{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.6",
  "serialNumber" : "urn:uuid:d1edbdd8-34b1-3fbb-81c7-2111d2adf412",
  "version" : 1,
  "metadata" : {
    "lifecycles" : [
      {
        "phase" : "build"
      }
    ],
    "tools" : {
      "components" : [
        {
          "type" : "library",
          "author" : "OWASP Foundation",
          "group" : "org.cyclonedx",
          "name" : "cyclonedx-maven-plugin",
          "version" : "2.9.1",
          "description" : "CycloneDX Maven plugin",
          "hashes" : [
            {
              "alg" : "MD5",
              "content" : "9c7a565cf28cce58557d0c621c5ea4b1"
            },
            {
              "alg" : "SHA-1",
              "content" : "be882d5a22050bfa9d19090b1420c188617d0e1c"
            },
            {
              "alg" : "SHA-256",
              "content" : "698e0f37184a5b28c245c4065fd036dfce253b52f82fbb7113d81d36326cc249"
            },
            {
              "alg" : "SHA-512",
              "content" : "c0f0b11026858166f872a2eb54719492e5cecaa0bc9cd6b30b3ecb4a174eed220f4a1b5829d18d6734128e778d3cb3db7ffed177c92866133129cb29081814a0"
            },
            {
              "alg" : "SHA-384",
              "content" : "d80964707dfe5caca8c70521d5066f57589304c0a657e6fbc7c0614ea0fc7b3b3dbe7778361eee0f54ba111e9cb0ffcb"
            },
            {
              "alg" : "SHA3-384",
              "content" : "80bc3a275d9514bc457461ff52a72add8c7ecbbc01d8912efce57139016c544ee776981851be0a58fa977ab4221f703f"
            },
            {
              "alg" : "SHA3-256",
              "content" : "142317d6f245390f4fd2d0c100b16281b8dfc5c0c2cff86943bdcc97039cb699"
            },
            {
              "alg" : "SHA3-512",
              "content" : "af0fb9137c90b65d1a07f72e4d51ae509956cdb8800f35c961b037cdda1fe4a14ce3b496cef71ba85f1621affcfe29cd42704ae4191ff0b090a9602087c8997b"
            }
          ]
        }
      ]
    },
    "component" : {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.4.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-main",
      "version" : "5.4.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-main/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-main"
        }
      ]
    },
    "properties" : [
      {
        "name" : "maven.goal",
        "value" : "makeBom"
      },
      {
        "name" : "maven.scopes",
        "value" : "compile,provided,runtime,system"
      },
      {
        "name" : "cdx:reproducible",
        "value" : "enabled"
      }
    ]
  },
  "components" : [
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.4.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-core",
      "version" : "5.4.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "98c9d5c3c830a06bec9fc604d89faff8"
        },
        {
          "alg" : "SHA-1",
          "content" : "58a50c1a293bb2a672bc7c672fcb51149aa718be"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c0ff00f06cccdb0019b5da84f85a9b50c50be9c8601d53e6d4e112d43f328c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4b5cdbebc05916e26a695b827a92da1c0bcdae6c38151e2eef54e07eccc6af3f871eb48be5e2f3e8acfe085f86c3b2129d868ebf11a19900bcaf59fdf437b358"
        },
        {
          "alg" : "SHA-384",
          "content" : "900c87981e1f4d97d9528ff4186b68b5f8ebf46696facf2fb320dc08db1241f533f9cca0452e7fa0d6753add12b71446"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cae354115231be58a3ecff5231212b5cf0f1110080d838d05694eacbca35c83a90f638be61461163139ebeb16cfd499d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "23601e974e1f52486a9c1a15a8084df41d127e6a43b21300f2a13cdfe5aaaf7e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b4929d89074c3cb7fd195ac144d6c5163dd3f57c703d9c7f870b20e66b6518ed713ab9a0882ebc5051e5950add6777c2000f3ddec3b521863f5d85448064e8ca"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-rdfpatch",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "eec348eea9667ebae7fd19f9fcd33841"
        },
        {
          "alg" : "SHA-1",
          "content" : "b9cf3db68742f57890553c104af1945bec48c414"
        },
        {
          "alg" : "SHA-256",
          "content" : "4158913010ebcaa6027513e68b4f2cb50a6bdb0a61720054a6b7318e9043cf03"
        },
        {
          "alg" : "SHA-512",
          "content" : "aa41637ea01e3f67aa404146ef655dd32fa39a9619af5730ade0c4d27bb46fe9a6f3197be0c6eb7df8ff5bc60ff7ae026581b385c6d8e5b502f1320905af92fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "313dca92336d20bc6787b7c60f6a634df05887d395c4d5fba7a298a9a38e9cfe67308d097f4e7af8f3befcb8894d67ba"
        },
        {
          "alg" : "SHA3-384",
          "content" : "631161bfdec7894a57ef8fc4c9eb7f1fa4f387c26d840331583bba65dc20cb0505964e7a66555165aef54dde14f2cc03"
        },
        {
          "alg" : "SHA3-256",
          "content" : "e22ee8046178dfc1ea839b3dd0be5159abc9fddbcf5961f4656f40df3b709816"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c45231da01ebaf2877ae9fcf9961b515ef82e60c742d2cb0fe64abba1b4b51878831a30cfc927d84a6fb2575343a79fc8487758adbfb52e4194b028aa9480ec8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-rdfpatch/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-rdfpatch"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-shacl@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-shacl",
      "version" : "5.4.0",
      "description" : "SHACL engine for Apache Jena",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6ef4a600209c07de27e6f0fe07910dcc"
        },
        {
          "alg" : "SHA-1",
          "content" : "d8e40e059ea9abf349c054b075336698e5897118"
        },
        {
          "alg" : "SHA-256",
          "content" : "d1a9c773a94f0189d66153b2acfc89d6dab8c71d4494642f9602954637ef3b11"
        },
        {
          "alg" : "SHA-512",
          "content" : "b8584edf6e50de3daafcc00771ce35fe590db6268793d6cd4904fd6d64ff8f9ac4efe40598ac4081b7447fad101decad6d2533ffbf44383a6801cbec3f7f83b9"
        },
        {
          "alg" : "SHA-384",
          "content" : "178fc1c538222b929de2a4999c5bfe9f88ac8c0a1a6e7a088e7d5c62f6ceb5c60122ed9bfae07aa156b5ad9ccabd5538"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b8f2ba318f1dec93fb55ffb8d15688e475c9ed9764c94bfbe77b40bb1e4a937999e77b8e58612f502ba89f04ba2fc4e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a0ff2b578bf282479eb72a309c0a41c7ebfbef67b00c934def7dd47fb8a21dc6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc12b40e2d342ade8cef6b4827293a093bcc323f99719573ddccc24d806422b602899d26645fbd910d8a381223657c6099230e0f2b5af3ad28092cd1fecc122c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-shacl@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-shacl/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-shacl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-shex@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-shex",
      "version" : "5.4.0",
      "description" : "ShEx",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d8f100813bbd7750d73c9a65d9d6a56"
        },
        {
          "alg" : "SHA-1",
          "content" : "d5460512794f68c5d804ba7b020317eff1b0daec"
        },
        {
          "alg" : "SHA-256",
          "content" : "8ecdaef23f738d2216741529db1f5fdc1bad77f3f773b087967aeff8b3fb6405"
        },
        {
          "alg" : "SHA-512",
          "content" : "756bda9655458965299332e72a7f83b6a5b5bea008fa4742b18fca632556d00032607e2b83074ee1afe4d0db53def854156f920e305d0c634847e6b2ebb71cb0"
        },
        {
          "alg" : "SHA-384",
          "content" : "ffe84255a49bb99b361e254ee60ca0417f984c1314ea82390d3b2fc705613ad7c46612e4324f3371e949831da19b15a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "77eb694804e56b6a8732cbe183aa61a97b1ebd753f281e04404a64711c93cc620ea888a475bfe69e454d7f982699434c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a6b643bd02b43c53b3cb43265873ce67831d50f8bf0c7e4eb0e1f788c3373c8c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8fecc3e25687d3df8fdd66fc6cbfb56ae49e9a989ad55bf5a189f5bbbd13d088365a34fa00122049e23f89c83423c8a9c171bd57aa03c3922affe3557f0c9fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-shex@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-shex/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-shex"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-tdb1@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-tdb1",
      "version" : "5.4.0",
      "description" : "TDB is a storage subsystem for Jena and ARQ, it is a native triple store providing persistent storage of triples/quads.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6dc175f192af8cccbe1b7215bf46328f"
        },
        {
          "alg" : "SHA-1",
          "content" : "3c904c46e2badb9563929aba3e8b5a841731f195"
        },
        {
          "alg" : "SHA-256",
          "content" : "4a4220f73aa7694117cde4682c1cfa6b42545272cb1a3124f16b8df56e83beed"
        },
        {
          "alg" : "SHA-512",
          "content" : "6382a60eee8cf0d75890706e6d87367980d10d84ba5b5765d2bb02969273f5aa076bfcf64b08fa9d6e1ef9c19e0c3e6bc61f40a41af4cceeb08d9bf9060e73fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "ec8f48d8478ea71e03600ed63f65f48c459cf8fde31eed979634c2e0136aa2b0fd62f64928131499f1f408e67b1726c2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a59aaca33cf83d1cbb63c5996ec59308328c7d22b4de26646869b88b87d9022f577945258cbb43656ff4b6033cd1e012"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0fd84bf9ec14565216ddb2d9755f9a3883062ae931d3e0677f67374c1a0a3c95"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cdb70e987a3c30d4e602e40d4680a01bd0f530411a34a53246e64541de59da6fc8b9990b235497248338544e3e0fb670cfa97836c2c51e905846a96cf798d1fe"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-tdb1@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-tdb1/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-tdb1"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-tdb2@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-tdb2",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d8d2025b90c77948eda5a199ddf38ffe"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f7ca9596e22227700fb909a55fe1d2759ae79e2"
        },
        {
          "alg" : "SHA-256",
          "content" : "5e2bbd065323b4c4ea1cbc34edce51bbd00f21746f0b7294728c01225522a01a"
        },
        {
          "alg" : "SHA-512",
          "content" : "7b7d5dc09132831074701cd1350fae2fec5517d35fc1c67abfed3dc2354a26c0c54c21058dad3e9aeb84ab04537f147768d82d86cf18577b25bf6d4f374991c5"
        },
        {
          "alg" : "SHA-384",
          "content" : "e29c23be8b68a6fe8f3508ee3e709e1aa373c84bcdc7a1e8215912b01264fc96af8bb9f0d0b087038071a639b709020f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "17e3f17ebda50ee0b36266b95ecbadc9c0f5357eeb75edc860e336c44d7894abbd91289b38cc1d097c915406e9d0de4a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "124a56e59c7e5624f5b59833bb449605549702bac53e400a1328a6bb0659e23e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3f69d15347c1ef6b0017e834e4ad58399be8c70eb0af8dfcf55ab5148a7a9df7121d267e49bbf1ecf1a9264e755bf919ca9a15a75d8405f7c1493bdd43348e71"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-tdb2@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-tdb2/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-tdb2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-storage",
      "version" : "5.4.0",
      "description" : "Triplestore database storage",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6da1062b69e4acc340a3d7b21a7f80b3"
        },
        {
          "alg" : "SHA-1",
          "content" : "c827cb83805142860ce77aa8dcc3e1382c3e1dac"
        },
        {
          "alg" : "SHA-256",
          "content" : "1a84cff13dab533d315ab9e32a074f69d1864cf3f5f1b3d494396db882795b31"
        },
        {
          "alg" : "SHA-512",
          "content" : "faae6c89063e8d53bb4558b69ce45d54df53fc4f26e39c859c8bcbb027a3adbff401032968f7f4015551e97b60ae7ba9195dabfdbb596ebe23b2166f52a3704a"
        },
        {
          "alg" : "SHA-384",
          "content" : "3068b561e4f0bd5933284cd6b9e6764536d4acb2d8c52ed19ca14d892425bded123348899d3cfaa3f3f22389f4f28fac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e467e730a771e529394487d2ac452fb82ff9e58c4ae63cd6f38468e51cf934b1f5fc3f91eaebaa5107471ca4715550a0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "52fbaa87fb56929e38873912023f49f4dde2a5935f468cb553f4892a3e302907"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b7e1a40cdb2af40de4887c165007ab2e31fd4c84c26830971cec99f0731f791d4c185ef2a9063c2431fb39711ed9140035a0cc7b43ea43ab015e1d269103eb4e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-storage/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-storage"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-trans-data",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7b962871ca297b5db2533fcee273e2ca"
        },
        {
          "alg" : "SHA-1",
          "content" : "d88a4d37fe55eb7bda0031a0a52d97d3d91c88d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "ab1750e5613aa9dec3755430260775aa69dbc6ab7d225a7e234b56d9dba4a68a"
        },
        {
          "alg" : "SHA-512",
          "content" : "56205d9d988f5bb292a31d6303be9bd89b54ddb9465504f1e9217981b8afcdf4bcf1e733c0d1976c53e3dc8580fbe3765d064881aa4f865ffe6e8e9ff090635f"
        },
        {
          "alg" : "SHA-384",
          "content" : "7234b195b2d0c11407532b29c67f190fc4f954c9fac77e33e50dc2ef51a8155d37a745be8866aefeadac306abcc4e25d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "1cb26989af5711b892550b6c8ed735a512dbe976d69826d8909156a3131b2bac982d66a0c17f4d17f2b5f51768086a12"
        },
        {
          "alg" : "SHA3-256",
          "content" : "8c4efb064be40e00f854ea5c6eef31f4e3fd7b83b53ccd8d5b6dee1908f3f33a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8db4ea868a7988bab6a8fc485532dd3c9c73aa9804beeeb2374ba93f9c7aff146b1ac6bc593c5b5ad980baefa4b2f53b3dcbf48c24fe13bb31459cdc7859e3bf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-trans-data/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-trans-data"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-transaction",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3796e55cb5fdb0bedaaf34dcb91dfda2"
        },
        {
          "alg" : "SHA-1",
          "content" : "1bfba69394ee762f1a93c9ca30777833c0013603"
        },
        {
          "alg" : "SHA-256",
          "content" : "bc12e3fa653b73f18d8e3ec3a6676c07ad70d8c0bb89820a89746995626b1ff6"
        },
        {
          "alg" : "SHA-512",
          "content" : "1d8aa4458edd632efef80b89c9804f6c9cce139cdc23e76c176871ba3cbed719a236d9ea652e4de7b3d5edbe28522eacd0b7c69dd50fe6745883e9a0a47543b8"
        },
        {
          "alg" : "SHA-384",
          "content" : "1d284b773bc1cc4a1d1116a38b07e7fe7d4fc6b47d0b6a8c4ad393be03a398ca32c22828abf1fc044023fe5fdc70465a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ef527d1103d38a523303f84c217a5a7b3dd8b52b51aa7d2550677b2ebcd7f7ab96463c0b33b61b58e45dcdf62eca977"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b13b8c4b3c235d09112a4734489e1d2aa9e145cc4011f8c131c2317880eaff4e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "d8badf304038cb938a9238d2f9c5200ea4bbc5795b5a43ee3a7b9fdf13528e98db5c1afe2ae37065bb3a89000384e54b0c821ace2b9cab1dff2968d8322b17d6"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-transaction/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-transaction"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-base@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-base",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b12aeeb5f500b4d4ddeebe15778d52ee"
        },
        {
          "alg" : "SHA-1",
          "content" : "8651aac7759cf49222d227d57c21f69e0659d5ca"
        },
        {
          "alg" : "SHA-256",
          "content" : "07a96e208a85e3bc9e57c59686c0ca51ffac628e527c81803dcd7d3414d01896"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5dfaba1eb8ce51b0066ab7f49d759dce12578e9e9e496c92f1c68e43549f56b891a7aadf9e6669f7baa037b4dc51b964136b6409e1a5a6b49cfd6847b66bf1b"
        },
        {
          "alg" : "SHA-384",
          "content" : "021481253b4239d5867ffdc48b5d9c5f2ec04f2ccee5aaba80fd16f204b48ffd00d6d1957a1bf607b27a0c0dfc6d8951"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0161d007f75eea8b9d5b21eef02866009ee9b798ce3c15fb86e7cfba847641ba21c7e3aaff20943acb7097f36bea39a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "70a4212d9c151f711965c5411ff3555bead779d1596441d6f2a68d21b72034a1"
        },
        {
          "alg" : "SHA3-512",
          "content" : "94cf9ab4e0bebd543aafcfae53546a0002297d8befc9d1224c65298e7b8bc569029d1bb701385b03387c8907a9d7ae12a76276323225213e12362588d416cf3c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-base@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-base/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-base"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-dboe-index@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-dboe-index",
      "version" : "5.4.0",
      "description" : "The Apache Software Foundation provides support for the Apache community of open-source software projects. The Apache projects are characterized by a collaborative, consensus based development process, an open and pragmatic software license, and a desire to create high quality software that leads the way in its field. We consider ourselves not simply a group of projects sharing a server, but rather a community of developers and users.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "858e9c08a0ea8b890f5d36149c9e6884"
        },
        {
          "alg" : "SHA-1",
          "content" : "4364a7ff61739119d1187d602ba4538babd663cb"
        },
        {
          "alg" : "SHA-256",
          "content" : "01763dddaa1996c66f056a743d00070e9f010e2f444e4caf6acd99c955f31248"
        },
        {
          "alg" : "SHA-512",
          "content" : "9679ace1d8bad21ca9db433e915d774337fbd8d91c24f2a6aca98951dfab856906e3b303776faff0edaa523646bec80bf73b898abb4f2cdca8088695511d1763"
        },
        {
          "alg" : "SHA-384",
          "content" : "2d930302101c4a9a7650f258521ad30ea198de9e6a796805f5fe7368564beefe39c090980d56cdea7c8dd4b7fc0fa427"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9046fbc2724e01e90f5f9e33b12d73091d5169769903ca1e472bd968477b3e1737cb80e104b42830cbfa17f137ff89f7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2ecc7621656a76da0b2b4522fa5bfedb02effba96f20f720342d79c2a5d5db0a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "475722cf3474b6630c9a3c92a6c3842062225aa4469a177922d0a3e6130b3f725c9ba37245d08d3b5de0658255ed95c65b20ef4f4b34afb98a0c77f940ead5c0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-dboe-index@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-dboe-index/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-db/jena-dboe-index"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-rdfconnection",
      "version" : "5.4.0",
      "description" : "RDF Connection",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "becc8046e778015849f6d8a1d61645b5"
        },
        {
          "alg" : "SHA-1",
          "content" : "d7e139077e4b056566e93f70fb482fc1325de8b5"
        },
        {
          "alg" : "SHA-256",
          "content" : "460adc8d5a695f0c3cbb4d0e7b4231e7586494e86132db563f211f001430c0ee"
        },
        {
          "alg" : "SHA-512",
          "content" : "6bcf22ca0424c68dcbea1cd033f77e6f33a996389d330864671ccc2d46f498efeb4659fb9c5095b942e1faafe6a2c38726a14948d7b7db9723fb16be985b88fd"
        },
        {
          "alg" : "SHA-384",
          "content" : "01d2056bada7b087662b636cb137cb8fcfb0a2e917483024ff773163477a7aa00fd28b602c6a0eb9cc8e16f0badc9f1a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4d7c8c6c819ec421b3ddfde0213e81f6365468b813f74b0958722c60dfc44f47bd99c5975e4f4f2dcfc868a78deab276"
        },
        {
          "alg" : "SHA3-256",
          "content" : "21e006ab388bd2785ebf5a271fd32f15985147cf09c41c87f8188bc8f93fb081"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c4b377cc62cf0deb864aa3bc0bd1d85c0efc11dcba5b6045d6299c940c04108d14700b2591f695b92a130569eb8971795d5948506b4595bc5cbf82d1cc0a552c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-rdfconnection/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-rdfconnection"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-fileupload2-jakarta-servlet6",
      "version" : "2.0.0-M2",
      "description" : "The Apache Commons FileUpload Jakarta component provides a simple yet flexible means of adding support for multipart file upload functionality to Jakarta servlets and web applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90a1857034b763783a49294f53626919"
        },
        {
          "alg" : "SHA-1",
          "content" : "de8ac10c2fcf051714db8c23754cce58eacdcdb6"
        },
        {
          "alg" : "SHA-256",
          "content" : "c045806fa350a9280f743757d7aeeec5c236a2f47ea4dc6a4622a4638c58acda"
        },
        {
          "alg" : "SHA-512",
          "content" : "b13157d90c56b1ed53b4cbcbe7d6900ec0a1c83bed50329fdfef448462581e5334853344b9248a8c510a57a7f47a023cce0fd213395a9514160a045aad3981a6"
        },
        {
          "alg" : "SHA-384",
          "content" : "7530dc53cee22ea17b29fb4af75dc042c58e2427ffdc14ecfb539d11c64eebd2ab919bbb2a48b47ea2a46bd820482a27"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a3839efcb95d4129ab7bcea0ca0629a49650d7e61cf0c6e1b9d2ac322b1dc628a548e540d6b71fc6da7ecb6e65487cd6"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6f88ff35205e667922583ee60df617d80bb65fa803d48807f9ede89481376a96"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2bf725d87ea7233de96124bb96acd10581320d70348a3367e366a6d5f252aec05205d3f23895a6cf98ba899393d110dac3cfe40f090b62b6ea458c4893ec84f5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-jakarta-servlet6/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-jakarta-servlet6"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-fileupload2-core",
      "version" : "2.0.0-M2",
      "description" : "The Apache Commons FileUpload Core component provides the framework for a simple yet flexible means of adding support for multipart file upload functionality to servlets, portlets, and web applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6180d94509d26d293bd2d04389156e4b"
        },
        {
          "alg" : "SHA-1",
          "content" : "5b16aec91c2e0b0e6052bff9795045c2704f6ca7"
        },
        {
          "alg" : "SHA-256",
          "content" : "85f249414c2d34349442447b7ee36fc6be55eef1c571a73f8aebaaf81ec74551"
        },
        {
          "alg" : "SHA-512",
          "content" : "b15fe7bb86110c96e8effca97b3de44191cb31aa50aec254cf171e5d714b60686936759336df25c248bbcdfce9c2e56561f03620770b626977a47a2d5ea16b47"
        },
        {
          "alg" : "SHA-384",
          "content" : "f57f0116068774f1eed99b52dfb2d3058cf82320d34c78583dabf97f82cf460a7ec3c92b7681031dc8a0bfdc755a09ce"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e801aef99ec3ad39e963d29a5dd1ea44441fa7cd2547dae46330240c10fbd6c3df41507a4820ecff3a844bdca4eafd5d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "29c0d73e1592877be88e39659d1d2c890ceac176c96734ce792f61463c832929"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fe1ce1d5d4104de16b24cd043bf07c7eb958cb5cf9118b462d5c901763b430e1bc14e459fb3d20e1034227633215d058cca383afed12ec565c66cb5b04e88268"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-fileupload/commons-fileupload2-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/FILEUPLOAD"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-fileupload.git/commons-fileupload2-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-io",
      "name" : "commons-io",
      "version" : "2.19.0",
      "description" : "The Apache Commons IO library contains utility classes, stream implementations, file filters, file comparators, endian transformation classes, and much more.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3d1fd45f9d2a247c1d05ab1e98c07160"
        },
        {
          "alg" : "SHA-1",
          "content" : "1f8d4a99ba72b77aa69101175efc79b0c7dcdd7e"
        },
        {
          "alg" : "SHA-256",
          "content" : "824268919b4b62f9f40f08c54381de5993b078f58667e332d17348ae019d72b9"
        },
        {
          "alg" : "SHA-512",
          "content" : "98ad3cb92c31b51461c44d06c223a425c3ee8254ad3ddfdc3724e7d14444d2eeac3b054f70be5d4500268f712c1f08779fd5e4360437b4a883c406c0dc3a2c7c"
        },
        {
          "alg" : "SHA-384",
          "content" : "b3a8950070de2372be3c05444c203a13e0727bd5ef8c446b7c731dce37d3622509b93a7ffedac2a81b707b73c73bc8d1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9243e8e5354232583e1a269592a4f19e4ee4dc681cf942c10a146be1e4036bcd71bd3f59df78f1916e20c03d7d9bcfd0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "b9994550c1fe3140f52b9e2e663f2a4ad1ccc6ca4f19fd3626bfc689ae2f4a6d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "e0f4331c5e19afe2d23470066d6d870ac16fdb9b5892cc79d84cfc987d486e28912e9caa3f77fdf1a5de88ae3f8b2e439a5d5ecbf042dcf7c7bca8c89f3d5f92"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-io/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/IO"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-io.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "jakarta.servlet",
      "name" : "jakarta.servlet-api",
      "version" : "6.1.0",
      "description" : "Eclipse Enterprise for Java (EE4J) is an open source initiative to create standard APIs, implementations of those APIs, and technology compatibility kits for Java runtimes that enable development, deployment, and management of server-side and cloud-native applications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "314c930b3e40ac1abc3529c7c9942f09"
        },
        {
          "alg" : "SHA-1",
          "content" : "1169a246913fe3823782af7943e7a103634867c5"
        },
        {
          "alg" : "SHA-256",
          "content" : "8a31f465f3593bf2351531a5c952014eb839da96a605b5825b93dd54714c48c4"
        },
        {
          "alg" : "SHA-512",
          "content" : "8651fc14b79e284fe29dff5b2cadbf6748615ececde798c42687472f4f6fd1f80ee05ec53794021c62a11abed0c0170bb08b28d3f9cd7f562eb320bc9870ddec"
        },
        {
          "alg" : "SHA-384",
          "content" : "48b2a26351619286ffe41d25e5e61cbc0eb8a5a648a205d0f8db48178278cb16850469fe8dbc219aee0ee37f4081c248"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2047f0b88a12619fb3f07a98048fc405e9cec4ddee6af2a2efc06c1172d2bebefc6c23bdb4df0a1054060f91d5cc5617"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b506d06772f32251cadc40251623ebd4f3144531249ce4821787b1a9c4a55b3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "07632a67f7ca7b460cfc3042ecf97f9097e7d7638209434def89a3bd55da5a31e287f32def27ce776d5775ec0629979abb08fe2836d88d638802194af0320fe0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "GPL-2.0-with-classpath-exception"
          }
        }
      ],
      "purl" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://projects.eclipse.org/projects/ee4j.servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/servlet-api/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/servlet-dev"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/servlet-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "slf4j-api",
      "version" : "2.0.17",
      "description" : "The slf4j API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b6480d114a23683498ac3f746f959d2f"
        },
        {
          "alg" : "SHA-1",
          "content" : "d9e58ac9c7779ba3bf8142aff6c830617a7fe60f"
        },
        {
          "alg" : "SHA-256",
          "content" : "7b751d952061954d5abfed7181c1f645d336091b679891591d63329c622eb832"
        },
        {
          "alg" : "SHA-512",
          "content" : "9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
        },
        {
          "alg" : "SHA-384",
          "content" : "6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
        },
        {
          "alg" : "SHA3-256",
          "content" : "00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/slf4j-api"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-core@1.14.5?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-core",
      "version" : "1.14.5",
      "description" : "Core module of Micrometer containing instrumentation API and implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5eace80e43c2e317db23e31b4d244803"
        },
        {
          "alg" : "SHA-1",
          "content" : "219117417c2893a62bfe84ea70c4ef8d1ea2da5e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7c0c55ef7fe1bef5b89453655e768ee05fd35b381bd67f9d42cfe48362174ca5"
        },
        {
          "alg" : "SHA-512",
          "content" : "705b3595a16e93f2fde60716119ab948354ae2fb04badc3e3134302204427fef73775413a803fcf631a2c2638c340aa02f9c074f85cfed978c37d3ca93e6e343"
        },
        {
          "alg" : "SHA-384",
          "content" : "169b0cb3f54f9b884d2288cb7b896426935b47a4ba277826ec17dbfb8080ad7867dad844f0d28c5a2c571e536a31b201"
        },
        {
          "alg" : "SHA3-384",
          "content" : "08e0b5ff77d7dbffa10b7fbedd2abb58c4ba385a8ede82cb4418c93fa4c3b872773aba258759aea229e06ea99913a1e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3339d7e991b033150b0c9e97af00993e938ce7a3b69eafdb0d825a5edfcd2015"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f6dd4ba63dcd754c226be61ffb0d1149764ecdafc91856ff6aa5e32094e9a27b9255e1054ed7eb5a57ca53c3e85554abd79064095f27cd7b5147d84f69c59e5b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-core@1.14.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-commons@1.14.5?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-commons",
      "version" : "1.14.5",
      "description" : "Module containing common code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0be73dc7b0067614939038a5c513e940"
        },
        {
          "alg" : "SHA-1",
          "content" : "6201a40489ccedc9539c5f7a2c84e9e64702bf10"
        },
        {
          "alg" : "SHA-256",
          "content" : "e98485ffecb7d8cc9af47cfe627ea8bf3897915dd0f34b3e3a190d6896875b4b"
        },
        {
          "alg" : "SHA-512",
          "content" : "8927717e888514f23ccc5a92ba9f4eb35ee287dcd405f32cae13c63978ec4b23eec1b16d1756ee711f4c29693371f9aa481965806cebd7eb04fbc31c2b49d866"
        },
        {
          "alg" : "SHA-384",
          "content" : "7fea79b6e3d5bfa8817969f8fde021c7c0ac4e8c917dc9002cc8ddf29072d672aa0ad1a06bbe5291629af578b83f93c0"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5fcc4b01b79ff1e16b3f28a00aaa1ca6d41ecc97a262049bc2116bb4761ea564fd6847f77c1d3bfba98abf43a6a23276"
        },
        {
          "alg" : "SHA3-256",
          "content" : "17fabf16599a82d8cd5fc3b438b1d3cc543b618458bf3a81476c14a43030890f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9d130565f263a8e4aefb06e4b9e4a35b51429baa7a6b2d5356faf2a2b71f434261664a5573f4a35345af8ca54e0a02f7d7029ab88684462b8f6b7e18e4c54525"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-commons@1.14.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-observation@1.14.5?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-observation",
      "version" : "1.14.5",
      "description" : "Module containing Observation related code",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1cc820f1baf9c84bfc92300f6890c6f5"
        },
        {
          "alg" : "SHA-1",
          "content" : "b23dff6bf07a29f67fdae8f3f3f8f1c78fa7b126"
        },
        {
          "alg" : "SHA-256",
          "content" : "7cfbf714abdf3779c820ff19712199ac9bae03d2f0e809ba8e74c3663c12128a"
        },
        {
          "alg" : "SHA-512",
          "content" : "9608998035a2959fd832992bdf628d2937e507e9fa7e726042be681d6dd7580dfa6def21a8b85e906ac4c671337fa131558db5189284a345adec27a1121da23a"
        },
        {
          "alg" : "SHA-384",
          "content" : "846a19df1760e64fdeaae27f882e8b0292102c31309d68de8914d086a43c7763b29167c5eaf465ee542efe834d3b18d3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6694ba48b234287726ff67827a02a3ec0560270538d44868a9bcce52748ba0a52761f98d2abef572eb9ef72184ce2cae"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f64429072076ba29b394a51223fb388cd016464da831ea7638b22518850796b2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "183829f112f2eca849fdcb848226f1d696de9c4dd3b223724b04ba84fbdd020ba7c825ff5bd6e41c31315970f230c757b900ebaac8edad68eed36b9ef53886d4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-observation@1.14.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "group" : "org.hdrhistogram",
      "name" : "HdrHistogram",
      "version" : "2.2.2",
      "description" : "HdrHistogram supports the recording and analyzing sampled data value counts across a configurable integer value range with configurable value precision within the range. Value precision is expressed as the number of significant digits in the value recording, and provides control over value quantization behavior across the value range and the subsequent value resolution at any given level.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "41f807bf0c681d6f692c408a6e217eaf"
        },
        {
          "alg" : "SHA-1",
          "content" : "7959933ebcc0f05b2eaa5af0a0c8689fa257b15c"
        },
        {
          "alg" : "SHA-256",
          "content" : "22d1d4316c4ec13a68b559e98c8256d69071593731da96136640f864fa14fad8"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb28f1bc3a3d4430474ea87a0833d56dc3d1303c98918122d93c630ebdb0d1323bbf8feb9ffdc7dddd1908105858e6959bdfdd3889ca5803cecde93a974ab6b7"
        },
        {
          "alg" : "SHA-384",
          "content" : "fa19cf4674dee37cb5114689cccafeadbb7989e17768b814cb431806a0f69c7b37093b6e100430bd571a45d87a319758"
        },
        {
          "alg" : "SHA3-384",
          "content" : "fc0a9e2e5284bc2f911c5e2fdf9eec6cfa1973b6cfb1362822580d6c8768c73ebd1c8056b6e4e5302940f6b5ec4c74b7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "79af553410abf4d3bbfa64374dfdf8777ce49d28b4c67a615e6d4a78e97d0498"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5b2b1795ed1ea55b5a3566bb1f4170a4367b7893256809fdb428df9405857c8454196badf3681abaf536260ed6f293c096a3f3c9d72f0f04830e8fe71d49410a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        },
        {
          "license" : {
            "id" : "BSD-2-Clause",
            "url" : "https://opensource.org/licenses/BSD-2-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://hdrhistogram.github.io/HdrHistogram/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/HdrHistogram/HdrHistogram/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git://github.com/HdrHistogram/HdrHistogram.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "group" : "org.latencyutils",
      "name" : "LatencyUtils",
      "version" : "2.0.3",
      "description" : "LatencyUtils is a package that provides latency recording and reporting utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2ad12e1ef7614cecfb0483fa9ac6da73"
        },
        {
          "alg" : "SHA-1",
          "content" : "769c0b82cb2421c8256300e907298a9410a2a3d3"
        },
        {
          "alg" : "SHA-256",
          "content" : "a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec"
        },
        {
          "alg" : "SHA-512",
          "content" : "bb81a42498c65389366205f4e07cee336920e2f05cc0daae213f2784b1d0ce9a908b038daec20478f23eb00b2bf704f96c5b00f63c99615193ab2a3cc4a9f890"
        },
        {
          "alg" : "SHA-384",
          "content" : "16ca4640dc9d848e6c6d15441897e1b5a9f27f34207b0bb456dd54d8f267b73b348092e548e78634144de44ba3515205"
        },
        {
          "alg" : "SHA3-384",
          "content" : "406c2b5c6f64b0c090568e479b5e6136a04a4e77f8eea65d32b4e2b01deebcdf6a0a851240cdb740c25b5a5e61e6c179"
        },
        {
          "alg" : "SHA3-256",
          "content" : "50ae828358301033542fd7c412e86ee318d5451f89a182e2a679aaf18099d26d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "456c337b9fb385579aae707409ed6a04d08e5fc87b1a46733dca617c22c625bf253dc4747e0cdbf5e7d8b48102d2938cb482b6b688a79aab645a7459c592258f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "CC0-1.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://latencyutils.github.io/LatencyUtils/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/LatencyUtils/LatencyUtils/issues"
        },
        {
          "type" : "vcs",
          "url" : "scm:git:git://github.com/LatencyUtils/LatencyUtils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.5?type=jar",
      "group" : "io.micrometer",
      "name" : "micrometer-registry-prometheus",
      "version" : "1.14.5",
      "description" : "MeterRegistry implementation for Prometheus using io.prometheus:prometheus-metrics-core. If you have compatibility issues with this module, you can go back to io.micrometer:micrometer-registry-prometheus-simpleclient that uses io.prometheus:simpleclient_common.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dc15bc25eb0d240f2a00fbce2b92d763"
        },
        {
          "alg" : "SHA-1",
          "content" : "80507de06ff679e0b28e0e1b255e69c6cd7ef91c"
        },
        {
          "alg" : "SHA-256",
          "content" : "77c7732553e234644922143121b7d27cc23686def60348b8d6886fcd3edae247"
        },
        {
          "alg" : "SHA-512",
          "content" : "0283d0c728c74892409e12c43bd2eadc6030c0a6b7a30aeaf1d85014dbfbe37bf0bad58535c49b434473ee55d0996a60393269188e95546b76da1f40b1234135"
        },
        {
          "alg" : "SHA-384",
          "content" : "2486285104c905287eb21e92fe0881c8e09f135110e21ce9c61aadae0f119ba3be14f28f8f985752db883fbe9b7176ed"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f07850c74dbf4b0abef8cd80a9e8074de989eef2df7c82884d57007ffb14aa86c88bb4fdcba32a6ea93e7e791ff08390"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c4f615908c4f767bc512b8978e9048cedec70b6a429f5117dd3b2110058082a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7f977cfd76a3b02b869515f782c500ff0bd37d9d0bf4bad40e6a8eaaf6eeafac8aaf4b5280daaecffd0351c168cf1bead505cf5c976ebb0b8c1bfff4b91faaa2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.5?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/micrometer-metrics/micrometer"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-core",
      "version" : "1.3.6",
      "description" : "Core Prometheus metric types",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db29b2a32fec65a12219d5e6831ff47"
        },
        {
          "alg" : "SHA-1",
          "content" : "44ed241094654bc74b92190e2b20053cfe025c72"
        },
        {
          "alg" : "SHA-256",
          "content" : "681eb8f906dbd30e396bb69b1aeff711a652f1464e2c87b36813f895d124ac67"
        },
        {
          "alg" : "SHA-512",
          "content" : "42d60ec6a02472e32f87839ec2d92e0e1d4823c6c53759d2075a7312e85ac67f326169c883d41ff03cb5b1f2fca4b67fec0056b5dd8bd333b9a0a82aa3eade62"
        },
        {
          "alg" : "SHA-384",
          "content" : "8bf1628660b3346844f2f468cb0b44e1939ae55c4a1afb560faa1b3b3eb83048c7e78e0412f8e3e09c6c5ac05cff4fc1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c3115593dbae386817e2dea6d491ea5e932fe54b91d74ae6c54ba45a235291706d1517535dd36587b3a632d5f26618b9"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0a8e9691cf6cb3ff6de8e7602d1a289d5389b21671f1013b1247222792673c6e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fd23e370b70dd0cae545c2742963f396db4ca91ebd77d96731dcf94ec31e41402e6ac5e7adc0fb6cda18240976b7a3330d0bb98ca94f4d3cb08e22a3b75561a0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-model",
      "version" : "1.3.6",
      "description" : "Data model for read-only immutable Prometheus metrics snapshots.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "71a1b824d9f9ea82df41cf96a4aee3de"
        },
        {
          "alg" : "SHA-1",
          "content" : "c596fb819e2210ed0b342b9bd89b1fbb7b80b6f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "51a8da74c037ddd5c94dd6bfc828e60b748efede0dc3fae6f188d4e0bbeadd75"
        },
        {
          "alg" : "SHA-512",
          "content" : "baefd6bdcd1a8fc903337f481e9fc4c42f9fdea4d69bfeccf87846348d82f18dea138f9ac113115e5b582e9ee417f010863827977f109923d1a6c7b39bd8188a"
        },
        {
          "alg" : "SHA-384",
          "content" : "fbe772f913a3550883c22fd4336a41bcebe62056061d8471756514d63f791d5f8f5e562ab38173d27f3e33cf6a2e6985"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5735d8d619f96b912f7519743d3c99827ee4b6f8eb7a188fa9655d292e7f1d28225d3192f7c894acdc4c71ed49a95ce1"
        },
        {
          "alg" : "SHA3-256",
          "content" : "bee5368ae44476ced198d6d43c1c0cda92b765cb591eab759bc04b96cefcaa44"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a5cf20db3c96fd1381712ae63f06873f62e6359c9559c2d21eb975fc91c023e41411cb19bb464fb2889d5883e4ed07c053525b64fed1f7edd441ed12231f270e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-model"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-config",
      "version" : "1.3.6",
      "description" : "Configuration for Prometheus metrics and exposition formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fb2fed8b9f7fc6303dc9286074c302a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "752835b9c6864548517543bee2541dc49b2328e4"
        },
        {
          "alg" : "SHA-256",
          "content" : "32e6ecf39f3ab76eee94ee69102795f8ed80024d27fda0ba41d54f25ac887fad"
        },
        {
          "alg" : "SHA-512",
          "content" : "560bf4a7c9d9000cc68eba52f13b140f922bfa6b57b4b710060f054587047496066d53f965afd3d3238644ff2b8a4ac86f0412d194eb70c96509937bc5e68d2f"
        },
        {
          "alg" : "SHA-384",
          "content" : "70c3c1f0e8833b224abd946417fa20e626edb7c5871148599fbd77492ad5af7ed4648ccab008dd2b0cbd0f450a26f7f3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9582cbc7c30259d85292104901e05608c734b84b7da7375a8685102c32a1a33bcbfac13ed459da4ca9011c6d4bc03e8"
        },
        {
          "alg" : "SHA3-256",
          "content" : "6b5cc1a52941cc07d5e8f784ce56f979aa4f1cac458b6463f477a04a9f1df41b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6ab7c3a5fd6785a53389bd62ee5e9c8f87122e6ec10f14a63ec2cfdffd4da71a98f2c6d9901024bd2085aee2a068c8736343e2ddd25b646575848df0be568655"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-config"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-tracer-common",
      "version" : "1.3.6",
      "description" : "Common Module for Prometheus integrations with distributed tracing libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d955ee837fb732e182b09a4a6cc43637"
        },
        {
          "alg" : "SHA-1",
          "content" : "a690d4105fbb74b4d426ad361473e42dfaf400f9"
        },
        {
          "alg" : "SHA-256",
          "content" : "f74e318a30aafe29c169488c4535f4170714625cb50fcfd56c2854c3c5f66f09"
        },
        {
          "alg" : "SHA-512",
          "content" : "2ea08a79e33048000adb3c8c2ac635de00ef8018472bcefa9631f98d18867451238e4c6a4310be3c3721fa4a67e6e911695580b9fe609fa1fc9c60dad40c4724"
        },
        {
          "alg" : "SHA-384",
          "content" : "b0ff6e0dbe046a1b97142c52974d64e997882e313202bfb783970098f95931237c5c404c567447cd608e09023c264af1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7b3238e59a9f0cdb07437b073925d3bfbfafa520c0e55adbeb930889a157143dd5f787937b63e1d72278f02f195143c3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "537744770a57744ca66b67dd43894e51889eb2fe2d62a4d74a090c4f29cc1341"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b7ab2bf6761fc85c6aed69c3efa3f3808ee7f60480a341363a539b38c5297ee91abc8784d70761d1bd4b5de6ad144ca8a98829b5486399797741f21de5178167"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-exposition-formats",
      "version" : "1.3.6",
      "description" : "Prometheus exposition formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "aebcfee537115fea1d4ac2ff1264c071"
        },
        {
          "alg" : "SHA-1",
          "content" : "13189bdc1931415f03c8993798902cec8e54fb10"
        },
        {
          "alg" : "SHA-256",
          "content" : "527c5e21767934fa1d7fb0f4581f560254fe15fff5b86046eb3d669aec8ae000"
        },
        {
          "alg" : "SHA-512",
          "content" : "c76e31a48ecb064887db6b69134e7a6cb48f4b057a87807989f8f95c0f7e7f9398900bce3f9f5c449df4f4d021f3377570b5d6467b92ae8c067b924ea683313d"
        },
        {
          "alg" : "SHA-384",
          "content" : "11596021eb4e64ab0984519bae1f9c8a2fe4559c564b3f3710637b5444560213ea42a70fd97aeb45734f2a460b986cd7"
        },
        {
          "alg" : "SHA3-384",
          "content" : "31989e90a274d1989c18b1579b621a4ac70b06e54129d91c036262ee6d5c72215c3cc1ea7a3e38f81af8ff1046383b0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "01b6fa5dae1c93573d382ca159817a00d79fc383e13196534e1e39966ac169de"
        },
        {
          "alg" : "SHA3-512",
          "content" : "aa1b0e1ee5ad1577403abb1bd371925dd46e5868b573d4c3f362eded24a3ca37238f520af33bf14ae54e9ca5167fb6ce6a4aa522a07a7280c1c49b31924dce5c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-exposition-formats"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.6?type=jar",
      "group" : "io.prometheus",
      "name" : "prometheus-metrics-exposition-textformats",
      "version" : "1.3.6",
      "description" : "Prometheus exposition text formats.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9ac1515f20de8994e427d2302e1c4d33"
        },
        {
          "alg" : "SHA-1",
          "content" : "dd3bc5613557d700d7f9f8d6fc466fd8f9ae15c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "2d9e03503c2bcd1c913f2a4f82d2ebef8b9df971c6f22de7993dfabe01d575f9"
        },
        {
          "alg" : "SHA-512",
          "content" : "de7c8d85c8e6bef10e6d9bcd6304cbb872c59e601ca4def6e17bbd8bdf4b70843ff1b309da415aadfca9a78804d981211a0454e7e23ca1dfcdb5a8b475bae25a"
        },
        {
          "alg" : "SHA-384",
          "content" : "c5d67bffa82d39633893aa66e0feb136918640ec9bc0d4bb9e0ffaa45b6763ca8127800c97e233067ae1c6de6ecea777"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9dc0d13debca89b9ae00ba1d3021547632583a4f841d6ea760852501e46ef1c2aae5c38719dcb37aa4521a9d03c5cefd"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4d3100a0a766b5661c7e748ff1eeed2afd9163c12721a09d66ce379d97fd9343"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bddf22f107d0d53525e383c877da0fc28933df9c3fe86ef23ca3214cb8fcd43ba8c78ec75aa0830ee6761d67c46c89830f6affeeeefc6cb5c0411bc9e97302fb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.6?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://github.com/prometheus/client_java/prometheus-metrics-exposition-textformats"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.4.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-fuseki-access",
      "version" : "5.4.0",
      "description" : "Fuseki is a SPARQL 1.1 Server which provides the SPARQL query, SPARQL update and SPARQL graph store protocols.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1780b5feb593ace2d0409ebde640578e"
        },
        {
          "alg" : "SHA-1",
          "content" : "b05d16af7b9520836fb151ecf5c0c415f352289a"
        },
        {
          "alg" : "SHA-256",
          "content" : "c3458e8f6e20ef9b2b30068a9ce1de7973ad1790c96b41a8ce8df09489c3f7d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "87b48ad4c09b62d5a493f735c6d8cc3fc4a1207ea8cd0629783b7f23c730bc322b8507d518bf1ac6092683fcaee2d3cdb556120110e0d8430db7966e46a3099b"
        },
        {
          "alg" : "SHA-384",
          "content" : "2eb08805b1e8f7bac246f062d3f08eb2def36312d30ec6a32bb8a7d09d7205f77c90973c68589bf51f83d984525f12e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "db024469fc599e4aaeb7b7b367b703b65d0eff8b4ca1a6d54ddf7fcf026f3391d42f4aea1c6b58b5b91fdf0a83da2470"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a2b8e50c8fb67cea49ab83b472af85572a6d5a310fd0afc53104a0b00e17b241"
        },
        {
          "alg" : "SHA3-512",
          "content" : "baa1276dc196b6347e19657518a66bc44a58917cddf0324b30fa8c581598513030ba911a303c5441d3a261b017b985ce782fc73f20a6647ce15e112f5c22ee99"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-fuseki-access/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-fuseki/jena-fuseki-access"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-cmds@5.4.0?type=jar",
      "publisher" : "Apache Jena",
      "group" : "org.apache.jena",
      "name" : "jena-cmds",
      "version" : "5.4.0",
      "description" : "Command line tools",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "916cdd01e52cd3c5f98128409b9d4a30"
        },
        {
          "alg" : "SHA-1",
          "content" : "f3b77a60cc77b77b4451127733bae1820b7d01f3"
        },
        {
          "alg" : "SHA-256",
          "content" : "561870d41fb07c1ae08c45b6324af042983e4d857cefe20207b6521b3f5b3628"
        },
        {
          "alg" : "SHA-512",
          "content" : "426d3cf79696df8dd41dc9c232ef2c95c2218b91c6e590795b70a5e4b17d42d3c9e925d29719b336e5b6d43ad3161767ede6f6fdd7bae9c17e9a7123cf19ec87"
        },
        {
          "alg" : "SHA-384",
          "content" : "030aee3a84b4e8fbd713322f57ad2ccaeb5cda77ae54313a48b0a7d399274628e16f56eade5ab29e5f37a5ee402d1474"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6e9d390def2a8cfea07c72441df0403dffc57f85912dd8be63f10e615db811a8a12bbacde9bd0c561cbfefc5a764cf0e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d81b5995760913eb89fa1ff1eb5c027aab088b00bad6b053d6ceee7bb9ee8ddd"
        },
        {
          "alg" : "SHA3-512",
          "content" : "9acfeeb8f8185681da0ad89b968b73c9acf8ad2b01bea0b578498b102735d7acdd4f5d7c0aa3d01859c472e0484e52fee5b77ea5500109c643c5c8fad5c48e65"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-cmds@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-cmds"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-core@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-core",
      "version" : "5.4.0",
      "description" : "Jena is a Java framework for building Semantic Web applications. It provides a programmatic environment for RDF, RDFS and OWL, SPARQL and includes a rule-based inference engine.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64e00fc0798fbafe640c1279a5f712b2"
        },
        {
          "alg" : "SHA-1",
          "content" : "fa0719fcda3545af6ebc2ac2eee0507d427964c2"
        },
        {
          "alg" : "SHA-256",
          "content" : "ca83acdb236335452307718291204c027d2a5097c248f2bd0e5e36362397ff89"
        },
        {
          "alg" : "SHA-512",
          "content" : "1ced16b3d2b90d186431cc70b74da11fb623e9f021d7429131b9662b282291b575bab069796a1b664859094fbf0b512ae57424cdb343a2f3ac21050ee4ac7505"
        },
        {
          "alg" : "SHA-384",
          "content" : "36ac7d256d477014b000cefc4984593313f709f44a0bc86ff72aec32a64acb447c8c1cada540fa7ef226c422e9290a3d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f0230c20cf2914dcef7ea80a9442980c1668310e12428eaa77b2a5ed86661d9741fae916d9da6284e4bc14059c6d2251"
        },
        {
          "alg" : "SHA3-256",
          "content" : "52d715aae0b09cc7b3141c7045bf6afb73fc8334a6981d90dd440472b0fc4546"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1e2e4707f6866509b305b718e5d074e951df50259c2bfe9638575bb3144d7354b2096a7e742b6b04906efdba846509e458f0af4936534a5b6799ee0bd7a2d5fd"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-core@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-core/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-base@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-base",
      "version" : "5.4.0",
      "description" : "This module contains non-RDF library code and the common system runtime.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "83dcda99f7e81dd3b4a8cb26a81a8fe9"
        },
        {
          "alg" : "SHA-1",
          "content" : "6f12c83e164b0b61a72c6411b4b49ea59ceb7487"
        },
        {
          "alg" : "SHA-256",
          "content" : "75a0fceac164401452552a50bdf6b57ec4fda0ef068259f8aa7d541c5c595236"
        },
        {
          "alg" : "SHA-512",
          "content" : "61ffb4cfc9e46351d4303ced46889004f8d5ebbd14cb66dd1f3d1c5b2c1b09f7f3b4bb3146cd36051748fbd46a55fa155130afbf095510787a16ea21e3ae0c96"
        },
        {
          "alg" : "SHA-384",
          "content" : "afb1ddccbceba7f38a8eb613f1c54535244561f868a4e18b9346d3c7bf90d78a3234acce1445b56c038fd452215681a1"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7f69f743745547532d9b873566239fdfbf5a51887f88506af0bf59d421b486cbbef2a1969179aac664621627c5e76a9f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b05f69f76db84f15a0c221e1d188a4b3560efa1e1ad2efe46b44a7fff245a12"
        },
        {
          "alg" : "SHA3-512",
          "content" : "67bf6a891d98ff7b88f1b3b6b6ef84c477a5451d7c240cebf58dec870d1cf7bde5133e16951ec1df0ab48f16a31566a99c7daa8380a5b9c7861fa0bf2f5b7d85"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-base@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-base/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-base"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-csv",
      "version" : "1.14.0",
      "description" : "The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a99fea24d864189c1aee1575f43f2e22"
        },
        {
          "alg" : "SHA-1",
          "content" : "c7cc057084126ea93617b2b809abf82432d8f9f5"
        },
        {
          "alg" : "SHA-256",
          "content" : "2f34d69f89dc94d606e250d5eb26205923e5dbc2c3891d3575f86c849f7f8726"
        },
        {
          "alg" : "SHA-512",
          "content" : "a8f3e364fe76155f8a6a201bedec52d8e09b712752c37fd3380f71da397dd78aae01718060b8ce96f8e0ab692d33b29c04a4cb6ee3b0a374d17c3f6456abb3ab"
        },
        {
          "alg" : "SHA-384",
          "content" : "5ff36928bdb5b680efbdb781ba193e0a5b46316fc711aaa3cd54f3ab0cd1319cc16c39f362c398c0af546d33aaf50143"
        },
        {
          "alg" : "SHA3-384",
          "content" : "48ee648d11b34d83ae39d1f71a68ab252b73be822276a0d5a34f2b0f7102fc8fb6b56c7df9f60b65a307c43cbb640eb2"
        },
        {
          "alg" : "SHA3-256",
          "content" : "69739b61cc7a685503e02147d5a0e88ae3a09182e3d4fce7c6a81f058f006c3f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5ffb4b19e48e26af9ab361467304f4ed119ae0375fc637613d1f6c562357201f6c0c50a049c51268c367ab4b880d59e39557efd42f28cfbe41640157c1e40d03"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-csv/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-csv/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CSV"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-csv.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-codec",
      "name" : "commons-codec",
      "version" : "1.18.0",
      "description" : "The Apache Commons Codec component contains encoders and decoders for formats such as Base16, Base32, Base64, digest, and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a collection of phonetic encoding utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2abf189633424b9292fd57a3192c0ed5"
        },
        {
          "alg" : "SHA-1",
          "content" : "ee45d1cf6ec2cc2b809ff04b4dc7aec858e0df8f"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba005f304cef92a3dede24a38ad5ac9b8afccf0d8f75839d6c1338634cf7f6e4"
        },
        {
          "alg" : "SHA-512",
          "content" : "4d974c2203dd6780da6e50ec1c7d8ff727f9ed55fba706fdc50b9484fc5da5e03b67bc6ad2f0d9ae74f823ecce04a40c513bbabd8bf9e91ac8fec04cd3519ffa"
        },
        {
          "alg" : "SHA-384",
          "content" : "75d428b434c25041068005fd48f720ddfec8a9fc044b8df53a668828894e9ad542b92601a224d618200e3953ee3c8966"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b0d03e9b6b548ec3b7e3c0ddc644cf40d36203606fd69be3fccc72c86b0e048bb6c8e7bd74afb77e371e839bce7cc6aa"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c33f900364c7ba15976e262ac26dbe4ece516bed72278da0e6c636d2c7ffabe6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "fefe6c1c33f63b9a873a522f8b1f605e4197ed9fe849af650ad8791503cb58cf3d4facafe4f46e070ea11ccfbaec1084e11294154531a07d8ec18ea9c40d9769"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-codec/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CODEC"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/commons-codec"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-compress",
      "version" : "1.27.1",
      "description" : "Apache Commons Compress defines an API for working with compression and archive formats. These include bzip2, gzip, pack200, LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4, Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "1db4bd87b0082044c6e7a6af0b977a3e"
        },
        {
          "alg" : "SHA-1",
          "content" : "a19151084758e2fbb6b41eddaa88e7b8ff4e6599"
        },
        {
          "alg" : "SHA-256",
          "content" : "293d80f54b536b74095dcd7ea3cf0a29bbfc3402519281332495f4420d370d16"
        },
        {
          "alg" : "SHA-512",
          "content" : "5e1fcf9f552ab86beceef6743609e97d700dcbaa5b5ee58858e765c1238cd4dbca2852e1eb415bc2a09dad478d31197ddf09b2ba148dd30be8c9ecd565775226"
        },
        {
          "alg" : "SHA-384",
          "content" : "307707c885a45c1725e940b9e42d75871d47442fcc31ec9d8fa56af2e1a2372eed178ebf86c61b5a577465a2674c0f1f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b87d7b7f6f0db51fcfb4bf0adf31795dc0083564dcc524df345fbbe3546c8357b61ebef793654003a5bcc2e7368bc3a4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "39b8fb032df8934793dddf257ec49d0d7cd16a75e45bea716a21aa0278901621"
        },
        {
          "alg" : "SHA3-512",
          "content" : "40f6d1a9074546b05b42b3841c95b23e21df6f3e2bbe8bbe2905e9676ae51da768df315819cdffaa4f703ea3aec7aeb89f8f3b07c82ea2df3a936d425d606634"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-compress/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/COMPRESS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-compress.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-collections4",
      "version" : "4.4",
      "description" : "The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4a37023740719b391f10030362c86be6"
        },
        {
          "alg" : "SHA-1",
          "content" : "62ebe7544cb7164d87e0637a2a6a2bdc981395e8"
        },
        {
          "alg" : "SHA-256",
          "content" : "1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "5939c9931eb9557caee3b45fe1dd9ce54cabdc4e6182ed7faac77e1a866dd0cb602bfa4ece2f3316d769913366106bd2b61bf3bb5faad1fa7d808124c06dec0f"
        },
        {
          "alg" : "SHA-384",
          "content" : "74059fd8f61c366ed448e102256fdbd1db0d690501c2c296c80f3657a2c0d8ade3dd9533b1431cc29786bbb624195f46"
        },
        {
          "alg" : "SHA3-384",
          "content" : "15034fb39842620bf3b152cd90bce252644ebc6a29fafd6dcf5e1f3925f09ccea2ae4e195817450f996b25a7081a9a3f"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1716630a207a8f4a83bf9ef19245f46c87d62bfebbcfa1227101e6dd51da8fa5"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c290c98c7b5825d024644ec1162804a1f9ad4da3bb5324d147ddffee6cc79e3c0ecc3825d6116502f2ca292ec80c4e7f8d49a03542dda8f4d58b0dc8228923c5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://git-wip-us.apache.org/repos/asf?p=commons-collections.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "group" : "com.github.ben-manes.caffeine",
      "name" : "caffeine",
      "version" : "3.2.0",
      "description" : "A high performance caching library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9d19840ccf667df46f8d839bc9aec5c5"
        },
        {
          "alg" : "SHA-1",
          "content" : "35eba09997476a39492ac7f7b2bb0e8292c09d17"
        },
        {
          "alg" : "SHA-256",
          "content" : "ec411dfdf0c03f25218648ce89861630b71680e5858a9a7278ebac8e55cab3d7"
        },
        {
          "alg" : "SHA-512",
          "content" : "898fe3e0c069424d2f2741e8b94c8ef1c3ec8ed6aad0b04d8ccff0167ee7ad8cd66b227606c7f408e188479e9a4dcdae0b1ce7c0207576e0a3fa74636cd3415a"
        },
        {
          "alg" : "SHA-384",
          "content" : "0f84b4d64b711d4107b64d9fcf1370a0479e87e91e94fe63f53f5393206b4864417989230bda0019ad2b1b460edd1f6a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "f5e3a4fff933c8d7c0a1260a7f373ce27eeab9382b2c6244f6b8e50c2c0b5033b5029c7dfe7ef4ecc216f12ce5f88bd4"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a669a797b3882113677ef37d2cb40a28b36f311a098e530bd962f0f05fe0f4e6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f42bdd603e602f5550dc2074a5228a0d840c860ad13168331ce1f4498127cfafee70c4c0b2f977b960828dee461d4536725b7d29308b6eb0e58f4b8a3b591cc4"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/ben-manes/caffeine"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/ben-manes/caffeine"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "group" : "org.jspecify",
      "name" : "jspecify",
      "version" : "1.0.0",
      "description" : "An artifact of well-named and well-specified annotations to power static analysis checks",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "9133aba420d0ca3b001dbb6ae9992cf6"
        },
        {
          "alg" : "SHA-1",
          "content" : "7425a601c1c7ec76645a78d22b8c6a627edee507"
        },
        {
          "alg" : "SHA-256",
          "content" : "1fad6e6be7557781e4d33729d49ae1cdc8fdda6fe477bb0cc68ce351eafdfbab"
        },
        {
          "alg" : "SHA-512",
          "content" : "efded31ef5b342f09422935076e599789076431e93a746685c0607e7de5592719ba6aacde0be670b3f064d1e85630d58d5bce6b34aed2a288fdb34f745efb7bc"
        },
        {
          "alg" : "SHA-384",
          "content" : "814f860e5a44ead6c457676841eef471a8b87be31b84c60a8a4477a18a9cbcb6e3c2ae700969d5c5e52309d961e0537a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c8844e5b71e5ecfbb7366097ce34af2f5863d86d5ccc3f9ec384d8ade4b60ccc8124c7fc88664f1afd2b0962fc8775bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4b4f08ad7606a3ac62997779484919a302267b26d26ee19125f8a7eea60e8a71"
        },
        {
          "alg" : "SHA3-512",
          "content" : "65c6845ebae981cb81b61107707ced39f5b377dae970b47606ef482aaf10e3729def0da40d9377c43abbfb483a5ceae039b0d51c129c50a6d36ad351a5d6b01e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://jspecify.org/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jspecify/jspecify/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "group" : "com.github.andrewoma.dexx",
      "name" : "collection",
      "version" : "0.7",
      "description" : "Persistent (immutable) collection library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6e1baaccf9e57842c7e944cef39bc680"
        },
        {
          "alg" : "SHA-1",
          "content" : "264efc08bdcd22126bd429aaea9efaf5158b2b90"
        },
        {
          "alg" : "SHA-256",
          "content" : "e50cbc8379325ee17e8127eed7eb88fb70b94ba16e5e3d97e12401a1fc248fb8"
        },
        {
          "alg" : "SHA-512",
          "content" : "0708323a51db1dd3b4768ee844be5c83523ebc61c4e2ff07e6f952d8891dbc0f8e499f5d9bfb09bf48c99e492dc1804807a2e518b464d1a986407522e9dfea0d"
        },
        {
          "alg" : "SHA-384",
          "content" : "19f9b9011d7f94d975b14b97aef8df35fb1a5cd215c35f3b3283d5cf0effdd8de3315907bce35bc9c12e006b6fcf8990"
        },
        {
          "alg" : "SHA3-384",
          "content" : "38954676b168659dd560568f62cdd8fedd3a8ef7d54bb430d64311b7b3b21cfb481fb7a16ad1efabc5c586b66b20eed7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3545d1a0d3d9dee1bcfb2c4aac44e013910fd117e6cd6417e26217bad8014a7a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cc5998ac73b9d795c70690a6a83c633143ca1bb997091fb332134d94f095f89f7e581d20a89afb21455a143f824304c7eeb206d34ce8b8edd43e76606058b71b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "MIT",
            "url" : "https://opensource.org/license/mit/"
          }
        }
      ],
      "purl" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/andrewoma/dexx"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/andrewoma/dexx"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-iri@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-iri",
      "version" : "5.4.0",
      "description" : "The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986) which are used across Jena in order to comply with relevant W3C specifications for RDF and SPARQL which require conformance to these specifications.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c89b985348c4c3b16e71d8a2be9fc001"
        },
        {
          "alg" : "SHA-1",
          "content" : "a3bdf197bed0bc1b3e5fbb0c02fb0a92117f1752"
        },
        {
          "alg" : "SHA-256",
          "content" : "4d80379e463cbdeddc5c2af558fa6d239aaeb4b4ca013c0e2350e9e3d794a54e"
        },
        {
          "alg" : "SHA-512",
          "content" : "fb99bfc8c3105798943e9a624f4d7add27bbaa39769c85c8ceb94e66cd9b65639164f1b1819a72560de4c4ae5bca80679b502f0a1202d42aa5131ee2b062d271"
        },
        {
          "alg" : "SHA-384",
          "content" : "31b8a24340eb83e20cb93b16abbbcaa3f9c43076083ada2c1e1b7c32e6950809f071b8279ce88df100541559a9867c37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8f517dbc9c616e4681679c8d155add4defbe152a372d369e1acbec5eedae93227a702154b54af527148055b272d3ed34"
        },
        {
          "alg" : "SHA3-256",
          "content" : "069b7df713ca0da79c1dcd2da92871c4902f86dcabae626c0be47f00d6d58955"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6aa9647e9e18e233152e8d9315005d1a6ed3c00271b39b278ef6cde806ca40ff48f39092d31e81874fd754daa2ae393f9bde4cda0047ecf4d6783e3485b1d179"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-iri@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-iri/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-iri"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "group" : "org.roaringbitmap",
      "name" : "RoaringBitmap",
      "version" : "1.3.0",
      "description" : "Roaring bitmaps are compressed bitmaps (also called bitsets) which tend to outperform conventional compressed bitmaps such as WAH or Concise.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "5ea65118238dc208252d95ff1868599c"
        },
        {
          "alg" : "SHA-1",
          "content" : "a46ce7a2dc494da69700ab421f081b1583857f6d"
        },
        {
          "alg" : "SHA-256",
          "content" : "73443a71a2e2401c7d518a487983539fcaf5f9652efbd178f929e7b6d36881d0"
        },
        {
          "alg" : "SHA-512",
          "content" : "1134d4e3c9bb8ff130583e10d00487131c1aab456b625f9289935b660046b07c9acdee0a1dbe9c1fae145c2b1b9897460b1aa3cc0574fc2be976a9781965d7c1"
        },
        {
          "alg" : "SHA-384",
          "content" : "0fe7bd9414e4705c41d8eafbfc2ffaf255230fd3804e0c9b2f0847d3124d9b1677df49cf2cfa880c43c45043353f7d2b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "0350386ab16e071e5c17406a2dfbd4290fa841fcf7240b93760553588b90a64df79c21e54202b7f25c310446bd65ae64"
        },
        {
          "alg" : "SHA3-256",
          "content" : "eac8bd4158fa85c6158a7cbd6fdeda29401ac80d8272cdf2cd7e7c541d887f91"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b3be67fad3ce4fbf4a1a77956d632538b0cb68c92d9ec7fe39799ca21a40491d859422d94686722872596c4a89ca0499622927f65174b9a88f0b3641bc58f5eb"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/RoaringBitmap/RoaringBitmap"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-arq",
      "version" : "5.4.0",
      "description" : "SPARQL 1.1 query engine and RDF parsers for Apache Jena",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "281f1eb964cea372caf3563ff727c75f"
        },
        {
          "alg" : "SHA-1",
          "content" : "31d4d56be8b21217ca7f0d332334d57cb8b05b37"
        },
        {
          "alg" : "SHA-256",
          "content" : "216c4e5ce62690cd826465a7edd141b23b149afebada5418b99b8eecb14b2215"
        },
        {
          "alg" : "SHA-512",
          "content" : "71dd5bdc8ed3cd36ae0639adb2ce5252d4a00b89d33a27d453ab10b72cf33802e72656a5117c9f6f30636c26cac944ff7d5788af26e4bc55986f1bd4d2516f5b"
        },
        {
          "alg" : "SHA-384",
          "content" : "4d6a4f510dc5d2f59b1e8bac221ba07932472b7ae4c6bbb2127bdae780f689864f1cd7ebe7d55cf1a2509d2431ce6304"
        },
        {
          "alg" : "SHA3-384",
          "content" : "009ab675b48fa1d9e2d63580db592fe0f81c1f4a505bf2d055542fcf1a45fd661be93e5f38692d294e4f8090d08a3781"
        },
        {
          "alg" : "SHA3-256",
          "content" : "72ef84499557bc28820e81ba646064b94635b03be1a265be59a62e35d86c7904"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a8e7dde3065a94ca55c78108f8c8de77d9a64959c610167810d1f55803b54f1e403ffafb213e2ed4564e825a5575836183e793d8ea809db6991866efbe94a4f8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-arq/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-arq"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.code.gson/gson@2.13.0?type=jar",
      "group" : "com.google.code.gson",
      "name" : "gson",
      "version" : "2.13.0",
      "description" : "Gson JSON library",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "38bc92f541176bcbe011906a3175724c"
        },
        {
          "alg" : "SHA-1",
          "content" : "111ac98ad3d2d099d81d53b0549748144a8d2659"
        },
        {
          "alg" : "SHA-256",
          "content" : "8c6a742b74f869a79f39f5c78cc09999f99f3b6aff6304fcedd6f543e27efa78"
        },
        {
          "alg" : "SHA-512",
          "content" : "23212fd969a956a76214a65efde2d0c30846db8b3da185a9baa195504a6b1d0f17a4ad2c99e0915fb9673e4c28955372adf7f0e5f6e2e311efae6f22ba7c21d8"
        },
        {
          "alg" : "SHA-384",
          "content" : "52f35ff77379456fb73021cf4cc4468f022fe924444106ca5a5983c647485610a7c3d21bd53ef3885e75b206adeb1d90"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a9d48a46ac1470b3695d6dd610ba4d184603bf982cdf2a79d732100b1b80fa153bf1820c48bdef3d1327f2bbadde4a72"
        },
        {
          "alg" : "SHA3-256",
          "content" : "a8076a0c5ce9b41b0e9e18e315f3b11e2acdbf82e2c4a134cd670496c9f7df04"
        },
        {
          "alg" : "SHA3-512",
          "content" : "486e0f0062a4fc60117ee7d68b65d46fa6303aac290a7e895a12ed039e93b73ccd329949aa3cee14ca90239196fef891e3f98e16abdd2d9f1c52efb5811b5015"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.code.gson/gson@2.13.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/google/gson"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/google/gson/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/gson/"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar",
      "publisher" : "Google LLC",
      "group" : "com.google.errorprone",
      "name" : "error_prone_annotations",
      "version" : "2.37.0",
      "description" : "Error Prone is a static analysis tool for Java that catches common programming mistakes at compile-time.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "dce0a1c83d3dc06c2715c96e11d2c429"
        },
        {
          "alg" : "SHA-1",
          "content" : "8512660d1269d166fad497f51de35da61447f063"
        },
        {
          "alg" : "SHA-256",
          "content" : "d29a6263b48d46d4c7c28b64717a6d105b3e2a3e64256092f845e8e774fca6ba"
        },
        {
          "alg" : "SHA-512",
          "content" : "fc44571f9095764c3ba1a5372a2603aa7bc8557578bd11d6ceff70a237e7af5d55578706bf8413cb203573fea69199e208c527f5d4c8b171284c7b229324ed13"
        },
        {
          "alg" : "SHA-384",
          "content" : "fe53d02fbaa8bd20d225717b2b859df085487f4f3a84c5207308a77ab7593772194762b897ded223288805b948bdc7dc"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dc0d42f714fe4b93f25160444f74fdb0ceab92bc01de68e413c069122aebc22cdfd70ab15138f881c6312b083681def7"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9b1e2555cc8b66ab2d1dda37192574212f5b57347739edc74410322025e72299"
        },
        {
          "alg" : "SHA3-512",
          "content" : "b42c3e648b8db5796fa055e5ebf4735ef830c26d37696c69c69fffdab2c0c7199e5c139231a268732f4b11d6a790bba32cec3a8b42134d7d34d36062c57f38b2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://errorprone.info/error_prone_annotations"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/google/error-prone/error_prone_annotations"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "publisher" : "QOS.ch",
      "group" : "org.slf4j",
      "name" : "jcl-over-slf4j",
      "version" : "2.0.17",
      "description" : "JCL 1.2 implemented over SLF4J",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "4fcd46ca51e55b9fd9b0db34474927e0"
        },
        {
          "alg" : "SHA-1",
          "content" : "76ea503eb688f06556a9ba69995d7eab63e34531"
        },
        {
          "alg" : "SHA-256",
          "content" : "affd06771589ebfe454bb11315a4f466ecaa135b95f3e7939534cf1d2fd7064c"
        },
        {
          "alg" : "SHA-512",
          "content" : "7efb2771bad2e643b0e814cd78ab4f9af3ea166643700776618c397e9755ca11f4b7c00030562a619932c9d2ec5114fd253ece3abbc3db2f1a064431d8990733"
        },
        {
          "alg" : "SHA-384",
          "content" : "96fd8b2732de79c40e5e6613e324d2845dc6e19bf31bc7f3e9fa6730fa527cd16579ba9eb7915481faae1e9a32dc82fd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "252a3e6847dafd84955a71724d71641b5c6508bcbbc1f2457fdb18994b61f6d78b08cbd40d5c430743950e351ec79835"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4c066cec2c40de9b5743f43d99b629d60de937718f69ffd837bbe5902682ee92"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3334a1fff0751378abe8e010ca9716a85a15a90450265699c32886d2e8f9ff63df89237667a262350d860dbfb2f20fffff14e9a094f0bd2acf990dd543c2b86f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://www.slf4j.org"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/qos-ch/slf4j/slf4j-parent/jcl-over-slf4j"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar",
      "group" : "com.apicatalog",
      "name" : "titanium-json-ld",
      "version" : "1.6.0",
      "description" : "A JSON-LD 1.1 Processor & API",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7c339c899931bd63804d34f776642606"
        },
        {
          "alg" : "SHA-1",
          "content" : "de460eb8ed5f9ccf2cda123c8abf323c73a11b05"
        },
        {
          "alg" : "SHA-256",
          "content" : "64e3b7e7dc5209d175e1b9fdc271436a030ef6c76895e2f889e3b1eeb258cc87"
        },
        {
          "alg" : "SHA-512",
          "content" : "0e20cf1dcb4fe28aea15f996cae78008549d2088b76c9247a954970bb2d9d98763d62ff14ef09d027ce047c30c5f37c93bc60009507f69b0a1e4555a6e9eb84e"
        },
        {
          "alg" : "SHA-384",
          "content" : "0dd5c5735507e8d3c428291e1da039d11035fad667f7ed4c404679d2e8ad077b8cf355fb6949b46e6dba8d022e35db20"
        },
        {
          "alg" : "SHA3-384",
          "content" : "569c9d246f7e04abb308cc38e2183917cdc590c28653b30bcb4b15366f2d7200ed5dc0c25af6cce9ab0bb4c9e285f33d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "3faeef37846d641b97851b3b91e169a26b3e5cd52f5ef2783c32d79486060cd2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "db943da1706e7482e9b1425c3b6bc07db41ae427eb98ff3209b54585d44958ed45b0cc612ae6ddb8d85e04ac0b4a847ccc319cd994083957eaf38ea68251829a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/filip26/titanium-json-ld"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/filip26/titanium-json-ld/tree/main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar",
      "group" : "com.apicatalog",
      "name" : "titanium-jcs",
      "version" : "1.0.0",
      "description" : "An implementation of the RFC 8785 JSON Canonicalization Scheme (JCS) specification in Java, utilizing Jakarta JSON Processing.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "2097fa4da73119a0169abc62dcb5feeb"
        },
        {
          "alg" : "SHA-1",
          "content" : "c5c8b42eeffcf848195427856e870f59826e066b"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f658492a25b3b8d56896115f930a367d26308283f3a2560fb54845b60ea3a81"
        },
        {
          "alg" : "SHA-512",
          "content" : "1a206ba6777c685aba51194201fd9b04d63aeff36b74b651e78004ef6b313d609a619832b6886045d40e113687da769f5fec89a371b6565aaccabefab662f302"
        },
        {
          "alg" : "SHA-384",
          "content" : "e56ea18704860195b5c4d5de0893b6c1d16ba64def2e1de002815ac9501eb5b2c89fe541fb9ce3ad7421798f4acd3264"
        },
        {
          "alg" : "SHA3-384",
          "content" : "88a1f09c0dba5f939afd7f5b62ec8b57fc885cd052fa61f61a7cbf175f43c3efe258840e3aa3aea9f155661dfff26e0b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5dcbfa8fb8974a648020851261c7d73a4e2c0d898cf0209121310c17831bd24a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "bad1d6820c20e94ebe3454f782cb32d864677abdf4418d0e0ce3e72ed59bc9d295dc33376c47b729c151d8d390790dd84f82238ea506138516f720abbcc2ecbf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/filip26/titanium-jcs"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/filip26/titanium-jcs/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/filip26/titanium-jcs/tree/main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar",
      "group" : "com.apicatalog",
      "name" : "titanium-rdf-api",
      "version" : "1.0.0",
      "description" : "A collection of straightforward interfaces for processing RDF statements and facilitating seamless interoperability and data exchange across various libraries.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "cb1d28dd49c5fdd68c4cac303e7c049e"
        },
        {
          "alg" : "SHA-1",
          "content" : "5367b3ddc236368906749407aa4b2b4900752404"
        },
        {
          "alg" : "SHA-256",
          "content" : "1c414428e51cc08f3147f154d955860422e491c4856d2613bb63797a0450b161"
        },
        {
          "alg" : "SHA-512",
          "content" : "569f4f3dedd79d981046d680bdf0274c8e235c585b875a924cbfc0a5cedbd54a25ea16405e447a9dba0794d37d0bcd5728f8f1322bb48bf74d6242f55c2a949b"
        },
        {
          "alg" : "SHA-384",
          "content" : "6abe3bfe26b7acd123f18598522d868060b75d61e1a540a0167779bbf21bcf648fff022a4f8ab678bd650b20dab707bd"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7e7d825171bbbf7f508cbb0028e1b3fc43f5db95f33096c720f10be271f3b28b9a824b8764f1f168f4b5686ddc44eb0c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c25eae60144d8a6329f68350bfc6ec3feebdf9df1a80d1896908c60d852f530b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "39f131088cf98757784c24fd0a327847b896fd1409e05d5477facc9bed06118f189118d7ed8383dd3164f3b84d072eb31e166c4c40d030aa16cd24784da62ae2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/filip26/titanium-rdf-api"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/filip26/titanium-rdf-api/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/filip26/titanium-rdf-api/tree/main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar",
      "group" : "com.apicatalog",
      "name" : "titanium-rdf-n-quads",
      "version" : "1.0.0",
      "description" : "A Java implementation of a streaming RDF N-Quads reader and writer, optimized for efficient parsing, serialization, and handling of large RDF datasets. It enables scalable processing of RDF statements in a memory-efficient, streaming fashion. Formerly a part of Titanium JSON-LD.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8da8b5ef70819072bbc4264551347079"
        },
        {
          "alg" : "SHA-1",
          "content" : "c475e20341cd94ee2ed25a23833e30a44ce75369"
        },
        {
          "alg" : "SHA-256",
          "content" : "3fe1e678c648ca6671cbdda614b58799656bd8fd48a185688b372cc3444649c6"
        },
        {
          "alg" : "SHA-512",
          "content" : "c4826c899ed834687f9c61626cac588437f1c0eb30a93ff7c5068dea3127ce0c74e0d9987c341a01b3d4d466fb7edf964b12e49aabcfb24916e792dc3afb4860"
        },
        {
          "alg" : "SHA-384",
          "content" : "65f9266c5e0c569ec06db3878ac13ffdcbfd7c280b058347c40b65a973e59a1a2f9028626dde79a3a3aa89bc42aa2b9e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cb82b88f8b354f9837795d7a88f2e700c307017c33d2e773ed4b47247cc52652680e61ceab654d6774e2762fe1e8c7fc"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5df37268efef3ed8b7fa6f36c4e198df99ee15dfd1a0596f05b20a630727220d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "8598a58712a2d39bbcb74fc57922eb1e46874e27dbbe8fb2f39c5f3dc959e80cd79d5400ea601ea4c61541ac7bc392b986e74fa4993b8805e163b1b33689df0a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/filip26/titanium-rdf-n-quads"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/filip26/titanium-rdf-n-quads/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/filip26/titanium-rdf-n-quads/tree/main"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "publisher" : "Eclipse Foundation",
      "group" : "org.glassfish",
      "name" : "jakarta.json",
      "version" : "2.0.1",
      "description" : "Default provider for Jakarta JSON Processing",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "217370baa683188d6085c079a0988909"
        },
        {
          "alg" : "SHA-1",
          "content" : "da6c75e591cf2a89ddc479cbdbd8fe5f41d3efc9"
        },
        {
          "alg" : "SHA-256",
          "content" : "52539b39498b86ca9910b0eacc608a8c78de8db3842caa84bc87169372202cc0"
        },
        {
          "alg" : "SHA-512",
          "content" : "3a7240c34098be4fc81769ec528a5afcc90e509d092a5e4edca27b2e92a3edfd6814bf60598fe6b856bec42c3002e64af286b6b8cae90cad06db276c6cbc10dc"
        },
        {
          "alg" : "SHA-384",
          "content" : "aef48cccd89f11a491844d85be814ee882e760fe384d76c74259269c7c514115665f7ce1711124577079024a7b2127e2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b35d0fe7b5fb661733c6dda6c09cef82a48db6358d2c26d15935c713e3873307add4ea0fd01df7ef5fd762da380ab0d5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2d8d3ccc88d35b0254c3967f7fbe1c22b581ad9b25a92954570395ee1680a034"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a96804fb8d283352d133f05624aeaafca23e349ff3a55c4d1843a9dca9665bd941862bb27990d0f73f99ab9aadab3ab768b333ecb445830fc6cb8c704ca9ee8b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0",
            "url" : "https://www.eclipse.org/legal/epl-2.0"
          }
        },
        {
          "license" : {
            "name" : "GNU General Public License, version 2 with the GNU Classpath Exception",
            "url" : "https://projects.eclipse.org/license/secondary-gpl-2.0-cp"
          }
        }
      ],
      "purl" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://github.com/eclipse-ee4j/jsonp"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://jakarta.oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/eclipse-ee4j/ee4j/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://dev.eclipse.org/mhonarc/lists/jakarta.ee-community/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/eclipse-ee4j/jsonp/jakarta.json"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "group" : "com.google.protobuf",
      "name" : "protobuf-java",
      "version" : "4.30.2",
      "description" : "Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an efficient yet extensible format.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d7c758a027495c9c318b7d1fd57c7e9"
        },
        {
          "alg" : "SHA-1",
          "content" : "e4d6256d911424343d05b3c0b853446b16e908a4"
        },
        {
          "alg" : "SHA-256",
          "content" : "0f3a4e9264db07cec429f2a68a66030e9b7487277b76863cdd0e9238cece249b"
        },
        {
          "alg" : "SHA-512",
          "content" : "4afb11c3342bd3c1ceddad3b1260d55e7331d4621513f4ae8865b8b177b47534340e75237154e7d019d165263bd01182f9282c3c6971fc5547d945f6cd8679a8"
        },
        {
          "alg" : "SHA-384",
          "content" : "537445bc1e4c4d21996001b24c7b285cad2b257facd0564d0fc19979919d91e84d63af65831f19de17c0cd505241215e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "4b4035996e89ed352fd05827fe71b4546d3c2f16ee09a88710e14e5e39415af818c8bf8268c5853c68d321f354c36c82"
        },
        {
          "alg" : "SHA3-256",
          "content" : "661a1016b18bdfa14e2bda539ed939d4c3fe26842b05286f7daee152be67bbb6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5c1f48a7a6b015bc10400ccc7d323ee0643a214424fc31face958f0ae15568f8270bf6bdfc3866719c991bf6d9d7c3e878510bdb5a2a7244eef3a443504d23ed"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause",
            "url" : "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://developers.google.com/protocol-buffers/protobuf-java/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/protocolbuffers/protobuf/protobuf-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "group" : "org.apache.thrift",
      "name" : "libthrift",
      "version" : "0.21.0",
      "description" : "Thrift is a software framework for scalable cross-language services development.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d8d38a4276e7d1bb084f391bc8f2c002"
        },
        {
          "alg" : "SHA-1",
          "content" : "5497a90b56d1c637305f884a41f4109e4326c4c4"
        },
        {
          "alg" : "SHA-256",
          "content" : "53166303415f6a9a852e424dca30c48b03a8aeb43429e2adce4685ffc1e44d81"
        },
        {
          "alg" : "SHA-512",
          "content" : "ee9563caca19f4010f57391eb388620028750b106b341fc2732d086919bd627804609fefb8b69ce6bd27f9afecf967910f1e8155ad0e7ef992281eee2faac0d5"
        },
        {
          "alg" : "SHA-384",
          "content" : "8e72cfae629ed4c77b67a2f0d25df75de6c9e895faeefd2f1983bebdafc834f5d89146378a05364a77ef1d2fbf9ea3cf"
        },
        {
          "alg" : "SHA3-384",
          "content" : "e866c83984dd8fd63d1b9ddb8e564cd6330539f21114b16ef12ac4f6d32acdd6defcbf2733a3d11e51abaa8b3d396311"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9465aae0280daa7bbcf37f61b6e81b659665c5e2ccc0dd55d672197d855f9925"
        },
        {
          "alg" : "SHA3-512",
          "content" : "ce25ef5a315bbc15f5a43f28170e5c008e5c33b548a8009494261473b5f8620f6b33d4930e856b451f810fb79f1142374903f43dd07f822b1cd7ffc5e2b05ed8"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://thrift.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/thrift"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.commons",
      "name" : "commons-lang3",
      "version" : "3.17.0",
      "description" : "Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang. The code is tested using the latest revision of the JDK for supported LTS releases: 8, 11, 17 and 21 currently. See https://github.com/apache/commons-lang/blob/master/.github/workflows/maven.yml Please ensure your build environment is up-to-date and kindly report any build issues.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7730df72b7fdff4a3a32d89a314f826a"
        },
        {
          "alg" : "SHA-1",
          "content" : "b17d2136f0460dcc0d2016ceefca8723bdf4ee70"
        },
        {
          "alg" : "SHA-256",
          "content" : "6ee731df5c8e5a2976a1ca023b6bb320ea8d3539fbe64c8a1d5cb765127c33b4"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfd5ff7fe7f852b9caabc81e5a00e20616f98405085f059b64dc2121feb5fa6cb327e11a3d2f954c079811c31f6fd484e90f932d45078796fbfa7dbf1f1eb5aa"
        },
        {
          "alg" : "SHA-384",
          "content" : "c6ed55a5c2b05332890a43a3ea73b30f42dc23c92ebd054a8b0d29ca8f49fb9361f7325cfa90715be457804b087221b5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bb9e148a87928c3053bcccee361d5d8d81b3c6ea41a390d96c615afd242409f909361c945f3b4238a297e4ebb2ed413b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f28f34565f25dd65fd1a47916e917df9e3ff2c6721897ea57391a238227c96a2"
        },
        {
          "alg" : "SHA3-512",
          "content" : "4c8e7a5f10d091bb240e7eb59287d0e4e4420e7a2d2be2b8060111e479540ffae89040377c99ec7f458cd54e1ac0ed0778951cd1f34d5d90571b8a303fbb9baf"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/LANG"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-lang.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-iri3986@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-iri3986",
      "version" : "5.4.0",
      "description" : "The IRI module provides an implementation of the IRI and URI specifications (RFC 3987 and 3986).",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a1b2f5bac313e85637fedf1925c97861"
        },
        {
          "alg" : "SHA-1",
          "content" : "6fc49be91e712aba47aea8d1f43420441f211c63"
        },
        {
          "alg" : "SHA-256",
          "content" : "73f975dea4d8b46464e2c18e492728e91f563ec72d3e6ddec31b213536e6609f"
        },
        {
          "alg" : "SHA-512",
          "content" : "6de710c0a82d976dfcddfd0ff0110ab29c4b77abc2a53e10870409ceb8103951c01d2a74fb99dba7c93123895f6cf784d28425d08348c1ebce1779efd0973133"
        },
        {
          "alg" : "SHA-384",
          "content" : "a3f3881d3eaebd8c092a44b2db85080871f93c3e2f14fb4b59f99e84b20460efedcc44a7951d1cb466b51c365f899703"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9bcfd497d1c0c921f409940adc0551e5ea535da5ed8f7c2fb1f508bc24b05bd983bddb77319efad83e31db8250995161"
        },
        {
          "alg" : "SHA3-256",
          "content" : "2094f6dadf48a06028863b25c98ebe9a2f1ec4b7548e903437bb6968deb9cc6d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cb42de7d4c2665ebef68c6b17f580d516e672c1766991a5a22d13958760047848519dbb2a458a04551e433405a4fc3ec5910c6bde172700d05430c6cad527161"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-iri3986@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-iri3986/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-iri3986"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.jena/jena-langtag@5.4.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.jena",
      "name" : "jena-langtag",
      "version" : "5.4.0",
      "description" : "Implementation of RFC 5646 (BCP-47) Language tags",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c208c7197cebe8478a4516bdc377aca0"
        },
        {
          "alg" : "SHA-1",
          "content" : "c35cc4c582d70bc27154d6166014f03b73d90383"
        },
        {
          "alg" : "SHA-256",
          "content" : "6a42ee15f3b072300da3743becf4fb6257d0d8ae3066d19807fc9c761f5a1b09"
        },
        {
          "alg" : "SHA-512",
          "content" : "b87dce11fc2c7d11ce58b61ac65797e27a42a3d0132d74e631e6ffea3e00c5a3215b7ccd8f710c88567cd049ca744a30998483cada0ff4a069f99ec89d31b9e3"
        },
        {
          "alg" : "SHA-384",
          "content" : "df8b5fb2d8aa871ff67f72d1ad10e4561fde3959603786b7536bafa47e46ee89aaf037ecd9dda0685803de48e433e93d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b1f6b3619eafebb341441e927bb8afdc0e94ec0bd68d606436b3e7bc1bbd57a03d4d09f6ade7c39d7f0bf4ed1d12871b"
        },
        {
          "alg" : "SHA3-256",
          "content" : "c6590f6397ca3f0d2bb15c603c21e3cafb23bf7fe0ebfbb45055587700e95999"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1c3310767caaa6b2bf681a6c5d6e6ef5f5e240001f67b5265aa19c59859e3dc443272b615b332f18720f26b3fdb9b40c3f3572d0c879a00cc09e8eac7a2ce54"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.jena/jena-langtag@5.4.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jena.apache.org/jena-langtag/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/JENA"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?users@jena.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf/jena.git/jena-langtag"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-cli",
      "name" : "commons-cli",
      "version" : "1.9.0",
      "description" : "Apache Commons CLI provides a simple API for presenting, processing, and validating a Command Line Interface.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "ef66360f30909f8372d6358dfc5d1b6c"
        },
        {
          "alg" : "SHA-1",
          "content" : "e1cdfa8bf40ccbb7440b2d1232f9f45bb20a1844"
        },
        {
          "alg" : "SHA-256",
          "content" : "d3d530d0f28fd0fbbffe2b0b338f70e8cb96f1605579e2e3abd4db29cac24e69"
        },
        {
          "alg" : "SHA-512",
          "content" : "d516a6869a31902df2c2e3318acde973a2b2423b5eb573ece5b9eb85f620a2dd25194f0e4efc972b9c0ea054003ee3ffc463b18ffb2428e47d85b88568c36482"
        },
        {
          "alg" : "SHA-384",
          "content" : "96c19d2776e7c590df7479256d1bb64814b918e2abff8fc247a084a877c063a3e9a196fa3774f2b1d811c822217fbe45"
        },
        {
          "alg" : "SHA3-384",
          "content" : "30d57c3f1b44d24eb143e911966310044ebd231690000aac4d80d34230937c590691be4d95d916ab67b5a2352dc0a71a"
        },
        {
          "alg" : "SHA3-256",
          "content" : "737d6fadc7df28fba6fd5dc4a8ec83347d46ad790cafb66341ea971f47ca3080"
        },
        {
          "alg" : "SHA3-512",
          "content" : "5f8bd02833a656acd4ec072827f283333547ff9781f7d855d626346629a52e63c3202f03acbac9b0bdebe044bd5536010cbdd686d0f3d10fdec4f5cd1b4494b9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-cli/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/CLI"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-cli.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlet",
      "version" : "12.0.19",
      "description" : "Jetty Servlet Container",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "e6d282e188754f82f8319570958d33ed"
        },
        {
          "alg" : "SHA-1",
          "content" : "e0b5fa5b9f30a707282fde836ee50e51b662085a"
        },
        {
          "alg" : "SHA-256",
          "content" : "ba791061cadae269ba8e514366ef9a9eff8c4a96436f183020eb47624a59b5ed"
        },
        {
          "alg" : "SHA-512",
          "content" : "dfed0c7c3c8d004c81b5c7eac9c2a8aaeb47abcac30e2bb2c7657f0074613871133f04f6beea32f5afa394c887e5a26bd1a3f55ec38ef37e62b7a64d69ecf8b0"
        },
        {
          "alg" : "SHA-384",
          "content" : "e56ccedfbf91f14477eba4484278eec5505e5d446981834ec78023797870d858a39b83eda97205c8b5fd7fcfacdb13fa"
        },
        {
          "alg" : "SHA3-384",
          "content" : "93ed414715858968f5214432bd057417b14c789ab0ecbb53c8602a68c8167976be728ff45de6b790dec644b893e5fa3e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "45129f0a3bee0cf09a79600d7d33ddb6162a21ef0d6c2a533fd736737aab304c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08ef6102a64fea618ae6d1a19d8379a83e9ae761d0a086225b38e89bd00557314e32a49cf40f9adef415083b507e3387bbb220f1c100f9b30096559200aca3e0"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-ee10/jetty-ee10-servlet"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlet"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-server",
      "version" : "12.0.19",
      "description" : "The legacy jetty server artifact.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8aed481cf70e916e3803df61af6a7ffb"
        },
        {
          "alg" : "SHA-1",
          "content" : "9688d92d1b9809c8fc523f0cd2ff95d1d926aab9"
        },
        {
          "alg" : "SHA-256",
          "content" : "ad73f35c5b986efa4da500af8647b2c556d23e24c3645b37b06fd87d0a9e7170"
        },
        {
          "alg" : "SHA-512",
          "content" : "2c2d2ddb5954631ca47dc1732c010fc1117bd85824a474114b018df3a12cc6a6ad07775d46772ffce0d9cf9558551716b4278ba6533bb4e2a5f536bd38d46b09"
        },
        {
          "alg" : "SHA-384",
          "content" : "3223075c7f5452d94de979b10ef333c74aa341960ec6b6f4aebd25f4f5e139f2680f84fa4fb611384f7c514e69789fb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8d830b1a3be11bdb214db50834f57219a67e2e802ada580f7e8939bde18e1ba0181653d6b7f4d8fe1933aa13233cb06e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "aaa02563fa565271c42e1becb7894c445aea506c2a3d3dbf243bc9d36d70900c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "a6d4ebe6ef392bb7ad1d8f04740298e4f28c0e7cc7bf3c84bc61e60b3b807f22a2e6c57b0312f4e3fed005efcc541e097acf2beb548e09486157e2e6c2251e45"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-server"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-server"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-session",
      "version" : "12.0.19",
      "description" : "The common jetty session implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6a35ed9f18d2bc5d1fc8c09b23a7e1d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "7a8cab3e28b28ff8e6c3fda9311f8b72b9b05945"
        },
        {
          "alg" : "SHA-256",
          "content" : "bdd62350faed3950618af50fb3792462bbfaa94836e0850454ee73654e70ba50"
        },
        {
          "alg" : "SHA-512",
          "content" : "a38a1e8a1f090c912a358584a11f1812c0d9c6adb885dcdadfae04bbc06ac4f2d97b21bd0e1bcabdc6a1e05fb30961510ccafa3b7ae8945af04f630b7b7507fa"
        },
        {
          "alg" : "SHA-384",
          "content" : "9a3faa28674bb96a8810376792d5542cb8c9d4b2235a5a8cdee653efaf49836f7bdfd1bec580abce53eaa8261f25e60f"
        },
        {
          "alg" : "SHA3-384",
          "content" : "498fcd1aa2ce448a163e1bb3913d62fae77ce27675496ece276078eac7f508724c5baf1dbabd71ad8cc599b835ddd8ee"
        },
        {
          "alg" : "SHA3-256",
          "content" : "1802c6d2bf96ab4621be8ec57895352766445cdb06c528b7a60cc5a2e7b6af86"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1c4e81e5ac0f89af3dbafa6f171addb6aaf3dcca775d4eb30ad0e2050a3f8e11244a31e0a9c1b97247ae0095af8ddf9ced195f5b24d80859aed3319807fb153c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-session"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-session"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty.ee10",
      "name" : "jetty-ee10-servlets",
      "version" : "12.0.19",
      "description" : "Utility Servlets from Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "a5fc82445592ecb0e8a249386d00a24e"
        },
        {
          "alg" : "SHA-1",
          "content" : "087a35d3b8bbeb2802fd23b391b97bc743277712"
        },
        {
          "alg" : "SHA-256",
          "content" : "db6d97b3835619af05fe933f68ace49b4b781478e820deed05e21cf0546cc5f4"
        },
        {
          "alg" : "SHA-512",
          "content" : "f661165b07396d14252d114bf4be2d8c33cb4319551737b42ccf91989e38976320ca771612826eea4e43683f22b00d7580116ba06f6a6c1fb39351abb9595b5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "962ce1273314c9554d21d28b895ee7adb3daf2888788ddd0dfa57361256e661c786affedf2c081581aa8ac7d5211cf2a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "2511a35ade3e6c13bd5d58080f3c90d220119395c50ee5bc214943ce478e80bf2785c29f0a4136552dfba651ecde9e7c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "82ed5a0df20ce8ad7ecdcc5c41ab0581b788cdb4030907608bac2aa5110fb8a7"
        },
        {
          "alg" : "SHA3-512",
          "content" : "91de83155350e56f68e7e225c1b150675543dbe333dfb02c7170ed1e0ecb6b9b4c7755688b958e4f25e1245c4885faf4b8b7835554ccff2d23552872c40a7a42"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-ee10/jetty-ee10-servlets"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-ee10/jetty-ee10-servlets"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-http",
      "version" : "12.0.19",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3fc33cf06b92982e76e2bc0c688a89ab"
        },
        {
          "alg" : "SHA-1",
          "content" : "f992617613998fb592dfd267446c2182376ca029"
        },
        {
          "alg" : "SHA-256",
          "content" : "05220288eed149167da506d214131a988f30b95652ed92920614c15833c649a5"
        },
        {
          "alg" : "SHA-512",
          "content" : "c667bebc006d160ffe67ee261bd5eb6cdf9a112e504731305bbc0e977fd0927fc622587faad424710840921cfe86541a11a8c48a70e25bf92317ad4448646189"
        },
        {
          "alg" : "SHA-384",
          "content" : "d2c30927610f3b0388df5b930a4e2bc1cc4c3629602c456fba16b8f997741d300d9c68416b50dd200e7946174dcecdc5"
        },
        {
          "alg" : "SHA3-384",
          "content" : "9b02b796ff8c51d2becf530253570628067840acfcedffa33fdf1e8b018510dd95395dee5318b9b4aa56b0148e6cfa4d"
        },
        {
          "alg" : "SHA3-256",
          "content" : "de837490382b489332f329a1290eecee67fcf7b3c62113ec8a824b75541dcc81"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0087f0bce7c87b8a03e0415e30c986c2e7d8522c9bdda78463757d775fcaaa0f16025643583516086e08399029686d20cc1cd402fefbb9cf8032c1df90320f8f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-http"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-http"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-io",
      "version" : "12.0.19",
      "description" : "The Eclipse Jetty Project",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7d55277b35bf9f687076e91ace54bfa7"
        },
        {
          "alg" : "SHA-1",
          "content" : "b949237228faf1407eea07352103e46279cb8fff"
        },
        {
          "alg" : "SHA-256",
          "content" : "c6cf51cfb421988a51d1eded005cc069bce9c2a7bf61c74d3b977e3c5b5e9297"
        },
        {
          "alg" : "SHA-512",
          "content" : "1de0d8e99f0bcedc87e95378c115d2191dba85249271df2a37d0d9db45d3f7027439dfbeae917caf6b18de0dc0c128bf382bc0ab6754fda19834d44029074b87"
        },
        {
          "alg" : "SHA-384",
          "content" : "9eaa8a6973f9399543d324ce5f21cd1f31a5b4dcb882009454bf780753b80eeca0ef122e271d0ba1e68fa2a362174bb8"
        },
        {
          "alg" : "SHA3-384",
          "content" : "b4c614310826c27360f4255c8e177f71bcf6531c68278684ff3a5f89b5d6e74270c2e9f1ca2e80e5528bf81ba537553e"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d2da81ae1ec21baf32d39bb2e1a87b3eaf4bf232c2e4885804767f8c3a2e2c9d"
        },
        {
          "alg" : "SHA3-512",
          "content" : "89d9784171f8f4347220a9ec1c72e472fcfc14c4bacdf3d6fec65ddc72190abd1edb7a1b93d1809affdf2f77cf26d41d80db17aac53d7554e086bfba64a81bb2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-io"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-io"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-util",
      "version" : "12.0.19",
      "description" : "Utility classes for Jetty",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "64871dc6c9de072b34a4e5894cca82bc"
        },
        {
          "alg" : "SHA-1",
          "content" : "5dd72392608420f6828c9a3b4bec4f37f83dfcd8"
        },
        {
          "alg" : "SHA-256",
          "content" : "901b8399d64753d8c48d6c86576e758cf7e02f36824755dc223a910ab5cbc525"
        },
        {
          "alg" : "SHA-512",
          "content" : "505594371ee64945201130e0d609d8b6c7a891a0fe2370873a0cdc0b5137a9cec4aa4682f199dabe544cfbd8bfbdfa1ae854e80c498c8df89b1ddbc52766fbbc"
        },
        {
          "alg" : "SHA-384",
          "content" : "e5b942f5a63f781d198932e3ed27cc72c1c8e774bda3f2958f7d6e42faa220ea7e4af8d02057f5263110baeddce485e3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8b36c743ca510e836a9ad3b8d4629325502c0571fdc8dadc7445f2c6b1e2fb1c12a9599b0536b4bd4f68e9842ca3f056"
        },
        {
          "alg" : "SHA3-256",
          "content" : "520e2b8636d23a8f0d8af5f634c14fd60af795d513c98af300bb6951f33fbcbf"
        },
        {
          "alg" : "SHA3-512",
          "content" : "904dbaa5c40f1bb80742351271b93e7584ac1bfa69438132330cd76591f1ef1c7810d0636089b7771996d8edfbcb208fa74556d02658d2dd36c535237a8f5f83"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-util"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-util"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-security",
      "version" : "12.0.19",
      "description" : "The common Jetty security implementation",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bf56691fedb8aeab362d5ed544293ea0"
        },
        {
          "alg" : "SHA-1",
          "content" : "9c9e3bb94722579e37cd3f0f3356bcc238082628"
        },
        {
          "alg" : "SHA-256",
          "content" : "3713ab0578787ad7b08ce6c8109acbd3e9def99e05dda0fb3aa7701329a67be7"
        },
        {
          "alg" : "SHA-512",
          "content" : "928f113447b3317843d10df76a59df2457ae2e932a1ae048b97ff8ec1121a48c20db1a9203f662692302622c71b3d6748fd5f69f1165aa740b100344503fdaf9"
        },
        {
          "alg" : "SHA-384",
          "content" : "7c3c25c691a41871c131f86378d8b40db53d9c27e106c54eb7a78bb3c35d8ee3916abc297952b5625cfc6f5ae67e485a"
        },
        {
          "alg" : "SHA3-384",
          "content" : "5330ffde4cd813f3b1c116631c90170b13b70489d87deaeb499cb01a763d011bb49cd2d939c703317ef2d0f740e269ff"
        },
        {
          "alg" : "SHA3-256",
          "content" : "ac42bf80e2e762ab5bc05cc88ac28d9118cbc4fe8f40080c7b9275be3e6eea25"
        },
        {
          "alg" : "SHA3-512",
          "content" : "62d9afe4e9adeca337d6c871ae7d81adabc1f6fa7d9c16ff261cef2bb5b37f15bfebc9cbf52c61a3b7a89fc85aae1519f5133efe1269eefea2fc4fb2935c70a9"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-security"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-security"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.19?type=jar",
      "publisher" : "Webtide",
      "group" : "org.eclipse.jetty",
      "name" : "jetty-xml",
      "version" : "12.0.19",
      "description" : "The jetty xml utilities.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "90e7a1e5879c3e1082f76058d8f81494"
        },
        {
          "alg" : "SHA-1",
          "content" : "c19a05516530b9f19a620d80c5a40d4708b2da40"
        },
        {
          "alg" : "SHA-256",
          "content" : "46591c19dac2fb86835c889a53ea3656798706af4313cedf6f8e971d4a51c159"
        },
        {
          "alg" : "SHA-512",
          "content" : "0315dc697be758dd7f04da4333516ef417198709c6a74d4d9ee5f041918e22ef91d23917b7797bd7a16c76dc9cc0d47b8efe9b1016125ebb6413a3a7a3d4839b"
        },
        {
          "alg" : "SHA-384",
          "content" : "3859ae08173170e42b827a5ae3bb86f9b53c15bb515df895ef580998297ce83cc709f0548879b6488da660c31bc4ce0c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "bd5bb6daf2e4a92b2ae47e705a5418be7192e6b91e503ca1ee4a057986745be349999b3837e4768cae5ae56eefb3fcd5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "40933a184b73689f0dd380560b5aa0e2668d0fc4a45194344252e532bccef761"
        },
        {
          "alg" : "SHA3-512",
          "content" : "62a1707c8f9aed82f46cc3b28c84725a67e38b76b3d327e7e44d8412d595fc844dbdef7ba239983b9f6691ba83ebe2fae0f418b314918084bb828f52beedce20"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "EPL-2.0"
          }
        },
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.19?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://jetty.org/jetty-core/jetty-xml"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/jetty/jetty.project/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://www.eclipse.org/lists/jetty-dev/"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/jetty/jetty.project/jetty-core/jetty-xml"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-core@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-core",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8ee07b044224edc9e92fc6d6bf33e7a8"
        },
        {
          "alg" : "SHA-1",
          "content" : "da2a101f0749149899ec54b34a65966fece12af7"
        },
        {
          "alg" : "SHA-256",
          "content" : "1ce785b709138b250cf5f8c4a6425a0ceabb5280701f6f4f464e8ad2a2e393f1"
        },
        {
          "alg" : "SHA-512",
          "content" : "05babe0e75e73afc6c9753925a09cb5bdf52afdb248a8346cbfde5a0928ba552181b38f4a634641ce469f7ed1f7cc37925d0ff677b46938306e11e51ac8c3b64"
        },
        {
          "alg" : "SHA-384",
          "content" : "6b61b97b5db373317796c1ec8b7b4a8cb9ee5bf4ffd23487a28feabe6727687f93c014bbacaefa485311598584acecea"
        },
        {
          "alg" : "SHA3-384",
          "content" : "3b08d9d8283d13f84f1f11ce2d5c0fb0f8f41b14ef3ecbdcb5b60ec83d6ddf768ca524178254e010342532bb96fc13bf"
        },
        {
          "alg" : "SHA3-256",
          "content" : "95e8a5cb52a10d25854341fa4f4a4c7002171e5f33b02ffbcda3c7a3ab781409"
        },
        {
          "alg" : "SHA3-512",
          "content" : "cadc1c10216d2c6eafb3a6ff722bf45aa075e783bf70f8699e83ed1db16e46f9f3e464806e1711ef81ac80ecc2a348ae35748f97350d132716dacfec5cdcbde5"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-core@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-lang",
      "version" : "2.0.3",
      "description" : "The lang module encapsulates only language-specific utilities that are used by various other modules. It exists to augment what we would have liked to see in the JDK but does not exist.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "07db570eb62d25d41cbd9041771ca8c4"
        },
        {
          "alg" : "SHA-1",
          "content" : "40124d6e6ecd15b163440a5d903edcb0048e83e1"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9de346a93ae4cb3bd75d82415037f5e205b8ddb57494a55692680a354b5b47b"
        },
        {
          "alg" : "SHA-512",
          "content" : "29d3653fcf60cc32c84413b9b59e503f08961a09c0eeb6cae6966116a6ef2c9562e63d8431c34086212d42afd6a1ffa80ba546dfdc70f938ffb93a19a1409b41"
        },
        {
          "alg" : "SHA-384",
          "content" : "a01562f262e6f6f22fa41f104f2b3baf4a6017e25263d156c57da9b6b42dad55cf530d55f830a73c76a9f40d60e1ebac"
        },
        {
          "alg" : "SHA3-384",
          "content" : "6881213fb842b5293806c479533d3bad96be44246caeb8b1435c01265ba15c7d0dff74d8449d96a19d574bbad7cd4a77"
        },
        {
          "alg" : "SHA3-256",
          "content" : "190bc42d9e9109ac7dd536e56367c017d8dbcd6b75bbb18fecc965fbbab4a110"
        },
        {
          "alg" : "SHA3-512",
          "content" : "6dd0a8103f84277db938c651227286d4bb8045249071263d67f5c85d90a5aea6093efebef5f489ac4275419b2a6900ea01e93a2fdeb9a7b50a0c06da03b8d58a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-lang/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-lang"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-cache",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "37033ff1fac8ee22783bd7bc67053c60"
        },
        {
          "alg" : "SHA-1",
          "content" : "05ee0ba70e13a908345a77227dbb22645f2460d1"
        },
        {
          "alg" : "SHA-256",
          "content" : "5dfa4289f91b3de8e4b32274592f4f09ee4c990800d682b7cc7f38ca8558b978"
        },
        {
          "alg" : "SHA-512",
          "content" : "9abd60505dc0f8e1596e9159af1208a318a2a6ac4ab8acf9d7e2c5ff8bccf766872853397656d7153ee1158b75e3311181f76ba9d4d610def669af360352e2d0"
        },
        {
          "alg" : "SHA-384",
          "content" : "602437cb4871ee737d46299cba1d3c1e837223c50c04208e4804498bdd0b0e65855818b09b69abe2e792279ef2ed47b4"
        },
        {
          "alg" : "SHA3-384",
          "content" : "14d32f9dca44da973a48f8ad442cf9acdc9daf9f1f8b9429f6e261deb766f853c55177bc2f052f19022505852dd87ae0"
        },
        {
          "alg" : "SHA3-256",
          "content" : "91181f1106a38df254dace9787fa87228f47da70c68aedfcfdbf6f1b06f89a50"
        },
        {
          "alg" : "SHA3-512",
          "content" : "899700b5734e9cb15fa3dcef908677b906efb71c19d3cd1c6d144790aa3fcdb55e5b262f31604f806e20a2f6ef3df65bfe312fce411fb6c4e4a0f6363f05232c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-cache/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-cache"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-hash",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "fddd298854513ab9457d67b46a158cc0"
        },
        {
          "alg" : "SHA-1",
          "content" : "b7325ba613ecb12329edd41a68ed69e47f539fd9"
        },
        {
          "alg" : "SHA-256",
          "content" : "878e4061ad29f7f2032520a64a21a122e4a16b3f88dc70bda510a68073f0aa56"
        },
        {
          "alg" : "SHA-512",
          "content" : "bf5691015fbbff5d37415c80c2b285c4d6eb26c8681a5a930bf059e5f5426479c504bb4d75118c8b9c5528982ea9029e02d61c9ac849a243920cd1990bccfc5c"
        },
        {
          "alg" : "SHA-384",
          "content" : "7a88bedbf3f07ce9f2c7995961a3de7b06d77a99193cfdcbc801fbf1aaca8637be161f87e5bbc164ef40297f1192218d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "94ca94610b1659c88d78eb5a64e0def8a418e75ab76006bf21880e1b03375f8c8d1797db86f12193ac1d65869980bfe5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "95a53940a480218f536932a88ed10039606e45cd2d0eda07551a469591c8912a"
        },
        {
          "alg" : "SHA3-512",
          "content" : "03950c2bd0ff29279331295fc1b050311e340139a5b1ef2a57f7f9bf1f5b69a084a06d5bdb59591d4d0704a1606a4a1b870cda3b2b90f41c893f2eac85b4a20a"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-hash/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-crypto/shiro-crypto-hash"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-core",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "87295dc54a4151e7df5920e37cabd3b7"
        },
        {
          "alg" : "SHA-1",
          "content" : "63565dd107faa4f592fc707395326c96ed254202"
        },
        {
          "alg" : "SHA-256",
          "content" : "cfb0de67aae744eeee493ae93392b42ba1027fc41445e1c3a3a2eb48bc038bdc"
        },
        {
          "alg" : "SHA-512",
          "content" : "12300627b485fba506d2f60324270e019e4eedc5c86876bc05f3ba6d477183f5af793723bb7e6baba60859f30da4ea5f453436bcce296cfe07b5600a57ad852d"
        },
        {
          "alg" : "SHA-384",
          "content" : "30ef3ae40a20846fa8e200ce3f918f24b84a3f6337d9600d62e9b3e0e390b5e434aa6a7d0ae2189506f777606b84f08d"
        },
        {
          "alg" : "SHA3-384",
          "content" : "cf6b3e8ab01e7e8e8cfbc221ade8e140b8424f556fd0ad92341f452010a5b2f0be9ce449faaa987e07e8653cb7910453"
        },
        {
          "alg" : "SHA3-256",
          "content" : "d734e60cd5be67504a00637d1d0825bbbf555893bb73ce903ec5bdafe918ae4b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "3786756469b5c4513c41eb199ff79886dc36dd5214a2cbfbb049b5b7ff1c27d8517bef116ad0b8cf81ea35c07d3048675e31f893921c11c292192bb5efab8dba"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-crypto/shiro-crypto-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar",
      "group" : "org.bouncycastle",
      "name" : "bcprov-jdk18on",
      "version" : "1.80",
      "description" : "The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains the JCA/JCE provider and low-level API for the BC Java version 1.80 for Java 8 and later.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "b688fbc4b7e001d7643106b177b91f80"
        },
        {
          "alg" : "SHA-1",
          "content" : "e22100b41042decf09cab914a5af8d2c57b5ac4a"
        },
        {
          "alg" : "SHA-256",
          "content" : "e8ad209f8c58d291a37ca9750e9e9fac60596956c983e49dd8282381dd8b3249"
        },
        {
          "alg" : "SHA-512",
          "content" : "0773042bd35e22a582cbe89f4be8a8476487b6e030ee83e86038d43cba0d6c775e91c51ad31f126e19b440ced6c03f73e4fdac79fc17b664d0c84b4e859fa90d"
        },
        {
          "alg" : "SHA-384",
          "content" : "299d02af765f4a84c41b14d19e25762f7440a6edb08944da4e8b3ff39d8692ad575ae225e968efb5ebb7c51f4cc1f505"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a5fae0cb015e99e48b9133a8290e62a7bf147c118cab91dd4523d683152bc8718890cc32666a2a7e5f625a125671701c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "9a967449d57dca95e6d013ab07f47aa98c8c9f9725bfecb87514fda817611b34"
        },
        {
          "alg" : "SHA3-512",
          "content" : "0e92dc766d6250299b4a4b04b4993bb55ab428f9f814d0fa9512706c797664633c5d457d097821202e4c3302330afb241bda79422a5cb75d487c85feb660660e"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "name" : "Bouncy Castle Licence",
            "url" : "https://www.bouncycastle.org/licence.html"
          }
        }
      ],
      "purl" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.bouncycastle.org/download/bouncy-castle-java/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/bcgit/bc-java/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/bcgit/bc-java"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro.crypto",
      "name" : "shiro-hashes-argon2",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "6c7480ce3319250cd51afe31b3633109"
        },
        {
          "alg" : "SHA-1",
          "content" : "c87bf3f092a724e48b1ba0a1bd890c864031e032"
        },
        {
          "alg" : "SHA-256",
          "content" : "3aaaf21a2c80702daad58f5a2f95d531c21700b2f5aa384c895991756f00ec29"
        },
        {
          "alg" : "SHA-512",
          "content" : "dc3aa3a9bb2ff995fc55567c63feff83db6282fbfd5b35d46cabb3f54a6a7188ff0295a9f203533f9fa811cd303738c2a2ac0627ffd763e997d0abf873b2edf7"
        },
        {
          "alg" : "SHA-384",
          "content" : "c86ba66142bae315b6b58b214dba22787e1d68c2b62aa3be5c2680c2c6c3f27450f9bedf17efb77d89809496be0dd31b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "d663adf40c1061e22c37babfa28927611f414b5f4ce08d3be653f45c2100bb0197d7a6f1f6d1387cd7eb55574d04f6b3"
        },
        {
          "alg" : "SHA3-256",
          "content" : "0437977f78837713e4ba53afd4ae1c75ea0a6312b300fd0ace9858e52cf1150c"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f16a64f12dd4e59f30e28eb6ba4be071a29a25af9231806cab892c3318043c24ca5cbe6ed1f36bf0830d5a8a3adfce726301412808cf2f44c817490f9983a09c"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-argon2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro.crypto",
      "name" : "shiro-hashes-bcrypt",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "051005a989b58eb0cc7134af878100d1"
        },
        {
          "alg" : "SHA-1",
          "content" : "8c4623977abbe51535912fd1719c2317df7804e3"
        },
        {
          "alg" : "SHA-256",
          "content" : "795048056333da951d1d2d5c86c01c6640ad9fbecb78916e8fde25b47e626507"
        },
        {
          "alg" : "SHA-512",
          "content" : "f5b1160ece7e90c902ffaf9d184859c3d700fca3c1c7907b6f41d463dcc578bb2398ae592536e40bae6080340369dc69545627d8450294e291cad5b077461efc"
        },
        {
          "alg" : "SHA-384",
          "content" : "b545ee3be26e18e2fe1c81cb307c20a2b8b4490471431ef11ed77666764700bac288481dafd4a79bbfb6d1436279e3a2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "296bc09960c83fd5f29ef872b6045738728327ec10eb1135a008960d5dcc7b68361d14c1eef85af2663e190046702731"
        },
        {
          "alg" : "SHA3-256",
          "content" : "091553844c273e3eeea6349e07c293289893a44d5e8f213e0a4c7b6238a9590e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c8e8017620f40964282102d9c876232576a869cb11c0b436224aebe7e758f522b908e3e499a0ce7dbcd712753dad4ab88fb1d4644e22951b31b48604002cb170"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-crypto/shiro-crypto-support/hashes/shiro-hashes-bcrypt"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-crypto-cipher",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "7cfa2ce0a1963d83d6f2217977de7876"
        },
        {
          "alg" : "SHA-1",
          "content" : "96b6d40899e0548ff1f933c2c47154da51fe29a8"
        },
        {
          "alg" : "SHA-256",
          "content" : "ee33efe2f7dede121e821e9edec0f6e6800762af918625c907423e5651cf1dd9"
        },
        {
          "alg" : "SHA-512",
          "content" : "f636daeeda09dfbfe8c1803d61e0a977830844a8aae240b04d52c88dfc5057d4a63e2dba57b2c30bc62b8cdd5c5034973895cc1d631d03790d968c631b559ba3"
        },
        {
          "alg" : "SHA-384",
          "content" : "f2e3d369befae7b8adfd2cab9e42654f2b22e70e242362fa4226adbc533b31246a5b9a3870da9bba9608a4c533f6dc6c"
        },
        {
          "alg" : "SHA3-384",
          "content" : "149225a8848962d0bfba53d100431327bbd396365e68a1f5c61ebc0e44ae6319ec1dd6b7f89280f9f05ce6b504c13f24"
        },
        {
          "alg" : "SHA3-256",
          "content" : "7f099f64af9ab7c7474ef67008a25d2d52c43b2cf710db16254d6f38a6a7423b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "641553862ce025c11891f37952d2a827e927fd8e6d23098819a192f8b06d9ddae6648b83158c77d4fcbbc69d6383139b745e438caa85147763d735c4ec30c45b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-crypto/shiro-crypto-cipher/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-crypto/shiro-crypto-cipher"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-config-core",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "78220db8f22166ce08dd4fd67ed36ea4"
        },
        {
          "alg" : "SHA-1",
          "content" : "b06fd8fed1ba8cbd2d6f3344584dc3ec848ba188"
        },
        {
          "alg" : "SHA-256",
          "content" : "1444022fef71b6ce0c0616a384d38bc0595cff7e19da01b06ee5dcaae813ea95"
        },
        {
          "alg" : "SHA-512",
          "content" : "19cc6cb669d98b09a0caa3b1684a0ed31bd65cab1560507efb8fe0349c76141c41e9a3591f4d4b2738e8e4ba038fbc4ffb11dca5b3d9a6e0d56094e74d09e6ae"
        },
        {
          "alg" : "SHA-384",
          "content" : "13cb8967f58c4c68818305fd03c029c4ebd354f8887ea7aa8d326ac0d60b16c4b8b98c5b84cc7e9d42ad572a297a27d2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "a4f14691bf4d11ad49db1fb355dfd261edc830a9b5da4126945452157e837d99c8290c794efafb93e9154c5c269ccabb"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f9e1af3d415a954562ee1a7137d1d2f8cd7e4ffc3ebd8872513b24890040a4b6"
        },
        {
          "alg" : "SHA3-512",
          "content" : "1991fa462c49ae6b2906abf24f673220c2b2fd7a82040f15570d2e2aadcf497d205497c222bb12261bd45c755e3415e1d80dbf973293ddd3d72345f8d671f92f"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-config/shiro-config-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-config/shiro-config-core"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-config-ogdl",
      "version" : "2.0.3",
      "description" : "Support for Shiro's Object Graph Definition Language (mostly used in Ini configuration) where declared name/value pairs are interpreted to create an object graph",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c0fcde1f1a778158eb1f34f1b34d7208"
        },
        {
          "alg" : "SHA-1",
          "content" : "5459c780c43232c424b15142a1ff4eeb55bdf9f0"
        },
        {
          "alg" : "SHA-256",
          "content" : "4f80d53747c9526bbb09ba45ef85abbc40450decde4d32e16c97af12c165b68e"
        },
        {
          "alg" : "SHA-512",
          "content" : "8a9c64cd6c51b29674b2b9f9e72dca836daca0578f237302d2b5830aaf0959b80248085547f10e5a854e2e21e107ca7567558ab77b1b77c5b0974fe79454c919"
        },
        {
          "alg" : "SHA-384",
          "content" : "f39c48f48d92271bd3d9cf653f66809347b8861c878340b16dc67568681ce42fdc933d26591164d3c634c6016e1c24b3"
        },
        {
          "alg" : "SHA3-384",
          "content" : "dbcd98e860235da1f7c2d3b47a4be987a822d3f7fffe926249293fc34805d4184efa8bbe6ebec959bf172e5d2cfc2403"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4ff0fe193bfcb74b0798ff11152daa7580210bba31218f03972f3a7360154e1f"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de53a3824b8cd53c1812c6d054bd862392d38318efc305b444b94183ec06246b04695173522cd6fbd0659c2ffac2802c23fcbadde3de3309795510ed3ee16dc2"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-config/shiro-config-ogdl/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-config/shiro-config-ogdl"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.1?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-beanutils",
      "name" : "commons-beanutils",
      "version" : "1.10.1",
      "description" : "Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "27ac839d60e2bff6b222827756fde6cb"
        },
        {
          "alg" : "SHA-1",
          "content" : "22c392b43aa32e1364fb39647111edfa91df9070"
        },
        {
          "alg" : "SHA-256",
          "content" : "707a09e86ed1cf5516cdabdf1710d8fe201b6e26e7233870dce1d0ccf2a468d1"
        },
        {
          "alg" : "SHA-512",
          "content" : "e9e8ee35d9074eb6e8f1af6986e2b431aa8185d711407bbaca3f5ee52f77e4e23b695e832f859c1567fd91f27a37cb7e07d7061a22ac7af560f83bedb58b06f1"
        },
        {
          "alg" : "SHA-384",
          "content" : "780f990cd068da31bc40a635e527bcb249fdd61cd8ff8ce6f0fffd5f5f5bb8334733acca16f3221765d5ed0ecd5d60af"
        },
        {
          "alg" : "SHA3-384",
          "content" : "858dbd2eff793c0e8d26a6437898c27b55bbf4864fa2e9450ec03bf7ab0c5aa07a7eb458b4ab57b73ce7a672d3871070"
        },
        {
          "alg" : "SHA3-256",
          "content" : "4be2d7514d157c931f9e28321da7b7590eb4751fe4629ae8f23d2d22ca7f0b84"
        },
        {
          "alg" : "SHA3-512",
          "content" : "f21d8359dc06a70beb0ba56ba1253c592ca781aba7cba2dc4fd8afc1bbb29fbca46f1cda259b8840c520c61d2b1a79d90ff2905d4067ac3a407bb5e916a7fc0d"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://commons.apache.org/proper/commons-beanutils"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/commons-parent/actions"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/BEANUTILS"
        },
        {
          "type" : "mailing-list",
          "url" : "https://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "https://gitbox.apache.org/repos/asf?p=commons-beanutils.git"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "commons-collections",
      "name" : "commons-collections",
      "version" : "3.2.2",
      "description" : "Types that extend and augment the Java Collections Framework.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "f54a8510f834a1a57166970bfc982e94"
        },
        {
          "alg" : "SHA-1",
          "content" : "8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5"
        },
        {
          "alg" : "SHA-256",
          "content" : "eeeae917917144a68a741d4c0dff66aa5c5c5fd85593ff217bced3fc8ca783b8"
        },
        {
          "alg" : "SHA-512",
          "content" : "51c72f9aca7726f3c387095e66be85a6df97c74b00a25434b89188c1b8eab6e2b55accf7b9bd412430d22bd09324dec076e300b3d1fa39fccad471f0f2a3da16"
        },
        {
          "alg" : "SHA-384",
          "content" : "dd4e99b3314bd3c1a1ee26296615d9e44dadf7a1f8a7bbba44fb95121803d331e36d4cca4260e7609af78a47ba3e4073"
        },
        {
          "alg" : "SHA3-384",
          "content" : "8ce03528e4a6e95c44283b56eca87e6a6d3bf1363411a55b538f4f9110cf7470581ea5c73925e877ddab08dba0603f40"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fd3d6134b5f07077b82ccf93d148dacf7c4ce5c971209510edd0e77e3e38c19e"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c2a523916fb7c7d55a05d5e3d9e9b33000733f4b20a71be174e4e093e3f06ea78ad831edd1505527da7388105f8647efb7d5666ba852c90b4e2d5bb74256efbc"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "http://commons.apache.org/collections/"
        },
        {
          "type" : "build-system",
          "url" : "https://continuum-ci.apache.org/"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "http://issues.apache.org/jira/browse/COLLECTIONS"
        },
        {
          "type" : "mailing-list",
          "url" : "http://mail-archives.apache.org/mod_mbox/commons-user/"
        },
        {
          "type" : "vcs",
          "url" : "http://svn.apache.org/viewvc/commons/proper/collections/trunk"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-event@2.0.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-event",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "bfded7acded807ab8e94d9634bc065b6"
        },
        {
          "alg" : "SHA-1",
          "content" : "663a52ffe036486d385f313882bb01cf43750f18"
        },
        {
          "alg" : "SHA-256",
          "content" : "c4a8b653e03f0c548009a52983ad3d7f01c382fbbb1da11fd0b5be3e903e3b90"
        },
        {
          "alg" : "SHA-512",
          "content" : "862814f9a362e046f5308224408cfa68f7b52e415543cab736ece912bcba2d53edd1f98bcfb3be5413f81957e3cf0cccae98ea5bf336928683500a24d56188a0"
        },
        {
          "alg" : "SHA-384",
          "content" : "9ca2f71a245332320d8b528334a11f2e390e2b9803de11e47853eaf6d0598319687b0d8ef9d34bd25ec0dfe18c60ef12"
        },
        {
          "alg" : "SHA3-384",
          "content" : "c5991c2d869e7b7da79f9b1b76e9ec3807520805316a40971d776f2af733b95d573a904546ee4fde900db48b7a065206"
        },
        {
          "alg" : "SHA3-256",
          "content" : "f523a3acf1237f43512e64b4cfbe9aec77b2ea73e08d271ac8b41f0dab9f02a8"
        },
        {
          "alg" : "SHA3-512",
          "content" : "de4fa9b6258b7039a8ead3a8d36927b4f8c68f21b0f1d7bd8166f1e31c87ee7e7d618609cabb42a64be53bee7d2b1e38abda32a61d5b3a9cdc76675a2f72a872"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-event@2.0.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-event/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-event"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.shiro/shiro-web@2.0.3?classifier=jakarta&type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.shiro",
      "name" : "shiro-web",
      "version" : "2.0.3",
      "description" : "Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management, single sign-on and cryptography services.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "8a35f9e2e9e35cac22518a16a1d21e22"
        },
        {
          "alg" : "SHA-1",
          "content" : "55b748b8ac9988940139b7bc6d071a8f92860f9a"
        },
        {
          "alg" : "SHA-256",
          "content" : "211f5e30244c6fd9d540bcf4151d66b9461700ac3191fac54c0d98ff7af15190"
        },
        {
          "alg" : "SHA-512",
          "content" : "e5b9d9289b3ca973dabb6463591545a2f76f3667ede9c1d0ceebd6f21479d95239ff1a3e8e5f3b328620316fea69f277f46cbdd895e46823df5fff7f1e22fe90"
        },
        {
          "alg" : "SHA-384",
          "content" : "9574f58c5c9cc02a625140ac55090e8edc079baa5e62e0419e47c6652e84e991627bf921a5ed5297bf33e202a96b451b"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7d8600e88a60375568d39630b43142459c01cc3821f67420dd956784d66947abed9bd288e02a4a500cfd819646a97164"
        },
        {
          "alg" : "SHA3-256",
          "content" : "243ae6ea8bd26dc1d48802080fc84cb47acb351c874d794ebec6eaa708ea4345"
        },
        {
          "alg" : "SHA3-512",
          "content" : "08bfd1f391cfc36921efefd9013de33b35a8e3fe15510724a74667a1b0dc038da42911172960c7661b0c3f7d0818d43fc6427e157192af4857bea43e3216b190"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.shiro/shiro-web@2.0.3?classifier=jakarta&type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://shiro.apache.org/shiro-web/"
        },
        {
          "type" : "build-system",
          "url" : "https://builds.apache.org/job/Shiro/"
        },
        {
          "type" : "distribution",
          "url" : "https://shiro.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://issues.apache.org/jira/browse/SHIRO"
        },
        {
          "type" : "mailing-list",
          "url" : "user-subscribe@shiro.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/shiro/tree/shiro-root-2.0.3/shiro-web"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "publisher" : "OWASP (Open Web-Application Security Project)",
      "group" : "org.owasp.encoder",
      "name" : "encoder",
      "version" : "1.3.1",
      "description" : "The OWASP Encoders package is a collection of high-performance low-overhead contextual encoders, that when utilized correctly, is an effective tool in preventing Web Application security vulnerabilities such as Cross-Site Scripting.",
      "scope" : "required",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "c826f7776c4d03adcbf1a2bceef84627"
        },
        {
          "alg" : "SHA-1",
          "content" : "1ebf20e19ddc3fa952f4e2af220a20b085ce87ba"
        },
        {
          "alg" : "SHA-256",
          "content" : "c9c56c8970c7cb11b231913ba5190ce930f8fd4fac2bd918810642dc3848e757"
        },
        {
          "alg" : "SHA-512",
          "content" : "98ef238bbdd93e0dc18928e5d876cb3f264f2d1808cd6dc5eda3fca2f3a20b2dd53d5872b413a261ca9e0ff2726cd5b067ea14921eddc3e5c8e9d73b570b3133"
        },
        {
          "alg" : "SHA-384",
          "content" : "c482fe5793c29646104f72b52838f8fd674d1a0b5428f07e7f4204d05a8ea373946a014e172c0f56e44e36800ac633be"
        },
        {
          "alg" : "SHA3-384",
          "content" : "64f0325baa1a8e16729f6b98722904a3ae9c066e6393cf38eeb01138e8594253aa819798c5dd2f484c7344cc57d16a11"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fb3692482e597d06305b67fc60ca0d1f5eafce6e74b4bdfebba0acd06108d897"
        },
        {
          "alg" : "SHA3-512",
          "content" : "2a118e5d9129545fcf17675704ec3429f88beb015ca7d161d2488d81d3b29c5000ce41d4997204dd915ff5ea41dc5dfa013df636e1197d9c3b0cc6835089e9c7"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "BSD-3-Clause"
          }
        }
      ],
      "purl" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://www.owasp.org/index.php/OWASP_Java_Encoder_Project/encoder"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://oss.sonatype.org/service/local/staging/deploy/maven2/"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/owasp/owasp-java-encoder/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://github.com/OWASP/owasp-java-encoder/issues"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/owasp/owasp-java-encoder/encoder"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-slf4j2-impl",
      "version" : "2.24.3",
      "description" : "SLF4J 2 provider (binding) for the Apache Log4j API. It forwards SLF4J 2 calls to the Log4j API. This effectively allows using Log4j as an implementation of SLF4J 2. (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "0ec2df0e6ab3e63e2d7b043bd0478c3f"
        },
        {
          "alg" : "SHA-1",
          "content" : "c3bda2dc612bfc780ad06c5acf5e0ffd55b770e5"
        },
        {
          "alg" : "SHA-256",
          "content" : "cdaac22e40ec30c4096e1ebe8c454c8826c0d1c378d7db5d7b3ad166354b0bd3"
        },
        {
          "alg" : "SHA-512",
          "content" : "c837d1724dc85479ec0eabfd8adef32d5bc3e9ba94c058eac6904894c9d3dff4f85762287159b0ae9f1e314e64861414de36a0d6e314e2d3b7aef8bedbd37b2b"
        },
        {
          "alg" : "SHA-384",
          "content" : "9c4eb0ae56d844b202546868a8eec8529647d7b38967234ed79a794cc4b8740bf3264a2958d5db7111de588efd2dfc37"
        },
        {
          "alg" : "SHA3-384",
          "content" : "246549536ddbbd348a1f37d497f9f7c684b53311008ee3cec2705e86e35afa274774be4f0da966923ed32f77a3e9f4e5"
        },
        {
          "alg" : "SHA3-256",
          "content" : "213a0e3d560934abdfa725581e5b7f49155e95328ad67be9f49afa6275592370"
        },
        {
          "alg" : "SHA3-512",
          "content" : "81706150cf1a117569e4bdd8061964be4bf3042cdabd7bc24b5f524d212d4fca69c6952a8bafa41f973858ba9161a6bc89bb46880243c727b5f70a44b6b77a51"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-api",
      "version" : "2.24.3",
      "description" : "The logging API of the Log4j project. Library and application code can log through this API. It contains a simple built-in implementation (`SimpleLogger`) for trivial use cases. Production applications are recommended to use Log4j API in combination with a fully-fledged implementation, such as Log4j Core.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "d89516699543c5c21be87ee1760695f3"
        },
        {
          "alg" : "SHA-1",
          "content" : "b02c125db8b6d295adf72ae6e71af5d83bce2370"
        },
        {
          "alg" : "SHA-256",
          "content" : "5b4a0a0cd0e751ded431c162442bdbdd53328d1f8bb2bae5fc1bbeee0f66d80f"
        },
        {
          "alg" : "SHA-512",
          "content" : "d936ac37b3d7ca2e4370ef122629c5ceb0bef60a6c08a3bd8bb278204dbed84bb888aaa307c58e80e4e9d645b73792433f52adcccd30378fbac99b1d271042f7"
        },
        {
          "alg" : "SHA-384",
          "content" : "d376ab3673186a1a39ea8b3d3c8359bb16dbb3f5d3782c182a112ab19b61d7730434c6d0f631d43d6daae66005d1df4e"
        },
        {
          "alg" : "SHA3-384",
          "content" : "7ee1b17a329d90bf648d05defced8d79f7bfbca66cc7e90aa2e1b2d7622697d535969e50d1a03460447eda2fa008f86c"
        },
        {
          "alg" : "SHA3-256",
          "content" : "5d2ad18a3352c3d7269ecb8d52d6a5ac8bf0d0d937e4809f5023a45d0f8f50f3"
        },
        {
          "alg" : "SHA3-512",
          "content" : "7e964e6425a1198e2568a9e8c326f730b7d139f71e8d3b1b440aa90860f136f443e5ebd62aa022c1c7834e23995ed0992f68dfb1760140d469b85fed84815ae1"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-api/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    },
    {
      "type" : "library",
      "bom-ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "publisher" : "The Apache Software Foundation",
      "group" : "org.apache.logging.log4j",
      "name" : "log4j-core",
      "version" : "2.24.3",
      "description" : "A versatile, industrial-grade, and reference implementation of the Log4j API. It bundles a rich set of components to assist various use cases: Appenders targeting files, network sockets, databases, SMTP servers; Layouts that can render CSV, HTML, JSON, Syslog, etc. formatted outputs; Filters that can be configured using log event rates, regular expressions, scripts, time, etc. It contains several extension points to introduce custom components, if needed.",
      "scope" : "optional",
      "hashes" : [
        {
          "alg" : "MD5",
          "content" : "3f52ab7782fdd1349bd872b5dcf48bed"
        },
        {
          "alg" : "SHA-1",
          "content" : "7f6a261243ca767c7f38fd4b542bcde626c8894e"
        },
        {
          "alg" : "SHA-256",
          "content" : "7eb4084596ae25bd3c61698e48e8d0ab65a9260758884ed5cbb9c6e55c44a56a"
        },
        {
          "alg" : "SHA-512",
          "content" : "61332e92ea6ef6656994105a675eb8de85ec859f07cde9da5ef16a22cbf2e0d7695348e04e066dd1a1ff0146ec03a8884974319d4f71155db9c9ab0d073197ef"
        },
        {
          "alg" : "SHA-384",
          "content" : "fd3cd2ea5cdc84698b46833cbcdb10e3c1e507a2cba0293b487f45efa7f12f52bce9e2c0a96b0f1632e2ff2549ac2eb2"
        },
        {
          "alg" : "SHA3-384",
          "content" : "852c87ea21b50676f338fa423d203fa52845bb201b994afd963bbc8100ecc0f987136a21bf6a6bbd9ab13ee008de9822"
        },
        {
          "alg" : "SHA3-256",
          "content" : "fc5b8e9367369772309a23b9ba1c2384be7ace8f6dd6ce6a9c37c322b86e4f1b"
        },
        {
          "alg" : "SHA3-512",
          "content" : "c1de50e5cfa5a415ad97cff532d3d3df825ff97ee2c41ac11e50cbca86e37577b9d929e6675c2336008893686db1cdebe878234f15d0e4afc1309eea3f32020b"
        }
      ],
      "licenses" : [
        {
          "license" : {
            "id" : "Apache-2.0",
            "url" : "https://www.apache.org/licenses/LICENSE-2.0"
          }
        }
      ],
      "purl" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "externalReferences" : [
        {
          "type" : "website",
          "url" : "https://logging.apache.org/log4j/2.x/log4j/log4j-core/"
        },
        {
          "type" : "build-system",
          "url" : "https://github.com/apache/logging-log4j2/actions"
        },
        {
          "type" : "distribution",
          "url" : "https://logging.apache.org/download.html"
        },
        {
          "type" : "distribution-intake",
          "url" : "https://repository.apache.org/service/local/staging/deploy/maven2"
        },
        {
          "type" : "issue-tracker",
          "url" : "https://github.com/apache/logging-log4j2/issues"
        },
        {
          "type" : "mailing-list",
          "url" : "https://lists.apache.org/list.html?log4j-user@logging.apache.org"
        },
        {
          "type" : "vcs",
          "url" : "https://github.com/apache/logging-log4j2"
        }
      ]
    }
  ],
  "dependencies" : [
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-main@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-fuseki-core@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-fuseki-access@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-cmds@5.4.0?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.19?type=jar",
        "pkg:maven/org.apache.shiro/shiro-core@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-web@2.0.3?classifier=jakarta&type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-core@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-rdfpatch@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shacl@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shex@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb1@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb2@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-rdfconnection@5.4.0?type=jar",
        "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/io.micrometer/micrometer-core@1.14.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-rdfpatch@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-core@5.4.0?type=jar",
        "pkg:maven/com.google.code.gson/gson@2.13.0?type=jar",
        "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
        "pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar",
        "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
        "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
        "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-core@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-base@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-iri3986@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-iri@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-langtag@5.4.0?type=jar",
        "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-base@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
        "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
        "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
        "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
        "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-csv@1.14.0?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
        "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-codec/commons-codec@1.18.0?type=jar",
        "pkg:maven/commons-io/commons-io@2.19.0?type=jar",
        "pkg:maven/org.apache.commons/commons-lang3@3.17.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-collections4@4.4?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.ben-manes.caffeine/caffeine@3.2.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.jspecify/jspecify@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.github.andrewoma.dexx/collection@0.7?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-iri3986@5.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-iri@5.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-langtag@5.4.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.roaringbitmap/RoaringBitmap@1.3.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.code.gson/gson@2.13.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.google.errorprone/error_prone_annotations@2.37.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.slf4j/jcl-over-slf4j@2.0.17?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.apicatalog/titanium-json-ld@1.6.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar",
        "pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar",
        "pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/com.apicatalog/titanium-jcs@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.apicatalog/titanium-rdf-n-quads@1.0.0?type=jar",
      "dependsOn" : [
        "pkg:maven/com.apicatalog/titanium-rdf-api@1.0.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.glassfish/jakarta.json@2.0.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/com.google.protobuf/protobuf-java@4.30.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.thrift/libthrift@0.21.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-shacl@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-shex@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-tdb1@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-tdb2@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-storage@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-storage@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-trans-data@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-transaction@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-dboe-index@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-transaction@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-base@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-base@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-dboe-index@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-dboe-base@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-rdfconnection@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-jakarta-servlet6@2.0.0-M2?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
        "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.commons/commons-fileupload2-core@2.0.0-M2?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-io/commons-io@2.19.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-core@1.14.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-commons@1.14.5?type=jar",
        "pkg:maven/io.micrometer/micrometer-observation@1.14.5?type=jar",
        "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
        "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-commons@1.14.5?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-observation@1.14.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-commons@1.14.5?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.hdrhistogram/HdrHistogram@2.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.latencyutils/LatencyUtils@2.0.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.micrometer/micrometer-registry-prometheus@1.14.5?type=jar",
      "dependsOn" : [
        "pkg:maven/io.micrometer/micrometer-core@1.14.5?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.6?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.6?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-core@1.3.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.6?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-tracer-common@1.3.6?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-formats@1.3.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/io.prometheus/prometheus-metrics-exposition-textformats@1.3.6?type=jar",
      "dependsOn" : [
        "pkg:maven/io.prometheus/prometheus-metrics-model@1.3.6?type=jar",
        "pkg:maven/io.prometheus/prometheus-metrics-config@1.3.6?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-fuseki-access@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-fuseki-core@5.4.0?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.jena/jena-cmds@5.4.0?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.jena/jena-core@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-arq@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-rdfpatch@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shacl@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-shex@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb1@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-tdb2@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-iri3986@5.4.0?type=jar",
        "pkg:maven/org.apache.jena/jena-langtag@5.4.0?type=jar",
        "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-cli/commons-cli@1.9.0?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlet@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/jakarta.servlet/jakarta.servlet-api@6.1.0?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-security@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-session@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-security@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-http@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-session@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-server@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty.ee10/jetty-ee10-servlets@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-http@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-io@12.0.19?type=jar",
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.eclipse.jetty/jetty-xml@12.0.19?type=jar",
      "dependsOn" : [
        "pkg:maven/org.eclipse.jetty/jetty-util@12.0.19?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-core@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-cache@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-core@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-event@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-cache@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.3?type=jar",
        "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.bouncycastle/bcprov-jdk18on@1.80?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-argon2@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro.crypto/shiro-hashes-bcrypt@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-crypto-hash@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-crypto-cipher@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-crypto-core@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-config-core@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-config-ogdl@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-config-core@2.0.3?type=jar",
        "pkg:maven/org.apache.shiro/shiro-event@2.0.3?type=jar",
        "pkg:maven/commons-beanutils/commons-beanutils@1.10.1?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-event@2.0.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.shiro/shiro-lang@2.0.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-beanutils/commons-beanutils@1.10.1?type=jar",
      "dependsOn" : [
        "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/commons-collections/commons-collections@3.2.2?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.shiro/shiro-web@2.0.3?classifier=jakarta&type=jar",
      "dependsOn" : [
        "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.owasp.encoder/encoder@1.3.1?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-slf4j2-impl@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
        "pkg:maven/org.slf4j/slf4j-api@2.0.17?type=jar",
        "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar"
      ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar",
      "dependsOn" : [ ]
    },
    {
      "ref" : "pkg:maven/org.apache.logging.log4j/log4j-core@2.24.3?type=jar",
      "dependsOn" : [
        "pkg:maven/org.apache.logging.log4j/log4j-api@2.24.3?type=jar"
      ]
    }
  ]
}