql@5.3.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-geosparql",
      "version" : "5.3.0",
      "description" : "GeoSPARQL with Fuseki",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-geosparql@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-geosparql/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-geosparql"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-geosparql@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-geosparql",
      "version" : "5.3.0",
      "description" : "GeoSPARQL implementation for Apache Jena",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "014862379078a7c2c373a4377bfc86fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "39154c74c7a0bc83654da5f42aefd34c49a2b08a"
        },
        {
          "alg" : "SHA-256",
          "content" : "3efd235bec35dfafc7e59f9d41a7a8c9c254fbc993caed4c244c0dde360a78df"
        },
        {
          "alg" : "SHA-512",
          "content" : "cf0e01725c0ef32303d498ec40f0c40a38ca778ceda83f6547cc78924e18857a166afb0fe05fa779e36674232b74b0349717e737b4c449f8367dabecd9309736"
        },
        {
          "alg" : "SHA-384",
          "content" : "1358b9f40526ace9f05b546ea450a9e5a21989fff2c1460bb03dadd4c06d194b8af0e34f77c38002b0da1fc772baad87"
        },
        {
          "alg" : "SHA3-384",
          "content" : "075d83fe208ab6855a66cad2826131e7152a3ff4a157e5d4f2c99ac43c0cbb630ef5f8e344762d3cefa92498a5d4a239"
        },
        {
          "alg" : "SHA3-256",
          "content" : "484ae3bcbf48917f494939265e16f75f07f568b31714e29df7c2730e906d9f86"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b15e1793343d31eb4102248bd85ab44b0a4735297d354c64a0ca4e2797f2036d362703b4d38fa38ec1b1e216477e47ab60d0efd60c86fd599ca01bb3cdee7374"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-geosparql@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-geosparql/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-geosparql"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-arq",
      "version" : "5.3.0",
      "description" : "SPARQL 1.1 query engine and RDF parsers for Apache Jena",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "122802be7c097740118ac74c62caee8f"
        },
        {
          "alg" : "SHA-1",
          "content" : "3f28f5e0b1d83aec4cce94946582ee61f86fac47"
        },
        {
          "alg" : "SHA-256",
          "content" : "bb1ec4dd3c3dc2b9d0463f51939539b2447199d503b367ce908495f14c9fe607"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0829bb2555f07ec09b2d7c676cc41071cac77bf3c3e1be57fe4e28d404cb023aa5b09b7766c739dd80808d83408c1499084e40a7358a0fbe9fc7070e30d3756"
        },
        {
          "alg" : "SHA-384",
          "content" : "7eaf9998bb41c48c122b61152ad6e5b1d64432aa681659c4c2aa549069e5b2c60a32caa0083e012807c105574f27711e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ae9372ad88dc4f047feaa07050587c7490e7f097114dc7e1a72debd1914470eb67a971bce17a79803cee79c83e39b248"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f7f3e06ad2c54aa54c98c9fff68b7fc1c0370f880425ee4b273623403b4a47d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "042752e3079d8d26e0ddef1bffa906637de7732f24e86c792389f6582ddb610c79fb061d8f618447a7b87851aa5599b08ae843e7cddb0db950f971df9f2dc49b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-arq/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-arq"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-core@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-core",
      "version" : "5.3.0",
      "description" : "Jena is a Java framework for building Semantic Web applications. It provides a programmatic environment for RDF, RDFS and OWL, SPARQL and includes a rule-based inference engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f67e09908bbbb7f01ab03c9fa05ce305"
        },
        {
          "alg" : "SHA-1",
          "content" : "93fc40e11ec7d3695a3056d381236be002544ab0"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e8642478ad205efc98887e2899603edcb0f705c02968d055be33c01f13f5c9a"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b34f64ffc8f5a34f47c198433e59e8189e574948be724e399406a24e7d93db60f8842f662d8a6307352b08860cc0799ea665664858bd67223eac114776e9f5f"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe43301d96bf2d70d4e16e165330251563f974bd8c87be36784cd7d201321d50227b74c264cec8ae8d68766ae36d2978"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a5b2a4ca248bae620e78fcd38719e71d048fe5f8997bc4284f3f02aa3ce1d71cabb65aa5103b34d74bdc57553c618567"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9bfc897927cc338d6e9a0b1d326b152096d2ab99d0f978bcfdd59e92410c9674"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0f998399318bb12f477fdc93a8128f18d36804c41485a2dbc0fdee5f8805c73e075f52dae4b39483bae866850919ad5f503a8291f305628e8b428c684eebeb75"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-core@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-base",
      "version" : "5.3.0",
      "description" : "This module contains non-RDF library code and the common system runtime.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7265100c4af482b5b8d2066a27ad092b"
        },
        {
          "alg" : "SHA-1",
          "content" : "a8996bcd9adea50defedb99d8589d69a1104dcd1"
        },
        {
          "alg" : "SHA-256",
          "content" : "f779ce2545f3c33e56076f006d0c9ac1f54c06d122145fdd22aebf95ae3c58b6"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee64b5d375a99c97014a8bb405e75315db6a16eed24eb8437234ffd336b7fdc5bd0227f40cb03f0c91de25787dba80b96d50182b3539e9a8be0f45b0bfa090a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "836416ffa9e75bf5c3d088b2e5170f57a0cf25a97cbab4abea2f7bd3acebe5c6ed1882d6229b9dd9c88b8bf87f3e505e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a4a2369c6e960068fb15b92e3970a75417dc9a637acd3891ac175e2090247282e90c788161ac6ee671ba643c7ece37f6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "06d15c827dafff7c963d920e041315c361f943583415ad5d7456a9a88529fcfb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1b348744cf7fbbce8a926ff4c374144ca5f02f05d876734a34199c8a911d0dcadebaae8b59be625eb117ecef748a37c02b6da2450c6958a647e20e7c2986ef16"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-base/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-base"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.13.0",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35f98b40a9c6b81cb09792b944587ff5"
        },
        {
          "alg" : "SHA-1",
          "content" : "3ed1c07b3470d986f584196cfdca45587f06d8ad"
        },
        {
          "alg" : "SHA-256",
          "content" : "648035ab973875787f3a12313cf239e86b51b4d209f91106ba90eba2fbd561cc"
        },
        {
          "alg" : "SHA-512",
          "content" : "c155d65f0df1fa0de256b4ab7df8d46886807bc877c5116d4bfb444f6afff760f189699bcd349669ed7620673a38ea65cd325bb6423df20da69d200136a67b97"
        },
        {
          "alg" : "SHA-384",
          "content" : "a08c79d9b64af58f09d10eb16970f5c004b9f13d44a092c2fc33c9a58c09f8cc2ef5f2762772f33485c1c5d0254f0d87"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46d68d896d5f7b71a9c6d4ef4f80211d89d4a3ae1f7f03b8ae11d5d2158767539f260f1d1a04db65e9dda2729219762f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c12d6c684174089da25cace8422601b2de91a2b49a586d2d7b2716046a395211"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b269db10896cb902f7887841f0e8fedaa1b94c4447e28a091ba8d1667a9d1d15148bdff568fec2f3a25eabaec3ee95ee3b3789833d84b1a26746470a95951bf7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.17.2",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "52e5f2054151cf878744451e6a46b8f0"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd6bb9d856db5f61871a94d5801efd0b93b7fcb2"
        },
        {
          "alg" : "SHA-256",
          "content" : "4148332728490cef12b29dac4c385f46982f04285132c6fa51ad7267d7dc7a8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7f9cb90a37bb1e2c80958f6de1baa5a8c82b7f96e5900dba13d7679019a0c2b1cc7b551b338e24b9a782c961112675e02f439498b96f389b1f899945f08071b"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f8b3761bac50af319f81e51f077c97958cb4a571f1a78a6e660b97d3b25979a51495f578e643e0145a3c02ebbec2693"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2db277092499618e6f621cea68f368167a45415260b36731662b8b9d3bbd28b2b99683cfb93b70b3a427ddb4493221f4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4f3e278f3525050144ca4fe27f097a5c8f9514d47f0e4deb2817f2964fda3130"
        },
        {
          "alg" : "SHA3-512",
          "content" : "760e46f5d41a57bf0576ca89c467e8c0f664e09954b16c25d63a9db26a0226f4f15737a2ad776f82e0fe39ff33e9da0729e329e4782f12d8d69be1e1ead60c5d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.27.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db4bd87b0082044c6e7a6af0b977a3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a19151084758e2fbb6b41eddaa88e7b8ff4e6599"
        },
        {
          "alg" : "SHA-256",
          "content" : "293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226"
        },
        {
          "alg" : "SHA-384",
          "content" : "307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "group" : "com.github.ben-manes.caffeine",
      "name" : "caffeine",
      "version" : "3.1.8",
      "description" : "A high performance caching library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b19301179903e8781776397d9923f7c8"
        },
        {
          "alg" : "SHA-1",
          "content" : "24795585df8afaf70a2cd534786904ea5889c047"
        },
        {
          "alg" : "SHA-256",
          "content" : "7dd15f9df1be238ffaa367ce6f556737a88031de4294dad18eef57c474ddf1d3"
        },
        {
          "alg" : "SHA-512",
          "content" : "66195ac8ec62e5425344a51ab671a136618b8658a1e91bb1d1cd1aea5a51fdc12eb7fe5131a00e18ee330d6b0cad14f6743937c23baa50fb21e40eb76d82a777"
        },
        {
          "alg" : "SHA-384",
          "content" : "bb1447801069938c709220002e2489c589f3a12e411a902983d1120785265b5b2716614b0612b6ab732978fdfe492399"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e0455cea493f7d299cc9cb4dafa42b184ddc35927985537ad8119057621f988c3165f1bec62715054bd9de802d91e1eb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a197fd5b92f9d15ee3a9efac322eb201b47bd8dc20304a0c6d85986199ec03ca"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4fb700794e520bb3bc81ef156bedf696894ebf2d2bf0f25efdfd56dde4cd89b76c45b4a80d7eacb2ed0a6220718f1f9552547fecfb7d3fd319fa5145b4f20cab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ben-manes/caffeine"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ben-manes/caffeine"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "group" : "com.github.andrewoma.dexx",
      "name" : "collection",
      "version" : "0.7",
      "description" : "Persistent (immutable) collection library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e1baaccf9e57842c7e944cef39bc680"
        },
        {
          "alg" : "SHA-1",
          "content" : "264efc08bdcd22126bd429aaea9efaf5158b2b90"
        },
        {
          "alg" : "SHA-256",
          "content" : "e50cbc8379325ee17e8127eed7eb88fb70b94ba16e5e3d97e12401a1fc248fb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0708323a51db1dd3b4768ee844be5c83523ebc61c4e2ff07e6f952d8891dbc0f8e499f5d9bfb09bf48c99e492dc1804807a2e518b464d1a986407522e9dfea0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "19f9b9011d7f94d975b14b97aef8df35fb1a5cd215c35f3b3283d5cf0effdd8de3315907bce35bc9c12e006b6fcf8990"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38954676b168659dd560568f62cdd8fedd3a8ef7d54bb430d64311b7b3b21cfb481fb7a16ad1efabc5c586b66b20eed7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3545d1a0d3d9dee1bcfb2c4aac44e013910fd117e6cd6417e26217bad8014a7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc5998ac73b9d795c70690a6a83c633143ca1bb997091fb332134d94f095f89f7e581d20a89afb21455a143f824304c7eeb206d34ce8b8edd43e76606058b71b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/andrewoma/dexx"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/andrewoma/dexx"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-iri3986@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-iri3986",
      "version" : "5.3.0",
      "description" : "The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "994792f33fe16535196bd4306f34012c"
        },
        {
          "alg" : "SHA-1",
          "content" : "42a316ebc139b4846ade62e234473d8e4a185f47"
        },
        {
          "alg" : "SHA-256",
          "content" : "92e1fb93e4fcfeb5fe294236a2b02c97efe3c518f3fdac5d1b2e0d06206e4751"
        },
        {
          "alg" : "SHA-512",
          "content" : "74d2a9a8b1ed3d5390502ed35ae5a86bca1ba99765bca35280d55ca2b976e47d10691331f07fcf227960b441128b21c5c4348ea5145e1d9541ec8986fb0f9dec"
        },
        {
          "alg" : "SHA-384",
          "content" : "73fdf57b04f5db7b061ded13f4ba502cea6790733a588f56f373021ed7d9bada036426b1bef41a4e724881e1c3c73a9c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc6057caa066bbc9055286fc331cc91b5b2d22e551b51cf199c9fc19c0a038df4058e8bc6fe8fa6a87171a77024f9157"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f3fd2c96961f5cfe88fa1c90b2713bdfece790d18ebb686a812219008c22c586"
        },
        {
          "alg" : "SHA3-512",
          "content" : "872c5efeb66d02875899cda8905bc4e269c326e7dd56696a46675468682ecad6aa7385139edaa9700aa8b8a33515fe7eaab003556b5f862ec366c7140a4e1467"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-iri3986@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-iri3986/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-iri3986"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-iri@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-iri",
      "version" : "5.3.0",
      "description" : "The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986) which are used across Jena in order to comply with relevant W3C specifications for RDF and SPARQL which require conformance to these specifications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ad6a298283d9e248f0d190301b6801e"
        },
        {
          "alg" : "SHA-1",
          "content" : "c816773fab612255d334c962bf3637b2fccca2a5"
        },
        {
          "alg" : "SHA-256",
          "content" : "15867d2d305af84a966eaab3a10f9817b79c153d794c17f2767a720bae01f20b"
        },
        {
          "alg" : "SHA-512",
          "content" : "aeb1d50e8cf41921f3cc59d6c06f464eb2cec3fb9cf20b10295ea5a3808b897b21248c1cac8ffab0b3e18a3191abfc11f7672f367e5d1ecd4f2cfa0675f7c59b"
        },
        {
          "alg" : "SHA-384",
          "content" : "5d5d1d1266965e61d2ebde91fbabe8ea4a4485de1b2213dfa5bc01958342823070d2dab4817a8c77c78422d384a9d1c4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "804c4bb9264bba604a07a74b63b446c6ec976ea26f8fc8980abca087c53741a4e2cf3b7b63ba724def63ee7c4229dba0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e2245f5ebc25834382697ae3d239a815a86aac0c101af6a1b6f4dff7f289c214"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b736be61e0afbdbf4eec2b6ec3070cb2272d4e346da06dcf9b829261727690b655b9230038293c0002f6868fee031d712ca11fec723d7f5dcf6621006aa8ba3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-iri@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-iri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-iri"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "1.3.0",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ea65118238dc208252d95ff1868599c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a46ce7a2dc494da69700ab421f081b1583857f6d"
        },
        {
          "alg" : "SHA-256",
          "content" : "73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1134d4e3c9bb8ff130583e10d00487131c1aab456b625f9289935b660046b07c9acdee0a1dbe9c1fae145c2b1b9897460b1aa3cc0574fc2be976a9781965d7c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fe7bd9414e4705c41d8eafbfc2ffaf255230fd3804e0c9b2f0847d3124d9b1677df49cf2cfa880c43c45043353f7d2b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0350386ab16e071e5c17406a2dfbd4290fa841fcf7240b93760553588b90a64df79c21e54202b7f25c310446bd65ae64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eac8bd4158fa85c6158a7cbd6fdeda29401ac80d8272cdf2cd7e7c541d887f91"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3be67fad3ce4fbf4a1a77956d632538b0cb68c92d9ec7fe39799ca21a40491d859422d94686722872596c4a89ca0499622927f65174b9a88f0b3641bc58f5eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.11.0",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c69b9199d3a4e6c34dc03619ff7feee"
        },
        {
          "alg" : "SHA-1",
          "content" : "527175ca6d81050b53bdd4c457a6d6e017626b0e"
        },
        {
          "alg" : "SHA-256",
          "content" : "57928d6e5a6edeb2abd3770a8f95ba44dce45f3b23b7a9dc2b309c581552a78b"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8c91426a8275b42ea5c55b104308ffbe656ae3354bc661f62173352e53a4818a009e4dd82bc6cf518c77fda5a4d2eab0d3ad832581a8f0d87966ef04e6c025a"
        },
        {
          "alg" : "SHA-384",
          "content" : "8720df1ca6f2258a71b7f2307e2b49f0ad2379bc93e93be6a6c619e52b95dbe5a080a49149e8708ce1890e97b47b9bbf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e3e268c6f8c75f018c7c8160fba7fe373242d45a2313b5c7823f3f75fcc04bbf93cb43c08ba2998b01b8a3c685d77280"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aa4162683be07c5de9c962e88301054ea42a9bed2257a5e4e650545624a2c094"
        },
        {
          "alg" : "SHA3-512",
          "content" : "31730c961b8920673ac3e973a16272752a46df479bfc0ce4dfb6dd324e32d34e5006247d6b5508b8fdc785ba5ffb42534ea3fa2d7094191febcac60654230e24"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.27.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb183180666ce3d0a24ef7ba02d7193c"
        },
        {
          "alg" : "SHA-1",
          "content" : "91b2c29d8a6148b5e2e4930f070d4840e2e48e34"
        },
        {
          "alg" : "SHA-256",
          "content" : "24c923372c58e35d0b9f16a028929bb9aedc77521867c274f2bd0735df5ba1f5"
        },
        {
          "alg" : "SHA-512",
          "content" : "479f3c5e25a7ccd90adf70a9b1a71bae18205681ce966618b2ba28aea1b10c087b10ca7172e7b34384901b5e8d2dd009f1cdcbcd2a01be55082d276245de0a35"
        },
        {
          "alg" : "SHA-384",
          "content" : "b71b73336df13a8d102933d851f2ceb486d8554cfdc717f38fb2d36234a7b0c9bc015112c9d0c7c3520a081fa85c55b7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94e94fd4ad6e3340aff5b059746395abc4952d4b7f570576f5eee0efb7f8801f2ac0b4c95aba400afc8ac1204e96e630"
        },
        {
          "alg" : "SHA3-256",
          "content" : "faa04401fbf3938684fa829d86310ac894c0646b2cdff18106f5384fcd427f84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "18fdd0dd19823353693fab456226914179623be005d27a85250f5e8758d433c9e88f639556a61a03210339be6dafa86a57068e92e0254b305f1a17add4b805c9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.apicatalog/titanium-json-ld@1.4.1?type=jar",
      "group" : "com.apicatalog",
      "name" : "titanium-json-ld",
      "version" : "1.4.1",
      "description" : "A JSON-LD 1.1 Processor & API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d487db5f9104f8c841b7339b36d51d45"
        },
        {
          "alg" : "SHA-1",
          "content" : "e874b0a17560ae3ae8da0cdd7e59fd59e3fb8c9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "2e53a55a018768c733704679c2f038c69d84365131b42eb5357f8d2c2daf4cf0"
        },
        {
          "alg" : "SHA-512",
          "content" : "b78b9828593e845d55eb8210b44072283c414c0769b72c66265797832d3e330c13e58ac6465a4f2ce93bffd28b6b00071212b110a0e215213cec8ed0884fa4f6"
        },
        {
          "alg" : "SHA-384",
          "content" : "e85efd6917eba58d8deabc98c2263b524c68238125e9eb0163a905e5d7322db16dcec87e73508c6de504e35bc9b6c46e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "39a07691214ff9bd4d2e9f00967a8bce7424d3da9b661d31f3e9e349a800e3c5cf3473bd8d2a6cc906f77b806f29cd93"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b0532705179244373e7b1e6594f644e50d13886a3a6c1a8bafa8159de1202e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7279b428f68d9c74c45904818ae16916c7004cd961a823abb260031f6b98f99519c8102d4961e99cf73aa24a652f10ba295793eedf109fa86c4a48193d17ef4c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.apicatalog/titanium-json-ld@1.4.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/filip26/titanium-json-ld"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/filip26/titanium-json-ld/tree/main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish",
      "name" : "jakarta.json",
      "version" : "2.0.1",
      "description" : "Default provider for Jakarta JSON Processing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "217370baa683188d6085c079a0988909"
        },
        {
          "alg" : "SHA-1",
          "content" : "da6c75e591cf2a89ddc479cbdbd8fe5f41d3efc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "52539b39498b86ca9910b0eacc608a8c78de8db3842caa84bc87169372202cc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a7240c34098be4fc81769ec528a5afcc90e509d092a5e4edca27b2e92a3edfd6814bf60598fe6b856bec42c3002e64af286b6b8cae90cad06db276c6cbc10dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef48cccd89f11a491844d85be814ee882e760fe384d76c74259269c7c514115665f7ce1711124577079024a7b2127e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b35d0fe7b5fb661733c6dda6c09cef82a48db6358d2c26d15935c713e3873307add4ea0fd01df7ef5fd762da380ab0d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d8d3ccc88d35b0254c3967f7fbe1c22b581ad9b25a92954570395ee1680a034"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a96804fb8d283352d133f05624aeaafca23e349ff3a55c4d1843a9dca9665bd941862bb27990d0f73f99ab9aadab3ab768b333ecb445830fc6cb8c704ca9ee8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jsonp/jakarta.json"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "4.29.3",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ed5e69d5bac6e38ec1a73bf6180e5c86"
        },
        {
          "alg" : "SHA-1",
          "content" : "83afa847b893932b49a8fd896608fa23cd5fb0b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "442db5991a11974d72127353be7d7e7abdf8d943d83b16668cb2e336d7392f54"
        },
        {
          "alg" : "SHA-512",
          "content" : "be0db486896b4a03ee2c32ba5d8e827a93d53064cab2377ad1810ab91fc100a8171868b8f1f09090c44255d1eb1abff0f56e245fa050d40a581c119f77d4c389"
        },
        {
          "alg" : "SHA-384",
          "content" : "8ab01eff47491c420dfae9420bed4ab6c0de1f7a9d91e5664a4dd8e97d27aade1d747867a5c70cfe3e2189ed8a89fd43"
        },
        {
          "alg" : "SHA3-384",
          "content" : "458322bdc016cf86d795552567a57952c8db2ed7249caf221bae3dee3211dc768d528353847dcfb3fc97cb83f2d45f68"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6d806fa62fc704a0a729b6b51d673ea393810d3df5e4dfd38318280c495f5440"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c279caa0c9535f3e567b19f63f976e5b6468f42acef3b962d30b20aaa652da0acdf907540aee0d0776f74976c79b8f115f3a23a6775d54f3e8dc8a653059f4fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "group" : "org.apache.thrift",
      "name" : "libthrift",
      "version" : "0.21.0",
      "description" : "Thrift is a software framework for scalable cross-language services development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d8d38a4276e7d1bb084f391bc8f2c002"
        },
        {
          "alg" : "SHA-1",
          "content" : "5497a90b56d1c637305f884a41f4109e4326c4c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "53166303415f6a9a852e424dca30c48b03a8aeb43429e2adce4685ffc1e44d81"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee9563caca19f4010f57391eb388620028750b106b341fc2732d086919bd627804609fefb8b69ce6bd27f9afecf967910f1e8155ad0e7ef992281eee2faac0d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e72cfae629ed4c77b67a2f0d25df75de6c9e895faeefd2f1983bebdafc834f5d89146378a05364a77ef1d2fbf9ea3cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e866c83984dd8fd63d1b9ddb8e564cd6330539f21114b16ef12ac4f6d32acdd6defcbf2733a3d11e51abaa8b3d396311"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9465aae0280daa7bbcf37f61b6e81b659665c5e2ccc0dd55d672197d855f9925"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce25ef5a315bbc15f5a43f28170e5c008e5c33b548a8009494261473b5f8620f6b33d4930e856b451f810fb79f1142374903f43dd07f822b1cd7ffc5e2b05ed8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://thrift.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/thrift"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sis.core/sis-referencing@1.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sis.core",
      "name" : "sis-referencing",
      "version" : "1.4",
      "description" : "Implementations of Coordinate Reference Systems (CRS), conversion and transformation services derived from ISO 19111.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "56fc02d74e6e468d1b221426f7022618"
        },
        {
          "alg" : "SHA-1",
          "content" : "da4436a350eab86932bb0dbcf33252b04b9da619"
        },
        {
          "alg" : "SHA-256",
          "content" : "09b3c69fbf058808b427c7e256f8e47c5c45566ca4b190ae84f992a8e4ff713f"
        },
        {
          "alg" : "SHA-512",
          "content" : "4370d7b097e6f3dcc7b6acb2d38c68e2a437a5f9b1a72137974c64336873eca22b551e6dc0bbed1873456721fc8ed7ae6b5db8b3838855e38e2b65c4d7b064c7"
        },
        {
          "alg" : "SHA-384",
          "content" : "dbf0892a4dc1ffe07466e46cc966cbe9d911dfe0428f47d5ba91faca81ba3205cba547a10f246188530c9bf4e5b6b5ef"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2f246f35c93154e4b5444b20daf8e73349d1c2afd9316354890bc6085e4e1bc8f517cd647081c33865b857c1c0728376"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f53b7d8ece3be259226184e35e592080131b8ed02fb6372bba35db28a6f01fe6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bb01fa39f431f6ae42d2f9191ae3e3fec7ee183a1460dcc9b7ca095963b7293df2e57841f5f0a6f8baa8b7e02f65bd8f473e29386907646f8388c8dae5293f47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sis.core/sis-referencing@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sis.apache.org/sis-referencing"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/SIS/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SIS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?user@sis.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=sis.git/sis-referencing"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.xml.bind",
      "name" : "jakarta.xml.bind-api",
      "version" : "4.0.2",
      "description" : "Jakarta XML Binding API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0c8f9991081def819435c3ff36e4d93f"
        },
        {
          "alg" : "SHA-1",
          "content" : "6cd5a999b834b63238005b7144136379dc36cad2"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d6bcfe47763e85047acf7c398336dc84ff85ebcad0a7cb6f3b9d3e981245406"
        },
        {
          "alg" : "SHA-512",
          "content" : "2e57ce867ae3592959243ab9d7d064b09d9587933c98f89f5d5eeb8fe70556a53fea6db91520a2e086555684e8917f4001741bd8ffb07d26c59fe95c13d71fa0"
        },
        {
          "alg" : "SHA-384",
          "content" : "7ac5da337fccfa426b48691febed0d874a8e9a6a230bb7a53169f902e5b499778106f7b710afbe133dbd7bfacca693a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc952425a51459a5d18dc7b6315625c55889e1b92e700450c84205506e5107ca4c7c8bc449190220bf471db3dcbf9c8a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a78dd7c5883b16cf899495930e653650005c71b4d9b509e56cac4665778d715e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bdf9db79b8ade9421c3f5fc497ebe13a552be5852d99cedfa38bb6c760c8bf190f88204ab6e02442db5fb24378afc6112297c5a582d4e721de71285405a6429d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaxb-api/jakarta.xml.bind-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaxb-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jaxb-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaxb-api.git/jakarta.xml.bind-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.activation",
      "name" : "jakarta.activation-api",
      "version" : "2.1.3",
      "description" : "Jakarta Activation API 2.1 Specification",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "76e7b680375ea9f40f3ddbd702efcd25"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa165bd70cda600368eee31555222776a46b881f"
        },
        {
          "alg" : "SHA-256",
          "content" : "01b176d718a169263e78290691fc479977186bcc6b333487325084d6586f4627"
        },
        {
          "alg" : "SHA-512",
          "content" : "aaabd4d6085a07035eaaae7b5a81aef429fea76e7fe1c8d29971e6595f0adad6bcf1088cff8a1c8936d739b0e3fce4b845323032f046b7edab2eaebd0e10a2ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c4e73f59bf09342ca7691fd4855b41d3466da80618a5b7df059a2d89cf6d9779a4af751a6c4a9c48e5025c3ff75f42e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "20be816700c87778e9453d41b6d8cb9dc992a092a308a9b7f2dfbf72e2393940a7d666c46625f130a2b57bc414df85ca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8a574b0a249842ea1b397d4cdef9b6d00b34ce8a849ea34184cdf45ac5aafe67"
        },
        {
          "alg" : "SHA3-512",
          "content" : "69cfb7dddda70ac1fca272ace0a3d5551b85dd60a6dbaf987ee777fbf573b420d13f06b8990ae70e8fe063f92b78c8a447cf9309ba516a5e993ba2d49cca8d23"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/jakartaee/jaf-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jakartaee/jaf-api/issues/"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jakartaee/jaf-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sis.core/sis-metadata@1.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sis.core",
      "name" : "sis-metadata",
      "version" : "1.4",
      "description" : "Implementations of metadata derived from ISO 19115. This module provides both an implementation of the metadata interfaces defined in GeoAPI, and a framework for handling those metadata through Java reflection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d3cd4265e6fb0a1ac67b47838ac9ed0d"
        },
        {
          "alg" : "SHA-1",
          "content" : "9f56a4f99d1bf446edf9b92728e8371539be6142"
        },
        {
          "alg" : "SHA-256",
          "content" : "e59b24dda51bbd8129a5d8dc0d536d6d516bf8d084cdcfc0550c19f24a32a7bc"
        },
        {
          "alg" : "SHA-512",
          "content" : "36beb3add4087d36a6bdc130e1d8e50f1955a712ee874735e2398e58a7e0a225baccb1fb768478a1e5a098d9a265c8aa7e85ff927725bd7a28eb538a6c3b8245"
        },
        {
          "alg" : "SHA-384",
          "content" : "bd3aad021f2fee6b7cd0d67726c61aed262b4b65a6d629c111132e1518bfd3ec668ce8d8b4fb0945a227bc5567652822"
        },
        {
          "alg" : "SHA3-384",
          "content" : "30e40ae0b3c967452498202ada4e7b1cf7513a0fdb7592b94f08b65173148c314f609d473527e8c75e61b35303cbf83f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0cf3832e86baa6d865641d633deb9ef9e2a349b3a23aabaa06fc600dd884882"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1453efb6b621b48bbe8441732c34c3cfe929be76f973c44589b9523ff153c6a43b2bafad20ef0be23388a9e7d1eff640ee9b08a008d0487de0983ba45f42546e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sis.core/sis-metadata@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sis.apache.org/sis-metadata"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/SIS/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SIS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?user@sis.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=sis.git/sis-metadata"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.sis.core/sis-utility@1.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.sis.core",
      "name" : "sis-utility",
      "version" : "1.4",
      "description" : "Units of measurement and miscellaneous utility methods required by Apache SIS.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a99322339209dd6ee09288b5fbb33c3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d2ec88c0cfa76cc8621d1d5f7703dd9f009cbf9e"
        },
        {
          "alg" : "SHA-256",
          "content" : "535717a76a3acf5a5c535d791d1365d6671c349b2b9184f4c626a4f87fe09d2d"
        },
        {
          "alg" : "SHA-512",
          "content" : "2480c97a8e609989f907786fbc9d9436aeeef8f0b2ad3364ceefab83c17e1e8df829d2cac4c1c4b79340dd4953327ecb72aeb790d538634251b6a1d23256511b"
        },
        {
          "alg" : "SHA-384",
          "content" : "42b62baad62ce5200b618603d4446c39f30b04f435710a1450eb4156c4bef6b9bb7e3a40b981450fbc3e29d7ecdd90eb"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d5973a253f441057a2a43893c89683fe91e4afacbc86a3451b20405833b7f05efaab736dd4954adbb446ca57b5166e4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "685cb8740323edac73180eb3938a82478a12658be4bc192b5e70cc74e928eb84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "74686f43a495115c9bf2b08d1cc518ed45bdb2a2bd6d56d2c470de24e154ff7c5358819f4e110396e1effc77864b9b92d80aa8190c89dd955d6115376f91b52c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.sis.core/sis-utility@1.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://sis.apache.org/sis-utility"
        },
        {
          "type" : "build-system",
          "url" : "https://ci-builds.apache.org/job/SIS/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SIS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?user@sis.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=sis.git/sis-utility"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.opengis/geoapi@3.0.2?type=jar",
      "publisher" : "Open Geospatial Consortium",
      "group" : "org.opengis",
      "name" : "geoapi",
      "version" : "3.0.2",
      "description" : "The development community in building GIS solutions is sustaining an enormous level of effort. The GeoAPI project aims to reduce duplication and increase interoperability by providing neutral, interface-only APIs derived from OGC/ISO Standards.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "39103e8690d3338e28286853a8ab5bbc"
        },
        {
          "alg" : "SHA-1",
          "content" : "68727af280a239aa9bca4c7bf304e93e06fb43ab"
        },
        {
          "alg" : "SHA-256",
          "content" : "994f9b605de165d273712603036824a627fb4d908cba5c0f2a1098949903ba71"
        },
        {
          "alg" : "SHA-512",
          "content" : "31b191587c89c75f89dd91a281c59c5ef1d4096ac4b0aa9eb4a51b1de0ee6802cf8ce1f643c3693c4eb0a836b2083e218dfd585c8eb9697f65a96f4105c48c72"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a23b86a57ecd50d13c5d6f6a4e2c6509090adf324fd2707dd9e2fe171302b3b69c73f935bdfcc0f1502d7b101d72208"
        },
        {
          "alg" : "SHA3-384",
          "content" : "582c000af50aaab6e3ccfc67b02439ca5bc0b261ce091be7556e5e6bb6dfe5ece77e4ed6b79010cd1a439db1744da894"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7438362bed0eb3c2737e60ecd6a6dccae38b641dd6ee9c1ce427d6a17cc9cad6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8395d24b40b261f4e4a73f979eacf95952186aef0a71b25cba26987935e11e9f19c4f6b79f166e349a02e93ecf75d6e7423a4d9d30cf2161f36613ca4c9554a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "OGC copyright",
            "url" : "https://raw.githubusercontent.com/opengeospatial/geoapi/master/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.opengis/geoapi@3.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.geoapi.org/geoapi/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/opengeospatial/geoapi/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.opengeospatial.org/mailman/listinfo/geoapi.swg"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/opengeospatial/geoapi/geoapi"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.measure/unit-api@2.1.3?type=jar",
      "publisher" : "Jean-Marie Dautelle, Werner Keil, Otavio Santana",
      "group" : "javax.measure",
      "name" : "unit-api",
      "version" : "2.1.3",
      "description" : "Units of Measurement Standard - This JSR specifies Java packages for modeling and working with measurement values, quantities and their corresponding units.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e6c45cf3162ff7b249295d85da13bb8"
        },
        {
          "alg" : "SHA-1",
          "content" : "076e3c98cc101cdb8ebf437e4327e8de4ab92613"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0d293ca6ee604e225290440f2d5428dc7a5cc6f3d8dd7fe42149e7e84a811ad"
        },
        {
          "alg" : "SHA-512",
          "content" : "a420492005f636ba9b8039696253e6692e3184c64d553ed67e1c14155d4020598e9550c1ed3eb33e7ba9760ee9a936658d919d9cd1f6b7a529f721f36251566f"
        },
        {
          "alg" : "SHA-384",
          "content" : "c930a389c6371e08f34c8efac0a08c75333434ab8b3d9447473918ace2cb7c0d7bbf8116e071189ff0b6619699b5ba77"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2755723f4a3bb76dc5b5c3fe19c72abe693406433bee4ac89601aefd17601c4510c29dba139b4c944e4afbfb29672175"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f7d3a422236db4e1dcbb7ec5058823f8d45c33453fc814fa6554fadbe3101f16"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81e4c18b5a21330aa02bed61d48f3f08e27d282ea9ec162db79c7123f41dfcf80eaed2b072040af2947d5c6f207a867d5be9cbcf95670f6f6c24c72e99d45187"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/javax.measure/unit-api@2.1.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://unitsofmeasurement.github.io/unit-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://circleci.com/gh/unitsofmeasurement/unit-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/unitsofmeasurement/unit-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://groups.google.com/group/units-dev/subscribe"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/unitsofmeasurement/unit-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "publisher" : "Oracle Corporation",
      "group" : "javax.xml.bind",
      "name" : "jaxb-api",
      "version" : "2.3.1",
      "description" : "JAXB (JSR 222) API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bcf270d320f645ad19f5edb60091e87f"
        },
        {
          "alg" : "SHA-1",
          "content" : "8531ad5ac454cc2deb9d4d32c40c4d7451939b5d"
        },
        {
          "alg" : "SHA-256",
          "content" : "88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06"
        },
        {
          "alg" : "SHA-512",
          "content" : "93a47b245ab830d664a48c9d14e86198a38809ce94f72ca66b3d68746ae1d7b902f6fef2d1ac1a92c01701549ae80a07db69bd822ffd831a95d8dbffad435790"
        },
        {
          "alg" : "SHA-384",
          "content" : "1eb2d7f307bda8cbf6a4ab5b2b97d830d33ca48ad94eb4bb1cbce860c54fca96285dbcb1ce9b164dbf37d4475f9a198f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8df7409d3f60888f3a80f4d49af66c2cab6dc9f00e79c87c17703faad19d8ba6c8fc96ad897434170ce2686952921cdd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "41338683257d5ecead579ccc137bdef7bc4fea685d039a3d894e1d6730425e1d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3371a96171f69876b0e6b8354674d252680e6d52c509a2645b1a0b0d7f9e176274bde6c89edb40986264733ffb6794cb7b2cba417666b1e82075bd4fd51197b6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CDDL-1.1"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/javaee/jaxb-spec/jaxb-api"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/jaxb-spec/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/jaxb-spec.git/jaxb-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "publisher" : "Oracle",
      "group" : "javax.activation",
      "name" : "javax.activation-api",
      "version" : "1.2.0",
      "description" : "JavaBeans Activation Framework API jar",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5e50e56bcf4a3ef3bc758f69f7643c3b"
        },
        {
          "alg" : "SHA-1",
          "content" : "85262acf3ca9816f9537ca47d5adeabaead7cb16"
        },
        {
          "alg" : "SHA-256",
          "content" : "43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393"
        },
        {
          "alg" : "SHA-512",
          "content" : "8ee0db43ae402f0079a836ef2bff5d15160e3ff9d585c3283f4cf474be4edd2fcc8714d8f032efd72cae77ec5f6d304fc24fa094d9cdba5cf72966cc964af6c9"
        },
        {
          "alg" : "SHA-384",
          "content" : "d38a6af7ed00f13de8b46d49b9592af9b67adf3df47ddae5e4672f989f3f39101d446a77d1c11319acf8ff0a5b4feedf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cfee76de5976d5994758a06113368092f09b0729d753b99969d6a5ec32919428bd7c270c98cbbc682ff8ebcf2b93fd8d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aff48d0f28d8a99690c5a84c3fffdb3775452d5387e5698f4c9028c92a3b4888"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0507ece74b3147de60a830071bd434569c82e03f414a2b7f0d8a225dda36720d2e2194799cdc04def1909fdec21059b67c518bb9162f7f605764d542194e721d"
        }
      ],
      "licenses" : [
        {
          "expression" : "(CDDL-1.0 OR GPL-2.0-with-classpath-exception)"
        }
      ],
      "purl" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://java.net/all/javax.activation-api/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://maven.java.net/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/javaee/activation/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/javaee/activation/javax.activation-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.locationtech.jts/jts-core@1.20.0?type=jar",
      "group" : "org.locationtech.jts",
      "name" : "jts-core",
      "version" : "1.20.0",
      "description" : "The JTS Topology Suite is an API for 2D linear geometry predicates and functions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8de91edea80ac2de00c07226458649fb"
        },
        {
          "alg" : "SHA-1",
          "content" : "25b72c9548a328cb1aea8a6b89d710a31ade5403"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a783d8f9dba3d3cf7265435f134402f63c05838aa6cbcc4297ad3a5b2842baf"
        },
        {
          "alg" : "SHA-512",
          "content" : "3d6e32203f36517447cc027d741d1be301d454d34707d9fcb870d49dd686e7f1f72cff4b36bdd90ed8f2bee7e3afade7b3a1457de9c15777b91f47cdace91a6e"
        },
        {
          "alg" : "SHA-384",
          "content" : "5a9f3ca93e90797313a7983a54edd80c44a48ba46647677b934b46e23273b2facbea8b752353dd47d6ee18e2a92779b6"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02182b13041cdf61fc75323cc34dc7676b175fb34a05dd002f3da6fd190201655949bfff4c5875cc36d0b8bfbab31e4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8ac7798576ed86c7873e85319bc4e0c205373928517859f9a53c9e74d057781d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6927a7e2cb64065d3b7d3a01443804e189d560b840ce93afd34e77894b281e0387f5fdb9fa2bde9381781bdd979cfc3e4399d6d8091fd8d6d0c2f89001450223"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.locationtech.jts/jts-core@1.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.locationtech.org/projects/technology.jts/jts-modules/jts-core"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/locationtech/jts/jts-modules/jts-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.locationtech.jts.io/jts-io-common@1.20.0?type=jar",
      "group" : "org.locationtech.jts.io",
      "name" : "jts-io-common",
      "version" : "1.20.0",
      "description" : "The JTS Topology Suite is an API for 2D linear geometry predicates and functions.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "272bf398ad25d3a30a716e268423a3d2"
        },
        {
          "alg" : "SHA-1",
          "content" : "109188c7e30c00666a0b1da42320adab1a60d973"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c8f39076b1630e40e53ee386dea134f39f3512eab4c18300b56fb803a08b46e"
        },
        {
          "alg" : "SHA-512",
          "content" : "cdd551c8ee9fc5a76602b06f10ee247471389476cd607861e374dcc7fa20c394da30697dc14bb14abe4d21968f90c57997d2c5ee20ddbb2a6f875d7ec65e7e33"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e07d45c8803c5843951f10e8d9157e116066a40769dc8314378ff7b9805a3db36b0684fdf73c30e961fdb45c08e9437"
        },
        {
          "alg" : "SHA3-384",
          "content" : "33f8645e58eedf16c92d309f5fa020dfc365fb6567bcc951a3b2695d59592a9358d343a95f12bc7aa0641771d12ea5d9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ce798090917337f649a89d0cc85200a6453bc9d66684605c73cde9bf6c9d931f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1a401c7ae8cf1bb9c6b637daf777bf7fcf2a400dbb028f96caf2daaec46dea1751cbdfacb78739cb6e553bbff52b63d5907585e9776b926e68a1a87b90f908e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.locationtech.jts.io/jts-io-common@1.20.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.locationtech.org/projects/technology.jts/jts-modules/jts-io/jts-io-common"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/locationtech/jts/jts-modules/jts-io/jts-io-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
      "group" : "com.googlecode.json-simple",
      "name" : "json-simple",
      "version" : "1.1.1",
      "description" : "A simple Java toolkit for JSON",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5cc2c478d73e8454b4c369cee66c5bc7"
        },
        {
          "alg" : "SHA-1",
          "content" : "c9ad4a0850ab676c5c64461a05ca524cdfff59f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "4e69696892b88b41c55d49ab2fdcc21eead92bf54acc588c0050596c3b75199c"
        },
        {
          "alg" : "SHA-512",
          "content" : "f8798bfbcc8ab8001baf90ce47ec2264234dc1da2d4aa97fdcdc0990472a6b5a5a32f828e776140777d598a99d8a0c0f51c6d0767ae1a829690ab9200ae35742"
        },
        {
          "alg" : "SHA-384",
          "content" : "cec0c65bc033bf449a9214c37f4a4f1b8e6d90120cc613b677cfbe92f2b7bb68285d1d910146f1fd7ea7c622f898dcb5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f489282b37e79b1f5d9ac27b66b61ca4bdc7697e7e27724e3dbc96fd5fc43e5c003b8dfbaa6947a9112d2aee15858ddf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0de6743867e024955c58f771a38bda33c8e975e9066765db36b0db3e519f9534"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2566d35f2f426dbb5bd2a6cbab7ba1b78e503a315bcd784054dadbce7f98f41ec2cd1bb45be1677fdc909fb26e060b35b0064a3cd8c5dc6029cec891dd8ba77b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://code.google.com/p/json-simple/"
        },
        {
          "type" : "vcs",
          "url" : "http://json-simple.googlecode.com/svn/trunk/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "publisher" : "JDOM",
      "group" : "org.jdom",
      "name" : "jdom2",
      "version" : "2.0.6.1",
      "description" : "A complete, Java-based solution for accessing, manipulating, and outputting XML data",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5be72710c66f3c9ba71f8009e92597d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "dc15dff8f701b227ee523eeb7a17f77c10eafe2f"
        },
        {
          "alg" : "SHA-256",
          "content" : "0b20f45e3a0fd8f0d12cdc5316b06776e902b1365db00118876f9175c60f302c"
        },
        {
          "alg" : "SHA-512",
          "content" : "81642db76358fbf131dfe9c2f1d9c280fc23b6bfde6a16a2d36dacc490a1a2af4e0fb4abb5cd78005718bb1d158a42fd6834cd2bfe616ec59625df01951f2478"
        },
        {
          "alg" : "SHA-384",
          "content" : "b50c9b35d4b884a4f6174febd926533d1a23d1779a5b757b2ec95fbf8560771379b1abf138b150b170c3ed7bfbea5fa1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2987085748db12fa958ccf2deca4d9307ef4a96730ace701afb39f828b1f513190497f474f26b5b56c8076135f56f088"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a33b1e2a9308fe86fe514356807efd152c7be0fdae8e77b28de8c392c34ddcc8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08eafd9535e52f04650bc841b1f92bf2752938d11fab955c631cc448d6e615b281841c8290f102448927d6d29bcd6a8223eafe9e6f36a20ec94b92fe91aabdf2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Similar to Apache License but with the acknowledgment clause removed",
            "url" : "https://raw.github.com/hunterhacker/jdom/master/LICENSE.txt"
          }
        }
      ],
      "purl" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.jdom.org"
        },
        {
          "type" : "mailing-list",
          "url" : "http://jdom.markmail.org/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.3.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-main",
      "version" : "5.3.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "592ece0f0430f0a359a2ae7a74caae37"
        },
        {
          "alg" : "SHA-1",
          "content" : "ad4120d176d69d6149dce707288a35b7ec678d9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "67e1443eee3cf3c34e1b1c23efc77bfd263745f9141443557399adc6d6862d46"
        },
        {
          "alg" : "SHA-512",
          "content" : "8db2e51a8019e54d3dc879fac69576df39246fbfb855fa7445cf506cddf0948b9f334778bbbacbf9d694a93973f7ff07bab520e4c4cc914bebbd8b96e8ecda1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa2ef2ae5663a20c315b572915f58a916c7f37c8b4d14155626880e333d0bf737fb95371a4a1cb42de7a2e4b93ca98af"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46f8aaa0906c963ad5d9bb9e8991abc6f5143e92749032229445a953c32ad79827b42aba0fcace6b7d6bc6f9f68dba56"
        },
        {
          "alg" : "SHA3-256",
          "content" : "59776e3f75bbbb4826e283606cce07f58fab4c7103dfa01e07e3dd9eb1b04fdd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d96707ae3355f81ebd08d972145f36af4e20ddf43dab8b7f0a0ca3c6b0eb27c11d00c103112fa662c86ce401d2434cc2ef2eb06ffcc82d1986440761c986f986"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-main/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.3.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-core",
      "version" : "5.3.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "49efb611b976429ba2855fbcbdacbcd7"
        },
        {
          "alg" : "SHA-1",
          "content" : "f594d2a30f095249106c9b28a3ffd82db3e6cde3"
        },
        {
          "alg" : "SHA-256",
          "content" : "3c55ccc62a9626d67e6b7480abf3e20c54b80eb36be4ae6a1882bf7e4af37c9e"
        },
        {
          "alg" : "SHA-512",
          "content" : "7202645d487852189a6c6d530a3436ba45c613d393e5991fc2ed6ef3f3ae4a8331607769a31e3056363b41b2ea862bc3631b2abd968d7bfa907927f549469ced"
        },
        {
          "alg" : "SHA-384",
          "content" : "7fece0480831a631c0b8878c983ed3fa9aa660d2b232f42211546711dc58135cfe7217af2fb7c952bba1d51b66c88b05"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8289326bee07aabeeb1b83ab0a28775265dd082e139a2bdb6190ffd207a6a056cbb4f85c474355be6cfd4f2bd9899ca9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "54afe188dfa6394f0cb222c1c664794d4dc25f655c57998188a5030b43bccb6d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aadfc1ea19f7f530c26d81fd47040eb53404c58e09f91436ea1f6acbff7aab21ccddf3abe0dc6c5f43d5af7b165007a47fb85a93ed8a15f34867606d83506529"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-rdfpatch",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "81d32ce69c1ee3c3d20a0e88c6cc8f49"
        },
        {
          "alg" : "SHA-1",
          "content" : "1b4fb3a2bc0760516909d0b532dfae4064b67d63"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd26850c5f9cd95dbb505c401c1a728527da6dd1476f2153cf97e0a6f88d84b3"
        },
        {
          "alg" : "SHA-512",
          "content" : "8fe9a3724db68d19829d30d792bda86073b19934e284b4a3a98e3c092589f931be2c54ef75bb66dd4d8e78118555850740a3960df164b89e5f235b615b3d8b4e"
        },
        {
          "alg" : "SHA-384",
          "content" : "62d6a986a03339093509adf713aa947e43ecfe9474c6bb405534b95e1fc625aa7f90dc27b837749ab5c6d74f9d2115f2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "02b2858211f9f07dcd5b2e2d0d760fdf6403df8c8292905a19151834ecef4443705a0baf6ab00ddf3ea46917dc143e15"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e3d107c8674585331a82b2a24437ebc2df21635da00919da543e8ae3a3108ab1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e93218ef431cb99b45fc63fac082cfdbe0b27db74dfa03629d9b4dd4a12924e0af201bc2ec2ece802c3e24c8f10add5a0bbe3ad4c0d0355e4d5d53fd107c8360"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-rdfpatch/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-rdfpatch"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-shacl@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-shacl",
      "version" : "5.3.0",
      "description" : "SHACL engine for Apache Jena",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "26910de22f46ed006c1a1ea65873de4f"
        },
        {
          "alg" : "SHA-1",
          "content" : "eeeb4a3ba964e363401c96d5929cb1404d1cd9b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "7f421762874fdd2c33816a7071d40ad37515c19fd7c7690515be27428ece534f"
        },
        {
          "alg" : "SHA-512",
          "content" : "69c9c22e73a1d034505c6af2c6e5e99553feba5654a065defce0db59b99fb52777046331ee10fada7cfa150930b1286583c3d5e50caea14528dbac4b26ea9158"
        },
        {
          "alg" : "SHA-384",
          "content" : "8f63f29cb4d10a736b4b3b35d791daed36d271725ac39596157cfcf18a8f27cd8b3ac6402ee4258b1a4dad5159045e80"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bad5ace805089b3021dada696e3b002f5dcbf4ed13b2d5661d9d3cfdb2894a379f68edc7da7027d15cd0be3b77d3c286"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d1983fa182b2ee887b39b0cca97b1d7b1f8b805305e1f3425b897e12cc2ae27e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81f194716aee48bf754eea688acdfcf76e5e8288f3ad129c0a39e4a139d5469efe2509306ae2b0f6af7387109bee69639d721b54514563472832ac871cdc808d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-shacl@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-shacl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-shacl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-shex@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-shex",
      "version" : "5.3.0",
      "description" : "ShEx",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e64d1a309a9308170f64a985f618f90b"
        },
        {
          "alg" : "SHA-1",
          "content" : "b60396eecf918ef04c4b431626ad413e18818e03"
        },
        {
          "alg" : "SHA-256",
          "content" : "286bec7db8f41b6d4468438448dde68928b3bb643e940daa8d8aa09ea10e4161"
        },
        {
          "alg" : "SHA-512",
          "content" : "deb62938dec3dbc24e0c648196926734fcb141a0d8986648e6a1d260876dcf6e0d4c069377757e808b1b4d57c1552ba9a0e94cd707be47a2532ab6e4bb2dba61"
        },
        {
          "alg" : "SHA-384",
          "content" : "156166db1d124065bfb3def7cff1fd6c59ea89feda520f5a1f460870ca9ff79f73e094076fa9a8c94f5dc8ebfd67a1a0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb16b723401b1f10bc60952604b2594bbe35a73b474fd40943ea7dedd86b8cea6004870de81a562ab29d63a0bcb8d5cb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "cf5a6fa56c606d1c9a396ebbc175b7727e17b879b1ae39404ddc79cc4e5b6c0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6c9badda90b625de0072b1c54d5b29aa3fa4bcc314b117eba44a18552a8fa354de2fce54c599e1a2ffd74956916e2e45c50764b697775e2a91b6f91575a239a3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-shex@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-shex/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-shex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-tdb1@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-tdb1",
      "version" : "5.3.0",
      "description" : "TDB is a storage subsystem for Jena and ARQ, it is a native triple store providing persistent storage of triples/quads.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c11db10ff0ea282fd8b1f627ea472c53"
        },
        {
          "alg" : "SHA-1",
          "content" : "19bdebb8b689583533d610616049a586f8f0c734"
        },
        {
          "alg" : "SHA-256",
          "content" : "4c7ad7c2fba097e400e4c8c16f9cf1bededa5218f83dcc4f407c784f8ff4ecac"
        },
        {
          "alg" : "SHA-512",
          "content" : "36561f335b4ee70e23a79a364e72a87bef66eb7cadedafb4badad594381b15c13eb7cd147eb449656c06e3f6af50775f8b2d4cfb19969ae171afa911472321ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "179bff5ae117bff2c406bf0cfbf55106b4af7854bf7c9aa639d023e35109702353e9b92724c95550443edff60e51df87"
        },
        {
          "alg" : "SHA3-384",
          "content" : "613a2d06a7353dfeafc00253d5ba226fe0b37544444bf4def99e2797a096089e4221e18c32b8253f248d114f52e3ee88"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a6713ac9047c985cb7ce6a5577ac522a14caa7bc882ac87c67c5a9f68b0bfc00"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e82c05a527dcfdb573c4236cba06f014aacf9aa5abda86dddc74d92d886a9597d5c843690fb2f0b099f4f6c316f424fba726cdb037d0eca9fe36b9b7449d41f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-tdb1@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-tdb1/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-tdb1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-tdb2@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-tdb2",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fc0a5a077d6557b0da9802d161f5fc58"
        },
        {
          "alg" : "SHA-1",
          "content" : "8e8dac8775810216e2a958600805ed6dd5bf7b30"
        },
        {
          "alg" : "SHA-256",
          "content" : "49dce2c1a98fc305a9ecdfbbd38c3515d9536e8185e1a726ded843046b481e39"
        },
        {
          "alg" : "SHA-512",
          "content" : "fdf9eb2a72ba99d0e7d2f1cfc31d07b0e36a957985d0062ff4b0b12fe7e5ae1553705e103546b2a35a5da9383d158ee560be4a974774735c8a1ce060c5f95056"
        },
        {
          "alg" : "SHA-384",
          "content" : "8d1cbf0a59d3d25ab7e4bb97debe100d815c2d11fde0b637581160f9a02576d9bc0920020c00ec83ac8c3b8cfe39761c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "edec9a3becc336890174e3069f5e9b427fb2ab259496dc7cdd7f40a0bc753449e3a7a645c42c77acb444e4c43dd214bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3ccc211aa809d5fed2bee6a0d9a6867b47650712bcf9fb854461d490247f853d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f0543e7e7708678a63a6e2a5b0cddf54162e894fefe9479df6ce12b904116cd6afdeccbd2f407f42721213d3f605618895a7c16632b740552ecff22013f04c65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-tdb2@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-tdb2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-tdb2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-storage",
      "version" : "5.3.0",
      "description" : "Triplestore database storage",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9c78fa93ea0f1c0183122e0655a9af66"
        },
        {
          "alg" : "SHA-1",
          "content" : "fe5c0acb0097f929773718c4ae26c86cccd85b6e"
        },
        {
          "alg" : "SHA-256",
          "content" : "452e5b83663ede71876f2f63194841adf0404ed64a06546d655f128cab2ece3e"
        },
        {
          "alg" : "SHA-512",
          "content" : "07b6688e8f05e44177dc40d881f9114fb8d4f6ac2ab10a82b1f12171be5a13c96efc2e453e7e1c8c891c3133abe0fa81fa3fc2a23248ea2a6445c761416834f8"
        },
        {
          "alg" : "SHA-384",
          "content" : "3491224ff1e6f56f2b4f3a7b47cb3421382f40405c73051ac7ae87f493e4a0005d88bec21f0b4826dbf021ba3065f5d5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "ece7810aba23ac63c870c09b43d9e4b3e4d6fdd0eac88e7fba94cdfa817af3b4d9496b7bc9eeb643677234031a3c1232"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c0acb1779cb6d2256601c022d6f0955bf57765df07239e8b32679be73e7da4de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cbeb6eddc42ac1934462fd74f1e7cf822c8d1704861e41f137d9bd1e372988c145ff2fbd64ecf29fc260a998abc16d3ea7be71e0915e6c7e32779f3d7534ce4a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-storage/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-storage"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-trans-data",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ec52c804b1bdc042ee78e5068a1b382"
        },
        {
          "alg" : "SHA-1",
          "content" : "fc3f7c4414be20d17c94bd80b9ed4d100287fd47"
        },
        {
          "alg" : "SHA-256",
          "content" : "867298250cfc51e80710adae226a3a2c76bf8062d503145b73c41e8e8a02e261"
        },
        {
          "alg" : "SHA-512",
          "content" : "3f57cb1ddb75347b4ea62ba5838a7b8bd250ab1c2cf6bf07b69572ab37040a000c0339ebfc5158caea36f6e4cd7328ee87c2cfe26af141e45d6f7f0ae1b002df"
        },
        {
          "alg" : "SHA-384",
          "content" : "36079629b57fa1b3d3342fa7a7ffc42bce42da545b11457ded2f6b365abb6b9379211faae825be6835be69174a31b182"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bdacb0749ef26c6444c93622d0b539ed18f43aea7d57587f3ed071b56c0afe4c4e7795b2ed71eca7ae0a6b760585bc4f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d8fe957e157257ffc4f9c4341269b102d60a04f41200740e670461b869d1054b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fec78f51230e93d19eb5ff6f20789c571798811ed391fafc58c639c67d81162de74141ce925576363af732645e4c428ac0879fbb06ecdaf310cd39edf23f0a0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-trans-data/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-trans-data"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-transaction",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ad09d933dd4f185d841101320d4a37b1"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e428d7793eae6775d22ae2ffc171761f79c7884"
        },
        {
          "alg" : "SHA-256",
          "content" : "25bb7d1a5f75f6ce12d76742bba427ba6cfaeb958ee8d83487c34e8dd856ef2f"
        },
        {
          "alg" : "SHA-512",
          "content" : "e54848eef2e56153bc5eebf7ccc7019e22895506e83de7518246b5d80ba4afbbf432559c7f2b5272ce0d5b5ba76148c104e3653de8673b279c3e002de405c262"
        },
        {
          "alg" : "SHA-384",
          "content" : "16523106e07ccb60192e39678d3771778486e8ebcdb745371ff9a2a9f02e6add10800e80c1a813eb8ff061fd013951ca"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db9293ec7b4a8ad0e1bb4cac2bf26ccba6e2168e97e0e8ba43bb4d6911f169710b6c218f95280e9cf0abae18acf31820"
        },
        {
          "alg" : "SHA3-256",
          "content" : "da94ba78b04cebc2bea3dbd7e60ca8a27c4d96b44c799e2fd16c5a592ea1e6a3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "455a06964615ae1b2379a79a57714a7c4073d5ad2ff13e25032a8a0f158f6be23c1c5a9b67cc52663dfd8f77410053ca6f4b030f24bcbacbfea03253b9c556a8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-transaction/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-transaction"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-base@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-base",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bea83361c6b894ed3edd8f5a1125fac8"
        },
        {
          "alg" : "SHA-1",
          "content" : "b545cad68149558a1eb24ef6a3b5df7dd12cc7b1"
        },
        {
          "alg" : "SHA-256",
          "content" : "240c29b279f2d106f512cfd8b722671503d2a9004d14229d002a0aa24b8509b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "dbe35bb3bf59d564c360f9a56cf518a457b37f8f1cf5827abd71869465327c4905e89de761e2e76653cddcdcdfa38d4bfda0d95e430443eb4fe8519c0fa7c228"
        },
        {
          "alg" : "SHA-384",
          "content" : "c3ebf139b3ac39fa0e2f279f9e61e0c5f4e131534c18a31d09613a665658bd6a860b20cc3d6cc40af1f3927c54a2b97d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9a875a6038b619348f01afb355db31b4ee112388807420a0879d493f5e893ba019a600c28bdd677c7426dffe18c4ad0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ff0a855f8bb5f9a6186d471845372603103a4237c269c8825a565bfd4409d90"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3cc0db0b3ab13a1a4297b8bdd3f620d531e1a0288581782e4a97f59e55575df50c9a73721adb088c988a4fc310995d35da304814070be81570c2fcfdcd7a76da"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-base@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-base/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-base"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-index@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-index",
      "version" : "5.3.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a97c86fee5d697eff568efdc1f8574e"
        },
        {
          "alg" : "SHA-1",
          "content" : "4727b3438ae5d12ab058644bdc72ca92afa48f4d"
        },
        {
          "alg" : "SHA-256",
          "content" : "216479dffe14ea0b1abe5a1eb5be3a50bbb7ea8a0e2d0caf016d57e156b378dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "7a3b224ba2b1d54bae9af0df468846b300cc83733c32c42b4a4e0e0acfbd11e36fce321bdfbc6a6e68b10913fe0ab20a6f187360b46194e4f9685499523f822f"
        },
        {
          "alg" : "SHA-384",
          "content" : "18e822afda0b121d04930e42afc81f4263f0c9dde548d68de54ea9e45ce0828a20264a2ff5a6b765f16c6eec0959ec7c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8199b145b2c742d563aa9466dc204ac2d4a206cdd58f5d7defdd03f6a2f220c1a0c6d2ea6d7881f85643d1a1b68f3a73"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0cef5d9b31a64149148f1e9e35ab1958c66d76720c927088248d0959f4b9e2e8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9beda9e7658cb154d5a4ca14890a95bb3391e0e6b63572ac4bda03cfb6f0c07b6aedc0509398d1082acd0a29bd81d069b463025550f4110f682acce983a69a0c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-index@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-index/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-index"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.3.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-rdfconnection",
      "version" : "5.3.0",
      "description" : "RDF Connection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bdb27923be07a8fd758c7b90c43ea91f"
        },
        {
          "alg" : "SHA-1",
          "content" : "4609d06f36b201acecda5dd409365f9add34cf4b"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ce3b1350448aeb7d35ed289314b88a9beeac6065abdaa0ed234d17ea1f81e98"
        },
        {
          "alg" : "SHA-512",
          "content" : "a5934bd3fc560488ecd236b989c04a07c1192c7d19d499736166f695e556711f23ab6782b2f13464ab9f426c72af241fac4498b37c724191e82eacbe11c148ea"
        },
        {
          "alg" : "SHA-384",
          "content" : "0efdc0a3c53288aefce3b4dff5c34b52964a5db503f35e00d5e43e0850fbe401ee2b5a838e20f829cd1b8372b9b5ff16"
        },
        {
          "alg" : "SHA3-384",
          "content" : "80fb43abf156f16bbef776e416fd775e8f7f6e39eba45263b56ed3b34cef43a9942590c35fc8749dfde6db1f5016ffd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f79dea6ee680bf88101cac3cad0eb6ddb2842a4c1ba56bb5f7e3cb08d562420e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a1e43cdfa9adf40fd38837f353a123c432b3948f87cd91826964364e1266152a737b4fbb8d94a78f764c0d5bf976ca759f49f299a6664a54a1aefba26e790646"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-rdfconnection/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-rdfconnection"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-fileupload2-jakarta-servlet6",
      "version" : "2.0.0-M2",
      "description" : "The Apache Commons FileUpload Jakarta component provides a simple yet flexible means of adding support for multipart file upload functionality to Jakarta servlets and web applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90a1857034b763783a49294f53626919"
        },
        {
          "alg" : "SHA-1",
          "content" : "de8ac10c2fcf051714db8c23754cce58eacdcdb6"
        },
        {
          "alg" : "SHA-256",
          "content" : "c045806fa350a9280f743757d7aeeec5c236a2f47ea4dc6a4622a4638c58acda"
        },
        {
          "alg" : "SHA-512",
          "content" : "b13157d90c56b1ed53b4cbcbe7d6900ec0a1c83bed50329fdfef448462581e5334853344b9248a8c510a57a7f47a023cce0fd213395a9514160a045aad3981a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "7530dc53cee22ea17b29fb4af75dc042c58e2427ffdc14ecfb539d11c64eebd2ab919bbb2a48b47ea2a46bd820482a27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3839efcb95d4129ab7bcea0ca0629a49650d7e61cf0c6e1b9d2ac322b1dc628a548e540d6b71fc6da7ecb6e65487cd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f88ff35205e667922583ee60df617d80bb65fa803d48807f9ede89481376a96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2bf725d87ea7233de96124bb96acd10581320d70348a3367e366a6d5f252aec05205d3f23895a6cf98ba899393d110dac3cfe40f090b62b6ea458c4893ec84f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-jakarta-servlet6/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-jakarta-servlet6"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-fileupload2-core",
      "version" : "2.0.0-M2",
      "description" : "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6180d94509d26d293bd2d04389156e4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b16aec91c2e0b0e6052bff9795045c2704f6ca7"
        },
        {
          "alg" : "SHA-256",
          "content" : "85f249414c2d34349442447b7ee36fc6be55eef1c571a73f8aebaaf81ec74551"
        },
        {
          "alg" : "SHA-512",
          "content" : "b15fe7bb86110c96e8effca97b3de44191cb31aa50aec254cf171e5d714b60686936759336df25c248bbcdfce9c2e56561f03620770b626977a47a2d5ea16b47"
        },
        {
          "alg" : "SHA-384",
          "content" : "f57f0116068774f1eed99b52dfb2d3058cf82320d34c78583dabf97f82cf460a7ec3c92b7681031dc8a0bfdc755a09ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e801aef99ec3ad39e963d29a5dd1ea44441fa7cd2547dae46330240c10fbd6c3df41507a4820ecff3a844bdca4eafd5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29c0d73e1592877be88e39659d1d2c890ceac176c96734ce792f61463c832929"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe1ce1d5d4104de16b24cd043bf07c7eb958cb5cf9118b462d5c901763b430e1bc14e459fb3d20e1034227633215d058cca383afed12ec565c66cb5b04e88268"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.18.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8cce74ccf461cd6502ae04c908eca917"
        },
        {
          "alg" : "SHA-1",
          "content" : "44084ef756763795b31c578403dd028ff4a22950"
        },
        {
          "alg" : "SHA-256",
          "content" : "f3ca0f8d63c40e23a56d54101c60d5edee136b42d84bfb85bc7963093109cf8b"
        },
        {
          "alg" : "SHA-512",
          "content" : "786778529435d8a14ab6ce2176cdf2b9ee6585a71893b785f26257122166dcefc7c4af3f612eda3974b06c16d06fc357178bf28b9b74010e9bc04c33221adc2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "4be7ad9b352412ddad3eb00f2e44f1236216d3e713546d34d71f3aa8e589b06636abf22dad0c28e11a0cd7b54ea0496a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d003d33c2cd37806d9d8f0576b65fd51fc1f02bfed7716279474556ef98abfaaddb5b5622762b64458bec6b57f77ceca"
        },
        {
          "alg" : "SHA3-256",
          "content" : "89019fd824ce65aa33554a848dce2ca47f09c3a261fd22c699342d99579e91d9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6edaba8f76bd3e96421ae3611fb32414b064c5ef2fdefd7402f3052c5849e06aa6dfdd218a6df97b25cdd7997df0c9d643af960c4294f2e89dffb052b4b9d8cd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.1.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg" : "SHA-1",
          "content" : "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg" : "SHA-384",
          "content" : "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-core@1.14.3?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-core",
      "version" : "1.14.3",
      "description" : "Core module of Micrometer containing instrumentation API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a7f64dbcd1d080e8ab7ba057f50432cf"
        },
        {
          "alg" : "SHA-1",
          "content" : "8962714eb3a6bf97711765fbefe7f6ac28cae96f"
        },
        {
          "alg" : "SHA-256",
          "content" : "f2c9bd46d5418a36f7a0ca3aba9aa8f30eb00f3e38e96bd40f7d257cd9bfb5c8"
        },
        {
          "alg" : "SHA-512",
          "content" : "1aa89be0a589aa4fd5092763209e275039acf6ac957dead8b450e6e02b94702cb41b6d5712ef059fea301407b65d9a0dffee795c7cb1412e35292c5fd02eac0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "301e8a70b2f8ec719bf86e95cb5a58ac2ce53d84ebd1e7267488625fcecedbf40fa706e6ff24cf5f4cd87be965e3a8c7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b8848bc1d5833ae4f65fce99b9ce432a75209545a197a8f42c650aed3a28107371dd0200212b9bde6ecacbdd18a985da"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b2756f225229b1c256a0111b8b842c94cb65b728dc89f688a6d947082b481511"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a35473f9780ec68685313d339dcdccc58e6c9d184b4ef481fe2e008ce449f0d4776482c3926b26b8c4d441cbeb26a059097f11873e1d35c60b42cd9ff99fcdaa"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-core@1.14.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-commons@1.14.3?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-commons",
      "version" : "1.14.3",
      "description" : "Module containing common code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f6015f3594322034a155fdc3b442aa55"
        },
        {
          "alg" : "SHA-1",
          "content" : "bf17f05dd6343d36ecc31076197a962cfdf46131"
        },
        {
          "alg" : "SHA-256",
          "content" : "a428a9049b170f37f86c0f19b10a9e828b3e5f3f897043c846198bd3ee04296e"
        },
        {
          "alg" : "SHA-512",
          "content" : "be520af7f0ad0ead7e9949f68f15b89b18221d900fb50bde81ff3ae6581c8c70fe2d5f74f0aa99db27b4f7d1f2b139ca8f5a796f0ffd8fb7da423aad57ffd523"
        },
        {
          "alg" : "SHA-384",
          "content" : "4911f4cc05c2971bcdaa3592f29b0cb24d6fb93fffd2f959020425f3b30a39f1a36618608db86218e478d6d9294b9e71"
        },
        {
          "alg" : "SHA3-384",
          "content" : "020bf82ac7697009f46406de22430c7241f3692219978b2bfb141f6177572515c09ea10e0788c6765f09a52bbf353357"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7a4bf61791169f98adedff204f2fb0a12e91496d7c36ad93b871d62802092be9"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d99f02a951c55883350c1d1819d885ed627218cda131e8e998802d2b263e09287b55574bd5de025643cb1b6f5c32661635ad039dda2c0f8b7a457536f8f3a58"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-commons@1.14.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-observation@1.14.3?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-observation",
      "version" : "1.14.3",
      "description" : "Module containing Observation related code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9f899dc589ce34ed5d22aa1e3ea74804"
        },
        {
          "alg" : "SHA-1",
          "content" : "cd66186a1fe8465dc732d9514bade1104044b56d"
        },
        {
          "alg" : "SHA-256",
          "content" : "cd4f7da00a458fe9bab944b2d184a92ee69783d69e9e17524929330ef32ba250"
        },
        {
          "alg" : "SHA-512",
          "content" : "94298b04f4d64fd777e34e199ad8d6bc1cad073052cb586b3d9dabc9b70cec4847253b588a785702a86601bc93b0a274d90cfa6219289ecdaaed25f8b764300b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2e56062a32cfc834dafce7524dd64824830e95fcd56e23a9dd415da3597c89272881a97824880fd9e99782a148d9bb78"
        },
        {
          "alg" : "SHA3-384",
          "content" : "de71f9c1dc9f2a357f673f1c6dc0c52f9df9ba553e973cb00d45f72cf7904a81079e08d266a96f1542fadc93023fd7e4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1b6692487e9e5bd5bb3f553a0946ab1c211527c11b216d63a4a611f8ff824b85"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e06b7043054353cc8d69ba6afb5bc2128b6bdb958ffc30250c583833ec8182b3cb57e6f9c4174e6bc9c4de5750a534b8e4347e0b72a9de524c24d7810a20c04"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-observation@1.14.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group" : "org.hdrhistogram",
      "name" : "HdrHistogram",
      "version" : "2.2.2",
      "description" : "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg" : "SHA-256",
          "content" : "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hdrhistogram.github.io/HdrHistogram/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/HdrHistogram/HdrHistogram/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git://github.com/HdrHistogram/HdrHistogram.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group" : "org.latencyutils",
      "name" : "LatencyUtils",
      "version" : "2.0.3",
      "description" : "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg" : "SHA-1",
          "content" : "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg" : "SHA-384",
          "content" : "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg" : "SHA3-384",
          "content" : "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://latencyutils.github.io/LatencyUtils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/LatencyUtils/LatencyUtils/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git://github.com/LatencyUtils/LatencyUtils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-registry-prometheus",
      "version" : "1.14.3",
      "description" : "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e11212b33ada688abcbdc7a7248629d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "d09eae0636e2759aafa561c722129b5c86451368"
        },
        {
          "alg" : "SHA-256",
          "content" : "da75f1ec67fecbcdc28f6a5ed7419bbf32ce724766942f0afc70abc9c19bc53b"
        },
        {
          "alg" : "SHA-512",
          "content" : "151ad87658be5cdf117a02394826759ba08932fe135054a2360acf087705af256180d64ddb5e6396c22f56f55bff21ca401097c26f54c6bc9811419c29f861cf"
        },
        {
          "alg" : "SHA-384",
          "content" : "ca0a16de0bf0a4d66286b82070347168ca67701f971753a942ac0df4b0790b24f666e8ecdba4600debcd98f1d4a0691e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6bc1fe3912ef5e893c42045c61e33e4459b25a27d3316be8e5f4fea8873c4c099f3b1667c8d2e7cd4e94210e15cbcea2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "183cac3ac0120238ff34005e312ad7e6c2325644ffa9dee935e6706d6a2df5f4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b1d206bc16924608de65794cb925753341cec5431834aaebac7e61808b8eb5338232cd2abcd5153ca32780015d6ef5ae3b1bb1cf4505a7e33ddc83fd3230b786"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-core",
      "version" : "1.3.5",
      "description" : "Core Prometheus metric types",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38bf2f0953eae7433322201092d4547a"
        },
        {
          "alg" : "SHA-1",
          "content" : "2169cfe39084609c72a1fcd1a5775f74a4531919"
        },
        {
          "alg" : "SHA-256",
          "content" : "389c875fab0f62d56ae2efe061ee3cc0a1bf4fb37d5ce5d07afa6833aeb771bf"
        },
        {
          "alg" : "SHA-512",
          "content" : "391bdf3f562deacb2e0cd9698828a747c60748d966fee00917c6c55cb5c8037fd185f5377bd11754ea9e7731acebca7102c3de308bc979aeb27cbcbf85b957d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b0ed038c63243e4f4767f66cbce1a8cea44b3c9a83dd125fd664036b5dacea0f685b15988cd67180f8a13591abc5a34"
        },
        {
          "alg" : "SHA3-384",
          "content" : "86ea08df7aa0fa0fa80d8dcfd11a20ca6a62e5a3b0df9f5ef784fc3aedc30e6fe1ae3d339747eb8aba4be2144f9b937d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e5541d7a6d47e8832fd5d1364949b4a44330556d7971091fe6cfbe9bdd2d06d8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d6ce7e25467863dd1f95624c7335c166d40a0b1a1b1aff6ef9768ea68782f8844551ce8a64ef4ecd354181912a2e16db7dc433f5668d836accb957b6188fff62"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-model",
      "version" : "1.3.5",
      "description" : "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d746d3ca2179c59c753e6dfbc08cbe67"
        },
        {
          "alg" : "SHA-1",
          "content" : "06a58b494b55eb3c0627cd00ac3957dc660fd4cf"
        },
        {
          "alg" : "SHA-256",
          "content" : "431021dc649b59d2a7cfb356e593d9e8e7baabfff5a6976018c0a4b2711922dc"
        },
        {
          "alg" : "SHA-512",
          "content" : "d2e3b8f711c4b377c351605ea80a38712fdb621fd4eebd05b88eebfe8f12602fd1a924e632263428d627b427b9e0d81e4f19a3be61394d2e35d7de10704867de"
        },
        {
          "alg" : "SHA-384",
          "content" : "581c2e35216110f1f49f8abbcd7a48031f80dd8b1a19216e6e3c69314a3bf66c7d2f0a97dad248eb78d70afa45a0b1e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "be6a6a5c98ce92a0f5feac4999d22985219363d3546116b50127f11d61855d3357b5b3962c3f9c4a6b095caf807474dc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bca4260d35ef26b5a83eeff7760fc6d435520a85c4ce9e156f1ab44606f8e0f0"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4b58e596b38a319fae3f4f91b0dfa982e8e9159e09078fabbb6b18de66d57ce17b78ac5f2fb2cc76f45ed145403a5dd23ebbcc67938b5e930a6bc7e886908da7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-config",
      "version" : "1.3.5",
      "description" : "Configuration for Prometheus metrics and exposition formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8517ad3f2634ecb793c840bac7b9a671"
        },
        {
          "alg" : "SHA-1",
          "content" : "c25f5a3e02c8de54cf4c38b21147ca2994135af6"
        },
        {
          "alg" : "SHA-256",
          "content" : "3999e82258d9b8280c32c9b5a1e83a8746da19988d563b40a026c249374fd8ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "c0e6d7bd8287bc783def45e9d6623f8cd824ce2ea87c7aa314f8ccd8018f2a2bc4d8c84b350bda928d0ab98f524f39d3dfb52bb591e0eeec288d6aa2fad2df73"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f642a0a17272b9409fff092b84a49bce7067f7716746d99d24fd1576f08eb4c5dd5036789f84c42e903eec9078add14"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d7cc8a47556fca0aa9857eacf582dfcd28701df1a9bdbd56864f9d29c9ae1ff3de87af68d4601da56c5ea0607ddedee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "612868631a1184e86de6338b459abfccad353efb676dd0dd0aae8fdb1b0a9a3d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "625ad6170ed68d6749d74c1382e5d5277bd3d98e37182840d88623b09971201c383003d261d5ac84faa3ccb1635bce75b98920ae6d5564cfd89b5d554a311b39"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-config"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-tracer-common",
      "version" : "1.3.5",
      "description" : "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "601e36f07138df5f4d96c8db0c7d8ad5"
        },
        {
          "alg" : "SHA-1",
          "content" : "adf529b691eb4514124662ad47e67676be52c3d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "6c59d43356538fc8b16403b8acd74ff08f1434c77d95c43611ed4ef91b898889"
        },
        {
          "alg" : "SHA-512",
          "content" : "411e59a90a7635a083949d8587afe92ecc73cabb74cf775fee27f90fb733590358989338f922b2bac122ab2c66ad0691706f4158dbb8c0605f37171489e390c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "025cd2e1ab4e6fb51232177dfac3e042c68ebae17a0e539c30375060ae16ac4ed4249a8d7d99d8a8b24046f25fea47ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "45c28b0d34da0638eb94620368685ff579474d7fceb31befe17ffde056fce6eb97dddfd99f59b8403f72730359725405"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3666741c72865b7c44098e80f97c5cfbf9179c01d3809838d5077b6b3f447571"
        },
        {
          "alg" : "SHA3-512",
          "content" : "88c104f6d57976e9671a3e28d6b70eebd9e4d9b9917558f3d3ad6398bdddd8ce131345c3f96a099ef787d70525098c5d140948ddadf061a4c3e1e96eff475563"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-exposition-formats",
      "version" : "1.3.5",
      "description" : "Prometheus exposition formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a99a984da79c9cefb8e2e39064a1502d"
        },
        {
          "alg" : "SHA-1",
          "content" : "3a5d2539dad545b15a60f7113a01734779906d97"
        },
        {
          "alg" : "SHA-256",
          "content" : "c93022d645ebb0fa40fc8e9c6658abc06b69eae01d13f1d14b6f50ac7b296b08"
        },
        {
          "alg" : "SHA-512",
          "content" : "8c7e6bf28e90e627e3de6fba4b1efd7f54fc09750ecb1bf67e3a853b0145afc9a1fb7c5b946ee211ec87f12fcb69141dd02512a58222a29616451b4deeb727a1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0d6df52df9aa58a82405c26c110a08515c0995a19fde15366966b954a47a2be5a52ae43f3106387517e1b743beae81db"
        },
        {
          "alg" : "SHA3-384",
          "content" : "88381b8796b76f34a8a8545882e8c69e78889c4a50e364b75c31fa8914ac202e7c6b83840076d5bc618c64f585b3cf62"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2e166a80dfdf19e2708f2133f5ffa80036d7c84c1f9f9a9bf1748f92af8bdf24"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7ee5caf2fe6ab3c36a3b3876cf64bc334fcdc8ede288c8b48d656ac40c78133599ac48e25a64df8b6e5cd70008e49460724848cfdd93f818204ebf106dd1044e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-exposition-formats"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.5?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-exposition-textformats",
      "version" : "1.3.5",
      "description" : "Prometheus exposition text formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "532c42cd04e4c2ba0ceeb4c9ae3f3e99"
        },
        {
          "alg" : "SHA-1",
          "content" : "c23b4fadcc2bb27a32a48f81fb8ac27b3f8cf192"
        },
        {
          "alg" : "SHA-256",
          "content" : "9090a4a7a6736a1305fc1cf555eb9a92ecea9610662cd45e3af81b2307bd00c3"
        },
        {
          "alg" : "SHA-512",
          "content" : "0bd3d41187d56a637ecc56b79c1a4c33c40c2b71e6d09802598ee15a5531fdb1754a61bd6e6d605e2f064870f7abffb3f38df7633badc386b13ce4433f49653b"
        },
        {
          "alg" : "SHA-384",
          "content" : "e9195599d6dbc10eb1ba6a6c1537ff468f13d3a4f4aaf838560cd9146bcd19e582cf625b394557d7972a70c3b3b9a1e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "75a942aeada7b560836a7ffa1a67c3c501ca17e0b30fbdff7d1bdcd85c7d3a92a52e9ab2c5cb471b441aef5e67bd71b4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "30380b1108f352bcdbb6842082097d793ed0e4b4dda5258aa8eedbc7b41afc66"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e811bd58d0cc8118a785a1c6972cfa4a5aa40d91e8e1ca9396aa43a6c93d9acf6d480bd21d15c400c8e6425bff730db9d18395c51d270a4a970b0e4d8bd33df7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-exposition-textformats"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.3.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-access",
      "version" : "5.3.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3b848fd134b60f5ac90c0a60ea956628"
        },
        {
          "alg" : "SHA-1",
          "content" : "688b0fe6be6b51b4735f73636799ff8fc1e48237"
        },
        {
          "alg" : "SHA-256",
          "content" : "3ccadf7be069f65182b17a11a3c8db0f0baeb499c8918290fcd88eed15765c25"
        },
        {
          "alg" : "SHA-512",
          "content" : "6718c8f0bcb6558c0b438d59d74b4942641a00407a9d6131f3b898204a8de0acabf3827743fc1c6bcb1d55f0a2071141bbf3062ee29d016b07fe0e6e4f40d4f4"
        },
        {
          "alg" : "SHA-384",
          "content" : "ad8ce36ffc9e6921888691e9fc95b958352eec688768a233e38b56b85c54ddd96b0ec566de73a35f4c642bec57ada5e4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f4b23c462fad6a13ebd3f07452c66b849e35542cea7c155db8d26bd5866de2526b505f85a7be6c125e2e00c30ed92d38"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f8ea15ebaf5a4f6181025b4d21a97429013c51f9a02212e439e9c79aa95a01d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c70d5bb72d779f05f141609e3ba80c0247775d846b0aa6d5d07fbbf1fbab1e6c5a003dff3393b113c1c93714046e47970a701a6e39792b6abf753851cdc56e48"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-access/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-access"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-cmds@5.3.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-cmds",
      "version" : "5.3.0",
      "description" : "Command line tools",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f30a918ba7a0a451a9140de82b1384ec"
        },
        {
          "alg" : "SHA-1",
          "content" : "129723da05c8a779c77882bd039d859eadfc62fa"
        },
        {
          "alg" : "SHA-256",
          "content" : "200d0106975f4f685e204ae966ad177a38b5b88eb4e6cf759553af55bc3d6266"
        },
        {
          "alg" : "SHA-512",
          "content" : "ea8251567b77e6182c765e1e37af5b653e87d8cc0cc8cafa9ee87569ce7652ba74d8634a31d8ca077b82a06c04cda974314586b0b83fe4967b78094b84b5a679"
        },
        {
          "alg" : "SHA-384",
          "content" : "90e3db8fa8869117a7ba5fffbdfaf0496ea6dd6a24f7ac8fb123fe4e9ff070c1eb67e5346a9e05fed87733f78fdc340a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4cf908007bc8b6284abea4d8e8c2fc810ccd4ac7c51d3a84381a2ddd043903eaeb29d1fe0ca9344e23f2729f795195e9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bc12f216ef19256778e97133664cef73942949a40c67c1a466960cfe63091d9a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0029b93f2b760b92bcbda5c86bccd50eea36cbad48fcb8c30b825a35b65e10aeef2efd62557a16d6684615a33cc5eeada7702f0029c8262a963b71aa1bbe4340"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-cmds@5.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-cmds"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.9.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef66360f30909f8372d6358dfc5d1b6c"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1cdfa8bf40ccbb7440b2d1232f9f45bb20a1844"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3d530d0f28fd0fbbffe2b0b338f70e8cb96f1605579e2e3abd4db29cac24e69"
        },
        {
          "alg" : "SHA-512",
          "content" : "d516a6869a31902df2c2e3318acde973a2b2423b5eb573ece5b9eb85f620a2dd25194f0e4efc972b9c0ea054003ee3ffc463b18ffb2428e47d85b88568c36482"
        },
        {
          "alg" : "SHA-384",
          "content" : "96c19d2776e7c590df7479256d1bb64814b918e2abff8fc247a084a877c063a3e9a196fa3774f2b1d811c822217fbe45"
        },
        {
          "alg" : "SHA3-384",
          "content" : "30d57c3f1b44d24eb143e911966310044ebd231690000aac4d80d34230937c590691be4d95d916ab67b5a2352dc0a71a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "737d6fadc7df28fba6fd5dc4a8ec83347d46ad790cafb66341ea971f47ca3080"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f8bd02833a656acd4ec072827f283333547ff9781f7d855d626346629a52e63c3202f03acbac9b0bdebe044bd5536010cbdd686d0f3d10fdec4f5cd1b4494b9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlet",
      "version" : "12.0.16",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "baf3dbe9ee077d04df134c78e4bfa7ae"
        },
        {
          "alg" : "SHA-1",
          "content" : "022a746c00b1ac5c790fee65a398c707160a46d8"
        },
        {
          "alg" : "SHA-256",
          "content" : "18a6c41074061a0ff440d618b43e7ab328e81226ec21c4d6a4d53b90b2c94a55"
        },
        {
          "alg" : "SHA-512",
          "content" : "6c0aed7f587322ca280e356756c5c511fe8fe03951e279bae4af1283b0041c04f98a54f9e03a240c4b1ce800e4946c2f688fd264f475359d2cf4b384d606b468"
        },
        {
          "alg" : "SHA-384",
          "content" : "cf393b24f46dde81b0a6ba631c6c6491ae395bd6b8c5309032c2e4b4c2a16dd9a408fe9ccaad95487f266eff1300c7ae"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8e7b75039b97649a08fd21766a1a23d87e4f2b17cb836bfac6341183267051e088886cb87943cf59e490e6a3a48e57a9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "80b45029e6e932e99fc35fb27f6dd51f6ec1b341924462c105d3c45956057f2a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d610b97608019ca9e334ea834b1d533622b5c5cf30152df49cca29c9ee09b756b98e66120bd1ef00cc45c8c7b3038191df53d379edf662ea207622ccb51f0f35"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-ee10/jetty-ee10-servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "12.0.16",
      "description" : "The legacy jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8bc8e31a2ebea7cb185fd188e5b4b5ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "3e3638b4bfbee04c27b3ae68e4949fc43b40a042"
        },
        {
          "alg" : "SHA-256",
          "content" : "9e3f17ca732154ee2c67cc2bc340f322b29335f74d65f7cc0104c2e9cdc6640e"
        },
        {
          "alg" : "SHA-512",
          "content" : "e7ebc2911992744a387313e2f7da2d4fda02276d9b219a4c70ed97e19c30350d9c533160369fcd3ba2790633a7cfce9477c7591eddb3787925d4a264fb077cc0"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbb663d74c868beefd32a70ebf32b97de19e9aa37ac85bc1800341c86a946f31d5b3fce234aa693d92b761639ad65d8b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7051cae01113f0b716bd8d933cae0581f7cfde364a92b0c7fa15b8501da3d80b1d0ae702691e2259b24e2aee96b8f588"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7027866a232bc60cbbbee44e00d4d6f88525cbea3759db697cfc2f0f0696eabf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "543ffbede3f01f77d157df9350d84e37ddde88f10d94d6627174cb7b52d7fc8fdad59de512a6113f9940967167beef4735c12ccd187c55af5e2466f2f12a302e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-server"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-server"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-session",
      "version" : "12.0.16",
      "description" : "The common jetty session implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3eab34dcfbeee6e4210e23c654a543b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "79cdedc7afebbdba4453f603dfe2f970baa35cc3"
        },
        {
          "alg" : "SHA-256",
          "content" : "5d7dfd24c94472c368441488791412a31ea476ad4f1d9286b4f5802c5d85514b"
        },
        {
          "alg" : "SHA-512",
          "content" : "26b4f5fbc1014b916b9e4df810767dafc58628761081b48caf3405f4bf9060193f880ff03814e8cad8112bf90ad08efedfbf1d0d0fab26055f1968896dcf140a"
        },
        {
          "alg" : "SHA-384",
          "content" : "17efbf006c6adb0260316354632e2b864c877cbe8f6d274eef6cbe350b3464b540b6d4111e40243e16be5ac4b2a50fc0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1de22344b3c2ac6c45b8ceda367abd9769bda3c142be4c1fa8144948aa211225642fa1835a2ae91f40ae112bde0e2e93"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4a40b5cfecf2fb5ca3ebb63262edb049df030e5d3ccefcc9cb1d521a9659a84d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bd9d02072b8ef1668b2f03fcc73c98c0f6f35d44bb4a6a75966efba1d175bbc9b532ee94a24eff6f58c6c3978205d2f34c6d622438074a520ba9ce05f51f7bd2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-session"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-session"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlets",
      "version" : "12.0.16",
      "description" : "Utility Servlets from Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f291d63b180d59ed1cd1c3969b68fa20"
        },
        {
          "alg" : "SHA-1",
          "content" : "cab66998f9fe91e4c097641005b634d88da0373e"
        },
        {
          "alg" : "SHA-256",
          "content" : "c5a750269f66300183dc4ea7ae158a20b933e7733f7718d4b3b7d037c08e56f1"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc5066dddcd99b1aa0bd0d0f9bd2374b4d4cf9433e0f816b5201d327ebc478f4d5d2d727b4c2060485748859dbf8a69c1397e666b4d3dc3e9e5e47691ea126d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "17b76deaac67c654dd1c9cc8097a22cced32aaec88c1a0ac28645f9754276e28e358f3e51bf53d0f264d678bbc27c3a5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e5b9bb93c11a2e0e2a960fdb16841e2b52835959633460f69f3b9e887730bff1ec39692035887805cbdad930800992af"
        },
        {
          "alg" : "SHA3-256",
          "content" : "305a974449ed1bd6bea45e6773ef6d17fff15e220068442baa69a8b8f63ce77b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "58352b37b26c3d151970fca373646dd9de60a0d26e6444d493810647630f7826a79fc6e8a13b5e3d077ef4e3dbbfc5bc4d546dd77ebc7590ab4017109781edff"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-ee10/jetty-ee10-servlets"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlets"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "12.0.16",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "97fbad480f90455582cefadd2b030332"
        },
        {
          "alg" : "SHA-1",
          "content" : "68019fa90e8420ae15c109bd8c8611cacbaf43e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "b0751b3dd9a8abc79ba0c5061613843dba1d2ce231057f53ad3d038ca888dfb0"
        },
        {
          "alg" : "SHA-512",
          "content" : "120458b511312887fa9c6b67b31d92c84f50a7421e9f8918a65bbefd39642603e833eebf4bff89e1f609c89c1887a2b274c4e16fb4dcde028faec8ba858a97c3"
        },
        {
          "alg" : "SHA-384",
          "content" : "03922a0fbe929f28936b38bdeff3c83d9fc5ce3b54241bbef44f14da4125d612a1944738180cfc332a268ffb045d8c76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "348414ed8aeec052d75a7d37a7f75c38594d18a64c2e0d2fc597f0716b8d0812f3c5cfa72a411abd98f207ae241002f7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9f33b909d4a0cc00efa5839ef2d29dbc47e6cdea0a5872778c1373e39e988bda"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cd0c87a9a9d9accdfe4e68448884cfcb4644baba96b51f8bf9f5bf01acad857590556e7243fb2309a8dc3e1492072a7131dd5dc884cf92ee37555a3eeb387aad"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-http"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "12.0.16",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ae480591a63c1b212f4c7911349761a4"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a162c537a99bbaf35a074fec9a50815e6c81d9d"
        },
        {
          "alg" : "SHA-256",
          "content" : "c8dfd2d88d34be5461417f2256be0cc868865c45815f7ee0e409ddd872f0e84f"
        },
        {
          "alg" : "SHA-512",
          "content" : "ad971d4b07dd8ad4ea2edca809a56f7a152bfe838a9dee691e742e4fced02323826622c4b52ecbabd376824124d332d914a976329c1e3b6550c1fa38fae9b209"
        },
        {
          "alg" : "SHA-384",
          "content" : "d3949ab52b4f495d55497e68afe4dfb8d0b03aeeae5597985fe9ed7edff4276b7a3d4869692cbab92ecb0bf964b42168"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f96ee9c996e1f3da79f4ca8c4c395d10f5fef332aac6b73acfa1d31cfe33f6121d677e833d781891f0a3e4635ca24a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "857d910de9ed1831324ac50651357bc457e06105ce672ebe0e2d9aa3fe2a12d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3ee799685816290d0fb4ae79824aae27ec1a9e881a6144aa8b6a8f16b81ba39aba1c557f094d9f4e36f4a5411493338710a9a6e5c9237b56d03c6c5eed40774d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-io"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "12.0.16",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b3c132eb692790fe9b29bb03ee52003e"
        },
        {
          "alg" : "SHA-1",
          "content" : "e262e505363e5925df15618622d9888aefc1b0d0"
        },
        {
          "alg" : "SHA-256",
          "content" : "a03d43c194993ebb4d51fbfe7fe29134d7863b28708380eeedd11797c83543cf"
        },
        {
          "alg" : "SHA-512",
          "content" : "12d68634a4cac92fdd9c503299f0805f5913d599f9e38d194b8b79d4729b062586d5f7ae815622b8978ed2813a4ad2177571e9adc9343a06792bf11be8c982d2"
        },
        {
          "alg" : "SHA-384",
          "content" : "e22875cf9c78e31704a53517f6a2e2e5529b18010727ba626841b3022bfd6733c95e14f805c26346dca6475016b26d05"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6ca46fd0fddcd609db3107b297e9008df46db91a6668e424eb472a03d1e759ce7cabd41c4e798b50dfa11feaf446dbeb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "418ea0d85ad9e57e44094d551e71db3c048374160b0526f9ac02624d74bfb382"
        },
        {
          "alg" : "SHA3-512",
          "content" : "886cc4ed4760000e0562576e4a6d3bb32111d599b617b8bdc3a044bde07b5f3ea0bdad1e1057cfbc5dda2dd5b08bd98acabaded48ff7195dc68b48726e4361cb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-util"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "12.0.16",
      "description" : "The common Jetty security implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "255464da6183b5c0148887757273e23f"
        },
        {
          "alg" : "SHA-1",
          "content" : "23b1a3abecf9d6f5498064a32d9145ae1d8330f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "7a6d5b2d0edb1b5012b5510a80411c7fb4b9844b3879938d3b6e9ace3b9b6876"
        },
        {
          "alg" : "SHA-512",
          "content" : "a7ad361cab7fc6f077a17b2250cd229b93399aa53d8c1bb5d3d31e4ee36850b6ade19435612e28153f381fa6401cdd91d0a46022886585bc2d04c3d9d2611c32"
        },
        {
          "alg" : "SHA-384",
          "content" : "3d7a3cf8e96c07449855bc55f0a72072897851975774da81d02c79c7edf56648487a5359b9a0468b31010b1f1f1091ac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e08f08b0f49826ce5c598f54f463737fe1c2d4b2c3735a9cd923ef967d13295db94422b9aca72994b723257b5cc0bc6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c318e61d5db70f9e0ed8f9bbec5a747d83f5cbce4701569dad85087060df00e4"
        },
        {
          "alg" : "SHA3-512",
          "content" : "20d120a484c4c02a5a269c0be9d71def917387554e73548609ae1fae4d05e35b8a8e6b1cd5091c3b4dd3753bb407ca037b0b4fd7b99d4a2f06ec137362c3125d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-security"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.16?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "12.0.16",
      "description" : "The jetty xml utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8cf0bb6590d5c0dbed8943f0e7128b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "aac8e09d6adf1dfcca2dfaf5bfcfdf137ba1b89a"
        },
        {
          "alg" : "SHA-256",
          "content" : "a834f40e17c783a9f59bb7ee0a280626c7dacf6e7ee3e93dc0b6927a6aabdfd9"
        },
        {
          "alg" : "SHA-512",
          "content" : "58c9bab0004c8d4dcf020a05ba8fd4f497283c64ac77aca8186ead8172498feca1a4a38da041db8025baf29447dc7954ef4aadb0efb3b0484656d39c03422b29"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe5b4bf0a07da25cf7e33b81206fdaec9c1a5a564ba202e50bde64b70523526c0b5b216c3c0ec355c47ff2d799755cdf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d1f79e7117d84dfe3119e2d65191c6ec6a71dd1b409017d224956a0a3cb6cb5a1eb39c158ab2023dda50926667129501"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8d7960387f20b278cd077062c29567a770a4efd5d70f0271277596ae03529fbc"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e40f75711bd8b9f3addc95aeb1005e6981caabe6a5ef9324cdfeb3d397ffdcafb4bedfe1caf7ede6c3c6f0dd576f8120859933544c97e49107c2e7e4ed6753f0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-xml"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-core@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-core",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cc5334451e46a5d0318af0081de882af"
        },
        {
          "alg" : "SHA-1",
          "content" : "80181cac7048ccce2fa79017cf567318eaa44821"
        },
        {
          "alg" : "SHA-256",
          "content" : "937e4ded196432ca1d11e044ac6f20fa0d44ccd17b01f760431f6651dec44d62"
        },
        {
          "alg" : "SHA-512",
          "content" : "195fd9c32a124e4df4ac0ba43c98934b040295f2ef93bd6351caab5186e9edd946fd440a768cf1a97a295ff5210f6ff19e25693828085cfe00fd84946abaa782"
        },
        {
          "alg" : "SHA-384",
          "content" : "9328cda6ed0ee3885398dadae6a95d41efb1b3ab333314e41c397f6ce6bd35da44f271ecfb48d1e3ffe555a6a593226a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "678060ea0b9642c93c15d1b6d4b989c99bbaea5ec52c077d411eba886a46516106938d417068759a7c669d2221beb27c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ddd984e6c317131cffcafe9eee32311be4843ad4cee1a0c91c3afb1b3674e6eb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7567e2e1dd0aef5990da6ba91cb1ee034675cb894dc7ccc4426d150c0040916c4f9fde9bd889ebabf6d1e4182207bf66dc55fdc5c69e37153f1288e8cd0d8810"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-core@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-lang",
      "version" : "2.0.2",
      "description" : "The lang module encapsulates only language-specific utilities that are used by various other modules. It exists to augment what we would have liked to see in the JDK but does not exist.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fa2bb66368b418d3307a92c746fa4e09"
        },
        {
          "alg" : "SHA-1",
          "content" : "ca80ded0077a4091768509a7d07080a2aee4f098"
        },
        {
          "alg" : "SHA-256",
          "content" : "fd782008400dfae36d50fd7d88618d424545dec6d3eb5534216ea64962068d39"
        },
        {
          "alg" : "SHA-512",
          "content" : "204bbed96ff1d5f7066c4895519008d3a0bf5d2657df1460e35651ef856523c72213e8889b764f3d2ec69867fceac25d2e7914970c55d373faffc9dd95e3b53f"
        },
        {
          "alg" : "SHA-384",
          "content" : "2f6312f727dc48cc1011cc0fcabd94f37572248c00d2ecc0d0446c530f0bf719d711bf8817c4fba129f047a89a12683c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "69cadc586e442f7f0be3cb18beac45de8b8cf34414d7bfd5849399de29d174581a3ca9bf29cb6328a7d0f081cb6884d2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3d6980edd5769050afde264e3d97f530e1fd302465c380ff6f80be23d134c29e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c9865116284463ca1e59b26757f92ce3a3d02a7e2b1b8c7a75f7195935288c81710b3193c0e21d04a1ea0f0525fe0ce9e72f222eb8117891c350c44c0b0b0253"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-lang"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-cache",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "381403130432b34a9f38f02f06bfd00a"
        },
        {
          "alg" : "SHA-1",
          "content" : "40052591d32bcd8ecde7dacbcb3e5d692ab5dcc1"
        },
        {
          "alg" : "SHA-256",
          "content" : "19b511240227e1e7d5cec063f57583f16a912ad52b6e5e1aa3233293259f110c"
        },
        {
          "alg" : "SHA-512",
          "content" : "7cadbbd3bb7cd63eab380e5db31e639b5885d9359822cf6c4a96035bfea06f5de11bc43e3765a22d97919d9ef7f66f6522d3852942f241ed7f016afd3dc82250"
        },
        {
          "alg" : "SHA-384",
          "content" : "e730ddc495445c098f9037713e7257fa50e58721dc50defeef9dfec4637b8b7b3b1144e472599e10b92015de9417fde4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "694d8751827477dfbaefa4a715efb81ac6baf57bcc7cec664611afb4837ef5f68e4b525ef8300963e4fba59762fa0c02"
        },
        {
          "alg" : "SHA3-256",
          "content" : "333f7f003840c43953f80fb6e3489d635e318a26a3b765070e2bfbe02523c73c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c7a5608a571da4b6e2e956a08fd4434ea6c524faf2e5961b06cb76d2ff2eec1819e04c09a46ee58f43d79d38395446177caf9061d7e452e06f1bb5e4bfb7e42b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-cache/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-cache"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-hash",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "13590265da77f768bda715babddc3b61"
        },
        {
          "alg" : "SHA-1",
          "content" : "66d42164086e51bac3a650e94f6248afefa8c4f1"
        },
        {
          "alg" : "SHA-256",
          "content" : "da5ccbf698a4a43b42c75626e37f01a0b9ec19068c828a70d3944c1358d8b727"
        },
        {
          "alg" : "SHA-512",
          "content" : "21f5f0d67742bc7933e2faf17fbc27ff3e2f88f06e14659a43cbcf7d293b55cbd02addff7a36c6bfa0ff4b595ee729cd1123fd4c4de18e5511f7c1c1e99ef630"
        },
        {
          "alg" : "SHA-384",
          "content" : "92a8ee448beee2edd7e9acffe3d9bf4c2d71750ad911ec304de62d9fdaddfde5e318aa739f5343a110adc3f8b703fdf4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "eecd5a12da488c83d8a79dffc0ea7ffa95807ede7af5fe576b76a8ac7086e3389fedcbcb4df2a24cc74a347f9e8f44bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5c4f59c95ff5f955ab536723f842e269d06227e00f76d541d674a09c80035f6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "afe8cdfdfa5cb24d14d1d699d413c40c44b7d04a64ad09370ce334c8f807fc8ba81999a378d12094c1a9b324af7133dca0379390578ba97e18ffc3ec839800b3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-hash/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-crypto/shiro-crypto-hash"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-core",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3c0a237f859e3d56ff99f4e05d6975d0"
        },
        {
          "alg" : "SHA-1",
          "content" : "9e998389523abde2da3ada387cb4ea924c93c5d9"
        },
        {
          "alg" : "SHA-256",
          "content" : "6f8ecd605ff3dcca7b24df78600733752c7b01d9a6e066513780c682e3006ded"
        },
        {
          "alg" : "SHA-512",
          "content" : "7444b88e1d53448d60193d1abe2ced3872670be9c5a6a17d2889a8a9e85aa07e5f1877ee42e763230930ef32d33ceda3903a0ce2206cb3f72739890dd3b54287"
        },
        {
          "alg" : "SHA-384",
          "content" : "30b6b1d44bf95487569486c6f20bdf35b896c18e5d193069d527dd54cfe254d8e0fcaac4dcdab8dce8f27b61907d23fc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6f2b72884c2883b7a0c7d0d4f68376d6a263032b50fa0bd4f29ba3604aca3f55e9799d816e2c0e45c5eb1860923a4533"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3334898a1308eecb21d64927120c83dac206fd60dd88d1becc16deb0e0d6b4dd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b870a4906a3b7fae7840bed076ee16a702c96123583ba105cf5021bb9e88dac4f9cdb50f4ccf16c4a28e0c6a8fadccd4a9d996ea2305bd6fa2058721c9e7e3ab"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-crypto/shiro-crypto-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.79",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a15076acd41c47c88b7c737dcc0bc4e1"
        },
        {
          "alg" : "SHA-1",
          "content" : "4d8e2732bcee15f1db93df266c3f5b70ce5cac21"
        },
        {
          "alg" : "SHA-256",
          "content" : "0d81ecc3124536b539bce9aa3fe9621b7f84c9cee371b635a5b31c78b79ab1da"
        },
        {
          "alg" : "SHA-512",
          "content" : "27bc54158da8165a55a7edae9fd09980795979cee099e98d81fadb4bd4dce4d5c86b8a635d1e892e286676d23b6ae5961a762fadf3a864513c8e0c6dbbdefd3a"
        },
        {
          "alg" : "SHA-384",
          "content" : "cc975f402d49b90b4466a0e38ed7045bcee1c6c54b58d73ce8f5c29de4edeffd5567e89ad0a62a386d411ab8fcf406d3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1e6f2a0da0e030954d1a9198cb2b10c4bd8eba7db8952d6945e506c4f91c3ea7af759a54a22f6638da9605faecf2f8a2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7aae506428b374039cdf1a9bced319a3cef1439a9a307135256c14e0400c35d1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce21f6e8a088a8d7e31106f10771abcfa7faf4ac6ab5c31adc96fec0ab5cf5cd43f0eebc4ca3b2c4894d364e0502a4b8bccdbcff61c2628e3d70d32e11c94ac6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/java.html"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro.crypto",
      "name" : "shiro-hashes-argon2",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b48028765e47bb0e4079366333009b75"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1d909528cb7f3f535d6e6515c3b5fa334bda2d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "6e2a5833b6063954cf3917bfe4b28d17a532e86e115542c607b7059719085531"
        },
        {
          "alg" : "SHA-512",
          "content" : "ac3352135689d224e683e12e8990553886caad3e9d672c24f27258bf0c5554e8ee6347dd1e6333de4b12ae24644d8c0f2ff84416483d6552882437e09cac614c"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c3c0765299f2de6718a8126710b280ad3cf7bc172dfb351ae138dc332cba6b233813f4ab7a66c0a5a829c360c05651f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "242cfdd328d9260b3e43d37588c2b5f7d401fe4c856284676d94d2a205b16621173cc7e2b1ab42df033c7dfb4b171622"
        },
        {
          "alg" : "SHA3-256",
          "content" : "92a3d740b98f9f1f700e26ccc0322d5fe6a7f5265679a86c894ff795a2ed905b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0eebb8f9954987a82142047267e1ffc4b40485defaf8a248c1d84afcc0adaa53292577166102d46b57bd4c6e2d79545f99fb73e01b59d06f11d9ca58b0101d38"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro.crypto",
      "name" : "shiro-hashes-bcrypt",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a43202fe6a7c5cb8524e3e61dd95cfe"
        },
        {
          "alg" : "SHA-1",
          "content" : "e2cb55659569da94eb28b31b99d1f13947893158"
        },
        {
          "alg" : "SHA-256",
          "content" : "918d58eb9f9e70532d9e079ef7ba6b2ecb73c35a6d37065a001afe808c4d3ee4"
        },
        {
          "alg" : "SHA-512",
          "content" : "8b60443492ae4ec3cdd7fe8f4b95e970b171f62d7c380d706fbcbd28ae9ad19d9abf30f14ab472ed4e690a627b5c70b46d24cbc6d83f33d6895678633b9cab1d"
        },
        {
          "alg" : "SHA-384",
          "content" : "26cbb63171552eeaf44668fbea51ef70f32e8db13442cd09fbe9ecb2d2be95f03485a9abc03371284c40c3ba11c74137"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4ac9650bfaea309a295f710c0e311644bcaab81b3ebdd8196c002705cdc7548d2d8329c1e32386046564ca8ab7226f6b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f76dab5c4d81d8555fa1f0a6d8d37e0bb6ab674045ee3836e575eb94bf060b78"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6265acf8808fe6569b7a207bcd45ae4a4caade95c70b5cf4e3ccf86f3b6d0e005d722d54c1733158d1567ee4df7d50de9bccb94dbc456ae578b326d92010c05b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-cipher",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "17e3fc8e858e93ed76250861e9b4ac2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "ec999c3209bb95285e2806d4f5b24ec080c78f80"
        },
        {
          "alg" : "SHA-256",
          "content" : "f28b8b02fecd7f426ab4091ca24587674849213885105cc5b764b55a5e8f71dd"
        },
        {
          "alg" : "SHA-512",
          "content" : "79660a2a4f425707829cbbc964846c735442360d2eb95a0781d56dc5bad2bb7b53357687ee71ff903d0e90c41e1249d897f9de3dfef204b9fd347d28c7aa11d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "cee117590887d087df62d8eb16a49644bdcabe9de0a938178c5d008d20666465fe3717959da613699eeccc156350be76"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d2f10c5ce2739a60a2aac790f5e18122fcec31ef0c98b4736ea690c03ca51db9e5963642fa4ed294a650d1eb069fd3b6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6469b17a932ba45f1beda5fbc4a1ba23cbdbb9a63dcd404bcb4bb0e0826cd951"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4d364dfa811d6217425ecfdde0b6fb4c4df32221c766c0e49886171d86c62f7918d97e9808c824b7ac7a67dc79c1dbf885b359f1d9c2db4bd47bd1673c3f847"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-cipher/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-crypto/shiro-crypto-cipher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-config-core",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9520d1f50b52e086075ae35205752034"
        },
        {
          "alg" : "SHA-1",
          "content" : "eb93384569cb86fddddab2617e130461e0413bcb"
        },
        {
          "alg" : "SHA-256",
          "content" : "42647b5635daab5483aba0a5cd7c976b7ea31bb996ccfc7d2ff6ca4fd803c045"
        },
        {
          "alg" : "SHA-512",
          "content" : "3b437aaa7aefadad93cd95d579c02b058eb9823aec9c51480e853188aaf3977679bb93c6b6fd1ea631b7f05a47489d2b29f55fbb5663a9ac10e072dca39d5fcd"
        },
        {
          "alg" : "SHA-384",
          "content" : "85261620e409a9a5b23d186c37539c3dd5dc567b3dae5b8e01292de82b30535533862a37aaf83a117d467b82a93bf9f5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "46a63d6b15d7d9bbdace0294dbef7aa64667e81c84c92cf5eb9787a82b4bfacd7bd2170d997af078bee932c729210f57"
        },
        {
          "alg" : "SHA3-256",
          "content" : "56855edda4eb00683a1d29d5307010c81620e451a9004e7e02c12362bbc6aa82"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e3d79c78758d72799df75382d9726169d9d38967a2c421a6f7fa345029531acd9c2ce9f4472e79edfc88cd0415ebc388d3aa93b5270909f25997a966f08a9356"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-config/shiro-config-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-config/shiro-config-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-config-ogdl",
      "version" : "2.0.2",
      "description" : "Support for Shiro's Object Graph Definition Language (mostly used in Ini configuration) where declared name/value pairs are interpreted to create an object graph",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "956abc33508d7d8985f8b4d29083c81b"
        },
        {
          "alg" : "SHA-1",
          "content" : "c55cff7975d4df2f507f9929f90624be85737703"
        },
        {
          "alg" : "SHA-256",
          "content" : "551c4d7ad4d26cfb15d92d6af3edc95e751e43273ed53361098d6954b9f4d8e9"
        },
        {
          "alg" : "SHA-512",
          "content" : "b6b24d79ef659b09df65e3b5028749467d85eb980d149b3749a2e96489c0a9a8ebe4df9055e068a2dca9e001db3b78276ca761c51973caf5da79f66d7a1c5c0a"
        },
        {
          "alg" : "SHA-384",
          "content" : "650a80837a488ec340d032d9ed57b8e594c0d3059823669451907ca6babc411354764df200aae09c12f1deb67a4614fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5d1eb640c5d10333b0cf2fe2d55213440081fc482184f5aee77fd24210116ef6c1008a276c37bac28c676ccac7cd1f7c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f115ce8c6437b41ed60d3ea5e2269ceecab17145c366aa58d6cc74b72cb5992f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e6f20f1e8aefe224d967640c76a8baa6bac02782301d60d813454f7e93a34962ab4d549cfbd21470f012cd38c10d7367ad5ee6196a63187730a7d3320a5ea222"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-config/shiro-config-ogdl/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-config/shiro-config-ogdl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-event@2.0.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-event",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d9f891580206f72cd87b97ae9df20bce"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7710d29aafa16cb6851b74c4fcb57b6fca6fac1"
        },
        {
          "alg" : "SHA-256",
          "content" : "e2130732e57dc572511878ec38e775c9094fefc5e72859b05a4c1d5572757e0e"
        },
        {
          "alg" : "SHA-512",
          "content" : "8488ce612d589c36ecba35b792c6316deb06359cc4898b339ab58d7ca15d86fb8559cea9951d292470a16da81e0f0e1f5e28e85da545ff89455eeb6a4959bbc8"
        },
        {
          "alg" : "SHA-384",
          "content" : "87f232218283d38c1b884edcd88ccc86f65d941ccda553cadbdfebf231b91c2670dc64142f04e7c83a84ae2d581f6c2f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8d817f677dff91371d9052afe55e5bcc7f0eb6b68995cb3ed51afe38e2cb176f6eebf86f60dcd0fc9796f9f59020c44c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d48c65016136fccedcd7a0d728255f83ed91b3448534ac76f310976081acf243"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a3629d17c01457fa4d64b0fb73036d89abdca90f4ad78101958d034c1b92cd170a63e6eed14ded886abf900a156164343b0984af2ca4954d00659a805f90333d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-event@2.0.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-event/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-event"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-web@2.0.2?classifier=jakarta&type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-web",
      "version" : "2.0.2",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b60835cbf7cc49c6788cded30d38c7cc"
        },
        {
          "alg" : "SHA-1",
          "content" : "944bd9f1bc9fa0ac246daa05acb30e797600106f"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7f5c1e24f88da15b021babbcb98fcb997c406191dc3e3a438f7148438d53c1f"
        },
        {
          "alg" : "SHA-512",
          "content" : "746b690c4ed70b3c311cd17bca760869895668ca1461aad30d99e3b96a352332395e799111d2fbf30fc1ad22ebb188476d0da865408c1bd0380abcfe0be4a99b"
        },
        {
          "alg" : "SHA-384",
          "content" : "e4e331248aa9541cd63854745589e8be1baa685ec7bf6594dfbd470c691e1f293b981e5b48d64ea483a187cbe976c454"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f817b1d9639abf1be11aeb43edbc70da91fe3b9a6176f40e4c6ae19a26a64db85be14e365dc5e9e6d0dab5760fbd6015"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d5d21ea6ac1d1416ded549f633818fd5bb2b82f99e6d03c64933673b93385c7e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a695b32c72eddde6707727d347c1e8bde4b3e8fa7c339d2fbe0e89c734bf72758083688beac74dd088aae31c007f265f3861e9b4ccb845c56581a5173c54bd3"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-web@2.0.2?classifier=jakarta&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-web/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.2/shiro-web"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "publisher" : "OWASP (Open Web-Application Security Project)",
      "group" : "org.owasp.encoder",
      "name" : "encoder",
      "version" : "1.3.1",
      "description" : "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c826f7776c4d03adcbf1a2bceef84627"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757"
        },
        {
          "alg" : "SHA-512",
          "content" : "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
        },
        {
          "alg" : "SHA-384",
          "content" : "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/owasp/owasp-java-encoder/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://github.com/OWASP/owasp-java-encoder/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/owasp/owasp-java-encoder/encoder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.opencsv/opencsv@5.10?type=jar",
      "group" : "com.opencsv",
      "name" : "opencsv",
      "version" : "5.10",
      "description" : "A simple library for reading and writing CSV in Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0250d6b316560f6da1206cd4bd7c6be7"
        },
        {
          "alg" : "SHA-1",
          "content" : "915a31e408dcf4601519fbcf3ce30aef679c4926"
        },
        {
          "alg" : "SHA-256",
          "content" : "e7927eb9a6d4f8a348a520907dbb08da6283a4448abb9bd9ef2f950d7bb950b0"
        },
        {
          "alg" : "SHA-512",
          "content" : "28800c8ccc4d0970cbc21e47274115e5ca9aee5883317de89fae64633b5e2b551978e118458586a5170a0084b12c416ebed07d517d52381370ea9e9b51e0039e"
        },
        {
          "alg" : "SHA-384",
          "content" : "2b9c1c43adf76978e450710ebbb1aae57a4708e613610fc6d77be85d0b3804ff4ddd76785fc7101b23de5bd4278f2e24"
        },
        {
          "alg" : "SHA3-384",
          "content" : "59c7f226dbea81a0dd0cb3dc8a1387ca9fdc4b8c268732d3535df043f1a7ef9898b223f5b06c4ceb5d82698933fe270a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "927b7c6f3842e8d768cc4ff4e9d46f1f0f50dc5d80b7ceaea75933b10d562135"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fb44b879d800044d6677caa23eba4324a55b3e792ba7de013f07d8b5c6716724b837d73494ef35c4e48cf3917a86c54cd297006c032ffcf026e99f46179da815"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.opencsv/opencsv@5.10?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://opencsv.sf.net"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://sourceforge.net/p/opencsv/_list/tickets"
        },
        {
          "type" : "vcs",
          "url" : "https://sourceforge.net/p/opencsv/source/ci/master/tree/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.17.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7730df72b7fdff4a3a32d89a314f826a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-text",
      "version" : "1.13.0",
      "description" : "Apache Commons Text is a set of utility functions and reusable components for the purpose of processing and manipulating text that should be of use in a Java environment.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4b4766452c04316e3ef6ffe3490d6b10"
        },
        {
          "alg" : "SHA-1",
          "content" : "ba2ed5521c491cabf7ecdb57f77922561c2e8958"
        },
        {
          "alg" : "SHA-256",
          "content" : "1e323a501127df78ed0987f345d69d65d0ea7fa3d4fb5b3f84aaeba3a8b20f38"
        },
        {
          "alg" : "SHA-512",
          "content" : "d4fdc5b2f1d3cbe1ed4bec867fad4430a38ae7ce7a3a9815c9839c9b16a2af3b67d92bb663854282e71042e3f391fe35a5de0fc9f0fcfb6ae7becaf725f8bfeb"
        },
        {
          "alg" : "SHA-384",
          "content" : "8c598624f9b44f23f08a92635bf7e275c1c2b4b007a9738c42c268c977725a003b50c04ca1058d23e541c58bd17cd782"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b2d3c238f6e50356d3b9f9647caf15dd43276ed84a3eee2134f9f5f9e26488278bb1634b7a826a29892a7ce88ec97611"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d44ae9baca87e428ae1d14e3418d0963086031ac23020312e4a6206b34bbd219"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5077ff2b3d167c6f40284e99d6fbf54dd1f7150c49619ab5e3a1da1bdb0f6ee2481d5e3851489ff37be6589a9c8fdc0823f5422f1c78ad38d8a539a9d7d7f82e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-text"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/TEXT"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-text.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.10.0",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "35fa2aabe7e5a629012b0c902993fb6a"
        },
        {
          "alg" : "SHA-1",
          "content" : "db165c75534817bf971c530838138011fbe2dca2"
        },
        {
          "alg" : "SHA-256",
          "content" : "b6e8dbf5d4a7fd66edbc7106886909c097dc7e0768ca78cc1055955d6ff877a1"
        },
        {
          "alg" : "SHA-512",
          "content" : "dff9acf4dab4b61932644c4d1f706c50465455526595ec9a5abfefec3a0f07176c43f5490f9ad47f440736d0d25575306c4414aaf6b494dd3e2a053ff727f9ad"
        },
        {
          "alg" : "SHA-384",
          "content" : "cd54e74f79750451949b5e85a80e7b9b8185c89656e283f441b419153eba9d5fa06280c74f9a08335fabe5479bf8ab16"
        },
        {
          "alg" : "SHA3-384",
          "content" : "85feb0b9d082ad98b615274866c99320b4a092566cdac9779da757e0afce724ffb522fdab9968d11e8d7fef4fc981b81"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f4883363ea7e96302d4628b7257fb7b377248325f3f87c7cce6831fe6ae12869"
        },
        {
          "alg" : "SHA3-512",
          "content" : "71bf969a759c0c6a3a706914ca566ecec4644b2fd5d05ab93b107ef67ee5a5e7cc5f7c416366e7d65e58cce3f591a9d679007c8724dfe92aeb19f20de65d3149"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.16",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c077b88c43f9d63f64f9880fdb457efb"
        },
        {
          "alg" : "SHA-1",
          "content" : "9d08badad22f1ac07deac9188ade596472a2bfd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "5744d62c5af556e839ab922c9fa3f737f0a5971e478ba68b2eb5256b2842ec78"
        },
        {
          "alg" : "SHA-512",
          "content" : "5c4c540ac68898e49a126611665bbe47e660591a6aaf9f1d1c342116a2b0f6b5f7225d8072917b1fab0cef4c5ca48c0d1508655ce5ab368d7c27be78b3c75c87"
        },
        {
          "alg" : "SHA-384",
          "content" : "90c2ce65783350a6bf25cf6abe6a4583f7ad9ec8807ee51fe7543c7a6a163ecd5141c29853c3ea35e05c0069e09141f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c65b56e6743867a1de077828446999c0f8de4b47fd56e40f136157735143f462ebb5fc3f6fc02a3db790a81cf823c1bc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c00f9fc1f31f03afa6ad252a7aff15edaee78b2b742bf65a97cdd74f7189120a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9e7c5af053bc0334fe2a4c9c2c6311a55c34b54889a2051c33e97eb9edabf3ea1064a017de4b510a54f77720c9a24ffdb832218bc92b4db6fc3b9cf972f268dc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.16",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c8de8f5d740584cb24b5652cfba8b3c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "0172931663a09a1fa515567af5fbef00897d3c04"
        },
        {
          "alg" : "SHA-256",
          "content" : "a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a"
        },
        {
          "alg" : "SHA-512",
          "content" : "91c2e7b30f24649bb3edfc7f138c2b7dc715ad36963af159defb80a71205eb7e4c5bcc80d779ef993b567a56724064f190c93985f32665a8df85198a03a2f1bb"
        },
        {
          "alg" : "SHA-384",
          "content" : "ed0cc7ad67343b9fe4df03ea534025bf9d90c112b33cd8920f29890d923c349b69820c9c42b9e8882047af848b74f99d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "331ac707cfa4b2bda44deffce7d2a640abb9ae12968cb1ac4879ba1b45542e3d3ce1016c812ff1f2449336bc7ea6bebb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3f68204951bb4baedc34fdd7194d0801042268aba0c58ac5d760779510743fbb"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d7a2f7359e7b2cd6ae3650d28352bf8789acf5855a3596a3be2a236a94931abf8bacf0d6a457afa43164be53abb19cc223ef4f030822a3295c036c078527e361"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.beust/jcommander@1.82?type=jar",
      "group" : "com.beust",
      "name" : "jcommander",
      "version" : "1.82",
      "description" : "Command line parsing library for Java",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c350dc0db8aa038e6bbaf0050720d69c"
        },
        {
          "alg" : "SHA-1",
          "content" : "0a7c5fef184d238065de38f81bbc6ee50cca2e21"
        },
        {
          "alg" : "SHA-256",
          "content" : "deeac157c8de6822878d85d0c7bc8467a19cc8484d37788f7804f039dde280b1"
        },
        {
          "alg" : "SHA-512",
          "content" : "72c9beb5d282ecdebadbd595c4f05710599328e48432dc196a261d8973ec767d52038e5bd26e7c0b78b85b4455687d59f9d0a367221e848e39c72f2f583baf26"
        },
        {
          "alg" : "SHA-384",
          "content" : "4c1c536205e57f4ee6e27bdbeb809ce4b9e0c8273d678b06a8178660aca4704676197f70c28399886fcad70cf1bb8cdf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fe46acbe164c85af46002f3e76e5a2fe1a134cf0a9f0471890965ebd388b860e1e8469d1fa39fbfdfa9de718be5eb8ec"
        },
        {
          "alg" : "SHA3-256",
          "content" : "78737587181801bb459d4f09a1d2fba34c9bca274884a262cf9bc880fdd52c3d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9e0926e4e04de682de15a780422a5e7c31e8c5eecd6372122ba78a8e70c5ac8156b6b9b4e714ff280306d60d3dbc9d5b915fa8d11b472caa0080da0ba962a79a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.beust/jcommander@1.82?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jcommander.org"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/cbeust/jcommander/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/cbeust/jcommander"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jul-to-slf4j",
      "version" : "2.0.16",
      "description" : "JUL to SLF4J bridge",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "410ad2f2230e0150216d86e12a4af995"
        },
        {
          "alg" : "SHA-1",
          "content" : "6d57da3e961daac65bcca0dd3def6cd11e48a24a"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f2ec396ea29c9a440890d1f09fdb82fdd574b47b298435764235451c193861d"
        },
        {
          "alg" : "SHA-512",
          "content" : "0c4c1f62bdaa29e7b6fb41fdd62e398fb92e74e64ab36788be930468947ec94821e97cbc820159ec792f9be4cd3840ce60731be2c7437a734a458cbd2e412184"
        },
        {
          "alg" : "SHA-384",
          "content" : "3216d143cb8efa77b87e54dc4f9e77f256b21d1c9525f45a26177a7ad264c32d229cf65bf67cf4bcab546663f41e95f4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8c551dfa80d6dc591b6376024362884625f259c8ddc4258190386e90a7b2141b40e2ed42b4ab6be93cbb1d81bbf0ffc9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ec1e9fbe3de9345a41059a3f45486a24948fc041d86e5455106b06501a6a254e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e5912c03ec7a44feae7aff8d56221572be431a1c1b08407090d4187d64c4c8c2fd25f6d4d441005f95410637377f3c0fdee683c86d83a3c78918b3b84267caaf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jul-to-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.24.3",
      "description" : "SLF4J 2 provider (binding) for the Apache Log4j API. It forwards SLF4J 2 calls to the Log4j API. This effectively allows using Log4j as an implementation of SLF4J 2. (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ec2df0e6ab3e63e2d7b043bd0478c3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3bda2dc612bfc780ad06c5acf5e0ffd55b770e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdaac22e40ec30c4096e1ebe8c454c8826c0d1c378d7db5d7b3ad166354b0bd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c837d1724dc85479ec0eabfd8adef32d5bc3e9ba94c058eac6904894c9d3dff4f85762287159b0ae9f1e314e64861414de36a0d6e314e2d3b7aef8bedbd37b2b"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c4eb0ae56d844b202546868a8eec8529647d7b38967234ed79a794cc4b8740bf3264a2958d5db7111de588efd2dfc37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "246549536ddbbd348a1f37d497f9f7c684b53311008ee3cec2705e86e35afa274774be4f0da966923ed32f77a3e9f4e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "213a0e3d560934abdfa725581e5b7f49155e95328ad67be9f49afa6275592370"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81706150cf1a117569e4bdd8061964be4bf3042cdabd7bc24b5f524d212d4fca69c6952a8bafa41f973858ba9161a6bc89bb46880243c727b5f70a44b6b77a51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.3",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d89516699543c5c21be87ee1760695f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02c125db8b6d295adf72ae6e71af5d83bce2370"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.3",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f52ab7782fdd1349bd872b5dcf48bed"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6a261243ca767c7f38fd4b542bcde626c8894e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a"
        },
        {
          "alg" : "SHA-512",
          "content" : "61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-geosparql@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-geosparql@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-fuseki-main@5.3.0?type=jar",
        "pkg:maven/com.opencsv/opencsv@5.10?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.beust/jcommander@1.82?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-geosparql@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar",
        "pkg:maven/org.apache.sis.core/sis-referencing@1.4?type=jar",
        "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
        "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
        "pkg:maven/org.locationtech.jts/jts-core@1.20.0?type=jar",
        "pkg:maven/org.locationtech.jts.io/jts-io-common@1.20.0?type=jar",
        "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-core@5.3.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar",
        "pkg:maven/com.apicatalog/titanium-json-ld@1.4.1?type=jar",
        "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar",
        "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-core@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-iri3986@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-iri@5.3.0?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-base@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
        "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.17.2?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.1.8?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-iri3986@5.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-iri@5.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.11.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.27.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.apicatalog/titanium-json-ld@1.4.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.29.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.sis.core/sis-referencing@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/org.apache.sis.core/sis-metadata@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.activation/jakarta.activation-api@2.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.sis.core/sis-metadata@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@4.0.2?type=jar",
        "pkg:maven/org.apache.sis.core/sis-utility@1.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.sis.core/sis-utility@1.4?type=jar",
      "dependsOn" : [
        "pkg:maven/org.opengis/geoapi@3.0.2?type=jar",
        "pkg:maven/javax.measure/unit-api@2.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.opengis/geoapi@3.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.measure/unit-api@2.1.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.measure/unit-api@2.1.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/javax.xml.bind/jaxb-api@2.3.1?type=jar",
      "dependsOn" : [
        "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/javax.activation/javax.activation-api@1.2.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jul-to-slf4j@2.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.locationtech.jts/jts-core@1.20.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.locationtech.jts.io/jts-io-common@1.20.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
        "pkg:maven/org.locationtech.jts/jts-core@1.20.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.googlecode.json-simple/json-simple@1.1.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.jdom/jdom2@2.0.6.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-fuseki-core@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-fuseki-access@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-cmds@5.3.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.16?type=jar",
        "pkg:maven/org.apache.shiro/shiro-core@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-web@2.0.2?classifier=jakarta&type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-rdfpatch@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shacl@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shex@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb1@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb2@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-rdfconnection@5.3.0?type=jar",
        "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.14.3?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-shacl@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-shex@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-tdb1@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-tdb2@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-storage@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-transaction@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-dboe-index@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-base@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-base@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-index@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-base@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-core@1.14.3?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-commons@1.14.3?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.14.3?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-commons@1.14.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-observation@1.14.3?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-commons@1.14.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.3?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-core@1.14.3?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-fuseki-core@5.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-cmds@5.3.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-core@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-arq@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-rdfpatch@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shacl@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shex@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb1@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb2@5.3.0?type=jar",
        "pkg:maven/org.apache.jena/jena-rdfconnection@5.3.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.16?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.16?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.16?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-core@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-cache@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-core@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-event@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.2?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.79?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-core@2.0.2?type=jar",
        "pkg:maven/org.apache.shiro/shiro-event@2.0.2?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.10.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-event@2.0.2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-web@2.0.2?classifier=jakarta&type=jar",
      "dependsOn" : [
        "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.opencsv/opencsv@5.10?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.10.0?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-text@1.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.beust/jcommander@1.82?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.16?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"
      ]
    }
  ]
}